Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/5cb2adf6a6f38ae21cb88a0abaf0facbf4a16a8e.roa
File:                     5cb2adf6a6f38ae21cb88a0abaf0facbf4a16a8e.roa (raw, json)
Hash identifier:          stvkvyuSi+ueVa1Vm9w89KTJtU2VDNjoRb/GI3Oud40=
Subject key identifier:   B5:62:AD:C0:88:0C:6F:ED:A2:1E:77:3A:F5:A1:43:03:60:38:3E:3B
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       13556C
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/5cb2adf6a6f38ae21cb88a0abaf0facbf4a16a8e.roa
Signing time:             Thu 29 Apr 2021 14:41:46 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     10481
IP address blocks:        201.213.0.0/16 maxlen: 24
                          152.168.0.0/14 maxlen: 24
                          170.150.196.0/22 maxlen: 24
                          170.231.136.0/22 maxlen: 24
                          181.0.0.0/12 maxlen: 24
                          181.164.0.0/14 maxlen: 24
                          181.168.0.0/14 maxlen: 24
                          181.228.0.0/14 maxlen: 24
                          181.230.0.0/15 maxlen: 24
                          181.28.0.0/14 maxlen: 24
                          181.80.0.0/12 maxlen: 24
                          181.96.0.0/12 maxlen: 24
                          186.108.0.0/14 maxlen: 24
                          186.124.0.0/14 maxlen: 24
                          186.126.0.0/15 maxlen: 24
                          186.136.0.0/14 maxlen: 24
                          186.136.0.0/15 maxlen: 24
                          186.138.0.0/15 maxlen: 24
                          186.152.0.0/15 maxlen: 24
                          190.136.0.0/14 maxlen: 24
                          190.137.0.0/16 maxlen: 24
                          190.138.0.0/15 maxlen: 24
                          190.16.0.0/14 maxlen: 24
                          190.16.0.0/16 maxlen: 24
                          190.17.0.0/16 maxlen: 24
                          190.18.0.0/15 maxlen: 24
                          190.188.0.0/14 maxlen: 24
                          190.188.0.0/15 maxlen: 24
                          190.190.0.0/15 maxlen: 24
                          190.192.0.0/14 maxlen: 24
                          190.192.0.0/15 maxlen: 24
                          190.194.0.0/15 maxlen: 24
                          190.224.0.0/13 maxlen: 24
                          190.226.0.0/15 maxlen: 24
                          190.228.0.0/14 maxlen: 24
                          190.244.0.0/14 maxlen: 24
                          190.244.0.0/15 maxlen: 24
                          190.246.0.0/15 maxlen: 24
                          190.30.0.0/15 maxlen: 24
                          190.31.0.0/16 maxlen: 24
                          191.97.128.0/17 maxlen: 24
                          196.32.64.0/19 maxlen: 24
                          200.105.0.0/18 maxlen: 24
                          200.105.64.0/19 maxlen: 24
                          200.110.224.0/21 maxlen: 24
                          200.114.128.0/17 maxlen: 24
                          200.114.128.0/19 maxlen: 24
                          200.114.160.0/19 maxlen: 24
                          200.114.192.0/19 maxlen: 24
                          200.114.224.0/19 maxlen: 24
                          200.117.0.0/16 maxlen: 24
                          200.117.128.0/17 maxlen: 24
                          200.117.64.0/18 maxlen: 24
                          200.122.0.0/17 maxlen: 24
                          200.122.32.0/19 maxlen: 24
                          200.122.64.0/19 maxlen: 24
                          200.122.96.0/19 maxlen: 24
                          200.126.128.0/17 maxlen: 24
                          200.126.128.0/19 maxlen: 24
                          200.126.160.0/19 maxlen: 24
                          200.126.192.0/18 maxlen: 24
                          200.126.192.0/19 maxlen: 24
                          200.126.224.0/19 maxlen: 24
                          200.127.0.0/16 maxlen: 24
                          200.127.128.0/17 maxlen: 24
                          200.3.32.0/19 maxlen: 24
                          200.3.64.0/19 maxlen: 24
                          200.32.0.0/19 maxlen: 24
                          200.42.0.0/17 maxlen: 24
                          200.42.128.0/19 maxlen: 24
                          200.43.0.0/16 maxlen: 24
                          200.45.0.0/16 maxlen: 24
                          200.49.128.0/19 maxlen: 24
                          200.49.96.0/20 maxlen: 24
                          200.55.64.0/18 maxlen: 24
                          200.55.64.0/19 maxlen: 24
                          200.55.96.0/19 maxlen: 24
                          200.61.192.0/19 maxlen: 24
                          200.63.0.0/19 maxlen: 24
                          200.71.224.0/20 maxlen: 24
                          200.73.128.0/18 maxlen: 24
                          200.80.64.0/20 maxlen: 24
                          200.82.0.0/17 maxlen: 24
                          200.82.64.0/18 maxlen: 24
                          200.89.128.0/18 maxlen: 24
                          200.89.128.0/19 maxlen: 24
                          200.89.160.0/19 maxlen: 24
                          66.60.0.0/18 maxlen: 24
