Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/06f3316227b720d23f228dd3f7f7cdba3d2b5905.roa
File:                     06f3316227b720d23f228dd3f7f7cdba3d2b5905.roa (raw, json)
Hash identifier:          AcxWof/5HPKLuGFqt+DBhjWJTxcVz1Y2NwCc2imBz7U=
Subject key identifier:   A1:28:6B:EA:A9:D9:52:E5:F8:AA:E9:BA:57:6E:3B:FF:D4:52:40:C6
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       16B039
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/06f3316227b720d23f228dd3f7f7cdba3d2b5905.roa
Signing time:             Fri 04 Feb 2022 14:52:40 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27757
IP address blocks:        186.46.140.0/24 maxlen: 24
                          186.46.141.0/24 maxlen: 24
                          190.152.254.0/24 maxlen: 24
                          190.152.255.0/24 maxlen: 24
                          190.152.110.0/24 maxlen: 24
                          181.112.204.0/22 maxlen: 24
                          181.113.97.0/24 maxlen: 24
                          181.113.157.0/24 maxlen: 24
                          181.196.11.0/24 maxlen: 24
                          181.196.13.0/24 maxlen: 24
                          181.196.14.0/24 maxlen: 24
                          181.196.66.0/24 maxlen: 24
                          181.211.104.0/24 maxlen: 24
                          181.211.105.0/24 maxlen: 24
                          181.211.106.0/24 maxlen: 24
                          181.211.217.0/24 maxlen: 24
                          186.42.8.0/24 maxlen: 24
                          186.42.9.0/24 maxlen: 24
                          186.42.12.0/24 maxlen: 24
                          186.42.112.0/23 maxlen: 24
                          186.42.172.0/22 maxlen: 24
                          186.42.198.0/23 maxlen: 24
                          186.46.56.0/22 maxlen: 24
                          186.46.152.0/21 maxlen: 24
                          186.46.172.0/24 maxlen: 24
                          186.46.175.0/24 maxlen: 24
                          186.46.224.0/24 maxlen: 24
                          186.46.232.0/21 maxlen: 24
                          186.47.137.0/24 maxlen: 24
                          186.47.138.0/24 maxlen: 24
                          186.47.182.0/24 maxlen: 24
                          186.47.183.0/24 maxlen: 24
                          186.178.19.0/24 maxlen: 24
                          186.178.36.0/23 maxlen: 24
                          186.178.37.0/24 maxlen: 24
                          186.178.43.0/24 maxlen: 24
                          186.178.47.0/24 maxlen: 24
                          186.178.48.0/24 maxlen: 24
                          186.178.51.0/24 maxlen: 24
                          186.178.67.0/24 maxlen: 24
                          186.178.107.0/24 maxlen: 24
                          186.178.112.0/24 maxlen: 24
                          186.178.115.0/24 maxlen: 24
                          186.178.117.0/24 maxlen: 24
                          186.178.170.0/24 maxlen: 24
                          190.11.3.0/24 maxlen: 24
                          190.11.20.0/24 maxlen: 24
                          190.11.26.0/24 maxlen: 24
                          190.152.39.0/24 maxlen: 24
                          190.152.46.0/24 maxlen: 24
                          190.152.108.0/24 maxlen: 24
                          190.152.109.0/24 maxlen: 24
                          190.152.131.0/24 maxlen: 24
                          190.152.161.0/24 maxlen: 24
                          190.152.185.0/24 maxlen: 24
                          190.152.187.0/24 maxlen: 24
                          190.152.191.0/24 maxlen: 24
                          190.152.201.0/24 maxlen: 24
