Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7455f198fee930cbc4a35599b1db8ad44f85386a.roa
File:                     7455f198fee930cbc4a35599b1db8ad44f85386a.roa (raw, json)
Hash identifier:          dz+CtcgzRQ9Hh9kz+c82TbXBOozqKXlhR94TQo8fMbs=
Subject key identifier:   2E:96:83:69:D6:F9:4D:94:44:F0:4D:1A:4E:CE:56:6C:19:6A:EE:C0
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2DDC8B
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7455f198fee930cbc4a35599b1db8ad44f85386a.roa
Signing time:             Thu 07 Dec 2023 12:42:44 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     264767
IP address blocks:        181.13.185.0/24 maxlen: 24
                          181.13.186.0/24 maxlen: 24
                          190.228.126.0/24 maxlen: 24
                          190.228.132.0/24 maxlen: 24
                          190.228.73.0/24 maxlen: 24
                          190.228.74.0/24 maxlen: 24
                          181.13.151.0/24 maxlen: 24
                          181.13.153.0/24 maxlen: 24
                          186.125.160.0/24 maxlen: 24
                          190.228.99.0/24 maxlen: 24
                          190.228.100.0/24 maxlen: 24
                          181.13.239.0/24 maxlen: 24
                          190.136.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3005579 (0x2ddc8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=7455f198fee930cbc4a35599b1db8ad44f85386a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:25:8d:35:ce:98:31:3e:20:a9:a5:23:73:
                    6b:a8:4d:fb:1a:27:64:29:47:3c:33:8f:08:5c:3d:
                    ed:c5:01:96:a8:ad:d7:8d:e7:a2:6b:7f:10:b5:12:
                    bb:81:bc:e0:a5:a7:9f:21:ed:10:f5:71:91:b3:8e:
                    64:d5:56:38:ea:b2:48:d0:1f:67:9d:3f:40:fa:7c:
                    e7:4d:b6:d6:e3:d4:0c:28:34:0e:d3:dd:95:9d:70:
                    de:37:58:e7:27:d0:03:f4:d4:01:32:24:88:12:19:
                    69:08:73:75:f4:59:83:40:50:bb:27:a7:0e:32:56:
                    56:53:a7:58:92:43:0f:7a:1a:55:a3:5e:96:28:36:
                    95:eb:49:a2:52:15:bc:81:51:29:90:b9:3a:17:1f:
                    34:ab:de:a7:aa:bc:03:00:34:0e:f9:14:38:39:25:
                    a2:bb:dd:bb:8c:16:1d:46:f2:1b:29:8f:c6:f5:1a:
                    93:c3:49:bd:8b:87:cf:12:93:0a:3d:35:51:9e:c4:
                    b1:01:eb:28:02:29:94:d5:cf:35:0c:f5:c2:04:ba:
                    d0:55:03:80:e5:8b:f8:ff:04:94:ad:ae:26:35:66:
                    f5:13:f9:44:12:c7:e1:7e:92:c2:6b:1a:50:c0:3e:
                    16:0b:c5:42:85:f3:bb:05:a8:c2:83:a7:4a:c9:c5:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:96:83:69:D6:F9:4D:94:44:F0:4D:1A:4E:CE:56:6C:19:6A:EE:C0
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/7455f198fee930cbc4a35599b1db8ad44f85386a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.151.0/24
                  181.13.153.0/24