                          201.212.0.0/15 maxlen: 24
                          201.212.128.0/17 maxlen: 24
                          201.231.0.0/16 maxlen: 24
                          201.231.0.0/17 maxlen: 24
                          201.231.128.0/17 maxlen: 24
                          201.235.0.0/16 maxlen: 24
                          201.235.0.0/17 maxlen: 24
                          201.235.128.0/17 maxlen: 24
                          201.252.0.0/15 maxlen: 24
                          201.253.0.0/16 maxlen: 24
                          24.232.0.0/16 maxlen: 24
                          2800:2000::/20 maxlen: 20
                          2800:2000::/20 maxlen: 48
                          2800:b000::/32 maxlen: 48
                          2803:da80::/32 maxlen: 48
                          2001:13d0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1267052 (0x13556c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=5cb2adf6a6f38ae21cb88a0abaf0facbf4a16a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:82:d9:8f:f9:93:05:60:35:2d:b4:79:8f:5b:
                    2b:d7:27:25:a8:04:48:13:4f:eb:f3:48:7c:89:f7:
                    3c:21:28:5d:f6:df:b0:d0:69:aa:22:ff:3a:74:d0:
                    4e:cc:d4:fa:7e:88:3e:33:e6:d5:b2:a1:95:e0:44:
                    cd:44:3e:41:75:6d:f0:80:0f:78:0d:11:5d:d6:37:
                    70:0c:f8:4a:0e:cf:18:b1:cd:0f:ec:02:64:72:07:
                    b5:2f:24:4d:84:bf:29:75:96:35:29:ca:ae:d1:1a:
                    ba:4f:8b:0b:cd:f8:be:4a:c6:a0:d1:6a:fa:d0:5f:
                    b8:3e:14:76:db:ef:66:99:35:6c:0d:00:47:5d:b8:
                    e5:0c:5c:ca:a5:66:80:3e:cc:bf:95:32:a1:67:96:
                    5a:21:e8:73:37:29:74:1b:6e:2f:b2:6f:1f:c6:24:
                    6f:17:2e:22:ab:db:4d:07:de:27:c0:7f:06:55:b3:
                    72:22:eb:7d:10:36:c0:42:d2:ca:16:90:d1:a9:0e:
                    a4:2b:ec:b3:3c:74:15:a6:d8:b3:ef:96:0b:8a:e0:
                    e5:8f:c6:5c:ad:83:e7:3c:6c:9d:e1:a4:03:80:af:
                    35:b5:b6:8c:f9:36:b4:e2:80:36:8c:0a:b5:c1:14:
                    93:93:69:29:ab:59:c0:42:a7:ce:0e:b3:dd:03:ba:
                    6b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:62:AD:C0:88:0C:6F:ED:A2:1E:77:3A:F5:A1:43:03:60:38:3E:3B
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/5cb2adf6a6f38ae21cb88a0abaf0facbf4a16a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.232.0.0/16
                  66.60.0.0/18
                  152.168.0.0/14
                  170.150.196.0/22
                  170.231.136.0/22
                  181.0.0.0/12
                  181.28.0.0/14
                  181.80.0.0-181.111.255.255
                  181.164.0.0-181.171.255.255
                  181.228.0.0/14
                  186.108.0.0/14
                  186.124.0.0/14
                  186.136.0.0/14
                  186.152.0.0/15
                  190.16.0.0/14
                  190.30.0.0/15
                  190.136.0.0/14
                  190.188.0.0-190.195.255.255
                  190.224.0.0/13
                  190.244.0.0/14
                  191.97.128.0/17
                  196.32.64.0/19
                  200.3.32.0-200.3.95.255
                  200.32.0.0/19
                  200.42.0.0-200.42.159.255
                  200.43.0.0/16
                  200.45.0.0/16
                  200.49.96.0/20
                  200.49.128.0/19
                  200.55.64.0/18
                  200.61.192.0/19
                  200.63.0.0/19
                  200.71.224.0/20
                  200.73.128.0/18
                  200.80.64.0/20
                  200.82.0.0/17
                  200.89.128.0/18
                  200.105.0.0-200.105.95.255
                  200.110.224.0/21
                  200.114.128.0/17
                  200.117.0.0/16
                  200.122.0.0/17
                  200.126.128.0-200.127.255.255
                  201.212.0.0/15
                  201.231.0.0/16
                  201.235.0.0/16
                  201.252.0.0/15
                IPv6:
                  2001:13d0::/29
                  2800:2000::/20
                  2800:b000::/32
                  2803:da80::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:6f:e2:5f:aa:85:72:61:df:3a:bf:8e:4b:f6:11:c4:d8:de:
         47:5f:ed:52:fc:ed:c8:c7:18:cc:f1:06:9b:de:0e:f2:aa:a9:
         6f:9f:a7:d1:e4:ad:2a:a9:d8:3c:23:90:c3:1d:dc:a8:32:75:
         34:83:6d:3b:31:60:5e:9e:f0:44:99:df:d8:5b:21:4b:88:fc:
         f0:43:d3:48:f7:ba:24:f2:ac:9f:35:ca:1d:8c:9c:49:6a:7c:
         19:95:08:45:c1:e5:0d:7e:ae:bd:93:9b:e0:f9:1c:fa:4a:1e:
         62:bf:a2:45:90:27:17:5e:4b:9f:8e:60:cd:0a:df:95:66:b5:
         1e:2b:c1:b0:09:b0:1f:7c:ce:b5:ba:79:35:fc:54:1a:36:69:
         2c:e7:42:1f:77:d5:52:ee:88:03:dd:0d:a9:3e:ae:32:7d:46:
         08:d5:7a:74:d2:7d:35:71:ff:44:ec:b4:53:94:85:0b:57:03:
         b1:9d:15:41:6d:48:24:f3:3f:ee:0b:02:d6:e0:3f:ab:52:a7:
         f0:fb:22:ad:53:8a:6d:b8:ef:cc:05:d8:ff:ab:c9:ff:db:32:
         d9:f7:ae:79:fd:a1:00:84:c2:43:78:f3:66:8e:31:f9:75:f5:
         61:49:3d:1b:1e:fc:0c:da:44:23:0d:e6:06:0d:21:0b:50:26:
         32:1f:3f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org