Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/76404b69b0de4728219e6a6ae98b2dfb13fb7d2b.roa
File:                     76404b69b0de4728219e6a6ae98b2dfb13fb7d2b.roa (raw, json)
Hash identifier:          cWtbZyTjg8hCHvVV7uVB52UTygGGCTDQp4BTbhQAAnE=
Subject key identifier:   A4:23:5F:A9:A4:A5:4D:0D:F8:4F:EE:AC:8A:44:DA:96:73:44:FB:F7
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       21B93F
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/76404b69b0de4728219e6a6ae98b2dfb13fb7d2b.roa
Signing time:             Tue 04 Jul 2023 08:30:20 +0000
ROA not before:           Mon 03 Jul 2023 08:30:20 +0000
ROA not after:            Wed 02 Jul 2025 08:30:20 +0000
asID:                     6535
IP address blocks:        181.72.0.0/14 maxlen: 22
                          186.34.0.0/15 maxlen: 16
                          186.36.0.0/16 maxlen: 22
                          190.54.0.0/24 maxlen: 24
                          190.54.2.0/24 maxlen: 24
                          190.54.64.0/19 maxlen: 19
                          190.54.125.0/24 maxlen: 24
                          190.54.127.0/24 maxlen: 24
                          190.54.128.0/19 maxlen: 23
                          190.54.160.0/20 maxlen: 20
                          190.54.180.0/23 maxlen: 24
                          190.54.184.0/21 maxlen: 24
                          190.54.192.0/18 maxlen: 18
                          190.208.64.0/18 maxlen: 18
                          190.208.128.0/17 maxlen: 19
                          190.209.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210111 (0x21b93f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Jul  3 08:30:20 2023 GMT
            Not After : Jul  2 08:30:20 2025 GMT
        Subject: CN=76404b69b0de4728219e6a6ae98b2dfb13fb7d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:50:4f:9f:f1:5b:73:24:6c:16:32:9b:bd:
                    4a:0d:28:99:5f:17:9c:c5:55:df:58:9a:34:5d:98:
                    8a:61:bf:b1:a5:47:2d:76:1f:b5:e2:2e:4a:2c:66:
                    cc:e8:7e:05:f8:e8:1a:75:a8:cd:5a:4c:36:66:0e:
                    a3:50:8f:33:6c:55:ab:8e:6b:cb:56:a8:f1:80:3a:
                    19:df:be:96:2c:96:32:f9:91:d7:e2:2a:5c:b8:ea:
                    0f:cf:8b:0b:ee:47:58:5c:5a:fe:df:1b:ba:91:22:
                    be:06:43:fa:87:9f:6a:f6:78:f1:fa:7e:14:71:cf:
                    14:3a:72:f1:b7:d9:13:82:42:cd:36:ff:bf:38:d3:
                    92:27:bf:23:10:83:5a:63:5a:87:98:04:cc:cc:ed:
                    32:b1:cc:6a:87:66:a9:01:e6:d6:e2:cc:f8:ee:f2:
                    05:59:9d:dd:1e:ec:a4:2b:b3:bc:b9:07:d8:8b:80:
                    1d:66:c9:58:a8:10:07:46:56:7c:d6:66:79:06:ba:
                    c5:2e:07:82:22:c1:eb:d0:b4:68:34:b7:99:2b:61:
                    8f:90:47:26:47:18:a0:ff:2b:14:44:9c:4a:53:a5:
                    16:ec:12:f7:34:66:ba:c9:b8:7f:f6:60:fa:8a:9b:
                    5a:59:1d:fa:f3:ff:86:f9:85:b0:52:de:40:7f:ce:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:23:5F:A9:A4:A5:4D:0D:F8:4F:EE:AC:8A:44:DA:96:73:44:FB:F7
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/76404b69b0de4728219e6a6ae98b2dfb13fb7d2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.72.0.0/14
                  186.34.0.0-186.36.255.255
                  190.54.0.0/24
                  190.54.2.0/24
                  190.54.64.0/19
                  190.54.125.0/24
                  190.54.127.0-190.54.175.255
                  190.54.180.0/23
                  190.54.184.0-190.54.255.255
                  190.208.64.0-190.209.255.255

    Signature Algorithm: sha256WithRSAEncryption
         37:29:8d:c6:df:23:c6:a4:4e:18:7e:ca:f6:be:8f:60:8c:11:
         14:3b:66:f0:c1:52:0b:72:2e:f1:90:d0:d9:ab:97:96:9c:e9:
         c9:4c:eb:0c:c9:62:e1:d5:97:f0:ee:05:0d:e9:80:de:6a:ba:
         44:4d:e7:ce:e5:1e:35:d6:02:2d:67:47:e8:2c:fe:5c:aa:32:
         70:90:5b:08:4c:0c:b0:77:52:09:1c:2b:dd:dd:22:d8:79:72:
         52:6c:7b:02:ac:fc:08:20:cc:cb:5d:8c:3c:85:47:e0:ff:80:
         dd:09:b1:ed:97:7c:02:5a:64:70:b5:c3:99:50:8d:36:b9:96:
         66:91:fd:9b:24:31:ec:f0:d6:8f:2f:f9:cc:5f:c4:d5:e4:70:
         81:a3:0d:4b:74:ec:bc:b2:9a:f2:7e:97:7c:b2:7f:c4:c6:7e:
         df:71:7b:71:6a:b1:61:a4:70:74:b8:d9:f2:bd:40:8f:76:27:
         4c:93:2c:ef:a3:04:e6:fc:ae:71:6a:a3:d1:9d:4e:dd:b2:0d:
         7c:1d:a3:42:d2:17:1f:41:4c:b3:19:91:bb:59:b1:da:3c:bf:
         ff:42:91:ad:d5:23:65:ad:11:1b:35:9d:a8:53:21:e8:cd:ea:
         02:84:e2:09:a8:96:ac:d1:fe:90:ff:b7:f0:ba:81:dc:2c:3c:
         9b:3f:65:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org