Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49930b94-1f5d-44a7-a04d-5cc014b2e05b/13d1798af628116bfa4afed2ed86cd5429c4f9eb.roa
File:                     13d1798af628116bfa4afed2ed86cd5429c4f9eb.roa (raw, json)
Hash identifier:          dYAljMm/nOCeAx8SJsluBHm4UQ8mzGRINw8TVexXLyU=
Subject key identifier:   D3:A1:2E:82:54:7C:31:7D:97:A8:76:A7:28:EC:97:A4:18:4D:D6:19
Certificate issuer:       /CN=c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf
Certificate serial:       21309C
Authority key identifier: 8A:04:13:E4:CA:41:9E:4C:EC:96:9D:21:C4:54:54:44:49:87:C4:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49930b94-1f5d-44a7-a04d-5cc014b2e05b/13d1798af628116bfa4afed2ed86cd5429c4f9eb.roa
Signing time:             Tue 27 Feb 2024 08:30:00 +0000
ROA not before:           Tue 27 Feb 2024 08:30:00 +0000
ROA not after:            Thu 26 Feb 2026 08:30:00 +0000
asID:                     264827
IP address blocks:        187.102.192.0/23 maxlen: 23
                          187.102.192.0/24 maxlen: 24
                          187.102.193.0/24 maxlen: 24
                          187.102.194.0/23 maxlen: 23
                          187.102.194.0/24 maxlen: 24
                          187.102.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175132 (0x21309c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf
        Validity
            Not Before: Feb 27 08:30:00 2024 GMT
            Not After : Feb 26 08:30:00 2026 GMT
        Subject: CN=13d1798af628116bfa4afed2ed86cd5429c4f9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e1:17:2e:3d:7b:06:b7:93:81:dc:2e:dd:72:
                    95:60:23:a8:69:78:0e:1f:3c:6b:3b:8f:dc:48:56:
                    de:b4:45:f9:c4:f4:2d:f7:7e:96:7c:ec:ac:7f:d7:
                    b5:3f:ec:83:88:c8:ff:66:7f:5b:eb:dc:8c:53:b1:
                    94:7b:4e:93:38:22:58:82:7f:48:6e:4d:d5:dc:35:
                    e4:83:7c:47:26:f1:c2:89:18:63:8f:37:d8:a7:09:
                    f1:eb:79:28:72:3b:ce:09:00:a4:42:6f:8d:4f:72:
                    cc:6f:ee:cd:e4:c5:77:08:25:f3:51:65:96:ba:0e:
                    a0:37:b7:99:cf:71:35:a9:7b:68:b6:6d:03:62:db:
                    cf:0e:35:9c:7d:59:43:b8:39:2c:35:9c:c3:b4:83:
                    fb:d7:05:52:3e:ca:86:66:10:bb:46:97:ea:a0:e6:
                    8b:6a:7a:16:80:eb:f5:e8:bf:e2:a4:6c:ce:94:c4:
                    43:e2:7b:54:e5:b2:16:25:64:80:f4:b0:46:d1:5c:
                    18:19:e9:38:da:77:02:55:84:4c:eb:a1:4a:ae:01:
                    03:9d:c7:94:34:32:c9:e7:bd:be:fc:12:54:4f:b5:
                    8e:ec:cf:0e:15:46:5b:f8:a6:6b:35:02:d1:76:c4:
                    77:3c:9d:00:07:26:0e:94:a1:51:b0:62:10:5c:9d:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A1:2E:82:54:7C:31:7D:97:A8:76:A7:28:EC:97:A4:18:4D:D6:19
            X509v3 Authority Key Identifier:
