Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/11005554b32e187a482b4f325c71235619543147.roa
File:                     11005554b32e187a482b4f325c71235619543147.roa (raw, json)
Hash identifier:          z01Zwsb3YI7YCsAg02Huh8eNydoIYyrz2BTMBNUG1Uc=
Subject key identifier:   05:8D:8D:A4:8C:5F:8F:B9:CB:61:3A:A7:33:4F:7E:B1:52:D0:E6:C1
Certificate issuer:       /CN=63046ffca1186784d420944b2f52a6525f2a9b8d
Certificate serial:       0EC106
Authority key identifier: 8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/11005554b32e187a482b4f325c71235619543147.roa
Signing time:             Fri 07 May 2021 22:18:22 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     22541
IP address blocks:        190.14.100.0/24 maxlen: 24
                          190.14.101.0/24 maxlen: 24
                          190.14.102.0/24 maxlen: 24
                          190.14.103.0/24 maxlen: 24
                          190.14.104.0/24 maxlen: 24
                          190.14.105.0/24 maxlen: 24
                          190.14.106.0/24 maxlen: 24
                          190.14.107.0/24 maxlen: 24
                          190.14.108.0/24 maxlen: 24
                          190.14.109.0/24 maxlen: 24
                          190.14.110.0/24 maxlen: 24
                          190.14.111.0/24 maxlen: 24
                          190.14.112.0/24 maxlen: 24
                          190.14.113.0/24 maxlen: 24
                          190.14.114.0/24 maxlen: 24
                          190.14.115.0/24 maxlen: 24
                          190.14.116.0/24 maxlen: 24
                          190.14.117.0/24 maxlen: 24
                          190.14.118.0/24 maxlen: 24
                          190.14.119.0/24 maxlen: 24
                          190.14.120.0/24 maxlen: 24
                          190.14.121.0/24 maxlen: 24
                          190.14.122.0/24 maxlen: 24
                          190.14.123.0/24 maxlen: 24
                          190.14.124.0/24 maxlen: 24
                          190.14.125.0/24 maxlen: 24
                          190.14.126.0/24 maxlen: 24
                          190.14.127.0/24 maxlen: 24
                          190.14.64.0/18 maxlen: 18
                          190.14.64.0/18 maxlen: 24
                          190.14.64.0/24 maxlen: 24
                          190.14.65.0/24 maxlen: 24
                          190.14.66.0/24 maxlen: 24
                          190.14.67.0/24 maxlen: 24
                          190.14.68.0/24 maxlen: 24
                          190.14.69.0/24 maxlen: 24
                          190.14.70.0/24 maxlen: 24
                          190.14.71.0/24 maxlen: 24
                          190.14.72.0/24 maxlen: 24
                          190.14.73.0/24 maxlen: 24
                          190.14.74.0/24 maxlen: 24
                          190.14.75.0/24 maxlen: 24
                          190.14.76.0/24 maxlen: 24
                          190.14.77.0/24 maxlen: 24
                          190.14.78.0/24 maxlen: 24
                          190.14.79.0/24 maxlen: 24
                          190.14.80.0/24 maxlen: 24
                          190.14.81.0/24 maxlen: 24
                          190.14.82.0/24 maxlen: 24
                          190.14.83.0/24 maxlen: 24
                          190.14.84.0/24 maxlen: 24
                          190.14.85.0/24 maxlen: 24
                          190.14.86.0/24 maxlen: 24
                          190.14.87.0/24 maxlen: 24
                          190.14.88.0/24 maxlen: 24
                          190.14.89.0/24 maxlen: 24
                          190.14.90.0/24 maxlen: 24
                          190.14.91.0/24 maxlen: 24
                          190.14.92.0/24 maxlen: 24
                          190.14.93.0/24 maxlen: 24
                          190.14.94.0/24 maxlen: 24
                          190.14.95.0/24 maxlen: 24
                          190.14.96.0/24 maxlen: 24
                          190.14.97.0/24 maxlen: 24
                          190.14.98.0/24 maxlen: 24
                          190.14.99.0/24 maxlen: 24
                          200.75.160.0/20 maxlen: 20
                          200.75.160.0/20 maxlen: 24
                          200.75.160.0/24 maxlen: 24
                          200.75.161.0/24 maxlen: 24
                          200.75.162.0/24 maxlen: 24
                          200.75.163.0/24 maxlen: 24