                          190.152.216.0/23 maxlen: 24
                          190.152.220.0/24 maxlen: 24
                          190.152.236.0/24 maxlen: 24
                          200.107.22.0/24 maxlen: 24
                          200.107.29.0/24 maxlen: 24
                          201.219.50.0/24 maxlen: 24
                          190.152.237.0/24 maxlen: 24
                          190.214.123.0/24 maxlen: 24
                          200.107.18.0/24 maxlen: 24
                          200.107.59.0/24 maxlen: 24
                          201.219.28.0/24 maxlen: 24
                          201.219.50.0/24 maxlen: 24
                          181.196.136.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1486905 (0x16b039)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=06f3316227b720d23f228dd3f7f7cdba3d2b5905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:7d:82:13:70:d8:46:a2:44:2c:a0:a7:1c:
                    48:23:98:56:c1:bd:e1:ec:3a:0c:34:78:f4:e0:3a:
                    36:bb:96:3c:d0:57:ef:cb:34:0b:92:af:ca:5c:f4:
                    5b:f2:26:e5:f3:46:74:d9:d4:68:b2:29:c8:76:f4:
                    2e:d6:af:6e:b7:be:98:85:3e:cb:22:0b:87:44:66:
                    58:e4:39:b0:45:9a:c6:c5:3b:11:ac:63:2c:d5:10:
                    73:a2:fb:89:6d:76:f8:74:8c:21:af:39:1a:28:f5:
                    a8:3f:ba:a2:4e:23:e8:a4:3d:44:45:8d:49:ec:ed:
                    45:f9:44:54:e6:a6:fc:d3:f7:c4:bc:c0:27:66:2f:
                    c9:47:1a:36:ae:f9:11:6a:68:af:30:59:d7:3f:e0:
                    4c:23:07:0c:54:db:b7:aa:bd:67:61:e9:62:0a:de:
                    20:16:76:81:c2:61:3b:21:ec:cd:ed:ec:50:af:f0:
                    fa:58:ee:a7:b2:35:9c:75:b8:87:e3:f0:a4:53:2b:
                    2e:0c:08:ca:5d:9f:37:8c:a1:a6:ca:62:e7:ea:cd:
                    c4:91:8a:03:76:31:48:45:bf:29:cc:17:7e:a1:8e:
                    93:7f:26:d9:c8:84:46:6c:18:02:65:77:12:2f:e2:
                    a0:28:49:52:34:61:db:a2:7d:3b:39:b3:5c:fb:d4:
                    b3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:28:6B:EA:A9:D9:52:E5:F8:AA:E9:BA:57:6E:3B:FF:D4:52:40:C6
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/06f3316227b720d23f228dd3f7f7cdba3d2b5905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.112.204.0/22
                  181.113.97.0/24
                  181.113.157.0/24
                  181.196.11.0/24
                  181.196.13.0-181.196.14.255
                  181.196.66.0/24
                  181.196.136.0/21
                  181.211.104.0-181.211.106.255
                  181.211.217.0/24
                  186.42.8.0/23
                  186.42.12.0/24
                  186.42.112.0/23
                  186.42.172.0/22
                  186.42.198.0/23
                  186.46.56.0/22
                  186.46.140.0/23
                  186.46.152.0/21
                  186.46.172.0/24
                  186.46.175.0/24
                  186.46.224.0/24
                  186.46.232.0/21
                  186.47.137.0-186.47.138.255
                  186.47.182.0/23
                  186.178.19.0/24
                  186.178.36.0/23
                  186.178.43.0/24
                  186.178.47.0-186.178.48.255
                  186.178.51.0/24
                  186.178.67.0/24
                  186.178.107.0/24
                  186.178.112.0/24
                  186.178.115.0/24
                  186.178.117.0/24
                  186.178.170.0/24
                  190.11.3.0/24
                  190.11.20.0/24
                  190.11.26.0/24
                  190.152.39.0/24
                  190.152.46.0/24
                  190.152.108.0-190.152.110.255
                  190.152.131.0/24
                  190.152.161.0/24
