Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/caa1fc23e4b62f8c859a0c3c530124e7237b3f92.roa
File:                     caa1fc23e4b62f8c859a0c3c530124e7237b3f92.roa (raw, json)
Hash identifier:          sAVwPQsj6hNE03ofHdJ+047H679UpysypHrlFwbCI3Q=
Subject key identifier:   69:78:EF:D3:C5:0C:2F:EF:6C:C7:DD:1D:9C:2E:C6:67:E7:2B:A7:72
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       180B7C
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/caa1fc23e4b62f8c859a0c3c530124e7237b3f92.roa
Signing time:             Fri 24 Jun 2022 05:51:36 +0000
ROA not before:           Mon 05 Jul 2021 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     6535
IP address blocks:        181.72.0.0/14 maxlen: 22
                          186.34.0.0/15 maxlen: 16
                          186.36.0.0/16 maxlen: 22
                          190.54.0.0/24 maxlen: 24
                          190.54.2.0/24 maxlen: 24
                          190.54.64.0/19 maxlen: 19
                          190.54.125.0/24 maxlen: 24
                          190.54.127.0/24 maxlen: 24
                          190.54.128.0/19 maxlen: 23
                          190.54.160.0/20 maxlen: 20
                          190.54.180.0/23 maxlen: 24
                          190.54.184.0/21 maxlen: 24
                          190.54.192.0/18 maxlen: 18
                          190.208.64.0/18 maxlen: 18
                          190.208.128.0/17 maxlen: 19
                          190.209.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575804 (0x180b7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Jul  5 03:00:00 2021 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=caa1fc23e4b62f8c859a0c3c530124e7237b3f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fc:b6:95:2f:1b:7d:75:1d:4c:12:2d:f9:5d:
                    76:b6:57:a0:ce:4b:72:ce:a3:a1:d0:28:52:68:a4:
                    cc:6f:98:c4:cc:3d:f6:64:7a:a1:90:8b:76:8a:b5:
                    28:f4:79:98:78:2e:2f:f6:72:a3:8f:67:83:62:ec:
                    0c:0a:3e:f6:ea:1c:26:77:97:1e:b2:c5:89:af:26:
                    24:b3:3c:93:de:8e:96:b1:0f:74:96:04:d5:07:3f:
                    5e:46:c1:a6:18:9c:fd:2f:34:a8:c2:70:23:65:3d:
                    94:ec:19:69:cd:f0:8f:e3:c2:4d:8d:4b:b4:f2:38:
                    8b:14:6b:50:29:b7:e5:77:ab:22:ef:a0:45:c1:bc:
                    6d:0a:2a:f2:e8:78:8c:9f:06:e5:d2:e5:10:6e:77:
                    11:b9:d2:c2:51:54:00:15:52:e1:cf:16:5a:71:11:
                    ed:60:88:a6:b7:61:be:38:df:2b:6b:b0:fd:f6:17:
                    af:a6:cd:cc:68:e8:89:47:d8:75:e9:1f:ac:c4:fe:
                    e5:b0:8f:46:e8:d1:0d:b0:b3:d5:e4:b0:bf:08:ae:
                    34:4d:5f:92:6b:2d:98:f2:2f:e8:12:e8:09:f9:a9:
                    ab:1a:1b:ad:3a:58:14:8c:e7:6e:b4:c2:55:69:3c:
                    48:43:d2:5e:84:1b:d7:92:53:71:03:a3:92:5e:ea:
                    86:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:78:EF:D3:C5:0C:2F:EF:6C:C7:DD:1D:9C:2E:C6:67:E7:2B:A7:72
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/caa1fc23e4b62f8c859a0c3c530124e7237b3f92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.72.0.0/14