                          200.75.164.0/24 maxlen: 24
                          200.75.165.0/24 maxlen: 24
                          200.75.166.0/24 maxlen: 24
                          200.75.167.0/24 maxlen: 24
                          200.75.168.0/24 maxlen: 24
                          200.75.169.0/24 maxlen: 24
                          200.75.170.0/24 maxlen: 24
                          200.75.171.0/24 maxlen: 24
                          200.75.172.0/24 maxlen: 24
                          200.75.173.0/24 maxlen: 24
                          200.75.174.0/24 maxlen: 24
                          200.75.175.0/24 maxlen: 24
                          2803:7680::/36 maxlen: 36
                          2803:7680:1000::/36 maxlen: 36
                          2803:7680:2000::/36 maxlen: 36
                          2803:7680:3000::/36 maxlen: 36
                          2803:7680:4000::/36 maxlen: 36
                          2803:7680:5000::/36 maxlen: 36
                          2803:7680:6000::/36 maxlen: 36
                          2803:7680:7000::/36 maxlen: 36
                          2803:7680:8000::/36 maxlen: 36
                          2803:7680:9000::/36 maxlen: 36
                          2803:7680:a000::/36 maxlen: 36
                          2803:7680:b000::/36 maxlen: 36
                          2803:7680:c000::/36 maxlen: 36
                          2803:7680:d000::/36 maxlen: 36
                          2803:7680:e000::/36 maxlen: 36
                          2803:7680:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966918 (0xec106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63046ffca1186784d420944b2f52a6525f2a9b8d
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=11005554b32e187a482b4f325c71235619543147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:48:db:be:af:50:98:8c:02:b6:19:28:a5:
                    78:d3:73:aa:06:5d:44:a9:b3:1f:53:74:ff:b0:68:
                    97:0c:b2:e9:a8:25:24:44:4e:37:3e:8c:83:b5:ac:
                    63:08:0c:d1:27:69:e8:e6:9d:a0:13:ba:8d:c0:59:
                    c1:e4:f6:12:aa:4d:21:27:51:2c:73:48:ff:82:49:
                    4e:c4:c7:d6:24:17:e5:49:50:88:cb:10:7e:e3:50:
                    87:29:af:50:10:3a:28:31:4a:da:60:11:bd:3b:eb:
                    f0:f8:03:ee:8e:2c:3e:35:e5:52:fa:3b:93:9c:a2:
                    44:3b:4a:df:be:84:be:f8:5e:90:ac:bf:ec:e2:f9:
                    9b:9b:c3:86:db:1d:ed:96:ba:f6:95:2f:9b:bc:e9:
                    e2:12:86:ae:a9:50:ca:b7:e3:d5:b2:00:c6:5a:d5:
                    83:63:66:56:5f:13:0d:98:a4:f6:dd:e9:4b:21:c2:
                    db:b0:34:ea:ad:15:20:15:20:48:10:26:c8:f1:0d:
                    ee:a7:63:cd:ca:39:a8:56:60:2f:3b:d9:ff:11:00:
                    49:ab:8b:33:05:1d:3a:1b:63:25:39:d9:d6:b4:d5:
                    d1:d3:66:6c:de:77:3b:4a:2a:13:56:e5:18:bc:f9:
                    b5:30:1e:fc:db:3d:ec:86:66:66:34:84:66:ce:c4:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8D:8D:A4:8C:5F:8F:B9:CB:61:3A:A7:33:4F:7E:B1:52:D0:E6:C1
            X509v3 Authority Key Identifier:
                keyid:8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/11005554b32e187a482b4f325c71235619543147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/63046ffca1186784d420944b2f52a6525f2a9b8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.64.0/18
                  200.75.160.0/20
                IPv6:
                  2803:7680::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:27:a2:4f:80:03:b5:6b:5a:c8:cd:61:34:1a:1d:80:b3:c0:
         d0:47:ff:60:79:33:7c:cc:0b:98:98:69:78:3b:ed:ee:39:54:
         93:59:b2:7e:a5:b2:e6:38:86:4a:91:06:34:d9:00:37:32:3b:
         16:3e:f9:e1:17:0a:13:77:b8:50:eb:b8:90:ba:c6:f1:a4:71:
         1a:13:7b:04:db:00:59:f6:09:1c:f4:7e:fa:b0:d0:57:d6:05:
         5a:09:69:09:7a:76:4e:d4:c5:b8:08:c1:ce:d5:07:d9:6e:bb:
         66:90:60:5b:78:13:8f:5f:2d:b0:65:46:0b:b3:92:10:de:96:
         d1:4e:aa:da:f6:a7:60:52:e9:65:47:c4:0b:de:72:af:1d:71:
         b2:95:6e:aa:bf:80:0c:bf:15:f7:e2:2f:c4:21:c5:b1:a8:0b:
         a4:21:38:0c:b0:93:05:7a:a8:0c:03:39:60:91:b7:68:59:7f:
         d3:de:68:7d:50:22:a9:0d:e7:10:17:3a:08:e3:26:52:c6:9c:
         cd:c5:06:cc:23:25:40:4e:e1:0e:63:13:2a:c5:22:f2:59:ba:
         76:88:23:84:a3:1e:a5:bf:8a:d5:7a:3a:32:6b:ed:32:16:b6:
         5d:13:ee:33:6c:53:00:c9:aa:ea:e5:87:db:3a:04:3a:48:fd:
         65:b6:73:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org