Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c9ea480135d27395bdeb4d738857d398a131c59e.roa
File:                     c9ea480135d27395bdeb4d738857d398a131c59e.roa (raw, json)
Hash identifier:          lWLRS7hCXCPaNr5rbJWzL6EqBdVD5gTgKBOk5+wgIQc=
Subject key identifier:   54:D7:35:74:A6:4A:CC:31:B3:47:EE:E9:5F:A5:31:D7:E6:8E:41:8D
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2E125A
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c9ea480135d27395bdeb4d738857d398a131c59e.roa
Signing time:             Thu 07 Dec 2023 12:43:30 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     19905
IP address blocks:        181.10.161.0/24 maxlen: 24
                          181.12.80.0/24 maxlen: 24
                          181.13.203.0/24 maxlen: 24
                          181.14.235.0/24 maxlen: 24
                          181.15.139.0/24 maxlen: 24
                          181.15.225.0/24 maxlen: 24
                          181.15.91.0/24 maxlen: 24
                          181.15.92.0/24 maxlen: 24
                          181.15.95.0/24 maxlen: 24
                          181.166.245.0/24 maxlen: 24
                          181.166.250.0/24 maxlen: 24
                          181.30.126.0/24 maxlen: 24
                          181.30.128.0/24 maxlen: 24
                          181.30.159.0/24 maxlen: 24
                          181.88.192.0/24 maxlen: 24
                          186.124.122.0/24 maxlen: 24
                          186.125.243.0/24 maxlen: 24
                          190.136.39.0/24 maxlen: 24
                          190.136.40.0/24 maxlen: 24
                          190.225.183.0/24 maxlen: 24
                          190.227.215.0/24 maxlen: 24
                          190.227.241.0/24 maxlen: 24
                          190.228.108.0/24 maxlen: 24
                          190.228.129.0/24 maxlen: 24
                          190.228.154.0/24 maxlen: 24
                          190.228.29.0/24 maxlen: 24
                          190.228.30.0/24 maxlen: 24
                          190.228.48.0/24 maxlen: 24
                          190.30.233.0/24 maxlen: 24
                          200.32.14.0/24 maxlen: 24
                          200.32.17.0/24 maxlen: 24
                          200.32.20.0/24 maxlen: 24
                          200.32.29.0/24 maxlen: 24
                          200.42.102.0/24 maxlen: 24
                          200.42.109.0/24 maxlen: 24
                          200.42.125.0/24 maxlen: 24
                          200.42.129.0/24 maxlen: 24
                          200.42.141.0/24 maxlen: 24
                          200.42.149.0/24 maxlen: 24
                          200.42.157.0/24 maxlen: 24
                          200.42.158.0/24 maxlen: 24
                          200.42.18.0/24 maxlen: 24
                          200.42.2.0/24 maxlen: 24
                          200.42.20.0/24 maxlen: 24
                          200.42.24.0/24 maxlen: 24
                          200.42.32.0/24 maxlen: 24
                          200.42.39.0/24 maxlen: 24
                          200.42.41.0/24 maxlen: 24
                          200.42.42.0/24 maxlen: 24
                          200.42.45.0/24 maxlen: 24
                          200.42.46.0/24 maxlen: 24
                          200.42.6.0/24 maxlen: 24
                          200.43.139.0/24 maxlen: 24
                          200.43.15.0/24 maxlen: 24
                          200.43.168.0/24 maxlen: 24
                          200.43.229.0/24 maxlen: 24
                          200.43.235.0/24 maxlen: 24
                          200.43.31.0/24 maxlen: 24
                          200.43.40.0/24 maxlen: 24
                          200.43.58.0/24 maxlen: 24
                          200.43.95.0/24 maxlen: 24
                          200.45.20.0/24 maxlen: 24
                          200.45.235.0/24 maxlen: 24
                          200.45.41.0/24 maxlen: 24
                          200.45.46.0/24 maxlen: 24
                          200.45.50.0/24 maxlen: 24
                          200.45.66.0/24 maxlen: 24
                          200.45.68.0/24 maxlen: 24
                          200.45.80.0/24 maxlen: 24
                          200.45.83.0/24 maxlen: 24
                          200.45.84.0/24 maxlen: 24
                          200.45.87.0/24 maxlen: 24
                          200.49.144.0/24 maxlen: 24
                          200.49.146.0/24 maxlen: 24
                          200.49.148.0/24 maxlen: 24
                          200.49.153.0/24 maxlen: 24
                          200.82.126.0/24 maxlen: 24
                          200.89.137.0/24 maxlen: 24
                          200.89.144.0/24 maxlen: 24
                          200.89.173.0/24 maxlen: 24
                          200.89.184.0/24 maxlen: 24
                          200.89.187.0/24 maxlen: 24
                          200.89.191.0/24 maxlen: 24
                          201.212.103.0/24 maxlen: 24
                          201.212.110.0/24 maxlen: 24
                          201.212.48.0/24 maxlen: 24
                          201.235.252.0/24 maxlen: 24
                          201.235.254.0/24 maxlen: 24
                          201.252.225.0/24 maxlen: 24
                          24.232.0.0/24 maxlen: 24