                keyid:8A:04:13:E4:CA:41:9E:4C:EC:96:9D:21:C4:54:54:44:49:87:C4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49930b94-1f5d-44a7-a04d-5cc014b2e05b/13d1798af628116bfa4afed2ed86cd5429c4f9eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49930b94-1f5d-44a7-a04d-5cc014b2e05b/c1ebf4c682bc9be7cc000c7f6431ed81a05c4adf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:e9:04:90:ec:05:b6:84:6c:16:44:e5:ba:c9:37:8e:ba:48:
         7e:18:f3:7d:3d:24:87:9f:18:17:d9:6d:b3:01:18:f2:17:71:
         dc:90:97:6f:8b:fa:b9:f3:42:1a:a7:18:cf:a8:ea:40:43:db:
         15:65:6a:91:d7:44:e8:99:f1:1f:2d:14:c6:52:d7:79:a9:c8:
         74:3b:76:a6:66:f9:ce:58:cf:ab:80:00:ff:d3:e9:2c:78:ed:
         5c:4f:6f:4a:63:d5:fc:45:fc:26:e1:f1:61:06:aa:fc:af:ab:
         45:09:23:9a:9e:05:8f:10:81:83:22:48:42:ec:d7:6f:ff:97:
         68:47:22:9c:24:23:26:01:98:aa:3b:cd:3e:fb:30:cf:55:26:
         db:9a:0d:05:5b:5f:33:01:11:ed:50:27:94:a5:0c:0b:18:29:
         22:b5:e7:2d:3b:08:95:e8:f9:02:2d:d0:5d:88:f9:b1:45:95:
         c2:13:fd:c1:0a:0f:37:f6:4a:78:6a:32:2c:c0:c1:d1:9f:60:
         30:66:bf:ee:3f:6e:9e:74:d8:40:ab:21:ed:68:88:7d:78:39:
         97:f4:17:b1:e1:db:91:99:40:fb:c0:03:ba:83:cc:bb:b1:a7:
         49:32:93:90:6c:55:57:4a:c1:c7:5a:2c:7e:cb:38:e3:55:f2:
         73:eb:71:37
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDITCcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZWJmNGM2ODJiYzliZTdjYzAwMGM3ZjY0MzFlZDgxYTA1YzRhZGYwHhcNMjQwMjI3
MDgzMDAwWhcNMjYwMjI2MDgzMDAwWjAzMTEwLwYDVQQDEygxM2QxNzk4YWY2Mjgx
MTZiZmE0YWZlZDJlZDg2Y2Q1NDI5YzRmOWViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhOEXLj17BreTgdwu3XKVYCOoaXgOHzxrO4/cSFbetEX5xPQt
936WfOysf9e1P+yDiMj/Zn9b69yMU7GUe06TOCJYgn9Ibk3V3DXkg3xHJvHCiRhj
jzfYpwnx63kocjvOCQCkQm+NT3LMb+7N5MV3CCXzUWWWug6gN7eZz3E1qXtotm0D
YtvPDjWcfVlDuDksNZzDtIP71wVSPsqGZhC7RpfqoOaLanoWgOv16L/ipGzOlMRD
4ntU5bIWJWSA9LBG0VwYGek42ncCVYRM66FKrgEDnceUNDLJ572+/BJUT7WO7M8O
FUZb+KZrNQLRdsR3PJ0AByYOlKFRsGIQXJ2PmwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNOhLoJUfDF9l6h2pyjsl6QYTdYZMB8GA1UdIwQYMBaAFIoEE+TKQZ5M7Jad
IcRUVERJh8QDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFlYmY0
YzY4MmJjOWJlN2NjMDAwYzdmNjQzMWVkODFhMDVjNGFkZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDk5MzBiOTQtMWY1ZC00NGE3LWEwNGQtNWNjMDE0
YjJlMDViLzEzZDE3OThhZjYyODExNmJmYTRhZmVkMmVkODZjZDU0MjljNGY5ZWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80OTkzMGI5NC0xZjVkLTQ0YTctYTA0ZC01Y2Mw
MTRiMmUwNWIvYzFlYmY0YzY4MmJjOWJlN2NjMDAwYzdmNjQzMWVkODFhMDVjNGFk
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArtmwDANBgkqhkiG9w0BAQsFAAOCAQEAdukEkOwFtoRsFkTl
usk3jrpIfhjzfT0kh58YF9ltswEY8hdx3JCXb4v6ufNCGqcYz6jqQEPbFWVqkddE
6JnxHy0UxlLXeanIdDt2pmb5zljPq4AA/9PpLHjtXE9vSmPV/EX8JuHxYQaq/K+r
RQkjmp4FjxCBgyJIQuzXb/+XaEcinCQjJgGYqjvNPvswz1Um25oNBVtfMwER7VAn
lKUMCxgpIrXnLTsIlej5Ai3QXYj5sUWVwhP9wQoPN/ZKeGoyLMDB0Z9gMGa/7j9u
nnTYQKsh7WiIfXg5l/QXseHbkZlA+8ADuoPMu7GnSTKTkGxVV0rBx1osfss441Xy
c+txNw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:16 2024 by rpki-client on console-fra.rpki-client.org