Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/928ae900f84e3c8b32501bd6f03367a674f837da.roa
File:                     928ae900f84e3c8b32501bd6f03367a674f837da.roa (raw, json)
Hash identifier:          /HPSitmCXPsurZyx9MuN6AheG+NzJqiZDll73BU4Xb0=
Subject key identifier:   C0:EE:EB:7E:9B:4D:32:E1:BD:ED:31:EB:49:86:F0:19:F9:45:7A:F4
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       12816C
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/928ae900f84e3c8b32501bd6f03367a674f837da.roa
Signing time:             Wed 29 Nov 2023 21:25:52 +0000
ROA not before:           Wed 29 Nov 2023 21:25:51 +0000
ROA not after:            Sat 29 Nov 2025 21:25:51 +0000
asID:                     22927
IP address blocks:        186.128.0.0/14 maxlen: 24
                          186.132.0.0/14 maxlen: 24
                          201.255.0.0/17 maxlen: 24
                          201.255.128.0/17 maxlen: 24
                          190.172.0.0/15 maxlen: 24
                          190.174.0.0/15 maxlen: 24
                          190.176.0.0/15 maxlen: 24
                          190.178.0.0/15 maxlen: 24
                          190.48.0.0/16 maxlen: 24
                          190.49.0.0/16 maxlen: 24
                          190.50.0.0/16 maxlen: 24
                          190.51.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212780 (0x12816c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Nov 29 21:25:51 2023 GMT
            Not After : Nov 29 21:25:51 2025 GMT
        Subject: CN=928ae900f84e3c8b32501bd6f03367a674f837da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:3a:5b:5d:52:d8:15:1a:3c:49:d5:13:66:
                    72:25:54:41:56:e0:d6:68:70:1d:cd:a8:a2:a7:3d:
                    49:31:33:bb:84:bc:98:31:21:9f:93:36:77:60:fe:
                    76:3e:82:28:bd:3b:05:4a:0f:95:24:73:4c:3f:fd:
                    9c:16:51:3e:ef:16:4b:66:42:98:a2:00:28:dd:45:
                    6a:0b:5a:63:63:8a:a2:33:77:f4:49:9a:e1:17:4a:
                    c1:4d:ac:25:b7:d1:29:8d:71:40:7f:92:80:d8:b9:
                    95:f9:05:8d:81:ea:b4:bb:4c:d1:30:fb:c6:ec:fb:
                    02:c0:6c:eb:71:2f:53:16:c3:53:c0:59:fe:e7:f5:
                    6c:79:d0:ed:de:2c:45:e5:da:e1:b3:a2:8f:1a:92:
                    84:cb:99:38:5c:a9:5e:82:42:50:54:36:d6:f8:ab:
                    8b:ee:4f:24:ea:d6:8b:84:a2:ab:fa:e1:90:63:4e:
                    a2:33:34:a0:bc:2a:0e:31:59:03:0c:3b:d5:a1:5a:
                    08:f7:a6:87:45:d9:22:10:e6:68:78:d3:81:04:5f:
                    ba:52:ac:59:29:d0:4b:6d:dc:83:19:52:fb:f7:81:
                    1c:64:97:e9:7f:72:c5:b5:c6:27:3b:a6:c5:d3:55:
                    af:ca:6f:cf:c2:15:94:95:30:bb:71:10:ac:f6:19:
                    67:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EE:EB:7E:9B:4D:32:E1:BD:ED:31:EB:49:86:F0:19:F9:45:7A:F4