                  181.13.185.0-181.13.186.255
                  181.13.239.0/24
                  186.125.160.0/24
                  190.136.18.0/24
                  190.228.73.0-190.228.74.255
                  190.228.99.0-190.228.100.255
                  190.228.126.0/24
                  190.228.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:c9:8f:c3:ff:1c:2e:01:31:a9:25:27:4e:c5:6c:21:8f:06:
         4a:5a:a7:d0:32:2b:47:74:d1:c7:60:f0:17:b1:73:42:3d:d7:
         7a:68:bb:7f:b7:9f:d5:f6:2a:86:6f:18:92:a7:f5:5a:22:e0:
         ba:f1:b7:ab:ca:5f:d4:31:f0:29:91:42:52:d4:ae:8f:e6:96:
         c1:a4:c5:9d:87:37:68:5c:69:28:4f:4a:71:9c:4f:1a:3f:2f:
         6a:dc:5a:a7:02:1d:bd:a5:82:bf:0d:45:bb:fe:75:17:a4:95:
         4f:aa:d3:e2:76:9d:48:33:9b:61:fd:5c:7b:7d:cd:c0:00:33:
         bc:a5:b5:fc:7c:00:e7:d9:3a:90:10:bf:a2:35:de:d4:b5:5c:
         ef:83:e5:c9:e1:72:29:68:8c:ee:6f:32:ad:c1:9d:17:5c:9d:
         cc:f1:dd:9e:59:08:7d:fc:35:3a:69:6c:75:a7:3f:09:fb:eb:
         e8:d5:14:7d:00:fd:d8:d6:f2:e3:84:81:bb:a7:8b:cd:49:94:
         a7:06:45:05:45:12:cd:0a:24:7f:4e:9e:a0:a3:97:de:ec:e4:
         c5:0d:6d:90:6d:53:e6:47:d4:32:41:3f:03:8a:88:4d:55:b3:
         f7:eb:8d:85:3f:1a:1d:3c:8c:80:89:9a:32:f5:c6:36:ff:d5:
         3a:3d:52:33
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIDLdyLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
MjYzZjBlYTFiNTYzMjg5MjA1YWQwMjY0NTMwZjhlNmMzMGU1NjkwHhcNMjMxMjA3
MTI0MTU3WhcNMjgxMjA3MTI0MTU3WjAzMTEwLwYDVQQDEyg3NDU1ZjE5OGZlZTkz
MGNiYzRhMzU1OTliMWRiOGFkNDRmODUzODZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlxQljTXOmDE+IKmlI3NrqE37GidkKUc8M48IXD3txQGWqK3X
jeeia38QtRK7gbzgpaefIe0Q9XGRs45k1VY46rJI0B9nnT9A+nznTbbW49QMKDQO
092VnXDeN1jnJ9AD9NQBMiSIEhlpCHN19FmDQFC7J6cOMlZWU6dYkkMPehpVo16W
KDaV60miUhW8gVEpkLk6Fx80q96nqrwDADQO+RQ4OSWiu927jBYdRvIbKY/G9RqT
w0m9i4fPEpMKPTVRnsSxAesoAimU1c81DPXCBLrQVQOA5Yv4/wSUra4mNWb1E/lE
EsfhfpLCaxpQwD4WC8VChfO7BajCg6dKycXS3wIDAQABo4ICqTCCAqUwHQYDVR0O
BBYEFC6Wg2nW+U2URPBNGk7OVmwZau7AMB8GA1UdIwQYMBaAFMD3ES/X9uODqZpb
XBnhTav8A9wtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgyNjNm
MGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3Lzc0NTVmMTk4ZmVlOTMwY2JjNGEzNTU5OWIxZGI4YWQ0NGY4NTM4NmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZjgyNjNmMGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBtBggrBgEFBQcBBwEB/wRe
MFwwWgQCAAEwVAMEALUNlwMEALUNmTAMAwQAtQ25AwQAtQ26AwQAtQ3vAwQAun2g
AwQAvogSMAwDBAC+5EkDBAC+5EowDAMEAL7kYwMEAL7kZAMEAL7kfgMEAL7khDAN
BgkqhkiG9w0BAQsFAAOCAQEAKcmPw/8cLgExqSUnTsVsIY8GSlqn0DIrR3TRx2Dw
F7FzQj3Xemi7f7ef1fYqhm8Ykqf1WiLguvG3q8pf1DHwKZFCUtSuj+aWwaTFnYc3
aFxpKE9KcZxPGj8vatxapwIdvaWCvw1Fu/51F6SVT6rT4nadSDObYf1ce33NwAAz
vKW1/HwA59k6kBC/ojXe1LVc74PlyeFyKWiM7m8yrcGdF1ydzPHdnlkIffw1Omls
dac/Cfvr6NUUfQD92Nby44SBu6eLzUmUpwZFBUUSzQokf06eoKOX3uzkxQ1tkG1T
5kfUMkE/A4qITVWz9+uNhT8aHTyMgImaMvXGNv/VOj1SMw==
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org