Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/4d1bb8d663e50c69f61896999e64f911ebe11ae9.roa
File:                     4d1bb8d663e50c69f61896999e64f911ebe11ae9.roa (raw, json)
Hash identifier:          mh+jsRKABH4+cfGEI+bvU75kqg2ClV44VG8wSYeyKp0=
Subject key identifier:   5B:8B:B7:DA:0C:F6:FB:C8:BF:D7:B4:EA:9F:B7:3E:29:5C:93:8A:61
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E766A
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/4d1bb8d663e50c69f61896999e64f911ebe11ae9.roa
Signing time:             Thu 07 Dec 2023 13:01:32 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     264767
IP address blocks:        181.13.185.0/24 maxlen: 24
                          181.13.186.0/24 maxlen: 24
                          190.228.126.0/24 maxlen: 24
                          190.228.132.0/24 maxlen: 24
                          190.228.73.0/24 maxlen: 24
                          190.228.74.0/24 maxlen: 24
                          181.13.151.0/24 maxlen: 24
                          181.13.153.0/24 maxlen: 24
                          186.125.160.0/24 maxlen: 24
                          190.228.99.0/24 maxlen: 24
                          190.228.100.0/24 maxlen: 24
                          181.13.239.0/24 maxlen: 24
                          190.136.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3044970 (0x2e766a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=4d1bb8d663e50c69f61896999e64f911ebe11ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:b8:48:ca:5f:ff:11:2a:33:76:b0:aa:d0:
                    e1:f2:26:e0:c7:af:9f:a6:e6:42:31:a7:10:6b:fb:
                    01:3c:55:4a:dd:9a:80:1f:91:ee:82:09:03:12:6e:
                    6b:f1:8e:68:d3:4c:8a:cf:b1:1b:26:08:eb:80:09:
                    41:97:a7:0a:bd:0e:20:d1:30:fe:02:16:19:f1:5c:
                    b9:66:41:54:9f:5a:ec:97:18:05:fb:38:d9:4d:4d:
                    16:b6:37:81:2b:83:83:bc:95:3f:29:83:a3:e6:b1:
                    e9:2d:01:5b:7c:4d:69:c8:d3:f9:0a:29:13:23:7c:
                    5b:9d:2c:37:c5:e3:9b:b9:65:46:d3:03:af:77:97:
                    23:5f:a7:bf:7e:65:b4:9f:d9:72:e7:9d:a4:03:9e:
                    37:62:8e:5e:14:55:0d:26:97:7a:48:fc:17:d0:a1:
                    65:fb:f3:ca:fa:49:f6:e1:c8:55:0e:1f:2f:94:5f:
                    72:59:f6:ba:8b:6c:18:01:21:fd:7a:3a:b3:e7:0c:
                    ed:7d:b7:6d:81:40:c3:10:29:de:fd:2d:e6:38:19:
                    15:de:e7:62:d5:d1:e9:9e:9f:cd:1a:74:32:96:1f:
                    b6:ff:9c:03:8a:fa:c9:56:6f:e9:cf:66:b4:98:54:
                    5e:12:ca:88:ae:12:8e:42:79:b7:62:39:68:b2:76:
                    63:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8B:B7:DA:0C:F6:FB:C8:BF:D7:B4:EA:9F:B7:3E:29:5C:93:8A:61
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/4d1bb8d663e50c69f61896999e64f911ebe11ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.151.0/24
                  181.13.153.0/24
