Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/eccdf647a3c085b5536eb5263235326dd513f616.roa
File:                     eccdf647a3c085b5536eb5263235326dd513f616.roa (raw, json)
Hash identifier:          Y2bteH8XtiPDplU42qCmRXH9cnTJK7F417mBjXOXCJ0=
Subject key identifier:   CD:50:FA:49:18:84:92:27:05:C1:76:CD:CF:12:CB:F0:61:C2:DA:18
Certificate issuer:       /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial:       173ED8
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/eccdf647a3c085b5536eb5263235326dd513f616.roa
Signing time:             Wed 06 Apr 2022 17:06:19 +0000
ROA not before:           Wed 06 Apr 2022 03:00:00 +0000
ROA not after:            Tue 06 Apr 2032 03:00:00 +0000
asID:                     52347
IP address blocks:        186.177.241.0/24 maxlen: 24
                          186.177.242.0/24 maxlen: 24
                          190.93.42.0/24 maxlen: 24
                          190.111.32.0/20 maxlen: 21
                          190.111.57.0/24 maxlen: 24
                          190.111.58.0/23 maxlen: 24
                          190.111.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1523416 (0x173ed8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
        Validity
            Not Before: Apr  6 03:00:00 2022 GMT
            Not After : Apr  6 03:00:00 2032 GMT
        Subject: CN=eccdf647a3c085b5536eb5263235326dd513f616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:46:c9:c5:50:45:5f:7e:2e:66:e9:a6:0c:
                    c2:61:8f:45:2a:03:05:b3:d1:79:5f:5a:83:06:74:
                    84:de:d4:55:df:f8:3d:42:92:c2:29:08:ac:c4:9f:
                    fe:51:14:83:ca:4e:8b:eb:d9:a0:a1:99:50:a1:08:
                    cc:2b:a4:48:8f:e8:70:30:63:ff:a6:b7:38:6d:12:
                    53:a7:d3:33:5a:04:e5:89:81:87:20:1c:40:e4:60:
                    9f:40:f9:3a:24:b9:86:f2:39:5a:b0:92:87:46:ec:
                    50:85:93:c7:9b:52:a9:d0:c7:ba:3c:8d:60:18:e1:
                    74:f6:4f:14:47:f2:7b:82:51:e5:35:07:c7:58:83:
                    53:9c:8b:47:58:2d:c0:c8:7d:68:64:60:2b:76:6a:
                    8d:51:63:9f:93:5e:d7:85:d0:9e:30:7e:8c:99:3f:
                    f1:d6:f5:e0:8a:3b:2f:b1:8e:99:a3:08:66:76:89:
                    e0:a3:5c:2d:8a:7c:79:5d:ee:58:47:46:c5:4b:05:
                    06:19:b9:ca:cb:d3:d0:89:32:0a:02:87:fb:6e:4c:
                    13:a0:4b:f8:b9:86:b9:95:cd:5d:c6:bf:50:2e:78:
                    89:f3:ec:ba:c1:50:5c:80:59:67:ac:ce:95:0c:5e:
                    ac:09:e9:0a:1b:7b:67:23:59:16:66:67:a1:47:6b:
                    66:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:50:FA:49:18:84:92:27:05:C1:76:CD:CF:12:CB:F0:61:C2:DA:18
            X509v3 Authority Key Identifier:
                keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/eccdf647a3c085b5536eb5263235326dd513f616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.241.0-186.177.242.255
                  190.93.42.0/24
                  190.111.32.0/20
                  190.111.57.0-190.111.59.255
                  190.111.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2f:30:ff:d2:34:4e:7f:70:eb:87:6f:57:f8:84:a4:2c:77:
         b9:2d:b7:82:a1:0e:b6:6a:87:92:8a:75:9d:16:bb:da:dd:88:
         b7:d0:9b:90:ef:ce:8f:c8:20:4a:34:d7:4b:50:3f:69:0b:cd:
         db:f0:36:44:69:c2:e9:e3:65:98:dd:ef:cc:27:70:48:c9:41:
         07:8b:15:1a:a3:cb:b6:39:6e:40:dd:9e:61:01:b6:89:9c:64:
         7a:7d:71:75:66:05:db:50:10:75:50:ea:cf:1a:01:3b:d8:0e:
         e9:58:1b:c6:8f:36:75:0d:eb:2b:97:dc:52:6b:9c:08:55:c6:
         61:cd:25:41:bc:35:c6:93:ee:1c:9f:73:cd:0b:91:45:ef:3d:
         22:e9:b4:d3:2b:97:00:53:9d:68:7b:8a:35:76:10:fa:ea:b9:
         00:36:5b:0e:f7:31:b1:99:cb:e1:f1:5e:45:6d:d9:21:99:5a:
         8e:89:94:7e:d3:a7:b4:32:2d:98:a9:ea:bc:25:6f:5c:35:64:
         77:33:68:7c:99:0d:e9:7d:a7:78:d7:a9:36:11:f1:85:ed:87:
         ca:b4:32:f0:a1:02:e9:fa:e4:53:04:cb:e3:59:a0:95:3c:02:
         d4:c3:2d:4e:0a:2d:3c:2f:4d:ea:f0:1c:80:2f:45:9d:29:8d:
         b0:be:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org