Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/aeed2be8cabdb74fa70a08fb4a3c701251f20d58.roa
File:                     aeed2be8cabdb74fa70a08fb4a3c701251f20d58.roa (raw, json)
Hash identifier:          YdATDEx7n42u/lF8Ydl7P5ahIFnnct841+4Vltarh8Q=
Subject key identifier:   E1:86:08:F3:BF:E6:5F:54:A7:9E:AF:7B:9C:7B:D1:99:E6:41:F1:92
Certificate issuer:       /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial:       107AEC
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/aeed2be8cabdb74fa70a08fb4a3c701251f20d58.roa
Signing time:             Thu 01 Jul 2021 06:07:50 +0000
ROA not before:           Thu 01 Jul 2021 03:00:00 +0000
ROA not after:            Wed 01 Jul 2026 03:00:00 +0000
asID:                     14754
IP address blocks:        181.209.128.0/17 maxlen: 24
                          186.151.0.0/18 maxlen: 24
                          186.151.64.0/20 maxlen: 24
                          186.151.80.0/21 maxlen: 24
                          186.151.88.0/22 maxlen: 24
                          186.151.92.0/23 maxlen: 24
                          186.151.95.0/24 maxlen: 24
                          186.151.96.0/19 maxlen: 24
                          186.151.128.0/17 maxlen: 24
                          190.56.0.0/17 maxlen: 24
                          190.56.128.0/17 maxlen: 24
                          190.143.128.0/18 maxlen: 24
                          190.143.192.0/19 maxlen: 24
                          190.143.224.0/20 maxlen: 24
                          190.148.0.0/18 maxlen: 24
                          190.148.64.0/20 maxlen: 24
                          190.148.80.0/22 maxlen: 24
                          190.148.84.0/24 maxlen: 24
                          190.148.86.0/23 maxlen: 24
                          190.148.88.0/21 maxlen: 24
                          190.148.96.0/19 maxlen: 24
                          190.148.128.0/17 maxlen: 24
                          190.149.0.0/17 maxlen: 24
                          190.149.128.0/22 maxlen: 24
                          190.149.132.0/23 maxlen: 24
                          190.149.135.0/24 maxlen: 24
                          190.149.136.0/21 maxlen: 24
                          190.149.144.0/21 maxlen: 24
                          190.149.153.0/24 maxlen: 24
                          190.149.154.0/23 maxlen: 24
                          190.149.156.0/22 maxlen: 24
                          190.149.160.0/19 maxlen: 24
                          190.149.192.0/18 maxlen: 24
                          200.6.192.0/19 maxlen: 24
                          200.6.224.0/19 maxlen: 24
                          200.119.128.0/20 maxlen: 24
                          200.119.144.0/22 maxlen: 24
                          200.119.148.0/23 maxlen: 24
                          200.119.150.0/24 maxlen: 24
                          200.119.154.0/23 maxlen: 24
                          200.119.156.0/22 maxlen: 24
                          200.119.160.0/20 maxlen: 24
                          200.119.176.0/21 maxlen: 24
                          201.216.128.0/19 maxlen: 24
                          201.216.160.0/19 maxlen: 24
                          216.230.128.0/19 maxlen: 24
                          2800:98::/32 maxlen: 48
                          2800:890::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080044 (0x107aec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