                  181.13.185.0-181.13.186.255
                  181.13.239.0/24
                  186.125.160.0/24
                  190.136.18.0/24
                  190.228.73.0-190.228.74.255
                  190.228.99.0-190.228.100.255
                  190.228.126.0/24
                  190.228.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:84:1f:de:6a:c0:55:24:cf:d0:b0:de:f2:25:ea:5f:c7:ad:
         0d:d6:1a:0d:0d:24:f3:6f:3f:b0:ba:88:99:d7:fc:89:f8:11:
         51:c9:fa:f4:0a:48:95:61:0f:5b:57:14:a9:99:3e:38:39:23:
         20:72:47:7f:2c:3d:16:fb:17:ed:fd:c8:3e:92:84:72:e5:22:
         e4:6c:95:2c:f9:24:64:19:b4:61:49:23:7e:03:8f:33:ee:e4:
         52:b3:c2:f3:d3:24:cf:20:93:f9:b6:d3:1a:da:b4:00:30:07:
         3a:f8:36:4b:6a:20:27:a8:8d:f8:90:47:30:6b:0c:b2:16:18:
         ea:20:f1:5f:69:b5:c1:bd:75:c7:2e:2b:77:99:fe:5b:88:07:
         5d:c7:9e:d8:1d:f8:a8:84:9e:a3:a4:01:f1:04:f3:cf:f0:49:
         20:5a:5d:3a:9e:e1:df:53:36:c1:c5:b1:c2:1c:fe:4e:b8:c3:
         8b:04:f1:f7:75:81:a8:ba:43:b8:0f:8f:10:4a:ad:aa:44:b6:
         2f:37:97:1b:ba:1d:c1:02:ae:17:08:fe:a8:91:8c:9f:50:4e:
         e4:77:58:5b:64:65:2a:5a:da:81:32:68:69:6e:81:a0:aa:70:
         07:7f:94:6b:05:5d:79:07:db:f0:5d:15:d9:43:2f:66:fc:43:
         5c:83:4a:f4
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIDLnZqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
NzQ0MDlkMGMyYTcwYzkyMWRkNjg1ZTg2M2U5ZjAwY2IxZTI2MmEwHhcNMjMxMjA3
MTMwMDQ2WhcNMjgxMjA3MTMwMDQ2WjAzMTEwLwYDVQQDEyg0ZDFiYjhkNjYzZTUw
YzY5ZjYxODk2OTk5ZTY0ZjkxMWViZTExYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtx24SMpf/xEqM3awqtDh8ibgx6+fpuZCMacQa/sBPFVK3ZqA
H5HuggkDEm5r8Y5o00yKz7EbJgjrgAlBl6cKvQ4g0TD+AhYZ8Vy5ZkFUn1rslxgF
+zjZTU0WtjeBK4ODvJU/KYOj5rHpLQFbfE1pyNP5CikTI3xbnSw3xeObuWVG0wOv
d5cjX6e/fmW0n9ly552kA543Yo5eFFUNJpd6SPwX0KFl+/PK+kn24chVDh8vlF9y
Wfa6i2wYASH9ejqz5wztfbdtgUDDECne/S3mOBkV3udi1dHpnp/NGnQylh+2/5wD
ivrJVm/pz2a0mFReEsqIrhKOQnm3YjlosnZjvQIDAQABo4ICqTCCAqUwHQYDVR0O
BBYEFFuLt9oM9vvIv9e06p+3Pilck4phMB8GA1UdIwQYMBaAFPuO/GhWAKtj6gJP
ow0fFdW1sMGxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzk3NDQw
OWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzRkMWJiOGQ2NjNlNTBjNjlmNjE4OTY5OTllNjRmOTExZWJlMTFhZTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvYzk3NDQwOWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBtBggrBgEFBQcBBwEB/wRe
MFwwWgQCAAEwVAMEALUNlwMEALUNmTAMAwQAtQ25AwQAtQ26AwQAtQ3vAwQAun2g
AwQAvogSMAwDBAC+5EkDBAC+5EowDAMEAL7kYwMEAL7kZAMEAL7kfgMEAL7khDAN
BgkqhkiG9w0BAQsFAAOCAQEAVIQf3mrAVSTP0LDe8iXqX8etDdYaDQ0k828/sLqI
mdf8ifgRUcn69ApIlWEPW1cUqZk+ODkjIHJHfyw9FvsX7f3IPpKEcuUi5GyVLPkk
ZBm0YUkjfgOPM+7kUrPC89MkzyCT+bbTGtq0ADAHOvg2S2ogJ6iN+JBHMGsMshYY
6iDxX2m1wb11xy4rd5n+W4gHXcee2B34qISeo6QB8QTzz/BJIFpdOp7h31M2wcWx
whz+TrjDiwTx93WBqLpDuA+PEEqtqkS2LzeXG7odwQKuFwj+qJGMn1BO5HdYW2Rl
KlragTJoaW6BoKpwB3+UawVdeQfb8F0V2UMvZvxDXINK9A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org