Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/3ab6f8c56607e96019617d647040304817a76db3.roa
File:                     3ab6f8c56607e96019617d647040304817a76db3.roa (raw, json)
Hash identifier:          deAA4smxAb41IkNdw3F4+GULS6UxKSLzy/wdGxG/S6k=
Subject key identifier:   C6:F1:57:B7:4F:2B:15:8F:22:E2:AF:07:00:D0:98:00:71:B2:74:EC
Certificate issuer:       /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial:       19C322
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/3ab6f8c56607e96019617d647040304817a76db3.roa
Signing time:             Tue 12 Jul 2022 02:34:02 +0000
ROA not before:           Wed 06 Apr 2022 03:00:00 +0000
ROA not after:            Tue 06 Apr 2032 03:00:00 +0000
asID:                     52347
IP address blocks:        186.177.241.0/24 maxlen: 24
                          186.177.242.0/24 maxlen: 24
                          190.93.42.0/24 maxlen: 24
                          190.111.32.0/20 maxlen: 21
                          190.111.57.0/24 maxlen: 24
                          190.111.58.0/23 maxlen: 24
                          190.111.61.0/24 maxlen: 24
                          190.111.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688354 (0x19c322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
        Validity
            Not Before: Apr  6 03:00:00 2022 GMT
            Not After : Apr  6 03:00:00 2032 GMT
        Subject: CN=3ab6f8c56607e96019617d647040304817a76db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:71:21:79:b8:51:f1:a5:36:ad:f3:3d:f4:d0:
                    60:8c:dc:5f:71:16:42:3f:07:66:5b:f7:1c:ff:c6:
                    2c:73:b0:7f:97:0b:a4:76:23:1c:f8:1a:0e:43:f1:
                    59:f3:35:34:74:7d:9f:7f:32:53:99:ba:80:62:4a:
                    a9:30:9c:c3:0b:dc:a9:7f:48:b8:26:bf:cf:32:70:
                    2b:51:0e:a4:da:6d:fe:36:ab:fe:32:3f:ef:f6:62:
                    eb:06:1a:64:9d:a7:f5:0c:4e:e6:80:97:b7:56:b8:
                    2b:89:63:f2:96:1e:29:fb:79:f8:f2:9b:ea:81:13:
                    08:c9:70:4d:bb:20:54:e9:40:05:16:93:9e:a3:b6:
                    6c:18:53:9c:fb:a5:c6:10:44:97:14:82:c6:53:39:
                    ad:aa:f2:5b:8c:1c:31:69:ab:e3:a3:d0:3e:8b:a4:
                    15:20:8a:ef:4a:3a:9c:5d:5d:1b:56:fc:51:6e:f8:
                    aa:a9:00:ca:50:aa:8d:5f:fc:d3:3c:4d:c9:c3:91:
                    eb:9f:44:18:ac:11:d3:26:55:63:29:15:27:4a:ce:
                    27:81:05:5b:14:7b:55:e3:b0:bd:2a:98:e6:85:00:
                    f3:af:d6:ec:a9:d6:37:8b:47:33:61:a0:d6:56:bb:
                    a9:b6:8b:23:c9:07:f4:d1:1d:d4:da:bb:59:d0:9a:
                    d5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F1:57:B7:4F:2B:15:8F:22:E2:AF:07:00:D0:98:00:71:B2:74:EC
            X509v3 Authority Key Identifier:
                keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/3ab6f8c56607e96019617d647040304817a76db3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.241.0-186.177.242.255