                  186.34.0.0-186.36.255.255
                  190.54.0.0/24
                  190.54.2.0/24
                  190.54.64.0/19
                  190.54.125.0/24
                  190.54.127.0-190.54.175.255
                  190.54.180.0/23
                  190.54.184.0-190.54.255.255
                  190.208.64.0-190.209.255.255

    Signature Algorithm: sha256WithRSAEncryption
         78:bb:f9:76:9b:5d:02:0e:19:d7:1d:36:40:f4:a6:7e:54:7f:
         c8:dc:43:a3:ca:36:ca:0b:36:09:b7:52:e4:54:bc:35:5f:86:
         ff:95:cd:e8:44:23:02:84:ed:8a:22:b2:db:11:00:b2:be:e2:
         18:9a:9b:e1:24:61:14:a9:1f:d9:3d:e3:61:c6:f9:fe:1a:22:
         2e:9c:b3:89:c8:83:7f:88:65:ce:6b:af:cc:f7:62:16:1e:65:
         e3:2e:1a:a7:31:0c:39:03:23:17:09:30:c0:06:23:df:73:f3:
         e5:40:e2:be:fa:12:f1:e2:9a:9b:81:13:7d:c6:c7:48:4e:59:
         17:4a:f7:6d:02:78:fd:6f:e1:5f:f2:16:62:90:60:19:1d:5c:
         6b:90:37:dd:ca:c8:ee:d1:27:b3:0b:52:7b:ff:c2:3d:80:8b:
         d5:c1:0c:10:f6:5d:dc:2d:60:fd:ce:ea:66:5e:f0:cd:89:ad:
         e5:b7:8a:e4:ae:e9:be:a6:87:31:c9:f2:b1:4d:8b:56:da:76:
         55:c0:8d:95:e5:e5:5a:27:1a:39:b7:2e:be:df:3b:7d:48:7b:
         9c:ca:e7:1f:91:bc:f4:a8:01:68:05:7c:74:73:fd:b3:84:3b:
         f3:c5:16:11:9a:33:3a:13:09:f2:5c:7c:1e:fc:b4:71:70:31:
         b3:6d:b9:75
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIDGAt8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFj
NzMwY2M0ZjExNDBlOWMzYTI0Mzc2OGQxMDUyYWUyYmYzNmQyNzkwHhcNMjEwNzA1
MDMwMDAwWhcNMjMwNzA1MDMwMDAwWjAzMTEwLwYDVQQDEyhjYWExZmMyM2U0YjYy
ZjhjODU5YTBjM2M1MzAxMjRlNzIzN2IzZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiPy2lS8bfXUdTBIt+V12tlegzktyzqOh0ChSaKTMb5jEzD32
ZHqhkIt2irUo9HmYeC4v9nKjj2eDYuwMCj726hwmd5cessWJryYkszyT3o6WsQ90
lgTVBz9eRsGmGJz9LzSownAjZT2U7BlpzfCP48JNjUu08jiLFGtQKbfld6si76BF
wbxtCiry6HiMnwbl0uUQbncRudLCUVQAFVLhzxZacRHtYIimt2G+ON8ra7D99hev
ps3MaOiJR9h16R+sxP7lsI9G6NENsLPV5LC/CK40TV+Say2Y8i/oEugJ+amrGhut
OlgUjOdutMJVaTxIQ9JehBvXklNxA6OSXuqGzwIDAQABo4ICrDCCAqgwHQYDVR0O
BBYEFGl479PFDC/vbMfdHZwuxmfnK6dyMB8GA1UdIwQYMBaAFD2jZzfaSs3l6WtL
qUcId2SKsyUZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWM3MzBj
YzRmMTE0MGU5YzNhMjQzNzY4ZDEwNTJhZTJiZjM2ZDI3OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTFjODFlZmYtYTZjZC00MzE5LWIzYzMtZGNhODNl
ODY2ZDI1L2NhYTFmYzIzZTRiNjJmOGM4NTlhMGMzYzUzMDEyNGU3MjM3YjNmOTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MWM4MWVmZi1hNmNkLTQzMTktYjNjMy1kY2E4
M2U4NjZkMjUvMWM3MzBjYzRmMTE0MGU5YzNhMjQzNzY4ZDEwNTJhZTJiZjM2ZDI3
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBwBggrBgEFBQcBBwEB/wRh
MF8wXQQCAAEwVwMDArVIMAoDAwG6IgMDALokAwQAvjYAAwQAvjYCAwQFvjZAAwQA
vjZ9MAwDBAC+Nn8DBAS+NqADBAG+NrQwCwMEA742uAMDAL42MAsDBAa+0EADAwG+
0DANBgkqhkiG9w0BAQsFAAOCAQEAeLv5dptdAg4Z1x02QPSmflR/yNxDo8o2ygs2
CbdS5FS8NV+G/5XN6EQjAoTtiiKy2xEAsr7iGJqb4SRhFKkf2T3jYcb5/hoiLpyz
iciDf4hlzmuvzPdiFh5l4y4apzEMOQMjFwkwwAYj33Pz5UDivvoS8eKam4ETfcbH
SE5ZF0r3bQJ4/W/hX/IWYpBgGR1ca5A33crI7tEnswtSe//CPYCL1cEMEPZd3C1g
/c7qZl7wzYmt5beK5K7pvqaHMcnysU2LVtp2VcCNleXlWicaObcuvt87fUh7nMrn
H5G89KgBaAV8dHP9s4Q788UWEZozOhMJ8lx8Hvy0cXAxs225dQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org