Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ae9bbb8b138d56862732852dbed28c3c29235524.roa
File:                     ae9bbb8b138d56862732852dbed28c3c29235524.roa (raw, json)
Hash identifier:          3a1D4A761H/6i5f5iJ8GkAsB1LuPbh0jiKjy7P+nRLQ=
Subject key identifier:   C0:A4:DB:CA:17:AE:DD:93:66:78:44:BE:FD:EE:06:5B:47:18:3E:42
Certificate issuer:       /CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Certificate serial:       0DAFAB
Authority key identifier: 96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ae9bbb8b138d56862732852dbed28c3c29235524.roa
Signing time:             Wed 24 Mar 2021 14:37:02 +0000
ROA not before:           Wed 24 Mar 2021 14:37:01 +0000
ROA not after:            Tue 24 Mar 2026 14:37:01 +0000
asID:                     16973
IP address blocks:        186.176.5.0/24 maxlen: 24
                          186.177.22.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896939 (0xdafab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
        Validity
            Not Before: Mar 24 14:37:01 2021 GMT
            Not After : Mar 24 14:37:01 2026 GMT
        Subject: CN=ae9bbb8b138d56862732852dbed28c3c29235524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e7:e5:8d:2c:61:6b:8f:71:bf:62:b1:81:c8:
                    a5:fa:19:d5:01:cf:8e:cb:24:b3:4e:b1:62:a2:23:
                    6c:07:bb:e1:41:ef:0d:a7:be:52:77:7a:42:bc:7e:
                    90:8c:4e:f2:8a:29:46:c2:66:03:cc:04:2a:3f:9d:
                    a5:4c:c2:8d:8f:6b:be:9c:12:46:b7:3f:84:73:81:
                    f1:5b:2f:e4:85:86:12:84:6e:8c:f2:0d:0e:48:c1:
                    ec:62:7f:55:45:33:de:6d:d8:a3:08:f5:2a:e4:3e:
                    d6:3b:dc:bd:7c:a2:2d:9a:75:60:0a:e0:37:41:69:
                    92:f4:96:63:d2:c3:83:3f:14:1b:5d:ad:44:a6:a3:
                    6d:ef:f1:95:eb:ee:72:18:fd:88:06:c2:a2:13:5b:
                    93:62:04:86:cc:00:5b:ec:06:82:3a:b6:ae:e0:2d:
                    8a:63:22:13:85:32:e1:4c:65:4e:c5:aa:d1:9b:11:
                    96:3a:eb:47:7c:18:e5:4b:b7:31:4c:bf:a4:5d:d4:
                    cd:be:9f:cd:61:af:1a:90:88:a2:cc:5c:58:c8:06:
                    56:5c:bc:64:34:79:3d:5c:dc:34:d0:fb:8a:98:cd:
                    73:2a:2f:f3:2a:86:b7:f3:c2:8c:81:2d:95:fd:18:
                    b6:77:c0:7e:6e:eb:f5:bc:4b:c0:05:71:e4:ec:b2:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A4:DB:CA:17:AE:DD:93:66:78:44:BE:FD:EE:06:5B:47:18:3E:42
            X509v3 Authority Key Identifier:
                keyid:96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ae9bbb8b138d56862732852dbed28c3c29235524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.5.0/24