                  190.93.42.0/24
                  190.111.32.0/20
                  190.111.57.0-190.111.59.255
                  190.111.61.0-190.111.62.255

    Signature Algorithm: sha256WithRSAEncryption
         12:6b:ac:e9:df:d3:12:b1:51:86:9f:2a:8b:50:4f:fd:d0:73:
         7b:47:69:af:45:1b:f6:71:1e:88:3c:bc:ad:ae:4f:70:c4:6f:
         2a:e4:c0:27:fa:34:80:d4:c7:e1:f7:44:b1:74:1d:e9:7f:9b:
         06:93:53:7d:8a:2f:2f:ea:3e:e9:94:69:b5:e6:28:2a:3e:55:
         76:20:ff:b9:0b:90:8c:39:b2:e5:33:c4:93:8f:40:87:48:37:
         38:ae:be:b1:a7:35:f1:dd:7b:ce:36:f5:b3:2c:78:e2:e6:e1:
         a3:39:cc:48:b2:b3:6c:fe:26:46:51:80:f5:25:4e:26:62:e6:
         fc:b1:c9:46:45:79:1d:1e:80:8a:ef:9f:91:a6:16:a1:a4:4d:
         5a:c8:68:2a:58:30:35:a1:bf:15:00:56:54:16:17:e3:38:b3:
         5c:ae:ef:28:19:97:9f:dd:c9:f2:8d:84:3d:7f:47:8b:41:0e:
         76:30:48:ee:a8:f6:e1:95:a4:e6:59:39:a1:99:27:66:de:f8:
         d9:0e:11:7a:02:99:25:c7:c5:b2:d9:5b:db:01:da:66:e6:e2:
         f5:22:b8:8a:a2:fd:af:ca:26:fe:01:8d:83:e0:4c:a0:78:e0:
         ed:1a:6d:14:9d:b4:1f:90:a6:12:09:6c:1d:c0:81:91:fa:52:
         09:6e:46:7a
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIDGcMiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
YTgzNGFlYjUyMDMzMWQyMWM3NjhlMTNlNzU2NGU3MDU2MzBkMmMwHhcNMjIwNDA2
MDMwMDAwWhcNMzIwNDA2MDMwMDAwWjAzMTEwLwYDVQQDEygzYWI2ZjhjNTY2MDdl
OTYwMTk2MTdkNjQ3MDQwMzA0ODE3YTc2ZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArHEhebhR8aU2rfM99NBgjNxfcRZCPwdmW/cc/8Ysc7B/lwuk
diMc+BoOQ/FZ8zU0dH2ffzJTmbqAYkqpMJzDC9ypf0i4Jr/PMnArUQ6k2m3+Nqv+
Mj/v9mLrBhpknaf1DE7mgJe3VrgriWPylh4p+3n48pvqgRMIyXBNuyBU6UAFFpOe
o7ZsGFOc+6XGEESXFILGUzmtqvJbjBwxaavjo9A+i6QVIIrvSjqcXV0bVvxRbviq
qQDKUKqNX/zTPE3Jw5Hrn0QYrBHTJlVjKRUnSs4ngQVbFHtV47C9KpjmhQDzr9bs
qdY3i0czYaDWVruptosjyQf00R3U2rtZ0JrVzQIDAQABo4ICizCCAocwHQYDVR0O
BBYEFMbxV7dPKxWPIuKvBwDQmABxsnTsMB8GA1UdIwQYMBaAFEztm7dkkEa+gAE2
nJqYTr334XjQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGJhODM0
YWViNTIwMzMxZDIxYzc2OGUxM2U3NTY0ZTcwNTYzMGQyYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDI4MWExNGUtYjZhNS00Yzg5LWI0YmEtMDU3NTAw
OGRhYzEzLzNhYjZmOGM1NjYwN2U5NjAxOTYxN2Q2NDcwNDAzMDQ4MTdhNzZkYjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MjgxYTE0ZS1iNmE1LTRjODktYjRiYS0wNTc1
MDA4ZGFjMTMvNGJhODM0YWViNTIwMzMxZDIxYzc2OGUxM2U3NTY0ZTcwNTYzMGQy
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBPBggrBgEFBQcBBwEB/wRA
MD4wPAQCAAEwNjAMAwQAurHxAwQAurHyAwQAvl0qAwQEvm8gMAwDBAC+bzkDBAK+
bzgwDAMEAL5vPQMEAL5vPjANBgkqhkiG9w0BAQsFAAOCAQEAEmus6d/TErFRhp8q
i1BP/dBze0dpr0Ub9nEeiDy8ra5PcMRvKuTAJ/o0gNTH4fdEsXQd6X+bBpNTfYov
L+o+6ZRpteYoKj5VdiD/uQuQjDmy5TPEk49Ah0g3OK6+sac18d17zjb1syx44ubh
oznMSLKzbP4mRlGA9SVOJmLm/LHJRkV5HR6Aiu+fkaYWoaRNWshoKlgwNaG/FQBW
VBYX4zizXK7vKBmXn93J8o2EPX9Hi0EOdjBI7qj24ZWk5lk5oZknZt742Q4RegKZ
JcfFstlb2wHaZubi9SK4iqL9r8om/gGNg+BMoHjg7RptFJ20H5CmEglsHcCBkfpS
CW5Geg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org