Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ed2be7e5a2d36293640193ef4e6028a25b098a80.roa
File:                     ed2be7e5a2d36293640193ef4e6028a25b098a80.roa (raw, json)
Hash identifier:          QdlLvPzlPpoH6v2Y5d26zJzJaa6D0QT18OWeW+edRHA=
Subject key identifier:   07:DF:9B:FD:E4:FE:4C:B9:50:42:3B:F2:FA:8A:9D:CF:A2:6E:9A:7F
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       263E38
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ed2be7e5a2d36293640193ef4e6028a25b098a80.roa
Signing time:             Sun 16 Apr 2023 21:11:50 +0000
ROA not before:           Sat 15 Apr 2023 21:11:49 +0000
ROA not after:            Wed 16 Apr 2025 21:11:49 +0000
asID:                     19905
IP address blocks:        200.73.128.0/18 maxlen: 24
                          200.127.144.0/20 maxlen: 24
                          200.127.160.0/21 maxlen: 24
                          181.94.4.0/23 maxlen: 24
                          201.235.124.0/22 maxlen: 24
                          181.166.246.0/23 maxlen: 24
                          181.166.248.0/23 maxlen: 24
                          200.45.190.0/23 maxlen: 24
                          200.32.2.0/23 maxlen: 24
                          200.32.4.0/22 maxlen: 24
                          200.32.8.0/22 maxlen: 24
                          200.32.12.0/23 maxlen: 24
                          200.32.18.0/23 maxlen: 24
                          200.32.30.0/23 maxlen: 24
                          181.166.240.0/22 maxlen: 24
                          181.105.160.0/19 maxlen: 24
                          200.45.0.0/22 maxlen: 24
                          200.45.4.0/23 maxlen: 24
                          181.11.32.0/20 maxlen: 24
                          200.45.48.0/23 maxlen: 24
                          200.45.64.0/23 maxlen: 24
                          190.225.246.0/23 maxlen: 24
                          181.30.160.0/19 maxlen: 24
                          200.3.94.0/23 maxlen: 24
                          190.226.40.0/23 maxlen: 24
                          200.43.32.0/23 maxlen: 24
                          201.212.0.0/20 maxlen: 24
                          200.43.192.0/23 maxlen: 24
                          181.30.0.0/18 maxlen: 24
                          181.30.64.0/19 maxlen: 24
                          181.30.96.0/20 maxlen: 24
                          181.30.112.0/21 maxlen: 24
                          181.30.120.0/22 maxlen: 24
                          181.30.124.0/23 maxlen: 24
                          200.89.128.0/21 maxlen: 24
                          181.15.110.0/23 maxlen: 24
                          200.42.98.0/23 maxlen: 24
                          200.42.100.0/23 maxlen: 24
                          200.89.138.0/23 maxlen: 24
                          200.89.140.0/22 maxlen: 24
                          200.42.106.0/23 maxlen: 24
                          200.42.110.0/23 maxlen: 24
                          200.89.146.0/23 maxlen: 24
                          200.89.148.0/22 maxlen: 24
                          200.89.152.0/21 maxlen: 24
                          200.42.116.0/22 maxlen: 24
                          200.42.126.0/23 maxlen: 24
                          200.42.130.0/23 maxlen: 24
                          200.42.132.0/22 maxlen: 24
                          200.42.136.0/22 maxlen: 24
                          200.42.30.0/23 maxlen: 24
                          200.42.48.0/23 maxlen: 24
                          200.42.56.0/21 maxlen: 24
                          200.42.68.0/22 maxlen: 24
                          200.42.72.0/21 maxlen: 24
                          200.42.80.0/20 maxlen: 24
                          190.224.160.0/22 maxlen: 24
                          200.49.140.0/22 maxlen: 24
                          200.49.150.0/23 maxlen: 24
                          200.49.154.0/23 maxlen: 24
                          200.49.156.0/22 maxlen: 24
                          200.89.174.0/23 maxlen: 24
                          200.89.176.0/21 maxlen: 24
                          200.42.142.0/23 maxlen: 24
                          200.42.144.0/22 maxlen: 24
                          200.42.150.0/23 maxlen: 24
                          200.89.188.0/23 maxlen: 24
                          200.42.154.0/23 maxlen: 24
                          200.61.204.0/22 maxlen: 24
                          200.61.208.0/20 maxlen: 24
                          200.82.80.0/22 maxlen: 24
                          200.42.0.0/23 maxlen: 24
                          200.42.8.0/21 maxlen: 24
                          200.42.16.0/23 maxlen: 24
                          200.42.22.0/23 maxlen: 24
                          190.136.28.0/23 maxlen: 24
