Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64844d90-94b6-4a99-b137-571d9274b34a/7d46ed0c0808ce73a8c65763c6ea0d24b1dfc460.roa
File:                     7d46ed0c0808ce73a8c65763c6ea0d24b1dfc460.roa (raw, json)
Hash identifier:          EbBIryFLED5VGmYecJagpxNlwq+PX8KeBxOoFP6QqkI=
Subject key identifier:   C9:7A:7D:8D:46:11:26:89:4B:72:8F:07:53:8C:DE:64:83:54:78:50
Certificate issuer:       /CN=6463717ff42254b521639df4821621e39e0a27af
Certificate serial:       1C6124
Authority key identifier: B5:EA:F2:8A:9B:67:30:A1:77:8F:B4:4D:15:0D:C5:03:73:E4:9E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6463717ff42254b521639df4821621e39e0a27af.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64844d90-94b6-4a99-b137-571d9274b34a/7d46ed0c0808ce73a8c65763c6ea0d24b1dfc460.roa
Signing time:             Mon 19 Jun 2023 18:43:01 +0000
ROA not before:           Sun 18 Jun 2023 18:43:01 +0000
ROA not after:            Thu 19 Jun 2025 18:43:01 +0000
asID:                     11816
IP address blocks:        181.41.20.0/23 maxlen: 23
                          181.41.2.0/23 maxlen: 23
                          181.41.22.0/23 maxlen: 23
                          181.41.24.0/23 maxlen: 23
                          181.41.26.0/23 maxlen: 23
                          181.41.28.0/23 maxlen: 23
                          181.41.30.0/23 maxlen: 23
                          181.41.32.0/23 maxlen: 23
                          181.41.34.0/23 maxlen: 23
                          181.41.36.0/22 maxlen: 22
                          181.41.40.0/22 maxlen: 22
                          181.41.4.0/23 maxlen: 23
                          181.41.44.0/23 maxlen: 23
                          181.41.46.0/23 maxlen: 23
                          181.41.50.0/23 maxlen: 23
                          181.41.52.0/23 maxlen: 23
                          181.41.54.0/23 maxlen: 23
                          181.41.56.0/23 maxlen: 23
                          181.41.60.0/23 maxlen: 23
                          181.41.6.0/23 maxlen: 23
                          181.41.62.0/23 maxlen: 23
                          186.189.0.0/23 maxlen: 23
                          186.189.12.0/23 maxlen: 23
                          186.189.14.0/23 maxlen: 23
                          186.189.16.0/23 maxlen: 23
                          186.189.18.0/23 maxlen: 23
                          186.189.2.0/23 maxlen: 23
                          186.189.22.0/23 maxlen: 23
                          186.189.26.0/23 maxlen: 23
                          186.189.32.0/23 maxlen: 23
                          186.189.34.0/23 maxlen: 23
                          186.189.36.0/23 maxlen: 23
                          186.189.38.0/23 maxlen: 23
                          186.189.4.0/23 maxlen: 23
                          186.189.42.0/23 maxlen: 23
                          186.189.44.0/23 maxlen: 23
                          186.189.58.0/23 maxlen: 23
                          186.189.60.0/23 maxlen: 23
                          186.189.6.0/23 maxlen: 23
                          186.189.62.0/23 maxlen: 23
                          186.189.8.0/23 maxlen: 23
                          186.189.128.0/23 maxlen: 23
                          186.189.130.0/23 maxlen: 23
                          186.189.132.0/23 maxlen: 23
                          186.189.134.0/23 maxlen: 23
                          186.189.136.0/23 maxlen: 23
                          186.189.138.0/23 maxlen: 23
