Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/14ebab5ed293fd851d49fc16f1cefeed42bf76d1.roa
File:                     14ebab5ed293fd851d49fc16f1cefeed42bf76d1.roa (raw, json)
Hash identifier:          UNI9NiqGfnIthTGJcd1g/MCMIEVWZeANZTj/kZx0K74=
Subject key identifier:   52:31:9A:9D:29:17:81:38:DC:12:E5:03:BA:A0:21:30:70:63:49:8B
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       27C3F3
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/14ebab5ed293fd851d49fc16f1cefeed42bf76d1.roa
Signing time:             Mon 17 Apr 2023 14:56:09 +0000
ROA not before:           Sun 16 Apr 2023 14:56:09 +0000
ROA not after:            Thu 17 Apr 2025 14:56:09 +0000
asID:                     19905
IP address blocks:        181.10.161.0/24 maxlen: 24
                          181.12.80.0/24 maxlen: 24
                          181.13.203.0/24 maxlen: 24
                          181.14.235.0/24 maxlen: 24
                          181.15.139.0/24 maxlen: 24
                          181.15.225.0/24 maxlen: 24
                          181.15.91.0/24 maxlen: 24
                          181.15.92.0/24 maxlen: 24
                          181.15.95.0/24 maxlen: 24
                          181.166.245.0/24 maxlen: 24
                          181.166.250.0/24 maxlen: 24
                          181.30.126.0/24 maxlen: 24
                          181.30.128.0/24 maxlen: 24
                          181.30.159.0/24 maxlen: 24
                          181.88.192.0/24 maxlen: 24
                          186.124.122.0/24 maxlen: 24
                          186.125.243.0/24 maxlen: 24
                          190.136.39.0/24 maxlen: 24
                          190.136.40.0/24 maxlen: 24
                          190.225.183.0/24 maxlen: 24
                          190.227.215.0/24 maxlen: 24
                          190.227.241.0/24 maxlen: 24
                          190.228.108.0/24 maxlen: 24
                          190.228.129.0/24 maxlen: 24
                          190.228.154.0/24 maxlen: 24
                          190.228.29.0/24 maxlen: 24
                          190.228.30.0/24 maxlen: 24
                          190.228.48.0/24 maxlen: 24
                          190.30.233.0/24 maxlen: 24
                          200.32.14.0/24 maxlen: 24
                          200.32.17.0/24 maxlen: 24
                          200.32.20.0/24 maxlen: 24
                          200.32.29.0/24 maxlen: 24
                          200.42.102.0/24 maxlen: 24
                          200.42.109.0/24 maxlen: 24
                          200.42.125.0/24 maxlen: 24
                          200.42.129.0/24 maxlen: 24
                          200.42.141.0/24 maxlen: 24
                          200.42.149.0/24 maxlen: 24
                          200.42.157.0/24 maxlen: 24
                          200.42.158.0/24 maxlen: 24
                          200.42.18.0/24 maxlen: 24
                          200.42.2.0/24 maxlen: 24
                          200.42.20.0/24 maxlen: 24
                          200.42.24.0/24 maxlen: 24
                          200.42.32.0/24 maxlen: 24
                          200.42.39.0/24 maxlen: 24
                          200.42.41.0/24 maxlen: 24
