Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/993718ab135eea0128def895e22600ece4465ea4.roa
File:                     993718ab135eea0128def895e22600ece4465ea4.roa (raw, json)
Hash identifier:          jQNzcDn7OCxlzvNSt3ZaHf4P9p+ZWSoWD+Oq9Td1ClU=
Subject key identifier:   72:CA:CC:86:6C:71:08:9F:4F:F5:E7:05:51:AA:D7:71:8C:5B:F1:BB
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       0F9273
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/993718ab135eea0128def895e22600ece4465ea4.roa
Signing time:             Wed 07 Jul 2021 18:10:57 +0000
ROA not before:           Mon 05 Jul 2021 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     6535
IP address blocks:        181.72.0.0/14 maxlen: 22
                          186.34.0.0/15 maxlen: 16
                          186.36.0.0/16 maxlen: 22
                          190.54.0.0/24 maxlen: 24
                          190.54.2.0/24 maxlen: 24
                          190.54.64.0/19 maxlen: 19
                          190.54.125.0/24 maxlen: 24
                          190.54.127.0/24 maxlen: 24
                          190.54.128.0/19 maxlen: 23
                          190.54.160.0/20 maxlen: 20
                          190.54.176.0/22 maxlen: 22
                          190.54.180.0/23 maxlen: 24
                          190.54.184.0/21 maxlen: 24
                          190.54.192.0/18 maxlen: 18
                          190.208.64.0/18 maxlen: 18
                          190.208.128.0/17 maxlen: 19
                          190.209.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1020531 (0xf9273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Jul  5 03:00:00 2021 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=993718ab135eea0128def895e22600ece4465ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:19:4f:bd:62:e2:38:5f:56:32:4a:dd:e1:
                    0f:01:20:b0:01:84:1c:82:18:fe:05:28:88:90:de:
                    71:46:66:e5:25:5e:cc:90:4b:d7:dc:d6:27:93:78:
                    00:37:66:4e:f0:31:72:12:30:8e:1c:7a:de:c8:d9:
                    cc:6e:cd:ac:b6:cb:80:2e:06:08:32:2e:3a:81:84:
                    33:6a:95:ac:05:49:04:12:74:3b:e1:4d:1c:38:65:
                    7c:ce:a5:39:ff:56:6e:40:47:16:17:16:18:a7:f9:
                    66:88:28:2d:48:dd:55:2c:a1:c2:11:12:b2:f8:9b:
                    45:ea:a6:5e:0d:52:5e:51:ec:80:57:7b:ee:d9:81:
                    c3:96:4e:1b:94:86:70:e4:f5:ca:b8:16:f7:96:68:
                    c4:31:c2:0b:b5:84:16:f3:0e:9a:c0:6e:e8:c4:24:
                    db:6c:a3:7a:a9:22:6b:ed:ad:a0:e6:a4:3a:18:92:
                    46:fd:f9:cc:25:73:6a:3b:66:8f:7d:8e:da:d1:c1:
                    95:14:a3:ff:e8:66:2e:c0:3f:16:74:b6:65:8c:2e:
                    be:a9:c3:0e:4a:da:26:94:79:52:54:63:22:f2:74:
                    96:29:6e:99:f1:88:10:09:78:03:40:7b:55:17:ac:
                    26:02:3d:29:9d:68:87:62:8f:a1:5b:8b:fb:76:10:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CA:CC:86:6C:71:08:9F:4F:F5:E7:05:51:AA:D7:71:8C:5B:F1:BB
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/993718ab135eea0128def895e22600ece4465ea4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.72.0.0/14
                  186.34.0.0-186.36.255.255
                  190.54.0.0/24
                  190.54.2.0/24
                  190.54.64.0/19
                  190.54.125.0/24
                  190.54.127.0-190.54.181.255
                  190.54.184.0-190.54.255.255
                  190.208.64.0-190.209.255.255

    Signature Algorithm: sha256WithRSAEncryption
         35:87:14:96:3d:1f:f6:c8:3c:8f:d7:94:67:ef:4a:f4:b5:b0:
         75:33:4c:dc:5c:e2:eb:57:c2:fe:85:61:c9:da:73:1d:14:77:
         b5:2d:5c:f3:11:e1:ab:47:c2:0a:4e:23:2d:72:c0:d1:69:10:
         af:96:69:cf:c2:31:df:7f:82:c4:88:63:71:71:f7:a4:ad:18:
         62:d9:db:70:f4:5a:df:8a:fd:1a:8d:4d:76:c9:d2:37:0a:6a:
         89:01:6e:0f:19:61:83:7a:6e:25:1b:bf:24:6e:8f:fb:74:83:
         13:3e:0c:65:82:ab:50:67:32:37:b6:3b:b2:88:ed:ba:08:98:
         89:8a:08:2e:78:40:90:a0:32:ea:16:0d:b8:fd:ab:10:d3:b0:
         c7:62:15:36:d1:7c:56:63:75:01:ab:2a:80:44:da:bd:a1:16:
         9a:a5:c3:d3:da:b1:95:d5:0f:7a:78:20:76:7b:ce:ad:64:27:
         5d:d7:fb:1b:29:ff:25:18:5b:1b:7d:df:8e:3c:5f:d2:10:1b:
         9a:0c:50:b4:8a:e3:49:7d:a7:90:32:4e:78:b8:5c:1a:55:d8:
         8d:29:06:d3:e9:8a:13:e5:99:85:74:e0:d6:b6:04:7e:c4:ce:
         66:56:a5:24:87:63:69:10:f5:98:f6:08:0c:a7:16:e4:88:9a:
         5e:b3:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org