                          186.189.140.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1859876 (0x1c6124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6463717ff42254b521639df4821621e39e0a27af
        Validity
            Not Before: Jun 18 18:43:01 2023 GMT
            Not After : Jun 19 18:43:01 2025 GMT
        Subject: CN=7d46ed0c0808ce73a8c65763c6ea0d24b1dfc460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:dd:1d:dc:5d:7c:84:e6:43:43:b7:2e:7a:
                    5e:86:7f:5b:7d:b4:78:51:db:06:64:1e:5a:cc:0c:
                    b4:dc:a6:b4:13:7e:36:26:59:12:2a:87:87:59:52:
                    b3:08:18:aa:ef:6c:7e:5c:2f:a0:0f:96:f6:dc:4d:
                    0e:0c:6a:1d:90:a3:44:4d:7a:54:fb:d4:77:dd:e1:
                    8c:cd:af:72:73:f8:c1:f7:f9:fc:40:87:66:6c:d7:
                    2d:b7:f3:58:d8:97:eb:0a:fc:4a:cc:eb:a7:47:db:
                    89:53:3c:d5:a6:34:40:19:c3:6d:79:23:df:fc:ee:
                    09:72:70:72:49:9d:52:13:a9:9c:1c:50:c4:a3:9a:
                    87:55:3d:61:37:93:e5:9e:a2:6d:2d:a2:48:2f:71:
                    44:11:44:11:a9:c7:22:c8:e5:86:6a:95:50:a2:85:
                    a0:6a:61:ab:a8:7e:f1:ec:92:d5:21:4b:34:dc:a3:
                    41:39:4b:76:eb:bb:2e:15:f0:c7:e9:ba:ef:ee:88:
                    2f:46:56:0b:e8:e8:41:a6:6d:28:86:5a:b4:81:39:
                    30:8e:5b:da:26:a6:35:b3:87:7e:8e:1d:a0:36:ce:
                    d3:7a:63:b2:ed:b0:da:37:92:7d:95:32:16:e7:82:
                    5c:c8:d8:13:94:d4:84:89:17:83:81:87:d1:1d:c7:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7A:7D:8D:46:11:26:89:4B:72:8F:07:53:8C:DE:64:83:54:78:50
            X509v3 Authority Key Identifier:
                keyid:B5:EA:F2:8A:9B:67:30:A1:77:8F:B4:4D:15:0D:C5:03:73:E4:9E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6463717ff42254b521639df4821621e39e0a27af.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64844d90-94b6-4a99-b137-571d9274b34a/7d46ed0c0808ce73a8c65763c6ea0d24b1dfc460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64844d90-94b6-4a99-b137-571d9274b34a/6463717ff42254b521639df4821621e39e0a27af.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.2.0-181.41.7.255
                  181.41.20.0-181.41.47.255
                  181.41.50.0-181.41.57.255
                  181.41.60.0/22
                  186.189.0.0-186.189.9.255
                  186.189.12.0-186.189.19.255
                  186.189.22.0/23
                  186.189.26.0/23
                  186.189.32.0/21
                  186.189.42.0-186.189.45.255
                  186.189.58.0-186.189.63.255
                  186.189.128.0-186.189.141.255

    Signature Algorithm: sha256WithRSAEncryption
         60:da:d8:73:8a:43:dc:05:47:ab:7e:1b:8c:84:01:a7:81:d8:
         38:b3:d3:61:5b:ae:b0:3e:4d:9f:5b:88:f7:76:a9:e6:f6:e6:
         ab:22:bc:c8:2d:ef:ab:d5:05:6b:70:a9:af:5c:a1:63:42:a6:
         2d:54:1a:3c:6a:67:10:cf:34:66:75:ab:46:44:94:10:33:12:
         4f:02:6a:7b:15:9e:e7:c0:88:8b:bd:8a:b6:fe:a3:74:88:8e:
         54:41:21:80:40:73:9b:64:4b:22:0c:b0:e7:9e:fa:a3:d2:00:
         00:4d:38:60:43:22:11:2f:3b:cd:30:41:c7:eb:b5:fe:e8:c9:
         0e:84:fc:57:a8:ed:90:3e:79:bd:c1:25:0b:6d:65:1f:7c:7f:
         fe:2e:7f:79:70:56:15:40:d1:f2:cb:95:c5:7f:e9:63:b8:a6:
         c0:0f:96:bc:ab:0e:a0:78:0b:55:8e:51:81:15:b7:b5:78:1c:
         ac:fd:c8:5b:58:2b:e1:af:97:a7:57:9c:5b:e1:b7:f4:14:0c:
         70:f4:da:fa:ae:60:c5:a6:02:a5:cd:74:8e:82:25:53:fa:73:
         52:7c:2d:4f:b4:ae:01:78:3a:15:94:fc:a5:18:08:ad:a1:5e:
         4d:c4:6d:5a:cd:f7:bf:0f:21:46:b3:94:61:a6:25:70:47:58:
         86:f4:64:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org