                          200.42.42.0/24 maxlen: 24
                          200.42.45.0/24 maxlen: 24
                          200.42.46.0/24 maxlen: 24
                          200.42.6.0/24 maxlen: 24
                          200.43.139.0/24 maxlen: 24
                          200.43.15.0/24 maxlen: 24
                          200.43.168.0/24 maxlen: 24
                          200.43.229.0/24 maxlen: 24
                          200.43.235.0/24 maxlen: 24
                          200.43.31.0/24 maxlen: 24
                          200.43.40.0/24 maxlen: 24
                          200.43.58.0/24 maxlen: 24
                          200.43.95.0/24 maxlen: 24
                          200.45.20.0/24 maxlen: 24
                          200.45.235.0/24 maxlen: 24
                          200.45.41.0/24 maxlen: 24
                          200.45.46.0/24 maxlen: 24
                          200.45.50.0/24 maxlen: 24
                          200.45.66.0/24 maxlen: 24
                          200.45.68.0/24 maxlen: 24
                          200.45.80.0/24 maxlen: 24
                          200.45.83.0/24 maxlen: 24
                          200.45.84.0/24 maxlen: 24
                          200.45.87.0/24 maxlen: 24
                          200.49.144.0/24 maxlen: 24
                          200.49.146.0/24 maxlen: 24
                          200.49.148.0/24 maxlen: 24
                          200.49.153.0/24 maxlen: 24
                          200.82.126.0/24 maxlen: 24
                          200.89.137.0/24 maxlen: 24
                          200.89.144.0/24 maxlen: 24
                          200.89.173.0/24 maxlen: 24
                          200.89.184.0/24 maxlen: 24
                          200.89.187.0/24 maxlen: 24
                          200.89.191.0/24 maxlen: 24
                          201.212.103.0/24 maxlen: 24
                          201.212.110.0/24 maxlen: 24
                          201.212.48.0/24 maxlen: 24
                          201.235.252.0/24 maxlen: 24
                          201.235.254.0/24 maxlen: 24
                          201.252.225.0/24 maxlen: 24
                          24.232.0.0/24 maxlen: 24
                          200.105.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2606067 (0x27c3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 14:56:09 2023 GMT
            Not After : Apr 17 14:56:09 2025 GMT
        Subject: CN=14ebab5ed293fd851d49fc16f1cefeed42bf76d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2f:74:68:e2:23:48:d1:a6:7f:ea:53:b9:6c:
                    96:cd:0e:ef:73:62:dd:7a:93:f5:55:ad:c7:91:f0:
                    d8:06:3d:ae:c3:63:9e:04:dd:b7:88:c5:de:ba:7e:
                    f4:2f:84:21:75:0a:c8:14:12:54:49:7a:67:85:f3:
                    14:01:8c:fa:e9:a4:2d:cb:a5:11:db:bb:f7:96:6b:
                    00:bb:84:e2:e3:ce:d2:2c:0b:35:1f:11:d9:a8:0c:
                    3b:a7:7b:16:2d:c7:a7:e1:81:72:3e:b2:c1:69:49:
                    38:91:f6:19:23:81:29:b2:3f:13:cd:bc:a4:ce:0e:
                    44:e6:b5:24:f4:48:1b:e1:81:93:4d:8a:41:d8:ad:
                    c4:c0:6a:cf:d3:58:55:39:fb:f1:ea:f9:a3:ad:48:
                    c5:38:5e:97:6c:70:c6:3f:f8:2e:d2:97:a2:e2:80:
                    a0:d9:83:7f:f3:d8:86:6d:75:7f:4f:a3:00:e2:15:
                    5f:a6:2c:18:bc:26:6b:19:4a:9e:be:7a:7b:f3:35:
                    14:e5:0a:a0:d6:b2:07:8a:f4:58:c2:ac:28:a0:f8:
                    78:4f:44:75:fa:10:4e:91:0b:64:ff:38:ee:27:74:
                    70:02:72:82:29:34:38:57:23:12:0c:26:83:ea:06:
                    2f:f2:cd:e7:5b:d5:a5:fe:4f:4d:8d:d5:13:56:09:
                    01:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:31:9A:9D:29:17:81:38:DC:12:E5:03:BA:A0:21:30:70:63:49:8B
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/14ebab5ed293fd851d49fc16f1cefeed42bf76d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.232.0.0/24
                  181.10.161.0/24
                  181.12.80.0/24
                  181.13.203.0/24
                  181.14.235.0/24
                  181.15.91.0-181.15.92.255
                  181.15.95.0/24
                  181.15.139.0/24
                  181.15.225.0/24
                  181.30.126.0/24
                  181.30.128.0/24
                  181.30.159.0/24
                  181.88.192.0/24
                  181.166.245.0/24
                  181.166.250.0/24
                  186.124.122.0/24
                  186.125.243.0/24
                  190.30.233.0/24
                  190.136.39.0-190.136.40.255
                  190.225.183.0/24
                  190.227.215.0/24
                  190.227.241.0/24
                  190.228.29.0-190.228.30.255
                  190.228.48.0/24
                  190.228.108.0/24
                  190.228.129.0/24
                  190.228.154.0/24
                  200.32.14.0/24
                  200.32.17.0/24
                  200.32.20.0/24
                  200.32.29.0/24
                  200.42.2.0/24
                  200.42.6.0/24
                  200.42.18.0/24
                  200.42.20.0/24
                  200.42.24.0/24
                  200.42.32.0/24
                  200.42.39.0/24
                  200.42.41.0-200.42.42.255
                  200.42.45.0-200.42.46.255
                  200.42.102.0/24
                  200.42.109.0/24
                  200.42.125.0/24
                  200.42.129.0/24
                  200.42.141.0/24
                  200.42.149.0/24
                  200.42.157.0-200.42.158.255
                  200.43.15.0/24
                  200.43.31.0/24
                  200.43.40.0/24
                  200.43.58.0/24
                  200.43.95.0/24
                  200.43.139.0/24
                  200.43.168.0/24
                  200.43.229.0/24
                  200.43.235.0/24
                  200.45.20.0/24
                  200.45.41.0/24
                  200.45.46.0/24
                  200.45.50.0/24
                  200.45.66.0/24
                  200.45.68.0/24
                  200.45.80.0/24
                  200.45.83.0-200.45.84.255
                  200.45.87.0/24
                  200.45.235.0/24
                  200.49.144.0/24
                  200.49.146.0/24
                  200.49.148.0/24
                  200.49.153.0/24
                  200.82.126.0/24
                  200.89.137.0/24
                  200.89.144.0/24
                  200.89.173.0/24
                  200.89.184.0/24
                  200.89.187.0/24
                  200.89.191.0/24
