Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3243ab86fb18d31bcf5d97b5a7dbd1f848e527eb.roa
File:                     3243ab86fb18d31bcf5d97b5a7dbd1f848e527eb.roa (raw, json)
Hash identifier:          mawS/1pNPw/hMQT6OcmDBNPzCpgr0yagcCesiaWNDm4=
Subject key identifier:   CC:C0:00:8E:E8:2F:D1:A9:7A:1C:BF:63:02:8E:6E:45:51:CF:F6:91
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       29D1C9
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3243ab86fb18d31bcf5d97b5a7dbd1f848e527eb.roa
Signing time:             Mon 10 Jul 2023 17:55:48 +0000
ROA not before:           Sun 09 Jul 2023 17:55:48 +0000
ROA not after:            Thu 10 Jul 2025 17:55:48 +0000
asID:                     7303
IP address blocks:        181.0.0.0/12 maxlen: 24
                          181.80.0.0/12 maxlen: 24
                          181.96.0.0/12 maxlen: 24
                          190.224.0.0/13 maxlen: 24
                          181.28.0.0/14 maxlen: 24
                          181.164.0.0/14 maxlen: 24
                          181.168.0.0/14 maxlen: 24
                          181.228.0.0/14 maxlen: 24
                          186.136.0.0/14 maxlen: 24
                          190.16.0.0/14 maxlen: 24
                          190.188.0.0/14 maxlen: 24
                          190.192.0.0/14 maxlen: 24
                          190.244.0.0/14 maxlen: 24
                          152.168.0.0/14 maxlen: 24
                          186.108.0.0/14 maxlen: 24
                          186.124.0.0/14 maxlen: 24
                          190.136.0.0/14 maxlen: 24
                          201.212.0.0/15 maxlen: 24
                          186.152.0.0/15 maxlen: 24
                          190.30.0.0/15 maxlen: 24
                          201.252.0.0/15 maxlen: 24
                          24.232.0.0/16 maxlen: 24
                          200.127.0.0/16 maxlen: 24
                          201.231.0.0/16 maxlen: 24
                          201.235.0.0/16 maxlen: 24
                          200.43.0.0/16 maxlen: 24
                          200.45.0.0/16 maxlen: 24
                          200.117.0.0/16 maxlen: 24
                          200.42.0.0/17 maxlen: 24
                          200.114.128.0/17 maxlen: 24
                          200.122.0.0/17 maxlen: 24
                          200.126.128.0/17 maxlen: 24
                          200.82.0.0/17 maxlen: 24
                          191.97.128.0/17 maxlen: 24
                          200.55.64.0/18 maxlen: 24
                          200.89.128.0/18 maxlen: 24
                          66.60.0.0/18 maxlen: 24
                          200.73.128.0/18 maxlen: 24
                          200.105.0.0/18 maxlen: 24
                          200.32.0.0/19 maxlen: 24
                          200.42.128.0/19 maxlen: 24
                          200.49.128.0/19 maxlen: 24
                          200.3.32.0/19 maxlen: 24
                          200.3.64.0/19 maxlen: 24
                          200.61.192.0/19 maxlen: 24
                          196.32.64.0/19 maxlen: 24
                          200.63.0.0/19 maxlen: 24
                          200.105.64.0/19 maxlen: 24
                          200.71.224.0/20 maxlen: 24
                          200.49.96.0/20 maxlen: 24
                          200.80.64.0/20 maxlen: 24
                          200.110.224.0/21 maxlen: 24
                          170.150.196.0/22 maxlen: 24
                          170.231.136.0/22 maxlen: 24
                          2001:13d0::/29 maxlen: 48
                          2800:2000::/20 maxlen: 48
                          2800:b000::/32 maxlen: 48
                          2803:da80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2740681 (0x29d1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Jul  9 17:55:48 2023 GMT
            Not After : Jul 10 17:55:48 2025 GMT
        Subject: CN=3243ab86fb18d31bcf5d97b5a7dbd1f848e527eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:51:3a:5c:be:58:cd:a3:c4:05:6b:f4:96:52:
                    2b:01:cc:1d:1f:22:c8:e8:b4:9d:77:00:90:ac:10:
                    a0:da:29:a6:1c:29:67:d9:94:24:a1:15:e8:5a:42:
                    70:31:36:1e:d2:fe:6e:34:2e:92:ab:61:ea:07:aa:
                    5e:64:08:42:b5:56:32:91:66:ce:ef:f1:0f:cd:1b:
                    53:39:f1:4b:1a:0e:7b:d2:53:7c:fd:8c:06:cc:04:
                    73:07:29:af:70:76:0a:2c:3b:bf:f7:06:92:73:55:
                    00:90:8f:28:c6:0f:de:44:b9:77:4b:86:6e:8d:47:
                    4a:01:21:24:7a:73:a3:47:63:82:76:a3:fa:19:9b:
                    84:6e:3e:ae:d1:b4:f7:60:50:9c:33:da:c4:f8:69:
                    0c:87:46:6a:ba:f5:e2:12:33:fb:56:d7:81:08:9e:
                    d8:99:42:f2:ac:99:d0:48:79:47:46:db:eb:20:99:
                    ec:c3:01:87:85:2e:59:f5:60:8c:0e:fd:9e:38:3f:
                    74:b9:f6:d7:69:df:95:50:7b:e1:d3:06:4a:51:58:
                    34:47:d3:d0:d9:b9:de:2d:06:7b:6a:28:05:bc:b5:
                    17:03:61:a7:73:6a:ed:6d:9b:99:2b:82:6d:0f:8a:
                    5b:0a:84:f5:a8:66:e5:d5:38:7e:87:9d:4b:02:4d:
                    b5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C0:00:8E:E8:2F:D1:A9:7A:1C:BF:63:02:8E:6E:45:51:CF:F6:91
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3243ab86fb18d31bcf5d97b5a7dbd1f848e527eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.232.0.0/16
                  66.60.0.0/18
                  152.168.0.0/14
                  170.150.196.0/22
                  170.231.136.0/22
                  181.0.0.0/12
                  181.28.0.0/14
                  181.80.0.0-181.111.255.255
                  181.164.0.0-181.171.255.255
                  181.228.0.0/14
                  186.108.0.0/14
                  186.124.0.0/14
                  186.136.0.0/14
                  186.152.0.0/15
                  190.16.0.0/14
                  190.30.0.0/15
                  190.136.0.0/14
                  190.188.0.0-190.195.255.255
                  190.224.0.0/13
                  190.244.0.0/14
                  191.97.128.0/17
                  196.32.64.0/19
                  200.3.32.0-200.3.95.255
                  200.32.0.0/19
                  200.42.0.0-200.42.159.255
                  200.43.0.0/16
                  200.45.0.0/16
                  200.49.96.0/20
                  200.49.128.0/19
                  200.55.64.0/18
                  200.61.192.0/19
                  200.63.0.0/19
                  200.71.224.0/20
                  200.73.128.0/18
                  200.80.64.0/20
                  200.82.0.0/17
                  200.89.128.0/18
                  200.105.0.0-200.105.95.255
                  200.110.224.0/21
                  200.114.128.0/17
                  200.117.0.0/16
                  200.122.0.0/17
                  200.126.128.0-200.127.255.255
                  201.212.0.0/15
                  201.231.0.0/16
                  201.235.0.0/16
                  201.252.0.0/15
                IPv6:
                  2001:13d0::/29
                  2800:2000::/20
                  2800:b000::/32
                  2803:da80::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:27:fd:f8:7b:2d:03:52:57:f5:bd:90:f2:a7:62:07:eb:0b:
         0c:92:eb:02:75:49:5d:ec:17:46:e0:04:1f:2a:df:a3:77:af:
         68:26:52:7a:9d:75:46:e7:7e:db:66:06:75:a6:0a:42:2c:ab:
         28:9c:6e:ef:c8:53:d6:3d:85:82:5f:c4:87:78:53:6b:48:fd:
         36:bb:7c:86:61:5f:12:78:50:ce:84:5b:9e:51:7a:5e:da:85:
         fe:9c:7f:90:08:26:ec:38:95:07:4a:ac:d7:97:8e:66:de:ca:
         3f:b7:2f:3a:dd:cd:1b:68:bf:50:10:fe:9e:8a:db:09:7b:29:
         06:97:f4:72:52:55:88:6e:b7:5e:d0:99:73:59:4b:58:52:72:
         93:b6:f6:e0:39:e6:38:7e:1c:ea:d0:4a:93:02:09:62:2c:bb:
         55:fa:c9:6c:0a:40:7c:79:36:1b:f6:65:a9:4a:c3:c6:94:cc:
         b0:26:8e:34:fb:aa:3c:ae:b1:8d:29:5e:f4:85:f3:93:87:43:
         0c:54:e3:15:d1:f3:db:f5:27:cc:93:79:d1:41:08:66:28:ef:
         0e:ec:42:dd:b1:3a:42:6c:45:6c:00:a9:f7:08:ba:32:cf:95:
         d3:ea:eb:d6:db:df:c1:91:50:3b:a5:f3:ac:45:aa:26:f2:b3:
         74:32:9a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org