Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/29eebc4bc2acf3664cccef3d23789a7185f9843f.roa
File:                     29eebc4bc2acf3664cccef3d23789a7185f9843f.roa (raw, json)
Hash identifier:          enU0Rv5MgrI7/kcaAlj5/pBoXQeCQ+eNGnhjjP6j2/A=
Subject key identifier:   04:24:48:DF:A0:83:35:FF:AB:52:8D:93:EA:1D:D1:34:F4:69:88:92
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       171A3C
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/29eebc4bc2acf3664cccef3d23789a7185f9843f.roa
Signing time:             Mon 21 Feb 2022 17:02:41 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27757
IP address blocks:        186.46.140.0/24 maxlen: 24
                          186.46.141.0/24 maxlen: 24
                          190.152.254.0/24 maxlen: 24
                          190.152.255.0/24 maxlen: 24
                          190.152.110.0/24 maxlen: 24
                          181.112.204.0/22 maxlen: 24
                          181.113.97.0/24 maxlen: 24
                          181.113.157.0/24 maxlen: 24
                          181.196.11.0/24 maxlen: 24
                          181.196.13.0/24 maxlen: 24
                          181.196.14.0/24 maxlen: 24
                          181.196.66.0/24 maxlen: 24
                          181.211.104.0/24 maxlen: 24
                          181.211.105.0/24 maxlen: 24
                          181.211.106.0/24 maxlen: 24
                          181.211.217.0/24 maxlen: 24
                          186.42.8.0/24 maxlen: 24
                          186.42.9.0/24 maxlen: 24
                          186.42.12.0/24 maxlen: 24
                          186.42.112.0/23 maxlen: 24
                          186.42.172.0/22 maxlen: 24
                          186.42.198.0/23 maxlen: 24
                          186.46.56.0/22 maxlen: 24
                          186.46.152.0/21 maxlen: 24
                          186.46.172.0/24 maxlen: 24
                          186.46.175.0/24 maxlen: 24
                          186.46.224.0/24 maxlen: 24
                          186.46.232.0/21 maxlen: 24
                          186.47.137.0/24 maxlen: 24
                          186.47.138.0/24 maxlen: 24
                          186.47.182.0/24 maxlen: 24
                          186.47.183.0/24 maxlen: 24
                          186.178.19.0/24 maxlen: 24
                          186.178.36.0/23 maxlen: 24
                          186.178.37.0/24 maxlen: 24
                          186.178.43.0/24 maxlen: 24
                          186.178.47.0/24 maxlen: 24
                          186.178.48.0/24 maxlen: 24
                          186.178.51.0/24 maxlen: 24
                          186.178.67.0/24 maxlen: 24
                          186.178.107.0/24 maxlen: 24
                          186.178.112.0/24 maxlen: 24
                          186.178.115.0/24 maxlen: 24
                          186.178.117.0/24 maxlen: 24
                          186.178.170.0/24 maxlen: 24
                          190.11.3.0/24 maxlen: 24
                          190.11.20.0/24 maxlen: 24
                          190.11.26.0/24 maxlen: 24
                          190.152.39.0/24 maxlen: 24
                          190.152.46.0/24 maxlen: 24
                          190.152.108.0/24 maxlen: 24
                          190.152.109.0/24 maxlen: 24
                          190.152.131.0/24 maxlen: 24
                          190.152.161.0/24 maxlen: 24
                          190.152.185.0/24 maxlen: 24
                          190.152.187.0/24 maxlen: 24
                          190.152.191.0/24 maxlen: 24
                          190.152.201.0/24 maxlen: 24
                          190.152.216.0/23 maxlen: 24
                          190.152.220.0/24 maxlen: 24
                          190.152.236.0/24 maxlen: 24
                          200.107.22.0/24 maxlen: 24
                          200.107.29.0/24 maxlen: 24
                          201.219.50.0/24 maxlen: 24
                          190.152.237.0/24 maxlen: 24
                          190.214.123.0/24 maxlen: 24
                          200.107.18.0/24 maxlen: 24