                          181.14.72.0/21 maxlen: 24
                          181.14.80.0/20 maxlen: 24
                          181.14.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2506296 (0x263e38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 15 21:11:49 2023 GMT
            Not After : Apr 16 21:11:49 2025 GMT
        Subject: CN=ed2be7e5a2d36293640193ef4e6028a25b098a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a1:83:86:a7:90:ef:49:1f:98:41:8c:eb:87:
                    0e:06:38:40:e7:15:95:8c:5f:3a:1a:65:47:b4:4d:
                    b0:52:c0:f0:87:c8:61:a6:52:94:a5:d4:a1:0d:04:
                    ab:dd:9d:94:e5:55:0b:ed:aa:b3:ba:40:53:09:87:
                    24:d6:aa:25:57:e3:46:24:d2:54:17:68:70:d3:de:
                    a4:22:f2:69:c0:2c:1a:78:4a:bf:e0:3e:64:20:43:
                    e7:6d:ab:3e:ed:60:6d:2b:ad:7e:73:52:73:90:dc:
                    42:64:d6:3b:a3:e0:92:32:68:60:33:36:aa:c7:50:
                    90:8e:c4:39:7d:21:f5:0a:2b:56:06:e7:24:6d:f7:
                    e5:d1:09:d0:80:bc:a1:5a:a2:b4:1a:de:98:ab:d4:
                    83:02:81:7d:02:50:5f:eb:c4:59:db:a2:12:f9:66:
                    b2:aa:05:d2:c7:98:43:cb:01:db:98:68:51:b1:74:
                    34:d8:ee:ce:d1:e0:2a:a9:df:ed:74:98:76:28:8d:
                    f0:29:37:91:68:5d:e9:af:e4:9f:a0:ea:fc:61:f1:
                    80:4b:e7:95:29:45:51:73:42:f6:24:18:da:d3:61:
                    57:a2:1e:f7:d9:17:4b:a1:e9:1d:42:cd:eb:66:ef:
                    cf:4b:31:92:a0:40:68:eb:c0:d5:89:91:40:d2:02:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DF:9B:FD:E4:FE:4C:B9:50:42:3B:F2:FA:8A:9D:CF:A2:6E:9A:7F
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ed2be7e5a2d36293640193ef4e6028a25b098a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.11.32.0/20
                  181.14.72.0-181.14.111.255
                  181.15.110.0/23
                  181.30.0.0-181.30.125.255
                  181.30.160.0/19
                  181.94.4.0/23
                  181.105.160.0/19
                  181.166.240.0/22
                  181.166.246.0-181.166.249.255
                  190.136.28.0/23
                  190.224.160.0/22
                  190.225.246.0/23
                  190.226.40.0/23
                  200.3.94.0/23
                  200.32.2.0-200.32.13.255
                  200.32.18.0/23
                  200.32.30.0/23
                  200.42.0.0/23
                  200.42.8.0-200.42.17.255
                  200.42.22.0/23
                  200.42.30.0/23
                  200.42.48.0/23
                  200.42.56.0/21
                  200.42.68.0-200.42.95.255
                  200.42.98.0-200.42.101.255
                  200.42.106.0/23
                  200.42.110.0/23
                  200.42.116.0/22
                  200.42.126.0/23
                  200.42.130.0-200.42.139.255
                  200.42.142.0-200.42.147.255
                  200.42.150.0/23
                  200.42.154.0/23
                  200.43.32.0/23
                  200.43.192.0/23
                  200.45.0.0-200.45.5.255
                  200.45.48.0/23
                  200.45.64.0/23
                  200.45.190.0/23
                  200.49.140.0/22
                  200.49.150.0/23
                  200.49.154.0-200.49.159.255
                  200.61.204.0-200.61.223.255
                  200.73.128.0/18
                  200.82.80.0/22
                  200.89.128.0/21
                  200.89.138.0-200.89.143.255
                  200.89.146.0-200.89.159.255
                  200.89.174.0-200.89.183.255
                  200.89.188.0/23
                  200.127.144.0-200.127.167.255
                  201.212.0.0/20
                  201.235.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:45:56:8c:be:ea:66:fb:70:61:14:dc:14:2a:4d:9c:25:12:
         de:e6:86:89:89:1c:b3:cc:3d:70:bc:42:a9:f7:0f:e8:9e:c4:
         90:d0:f8:49:64:bf:1c:09:4b:09:85:4a:ab:80:d4:86:58:74:
         c6:c7:d3:ca:07:a3:84:52:12:86:a7:ae:ec:2b:7b:45:e9:47:
         6a:a2:d0:81:6f:9b:28:55:68:af:0b:e0:eb:65:7a:6e:ae:98:
         7c:19:69:ab:3d:2d:81:fa:f6:f6:ff:b1:a2:9f:32:eb:ae:0b:
         2f:f0:75:9b:7a:56:51:84:ae:11:b5:f7:e9:2a:52:15:2b:f0:
         36:a6:21:0f:55:e7:a5:a7:80:d4:f2:15:07:0b:dd:d3:f4:33:
         1b:a0:ab:b5:ac:9a:7a:61:a4:70:89:4f:1c:dd:6c:5d:a8:aa:
         b2:7d:27:97:26:02:17:4d:bd:5f:e6:fb:25:df:de:68:74:5c:
         a8:00:bd:da:18:fe:64:fb:97:17:17:1e:53:bd:57:2d:1a:5c:
         a9:3e:ee:53:28:b2:99:dc:fd:a6:0e:99:e0:11:35:b7:f9:df:
         3c:6b:5e:d5:0b:33:8e:5e:fa:ba:22:21:20:68:d9:eb:2f:51:
         a0:37:4b:df:34:ad:d2:0b:9c:fe:c9:35:37:6d:4b:21:ff:a9:
         00:ee:f3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org