                  190.152.185.0/24
                  190.152.187.0/24
                  190.152.191.0/24
                  190.152.201.0/24
                  190.152.216.0/23
                  190.152.220.0/24
                  190.152.236.0/23
                  190.152.254.0/23
                  190.214.123.0/24
                  200.107.18.0/24
                  200.107.22.0/24
                  200.107.29.0/24
                  200.107.59.0/24
                  201.219.28.0/24
                  201.219.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:b7:57:1d:fb:66:49:22:20:bc:6c:b0:6a:43:2e:0b:94:a3:
         36:04:0b:95:86:3c:1b:1b:75:5f:18:7b:45:b1:50:96:19:55:
         cd:e5:a0:65:c3:d8:b3:d5:30:1c:9a:f7:06:26:36:cd:15:d8:
         23:a0:24:fd:3b:c9:b0:64:ee:33:84:71:d8:37:a3:d0:7f:bb:
         33:31:fc:41:76:74:4e:5b:80:ce:98:05:47:71:a5:8c:f8:3a:
         e9:1c:47:da:bc:7b:4e:5c:95:9d:73:bc:d9:28:7d:91:af:19:
         b2:d2:37:d9:14:b3:2c:99:35:e6:2d:54:eb:d6:9a:38:0f:d2:
         6d:f3:66:c1:65:1a:25:eb:ca:8a:03:33:a8:53:ae:5a:25:f7:
         3c:05:95:cb:7d:7e:b5:8f:93:b5:23:f4:92:a6:e6:59:86:01:
         9c:bf:95:72:46:02:81:12:9f:1b:6c:f6:9e:f6:3c:21:31:00:
         cb:df:44:7a:bc:87:e2:2d:7d:d3:6a:03:f5:ff:37:4b:c9:8f:
         3b:0f:48:de:ab:11:3d:4f:a0:4e:16:e0:39:d4:4a:16:77:b7:
         fb:7c:1a:aa:ab:5d:24:b6:61:dc:a1:ec:d8:11:08:87:17:c4:
         ee:60:c4:93:99:a5:86:92:2f:09:a9:aa:fc:b9:ee:72:da:5b:
         04:b1:bb:0b
-----BEGIN CERTIFICATE-----
MIIGwjCCBaqgAwIBAgIDFrA5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
NTllMWUzMzE3NzA0NTc1ZjJjMGI3NTBlZTczYjE2NmEzOWNkMzcwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygwNmYzMzE2MjI3Yjcy
MGQyM2YyMjhkZDNmN2Y3Y2RiYTNkMmI1OTA1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwA99ghNw2EaiRCygpxxII5hWwb3h7DoMNHj04Do2u5Y80Ffv
yzQLkq/KXPRb8ibl80Z02dRosinIdvQu1q9ut76YhT7LIguHRGZY5DmwRZrGxTsR
rGMs1RBzovuJbXb4dIwhrzkaKPWoP7qiTiPopD1ERY1J7O1F+URU5qb80/fEvMAn
Zi/JRxo2rvkRamivMFnXP+BMIwcMVNu3qr1nYeliCt4gFnaBwmE7IezN7exQr/D6
WO6nsjWcdbiH4/CkUysuDAjKXZ83jKGmymLn6s3EkYoDdjFIRb8pzBd+oY6TfybZ
yIRGbBgCZXcSL+KgKElSNGHbon07ObNc+9Sz0wIDAQABo4ID3TCCA9kwHQYDVR0O
BBYEFKEoa+qp2VLl+KrpulduO//UUkDGMB8GA1UdIwQYMBaAFIDwxydPgiTR6Xbz
gObvMs8Q+J3TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTA1OWUx
ZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2QzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWNhNzEzZjUtNmNhYy00ODZlLWEwMTYtYTNlOGIz
MWJmMDI5LzA2ZjMzMTYyMjdiNzIwZDIzZjIyOGRkM2Y3ZjdjZGJhM2QyYjU5MDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hY2E3MTNmNS02Y2FjLTQ4NmUtYTAxNi1hM2U4
YjMxYmYwMjkvMTA1OWUxZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2Qz
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCCAZ8GCCsGAQUFBwEHAQH/
BIIBjjCCAYowggGGBAIAATCCAX4DBAK1cMwDBAC1cWEDBAC1cZ0DBAC1xAswDAME
ALXEDQMEALXEDgMEALXEQgMEA7XEiDAMAwQDtdNoAwQAtdNqAwQAtdPZAwQBuioI
AwQAuioMAwQBuipwAwQCuiqsAwQBuirGAwQCui44AwQBui6MAwQDui6YAwQAui6s
AwQAui6vAwQAui7gAwQDui7oMAwDBAC6L4kDBAC6L4oDBAG6L7YDBAC6shMDBAG6
siQDBAC6siswDAMEALqyLwMEALqyMAMEALqyMwMEALqyQwMEALqyawMEALqycAME
ALqycwMEALqydQMEALqyqgMEAL4LAwMEAL4LFAMEAL4LGgMEAL6YJwMEAL6YLjAM
AwQCvphsAwQAvphuAwQAvpiDAwQAvpihAwQAvpi5AwQAvpi7AwQAvpi/AwQAvpjJ
AwQBvpjYAwQAvpjcAwQBvpjsAwQBvpj+AwQAvtZ7AwQAyGsSAwQAyGsWAwQAyGsd
AwQAyGs7AwQAydscAwQAydsyMA0GCSqGSIb3DQEBCwUAA4IBAQCVt1cd+2ZJIiC8
bLBqQy4LlKM2BAuVhjwbG3VfGHtFsVCWGVXN5aBlw9iz1TAcmvcGJjbNFdgjoCT9
O8mwZO4zhHHYN6PQf7szMfxBdnROW4DOmAVHcaWM+DrpHEfavHtOXJWdc7zZKH2R
rxmy0jfZFLMsmTXmLVTr1po4D9Jt82bBZRol68qKAzOoU65aJfc8BZXLfX61j5O1
I/SSpuZZhgGcv5VyRgKBEp8bbPae9jwhMQDL30R6vIfiLX3TagP1/zdLyY87D0je
qxE9T6BOFuA51EoWd7f7fBqqq10ktmHcoezYEQiHF8TuYMSTmaWGki8Jqar8ue5y
2lsEsbsL
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org