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/928ae900f84e3c8b32501bd6f03367a674f837da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.128.0.0/13
                  190.48.0.0/14
                  190.172.0.0-190.179.255.255
                  201.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8f:7f:54:1d:ea:27:b8:55:97:d0:35:5d:a9:2f:2c:11:de:09:
         13:81:b1:4f:63:53:48:19:ca:10:72:9b:da:57:c5:f4:52:c9:
         07:56:21:2c:92:25:a1:12:18:ac:f5:11:f2:50:89:f9:d8:a7:
         f3:32:03:75:f1:35:84:d3:c2:08:c4:c4:96:89:60:eb:da:60:
         3a:05:70:04:78:e8:2a:2a:3b:93:85:ae:ad:fe:cf:d2:f4:f3:
         a9:1a:46:6f:8f:ae:1a:6e:68:4a:b4:85:cf:87:08:91:16:31:
         05:2a:f2:95:6c:dc:94:c5:86:6a:2c:ef:02:12:ce:bf:fb:a4:
         e6:81:5f:88:97:95:2f:8d:25:13:b0:17:89:ae:99:a2:0f:80:
         90:8d:00:d5:4e:7e:ad:54:94:bd:19:e2:97:51:ad:a1:c8:fb:
         8c:f1:86:d4:a0:71:cf:87:e9:f0:cd:b2:d2:09:00:8e:19:87:
         42:ae:2d:65:33:fc:4f:25:b9:64:03:d1:48:08:eb:ad:2e:ce:
         20:ae:72:0f:eb:32:d2:a8:66:93:76:41:ab:6e:3f:ee:32:d9:
         63:ac:fa:7e:84:1f:c5:5a:bc:a5:af:85:a3:ca:2e:61:17:23:
         fa:03:a9:d6:d6:3a:51:32:7c:e9:16:22:3a:d7:2e:da:5e:77:
         b8:23:df:39
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDEoFsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmI0ZDNhNmRkNWU2NDlhNjU1NGM0ODE3Y2UwZWQyNzc0MjkxMzYwHhcNMjMxMTI5
MjEyNTUxWhcNMjUxMTI5MjEyNTUxWjAzMTEwLwYDVQQDEyg5MjhhZTkwMGY4NGUz
YzhiMzI1MDFiZDZmMDMzNjdhNjc0ZjgzN2RhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtVo6W11S2BUaPEnVE2ZyJVRBVuDWaHAdzaiipz1JMTO7hLyY
MSGfkzZ3YP52PoIovTsFSg+VJHNMP/2cFlE+7xZLZkKYogAo3UVqC1pjY4qiM3f0
SZrhF0rBTawlt9EpjXFAf5KA2LmV+QWNgeq0u0zRMPvG7PsCwGzrcS9TFsNTwFn+
5/VsedDt3ixF5drhs6KPGpKEy5k4XKlegkJQVDbW+KuL7k8k6taLhKKr+uGQY06i
MzSgvCoOMVkDDDvVoVoI96aHRdkiEOZoeNOBBF+6UqxZKdBLbdyDGVL794EcZJfp
f3LFtcYnO6bF01Wvym/PwhWUlTC7cRCs9hlnLwIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFMDu636bTTLhve0x60mG8Bn5RXr0MB8GA1UdIwQYMBaAFHZ/Qk1INAbEIOXf
Gb6+mT9yWve2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiYjRk
M2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEzNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM3NWJjZmMtOGI4Ni00NTJlLTg1MGQtODNjZmUz
YjUwZjA2LzkyOGFlOTAwZjg0ZTNjOGIzMjUwMWJkNmYwMzM2N2E2NzRmODM3ZGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81Mzc1YmNmYy04Yjg2LTQ1MmUtODUwZC04M2Nm
ZTNiNTBmMDYvYmZiYjRkM2E2ZGQ1ZTY0OWE2NTU0YzQ4MTdjZTBlZDI3NzQyOTEz
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwIQQCAAEwGwMDA7qAAwMCvjAwCgMDAr6sAwMCvrADAwDJ/zANBgkqhkiG9w0B
AQsFAAOCAQEAj39UHeonuFWX0DVdqS8sEd4JE4GxT2NTSBnKEHKb2lfF9FLJB1Yh
LJIloRIYrPUR8lCJ+din8zIDdfE1hNPCCMTElolg69pgOgVwBHjoKio7k4Wurf7P
0vTzqRpGb4+uGm5oSrSFz4cIkRYxBSrylWzclMWGaizvAhLOv/uk5oFfiJeVL40l
E7AXia6Zog+AkI0A1U5+rVSUvRnil1Gtocj7jPGG1KBxz4fp8M2y0gkAjhmHQq4t
ZTP8TyW5ZAPRSAjrrS7OIK5yD+sy0qhmk3ZBq24/7jLZY6z6foQfxVq8pa+Fo8ou
YRcj+gOp1tY6UTJ86RYiOtcu2l53uCPfOQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org