                          200.107.59.0/24 maxlen: 24
                          201.219.28.0/24 maxlen: 24
                          201.219.50.0/24 maxlen: 24
                          181.196.136.0/21 maxlen: 24
                          186.178.0.0/16 maxlen: 24
                          190.152.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514044 (0x171a3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=29eebc4bc2acf3664cccef3d23789a7185f9843f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:00:50:1a:be:3e:8a:6d:ff:92:a8:e0:4b:
                    4b:76:b0:3f:a2:fb:22:63:e9:8c:00:6e:40:16:21:
                    4a:4e:72:89:7d:6f:47:ce:20:f2:3f:00:6b:9d:df:
                    02:a4:f7:85:f4:8c:8d:af:63:be:f9:b7:22:2f:a1:
                    3c:f9:a2:50:7a:7f:cd:f1:3b:4f:c3:d4:6f:ae:d0:
                    d1:99:ee:d5:63:5b:08:5c:8c:59:c9:fa:72:c0:ca:
                    9a:a9:96:2e:5b:bb:e8:77:b3:80:fb:6a:ea:50:af:
                    67:45:53:f2:6a:71:7e:14:05:2e:31:4f:f7:15:4b:
                    31:63:af:49:6e:a7:98:06:73:d6:14:d7:48:05:64:
                    56:e0:59:7d:91:a9:28:00:25:7a:11:93:f7:d3:eb:
                    65:80:3a:b6:4a:df:1b:26:cd:75:6c:e3:44:98:00:
                    17:63:57:98:39:e8:5b:0e:fd:31:93:f2:33:81:de:
                    b0:66:5c:79:fd:b8:33:f0:8d:b0:80:b5:f9:b0:ae:
                    88:ce:ab:c4:80:d1:5d:4f:32:46:73:a6:8a:05:bc:
                    a5:9c:c4:0f:98:f3:8e:61:87:56:96:07:4d:90:4e:
                    f0:f6:f9:b4:59:36:6e:47:49:38:e3:92:fe:0f:36:
                    2c:49:c5:5a:9d:da:b3:77:95:68:20:e5:f7:d9:58:
                    cb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:24:48:DF:A0:83:35:FF:AB:52:8D:93:EA:1D:D1:34:F4:69:88:92
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/29eebc4bc2acf3664cccef3d23789a7185f9843f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.112.204.0/22
                  181.113.97.0/24
                  181.113.157.0/24
                  181.196.11.0/24
                  181.196.13.0-181.196.14.255
                  181.196.66.0/24
                  181.196.136.0/21
                  181.211.104.0-181.211.106.255
                  181.211.217.0/24
                  186.42.8.0/23
                  186.42.12.0/24
                  186.42.112.0/23
                  186.42.172.0/22
                  186.42.198.0/23
                  186.46.56.0/22
                  186.46.140.0/23
                  186.46.152.0/21
                  186.46.172.0/24
                  186.46.175.0/24
                  186.46.224.0/24
                  186.46.232.0/21
                  186.47.137.0-186.47.138.255
                  186.47.182.0/23
                  186.178.0.0/16
                  190.11.3.0/24
                  190.11.20.0/24
                  190.11.26.0/24
                  190.152.39.0/24
                  190.152.46.0/24
                  190.152.108.0-190.152.110.255
                  190.152.128.0/17
                  190.214.123.0/24
                  200.107.18.0/24
                  200.107.22.0/24
                  200.107.29.0/24
                  200.107.59.0/24
                  201.219.28.0/24
                  201.219.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:a2:02:16:27:0e:88:08:ac:80:01:3d:fe:6e:a3:10:58:19:
         67:b6:e7:48:a2:d1:1c:f9:6c:d0:c4:77:ee:33:3a:1e:54:b9:
         b6:4b:cf:78:6e:92:a0:f8:6f:d5:46:33:9b:6d:05:cf:4f:c7:
         e3:2b:3f:88:45:c2:4a:60:23:ef:55:b5:15:44:22:de:80:1f:
         9a:ea:f9:7a:22:78:ad:9f:fd:98:84:b7:39:c9:2a:28:fd:bb:
         eb:66:85:f6:1b:58:35:99:e7:47:59:af:c8:a6:52:33:b1:f6:
         73:b0:47:9c:4c:f1:03:38:35:2d:92:34:02:4c:ab:2d:ec:18:
         05:7a:9a:21:bc:f3:05:4c:9f:21:73:a6:a0:82:1c:4d:7b:4e:
         12:a8:24:9f:8e:0a:4c:0d:05:c3:2f:6a:6f:f9:cb:78:14:de:
         0f:5a:0d:3d:f2:df:d2:8b:69:86:f0:89:1f:f7:19:7e:5a:e0:
         6f:c0:27:03:5f:3f:14:a6:8e:74:da:71:b5:83:34:bc:cc:17:
         f5:4b:ef:52:1f:07:19:4d:b7:df:3d:d3:f7:56:a8:d1:0d:46:
         d9:63:b9:e4:2a:ae:ea:3d:58:bc:10:63:19:a6:ff:de:df:2c:
         49:77:a2:a2:1d:ee:a9:dd:f1:30:a4:0b:78:16:75:31:a1:b8:
         0c:af:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org