                          200.105.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3019354 (0x2e125a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=c9ea480135d27395bdeb4d738857d398a131c59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:20:c7:b9:8b:d9:9e:b4:64:e9:b7:c5:62:
                    6e:31:93:1f:e9:83:80:8b:c3:f4:5b:98:3a:5f:c8:
                    fd:53:c5:6d:dd:30:7e:a1:2e:d0:2e:57:9a:76:79:
                    10:2e:9f:bc:39:50:5a:71:de:93:ce:b0:72:0a:46:
                    0f:29:fb:37:b3:1d:e0:d3:e7:8e:17:f9:6e:33:29:
                    1c:77:7b:a2:ee:e0:47:aa:fb:8a:17:97:2c:04:4d:
                    e0:07:08:cd:9d:9c:48:ea:2e:0f:34:eb:ea:60:1a:
                    86:55:7b:dc:6b:b6:08:77:c0:29:fc:9f:75:cb:0a:
                    8a:27:68:14:d4:a1:80:48:80:ce:8d:d3:8e:ed:64:
                    02:d1:a8:17:4b:e3:8d:b0:19:00:8e:86:ee:51:48:
                    3d:a7:67:79:8b:03:c8:5a:41:de:a8:70:c2:74:9f:
                    09:86:0f:61:5f:b9:c6:85:85:89:6f:07:b5:94:62:
                    e9:80:7b:a1:fb:26:aa:a2:c6:bf:63:8e:23:56:97:
                    0b:25:e3:95:fe:41:1d:51:84:96:21:bc:cb:64:8c:
                    85:eb:93:d5:44:00:74:da:d0:1f:1e:99:5a:42:2a:
                    db:aa:9b:0f:41:5f:1b:32:39:55:3f:01:db:06:40:
                    68:9c:b6:ce:ea:55:04:7c:81:aa:7a:85:2c:4b:d3:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D7:35:74:A6:4A:CC:31:B3:47:EE:E9:5F:A5:31:D7:E6:8E:41:8D
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c9ea480135d27395bdeb4d738857d398a131c59e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.232.0.0/24
                  181.10.161.0/24
                  181.12.80.0/24
                  181.13.203.0/24
                  181.14.235.0/24
                  181.15.91.0-181.15.92.255
                  181.15.95.0/24
                  181.15.139.0/24
                  181.15.225.0/24
                  181.30.126.0/24
                  181.30.128.0/24
                  181.30.159.0/24
                  181.88.192.0/24
                  181.166.245.0/24
                  181.166.250.0/24
                  186.124.122.0/24
                  186.125.243.0/24
                  190.30.233.0/24
                  190.136.39.0-190.136.40.255
                  190.225.183.0/24
                  190.227.215.0/24
                  190.227.241.0/24
                  190.228.29.0-190.228.30.255
                  190.228.48.0/24
                  190.228.108.0/24
                  190.228.129.0/24
                  190.228.154.0/24
                  200.32.14.0/24
                  200.32.17.0/24
                  200.32.20.0/24
                  200.32.29.0/24
                  200.42.2.0/24
                  200.42.6.0/24
                  200.42.18.0/24
                  200.42.20.0/24
                  200.42.24.0/24
                  200.42.32.0/24
                  200.42.39.0/24
                  200.42.41.0-200.42.42.255
                  200.42.45.0-200.42.46.255
                  200.42.102.0/24
                  200.42.109.0/24
                  200.42.125.0/24
                  200.42.129.0/24
                  200.42.141.0/24
                  200.42.149.0/24
                  200.42.157.0-200.42.158.255
                  200.43.15.0/24
                  200.43.31.0/24
                  200.43.40.0/24
                  200.43.58.0/24
                  200.43.95.0/24
                  200.43.139.0/24
                  200.43.168.0/24
                  200.43.229.0/24
                  200.43.235.0/24
                  200.45.20.0/24
                  200.45.41.0/24
                  200.45.46.0/24
                  200.45.50.0/24
                  200.45.66.0/24
                  200.45.68.0/24
                  200.45.80.0/24
                  200.45.83.0-200.45.84.255
                  200.45.87.0/24
                  200.45.235.0/24
                  200.49.144.0/24
                  200.49.146.0/24
                  200.49.148.0/24
                  200.49.153.0/24
                  200.82.126.0/24
                  200.89.137.0/24
                  200.89.144.0/24
                  200.89.173.0/24
                  200.89.184.0/24
                  200.89.187.0/24
                  200.89.191.0/24
                  200.105.68.0/24
                  201.212.48.0/24
                  201.212.103.0/24
                  201.212.110.0/24
                  201.235.252.0/24
                  201.235.254.0/24
                  201.252.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:0c:1b:b3:69:6b:d7:54:41:90:07:89:22:e3:3d:10:07:19:
         57:e6:1f:d3:3d:1a:03:40:fc:8a:e7:24:fb:83:c6:6f:46:40:
         b6:21:63:0a:6a:45:cd:69:d4:1c:c6:98:d7:a1:2f:57:60:75:
         b9:39:35:c4:a1:c4:d8:10:4e:88:24:70:5f:c0:8e:16:46:80:
         7c:0b:68:6f:77:10:36:c4:af:94:6e:83:4d:fa:a5:6d:f7:59:
         f7:22:98:74:3d:82:38:ed:0b:5b:3d:4c:56:52:ab:ac:b1:2c:
         78:69:63:c8:b2:1a:7f:fb:5d:6f:d7:75:7f:77:90:1b:95:7f:
         0c:b6:48:0e:51:a2:d2:fb:c8:eb:ee:18:f3:3b:2f:98:c3:5a:
         ce:7b:15:6f:53:2d:1f:70:59:86:b1:d3:26:e6:ff:23:52:e5:
         f5:09:aa:47:fd:40:a3:f7:84:cf:ec:30:a8:58:68:ed:87:4d:
         aa:31:11:fb:f8:8f:d5:f1:04:cd:ba:a6:8e:ff:14:b0:16:44:
         72:be:04:e7:41:fc:f7:95:f6:6f:7d:27:4e:62:31:a9:20:c2:
         f1:94:b2:9e:d3:68:75:3d:6d:2f:d3:d2:69:d9:e7:97:04:8a:
         66:fd:61:49:ee:64:d9:c5:e3:94:e7:9f:e2:59:54:7b:b0:bd:
         0b:42:2a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org