                  186.177.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:50:8e:ea:fd:66:35:5a:ed:ed:61:da:d3:ec:7f:6d:94:5b:
         81:98:82:cf:ff:a0:40:cc:7a:ab:c8:8d:da:b6:44:78:5e:92:
         6b:f2:92:0e:29:65:22:42:c5:06:6a:fd:44:27:cd:3b:6d:23:
         7a:16:3a:c5:12:f6:7d:5d:07:29:01:2a:e9:0f:ec:8d:7c:4b:
         fc:e6:8c:30:6b:18:f2:0c:88:db:95:74:d9:c4:8e:23:53:1c:
         3d:b2:f3:83:59:38:05:18:a3:d2:4c:9a:2c:e8:ff:b1:89:14:
         71:43:ac:28:82:88:ef:2f:fc:c7:91:1c:4e:37:42:37:af:32:
         55:39:24:73:6e:ab:a2:4d:3e:7d:da:d7:83:d7:1a:c9:d1:64:
         91:c1:3e:eb:5f:f9:a1:1d:36:cf:61:19:44:51:ae:89:2c:52:
         ab:60:e6:7a:8b:46:3d:7a:69:21:7a:6f:f3:37:84:18:d2:8a:
         54:47:09:cf:ec:d8:07:b0:ea:30:56:c8:ee:ed:8d:f4:60:da:
         78:a8:c7:ca:58:35:a8:c7:f2:e6:f3:d2:94:01:5f:f7:5f:49:
         33:7b:46:c4:d9:26:54:f5:5e:ac:88:eb:bf:73:15:08:ac:bf:
         6a:ca:de:43:d5:44:40:7f:a8:0d:59:08:00:12:40:fb:2a:d8:
         7d:b5:98:47
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDDa+rMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNh
NTcwMzMwMjNlNzNjNWIxYTUyNGFhNDNmMDU4YmQxZWQ3MmQ0N2YwHhcNMjEwMzI0
MTQzNzAxWhcNMjYwMzI0MTQzNzAxWjAzMTEwLwYDVQQDEyhhZTliYmI4YjEzOGQ1
Njg2MjczMjg1MmRiZWQyOGMzYzI5MjM1NTI0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArefljSxha49xv2Kxgcil+hnVAc+OyySzTrFioiNsB7vhQe8N
p75Sd3pCvH6QjE7yiilGwmYDzAQqP52lTMKNj2u+nBJGtz+Ec4HxWy/khYYShG6M
8g0OSMHsYn9VRTPebdijCPUq5D7WO9y9fKItmnVgCuA3QWmS9JZj0sODPxQbXa1E
pqNt7/GV6+5yGP2IBsKiE1uTYgSGzABb7AaCOrau4C2KYyIThTLhTGVOxarRmxGW
OutHfBjlS7cxTL+kXdTNvp/NYa8akIiizFxYyAZWXLxkNHk9XNw00PuKmM1zKi/z
Koa388KMgS2V/Ri2d8B+buv1vEvABXHk7LIBwwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFMCk28oXrt2TZnhEvv3uBltHGD5CMB8GA1UdIwQYMBaAFJZbxfXCJa1jqwN4
3yKvlBlD27nmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2E1NzAz
MzAyM2U3M2M1YjFhNTI0YWE0M2YwNThiZDFlZDcyZDQ3Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzUwYjA2YzctNDQ4Zi00MTI1LTgwY2ItZmMwZDg2
OTU0MmQwL2FlOWJiYjhiMTM4ZDU2ODYyNzMyODUyZGJlZDI4YzNjMjkyMzU1MjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNTBiMDZjNy00NDhmLTQxMjUtODBjYi1mYzBk
ODY5NTQyZDAvY2E1NzAzMzAyM2U3M2M1YjFhNTI0YWE0M2YwNThiZDFlZDcyZDQ3
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEALqwBQMEAbqxFjANBgkqhkiG9w0BAQsFAAOCAQEAqlCO6v1m
NVrt7WHa0+x/bZRbgZiCz/+gQMx6q8iN2rZEeF6Sa/KSDillIkLFBmr9RCfNO20j
ehY6xRL2fV0HKQEq6Q/sjXxL/OaMMGsY8gyI25V02cSOI1McPbLzg1k4BRij0kya
LOj/sYkUcUOsKIKI7y/8x5EcTjdCN68yVTkkc26rok0+fdrXg9caydFkkcE+61/5
oR02z2EZRFGuiSxSq2DmeotGPXppIXpv8zeEGNKKVEcJz+zYB7DqMFbI7u2N9GDa
eKjHylg1qMfy5vPSlAFf919JM3tGxNkmVPVerIjrv3MVCKy/asreQ9VEQH+oDVkI
ABJA+yrYfbWYRw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org