                  200.105.68.0/24
                  201.212.48.0/24
                  201.212.103.0/24
                  201.212.110.0/24
                  201.235.252.0/24
                  201.235.254.0/24
                  201.252.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:6c:90:3d:ca:dc:0a:fa:09:d5:ba:0f:c9:c5:f5:41:8f:01:
         0c:b3:1f:93:f3:d8:81:70:98:aa:32:93:74:41:50:83:1a:15:
         f2:4c:dc:1e:d4:09:08:bc:fa:95:17:8c:73:52:9c:56:77:55:
         03:3d:d8:ff:7f:fd:2a:17:07:24:a6:6a:39:b6:96:8a:77:53:
         ec:ab:95:5f:a2:39:44:ed:8c:f8:e0:fd:bc:fe:73:e9:2c:c8:
         07:0b:97:c5:9d:7a:d1:da:db:bd:54:c7:52:c0:b5:b8:c7:99:
         83:8d:31:48:e1:40:18:ad:24:18:cc:d2:fe:b1:8f:db:d0:cb:
         7a:59:78:3c:82:f6:d9:86:54:14:c9:9f:5c:4f:5f:26:04:98:
         38:cc:ba:da:ac:e0:ad:57:13:df:3f:f1:e0:8c:c0:a7:31:54:
         7a:dd:66:e7:13:85:ab:25:51:45:cd:b7:b7:dd:ca:57:74:3b:
         0e:95:df:99:1d:82:5a:25:d5:ed:9d:2e:53:8e:59:0b:87:6b:
         9d:61:1c:be:39:79:6b:d9:87:55:47:fd:5d:4d:96:37:35:a8:
         69:96:b3:37:64:96:94:ea:be:01:ff:0e:43:e6:06:7f:f6:41:
         64:25:3f:b5:35:4e:4b:6e:c0:02:66:fa:97:0f:6e:9e:e7:33:
         d8:af:6e:56
-----BEGIN CERTIFICATE-----
MIIHdDCCBlygAwIBAgIDJ8PzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjMwNDE2
MTQ1NjA5WhcNMjUwNDE3MTQ1NjA5WjAzMTEwLwYDVQQDEygxNGViYWI1ZWQyOTNm
ZDg1MWQ0OWZjMTZmMWNlZmVlZDQyYmY3NmQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4y90aOIjSNGmf+pTuWyWzQ7vc2LdepP1Va3HkfDYBj2uw2Oe
BN23iMXeun70L4QhdQrIFBJUSXpnhfMUAYz66aQty6UR27v3lmsAu4Ti487SLAs1
HxHZqAw7p3sWLcen4YFyPrLBaUk4kfYZI4Epsj8Tzbykzg5E5rUk9Egb4YGTTYpB
2K3EwGrP01hVOfvx6vmjrUjFOF6XbHDGP/gu0pei4oCg2YN/89iGbXV/T6MA4hVf
piwYvCZrGUqevnp78zUU5Qqg1rIHivRYwqwooPh4T0R1+hBOkQtk/zjuJ3RwAnKC
KTQ4VyMSDCaD6gYv8s3nW9Wl/k9NjdUTVgkBnwIDAQABo4IEjzCCBIswHQYDVR0O
BBYEFFIxmp0pF4E43BLlA7qgITBwY0mLMB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzE0ZWJhYjVlZDI5M2ZkODUxZDQ5ZmMxNmYxY2VmZWVkNDJiZjc2ZDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAlEGCCsGAQUFBwEHAQH/
BIICQDCCAjwwggI4BAIAATCCAjADBAAY6AADBAC1CqEDBAC1DFADBAC1DcsDBAC1
DuswDAMEALUPWwMEALUPXAMEALUPXwMEALUPiwMEALUP4QMEALUefgMEALUegAME
ALUenwMEALVYwAMEALWm9QMEALWm+gMEALp8egMEALp98wMEAL4e6TAMAwQAvogn
AwQAvogoAwQAvuG3AwQAvuPXAwQAvuPxMAwDBAC+5B0DBAC+5B4DBAC+5DADBAC+
5GwDBAC+5IEDBAC+5JoDBADIIA4DBADIIBEDBADIIBQDBADIIB0DBADIKgIDBADI
KgYDBADIKhIDBADIKhQDBADIKhgDBADIKiADBADIKicwDAMEAMgqKQMEAMgqKjAM
AwQAyCotAwQAyCouAwQAyCpmAwQAyCptAwQAyCp9AwQAyCqBAwQAyCqNAwQAyCqV
MAwDBADIKp0DBADIKp4DBADIKw8DBADIKx8DBADIKygDBADIKzoDBADIK18DBADI
K4sDBADIK6gDBADIK+UDBADIK+sDBADILRQDBADILSkDBADILS4DBADILTIDBADI
LUIDBADILUQDBADILVAwDAMEAMgtUwMEAMgtVAMEAMgtVwMEAMgt6wMEAMgxkAME
AMgxkgMEAMgxlAMEAMgxmQMEAMhSfgMEAMhZiQMEAMhZkAMEAMhZrQMEAMhZuAME
AMhZuwMEAMhZvwMEAMhpRAMEAMnUMAMEAMnUZwMEAMnUbgMEAMnr/AMEAMnr/gME
AMn84TANBgkqhkiG9w0BAQsFAAOCAQEAm2yQPcrcCvoJ1boPycX1QY8BDLMfk/PY
gXCYqjKTdEFQgxoV8kzcHtQJCLz6lReMc1KcVndVAz3Y/3/9KhcHJKZqObaWindT
7KuVX6I5RO2M+OD9vP5z6SzIBwuXxZ160drbvVTHUsC1uMeZg40xSOFAGK0kGMzS
/rGP29DLell4PIL22YZUFMmfXE9fJgSYOMy62qzgrVcT3z/x4IzApzFUet1m5xOF
qyVRRc23t93KV3Q7DpXfmR2CWiXV7Z0uU45ZC4drnWEcvjl5a9mHVUf9XU2WNzWo
aZazN2SWlOq+Af8OQ+YGf/ZBZCU/tTVOS27AAmb6lw9unucz2K9uVg==
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org