Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/77a9b4c321b0ae3c6341be93eaad36e2f1d84b5c.roa
File:                     77a9b4c321b0ae3c6341be93eaad36e2f1d84b5c.roa (raw, json)
Hash identifier:          VJLfJn+P+dqd3M/8Q4J2IJkHAI3Fktb0vmTCl3V7E9M=
Subject key identifier:   39:8D:EA:CA:31:BC:DD:2C:87:11:C1:13:9D:EB:FD:9C:96:D9:3D:FD
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0F2033
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/77a9b4c321b0ae3c6341be93eaad36e2f1d84b5c.roa
Signing time:             Mon 19 Apr 2021 17:38:57 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     61468
IP address blocks:        143.255.248.0/24 maxlen: 24
                          143.255.249.0/24 maxlen: 24
                          143.255.250.0/24 maxlen: 24
                          143.255.251.0/24 maxlen: 24
                          190.15.128.0/24 maxlen: 24
                          190.15.129.0/24 maxlen: 24
                          190.15.130.0/24 maxlen: 24
                          190.15.131.0/24 maxlen: 24
                          190.15.132.0/24 maxlen: 24
                          190.15.133.0/24 maxlen: 24
                          190.15.134.0/24 maxlen: 24
                          190.15.135.0/24 maxlen: 24
                          190.15.136.0/24 maxlen: 24
                          190.15.137.0/24 maxlen: 24
                          190.15.138.0/24 maxlen: 24
                          190.15.139.0/24 maxlen: 24
                          190.15.140.0/24 maxlen: 24
                          190.15.141.0/24 maxlen: 24
                          190.15.142.0/24 maxlen: 24
                          190.15.143.0/24 maxlen: 24
                          201.159.220.0/24 maxlen: 24
                          201.159.221.0/24 maxlen: 24
                          201.159.222.0/24 maxlen: 24
                          201.159.223.0/24 maxlen: 24
                          2800:68:10::/48 maxlen: 48
                          2800:68:13::/48 maxlen: 48
                          2800:68:14::/48 maxlen: 48
                          2800:68:19::/48 maxlen: 48
                          2800:68:1::/48 maxlen: 48
                          2800:68:1c::/48 maxlen: 48
                          2800:68:28::/48 maxlen: 48
                          2800:68:29::/48 maxlen: 48
                          2800:68:2::/48 maxlen: 48
                          2800:68:2b::/48 maxlen: 48
                          2800:68:2c::/48 maxlen: 48
                          2800:68:2d::/48 maxlen: 48
                          2800:68:2e::/48 maxlen: 48
                          2800:68:30::/48 maxlen: 48
                          2800:68:32::/48 maxlen: 48
                          2800:68:33::/48 maxlen: 48
                          2800:68:34::/48 maxlen: 48
                          2800:68:45::/48 maxlen: 48
                          2800:68:4::/48 maxlen: 48
                          2800:68:50::/48 maxlen: 48
                          2800:68:6000::/48 maxlen: 48
                          2800:68:6001::/48 maxlen: 48
                          2800:68:6::/48 maxlen: 48
                          2800:68:7::/48 maxlen: 48
                          2800:68:9::/48 maxlen: 48
                          2800:68::/32 maxlen: 48
                          2800:68::/48 maxlen: 48
                          2800:68:a::/48 maxlen: 48
                          2800:68:b::/48 maxlen: 48
                          2800:68:c0c0::/48 maxlen: 48
                          2800:68:c::/48 maxlen: 48
                          2800:68:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 991283 (0xf2033)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=77a9b4c321b0ae3c6341be93eaad36e2f1d84b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:90:56:d4:04:5a:04:48:bf:2c:96:da:ab:
                    74:c7:b1:20:34:a2:f7:9c:ff:b4:aa:e3:ae:c7:03:
                    c0:d5:fa:b4:c4:0c:24:7f:28:a7:dd:b3:8d:d9:c5:
                    11:6c:c1:93:89:ff:4b:96:c6:ff:1f:44:4a:ae:1e:
                    d9:21:e6:e0:68:bd:cd:d1:73:79:34:08:d1:21:e7:
                    23:2d:90:99:0e:a1:11:39:2b:79:01:a4:52:83:62:
                    7d:68:f3:0b:9e:1d:59:74:bf:ce:9a:66:4b:7e:28:
                    5c:0f:fc:17:44:99:ff:05:18:25:54:8c:23:5b:20:
                    77:89:10:cc:88:d1:b2:17:ff:5e:29:0d:3b:c6:95:
                    82:bf:9a:c7:4a:5c:66:7a:2a:54:d5:42:95:7e:90:
                    80:17:ee:e3:9f:43:ef:f4:5d:d1:2d:a3:9b:69:11:
                    a0:10:1b:19:3f:f1:69:c3:a1:85:1e:82:37:56:c3:
                    8b:20:08:e0:0a:04:6a:b6:6b:94:62:a6:1d:4d:60:
                    0f:fd:f7:c5:5c:55:d3:fc:cf:8b:ff:30:cf:0b:22:
                    5e:42:4d:bb:15:f8:b0:ec:5f:d6:49:fa:93:f7:ce:
                    d7:b0:41:8f:92:0c:d9:a2:80:ed:8d:f5:cc:3f:c3:
                    79:d2:9d:7f:27:1b:dd:4a:8c:c5:75:83:c0:63:66:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:EA:CA:31:BC:DD:2C:87:11:C1:13:9D:EB:FD:9C:96:D9:3D:FD
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/77a9b4c321b0ae3c6341be93eaad36e2f1d84b5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.248.0/22
                  190.15.128.0/20
                  201.159.220.0/22
                IPv6:
                  2800:68::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:5f:ea:12:c7:be:ce:70:09:68:8c:07:8a:eb:cd:95:54:54:
         85:18:20:a3:85:74:71:51:0e:92:7d:8b:d2:99:62:f9:e5:34:
         ce:97:e3:65:07:95:86:26:5a:a0:fd:d7:3f:72:9a:b8:64:b6:
         fc:8d:c8:1c:2c:d8:67:d1:64:d9:7a:81:ce:e5:d5:9e:ca:65:
         02:3b:59:9c:c6:08:9e:e4:12:85:50:56:36:72:eb:73:45:38:
         95:6b:c9:a8:3c:58:36:a4:b5:23:b8:42:3a:b9:c5:a9:3e:b7:
         60:0e:d0:e9:27:5a:4d:d3:8d:68:18:52:6d:13:1c:b5:b6:6d:
         be:84:81:0c:4c:5e:d7:f9:da:18:0a:01:78:72:8b:68:79:19:
         7f:ba:5a:b7:02:a2:5d:f5:10:41:7e:74:a9:0e:0b:7c:8f:68:
         bd:34:a1:61:d2:89:d3:b6:13:9f:c3:80:c4:e9:ce:41:60:74:
         ff:ff:4d:69:52:2b:08:7a:b9:24:61:f5:45:02:a1:34:c9:f7:
         c4:ce:30:95:d0:a5:c6:44:8a:91:b7:41:3a:1b:ae:c8:7e:1a:
         5d:71:52:ac:c2:58:89:f0:bc:4b:2f:fe:4b:93:a9:dc:60:23:
         73:44:4e:0f:b7:c9:2d:6e:13:02:2a:0f:3f:10:82:7e:ae:e5:
         32:62:3e:0b
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIDDyAzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
YWU2OWQyZjExMWM3OTQxNjVhMDFhODY1ZmUxODdiODgzMTIyN2QwHhcNMjEwMzI0
MDMwMDAwWhcNMjMwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg3N2E5YjRjMzIxYjBh
ZTNjNjM0MWJlOTNlYWFkMzZlMmYxZDg0YjVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArR+QVtQEWgRIvyyW2qt0x7EgNKL3nP+0quOuxwPA1fq0xAwk
fyin3bON2cURbMGTif9Llsb/H0RKrh7ZIebgaL3N0XN5NAjRIecjLZCZDqEROSt5
AaRSg2J9aPMLnh1ZdL/OmmZLfihcD/wXRJn/BRglVIwjWyB3iRDMiNGyF/9eKQ07
xpWCv5rHSlxmeipU1UKVfpCAF+7jn0Pv9F3RLaObaRGgEBsZP/Fpw6GFHoI3VsOL
IAjgCgRqtmuUYqYdTWAP/ffFXFXT/M+L/zDPCyJeQk27Ffiw7F/WSfqT987XsEGP
kgzZooDtjfXMP8N50p1/JxvdSozFdYPAY2bMnQIDAQABo4ICdjCCAnIwHQYDVR0O
BBYEFDmN6soxvN0shxHBE53r/ZyW2T39MB8GA1UdIwQYMBaAFIIUXtq2WB5z5L1U
YAk+zsl2C8SfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVhZTY5
ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGM3OTRiZDAtN2Q5NC00NDVmLTgyMzMtMTIwMGM5
YzZmMmVjLzc3YTliNGMzMjFiMGFlM2M2MzQxYmU5M2VhYWQzNmUyZjFkODRiNWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84Yzc5NGJkMC03ZDk0LTQ0NWYtODIzMy0xMjAw
YzljNmYyZWMvMDVhZTY5ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQr
MCkwGAQCAAEwEgMEAo//+AMEBL4PgAMEAsmf3DANBAIAAjAHAwUAKAAAaDANBgkq
hkiG9w0BAQsFAAOCAQEAVV/qEse+znAJaIwHiuvNlVRUhRggo4V0cVEOkn2L0pli
+eU0zpfjZQeVhiZaoP3XP3KauGS2/I3IHCzYZ9Fk2XqBzuXVnsplAjtZnMYInuQS
hVBWNnLrc0U4lWvJqDxYNqS1I7hCOrnFqT63YA7Q6SdaTdONaBhSbRMctbZtvoSB
DExe1/naGAoBeHKLaHkZf7patwKiXfUQQX50qQ4LfI9ovTShYdKJ07YTn8OAxOnO
QWB0//9NaVIrCHq5JGH1RQKhNMn3xM4wldClxkSKkbdBOhuuyH4aXXFSrMJYifC8
Sy/+S5Op3GAjc0ROD7fJLW4TAioPPxCCfq7lMmI+Cw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org