        Validity
            Not Before: Jul  1 03:00:00 2021 GMT
            Not After : Jul  1 03:00:00 2026 GMT
        Subject: CN=aeed2be8cabdb74fa70a08fb4a3c701251f20d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:88:a9:22:d0:de:5d:5e:db:0f:d6:42:30:f1:
                    72:82:2b:d8:55:5e:05:fb:53:f9:1f:fa:2b:c1:bb:
                    65:ad:35:3a:c1:8c:81:57:65:5f:5b:ba:d4:5f:a6:
                    7d:68:eb:8e:a1:5c:b7:ad:33:c1:ee:31:a5:9d:dc:
                    d5:69:a5:d8:19:20:d9:73:8d:13:72:06:1d:68:da:
                    df:0a:86:29:e2:70:0a:f7:4a:06:bf:0c:f8:0d:ca:
                    93:5e:60:5c:57:1d:03:5d:b4:e2:80:5c:d2:28:7f:
                    0c:05:07:b4:30:14:5b:54:63:2d:3e:e1:ee:4e:3b:
                    93:48:b8:fc:95:0f:90:a1:c4:eb:b4:f4:38:85:71:
                    b0:0a:b8:bd:e0:86:d7:55:fe:93:b6:d6:f1:73:a0:
                    d5:f1:5a:8c:a9:c0:5b:81:ae:e1:51:c5:14:6f:16:
                    56:71:47:a7:7f:d2:78:65:13:18:73:fe:67:69:4e:
                    6c:6c:d0:5d:0f:14:0f:ca:ca:b4:b6:e5:0c:fb:8e:
                    7e:1c:d4:13:a5:59:a2:1d:2b:e2:3c:0a:b8:dc:66:
                    3a:eb:4d:66:65:0c:be:ba:7d:75:9b:22:f2:d9:d2:
                    d2:62:06:67:3d:7f:be:ce:ca:ce:39:67:3e:bb:b9:
                    e2:b7:ce:a8:dd:fd:8f:b3:5f:db:46:86:af:f6:c4:
                    cd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:86:08:F3:BF:E6:5F:54:A7:9E:AF:7B:9C:7B:D1:99:E6:41:F1:92
            X509v3 Authority Key Identifier:
                keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/aeed2be8cabdb74fa70a08fb4a3c701251f20d58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.128.0/17
                  186.151.0.0-186.151.93.255
                  186.151.95.0-186.151.255.255
                  190.56.0.0/16
                  190.143.128.0-190.143.239.255
                  190.148.0.0-190.148.84.255
                  190.148.86.0-190.149.133.255
                  190.149.135.0-190.149.151.255
                  190.149.153.0-190.149.255.255
                  200.6.192.0/18
                  200.119.128.0-200.119.150.255
                  200.119.154.0-200.119.183.255
                  201.216.128.0/18
                  216.230.128.0/19
                IPv6:
                  2800:98::/32
                  2800:890::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:62:28:9f:34:89:11:1c:14:11:9f:17:05:8a:2c:66:da:81:
         86:ec:52:58:43:63:24:95:47:44:c5:c9:f0:ac:c0:d3:03:2c:
         76:38:51:8c:30:23:39:76:49:9f:b5:07:b3:5d:ca:15:77:12:
         53:bd:5d:fd:16:88:9e:ba:1c:00:40:3d:3c:ce:24:4e:40:5f:
         57:9a:8e:57:da:a7:8d:56:41:41:72:09:b0:eb:e0:56:6e:dd:
         3e:9c:75:4f:b9:bd:7c:de:9b:ef:57:c8:8c:9b:4e:9c:62:77:
         a9:2c:cf:d7:ee:a0:96:90:5a:8c:81:00:f1:1e:10:b3:87:28:
         23:af:ef:d3:bc:e1:62:1a:61:14:45:4d:07:aa:84:8f:fa:de:
         68:80:d4:0d:c9:1d:66:db:4b:f4:ce:c5:0d:d0:b9:31:d1:f8:
         8a:0f:39:3e:59:f4:b1:63:f0:f2:9e:9a:13:82:d0:19:e9:2c:
         7d:b2:d8:57:e0:51:c7:93:21:3f:d3:7b:08:c7:f6:90:cf:f2:
         e6:0b:cf:b6:7f:70:05:98:69:42:de:92:49:04:7a:ea:d0:00:
         89:f7:90:b9:8a:f0:01:71:88:2b:06:d4:94:43:e7:e2:e0:91:
         1b:05:a2:72:82:13:47:7f:19:ef:a0:06:85:18:df:af:db:33:
         d5:98:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org