Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/78d0987e60e7db96fb89be9f327e38e069bb9bae.roa
File:                     78d0987e60e7db96fb89be9f327e38e069bb9bae.roa (raw, json)
Hash identifier:          AgrJ6whkVG7Hx+lS2RakPJrzkZjC3w0D20DBV3r3/Ow=
Subject key identifier:   B7:E0:48:9D:5B:50:12:DF:99:E1:7F:9B:7E:38:01:14:0A:7A:9F:8D
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       168FC5
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/78d0987e60e7db96fb89be9f327e38e069bb9bae.roa
Signing time:             Tue 01 Feb 2022 15:16:04 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27757
IP address blocks:        186.46.140.0/24 maxlen: 24
                          186.46.141.0/24 maxlen: 24
                          190.152.254.0/24 maxlen: 24
                          190.152.255.0/24 maxlen: 24
                          190.152.110.0/24 maxlen: 24
                          181.112.204.0/22 maxlen: 24
                          181.113.97.0/24 maxlen: 24
                          181.113.157.0/24 maxlen: 24
                          181.196.11.0/24 maxlen: 24
                          181.196.13.0/24 maxlen: 24
                          181.196.14.0/24 maxlen: 24
                          181.196.66.0/24 maxlen: 24
                          181.211.104.0/24 maxlen: 24
                          181.211.105.0/24 maxlen: 24
                          181.211.106.0/24 maxlen: 24
                          181.211.217.0/24 maxlen: 24
                          186.42.8.0/24 maxlen: 24
                          186.42.9.0/24 maxlen: 24
                          186.42.12.0/24 maxlen: 24
                          186.42.112.0/23 maxlen: 24
                          186.42.172.0/22 maxlen: 24
                          186.42.198.0/23 maxlen: 24
                          186.46.56.0/22 maxlen: 24
                          186.46.152.0/21 maxlen: 24
                          186.46.172.0/24 maxlen: 24
                          186.46.175.0/24 maxlen: 24
                          186.46.224.0/24 maxlen: 24
                          186.46.232.0/21 maxlen: 24
                          186.47.137.0/24 maxlen: 24
                          186.47.138.0/24 maxlen: 24
                          186.47.182.0/24 maxlen: 24
                          186.47.183.0/24 maxlen: 24
                          186.178.19.0/24 maxlen: 24
                          186.178.36.0/23 maxlen: 24
                          186.178.37.0/24 maxlen: 24
                          186.178.43.0/24 maxlen: 24
                          186.178.47.0/24 maxlen: 24
                          186.178.48.0/24 maxlen: 24
                          186.178.51.0/24 maxlen: 24
                          186.178.67.0/24 maxlen: 24
                          186.178.107.0/24 maxlen: 24
                          186.178.112.0/24 maxlen: 24
                          186.178.115.0/24 maxlen: 24
                          186.178.117.0/24 maxlen: 24
                          186.178.170.0/24 maxlen: 24
                          190.11.3.0/24 maxlen: 24
                          190.11.20.0/24 maxlen: 24
                          190.11.26.0/24 maxlen: 24
                          190.152.39.0/24 maxlen: 24
                          190.152.46.0/24 maxlen: 24
                          190.152.108.0/24 maxlen: 24
                          190.152.109.0/24 maxlen: 24
                          190.152.131.0/24 maxlen: 24
                          190.152.161.0/24 maxlen: 24
                          190.152.185.0/24 maxlen: 24
                          190.152.187.0/24 maxlen: 24
                          190.152.191.0/24 maxlen: 24
                          190.152.201.0/24 maxlen: 24
                          190.152.216.0/23 maxlen: 24
                          190.152.220.0/24 maxlen: 24
                          190.152.236.0/24 maxlen: 24
                          200.107.22.0/24 maxlen: 24
                          200.107.29.0/24 maxlen: 24
                          201.219.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1478597 (0x168fc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=78d0987e60e7db96fb89be9f327e38e069bb9bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:8b:fd:9a:8b:47:ff:5a:28:1f:bf:c3:b8:
                    15:a3:cc:2c:37:37:df:22:a0:66:11:2a:fc:09:d7:
                    6d:c8:e5:31:4c:72:7e:84:14:84:8a:b0:bf:b4:c1:
                    e8:63:08:1e:7c:e9:d7:2a:8a:2d:d6:ff:9a:73:73:
                    93:e5:14:59:96:3b:a7:5e:f5:d8:d8:98:9c:df:14:
                    3f:30:97:6a:95:9f:5a:73:f8:21:58:19:de:38:a5:
                    18:d7:15:2d:7f:58:b3:75:c2:fc:f0:33:ed:7f:09:
                    ba:f7:48:9f:33:20:cf:db:61:92:a8:68:e0:ea:71:
                    48:96:b7:fd:76:fe:87:86:7b:04:e6:db:e4:f7:65:
                    09:ba:f4:68:1d:75:90:5f:8b:de:04:e8:c0:be:56:
                    12:d8:7b:97:cc:c6:b7:1a:39:f0:be:98:e2:33:fc:
                    32:86:fd:fa:e3:04:bd:94:25:c5:1d:c7:fa:a1:99:
                    8e:37:1c:76:b8:f3:e2:fa:f1:e9:0d:7d:8b:91:2d:
                    ab:15:16:6c:fd:a8:d3:12:f3:59:6d:a5:da:b5:59:
                    0b:d9:e0:e0:a0:6c:a5:f9:c2:71:2e:94:79:c9:3c:
                    77:0d:f5:db:d4:28:65:f9:80:4b:ae:6c:c8:63:94:
                    6a:af:f2:e8:ff:8d:a6:97:0f:3b:5b:79:1b:f4:ac:
                    ff:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E0:48:9D:5B:50:12:DF:99:E1:7F:9B:7E:38:01:14:0A:7A:9F:8D
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/78d0987e60e7db96fb89be9f327e38e069bb9bae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.112.204.0/22
                  181.113.97.0/24
                  181.113.157.0/24
                  181.196.11.0/24
                  181.196.13.0-181.196.14.255
                  181.196.66.0/24
                  181.211.104.0-181.211.106.255
                  181.211.217.0/24
                  186.42.8.0/23
                  186.42.12.0/24
                  186.42.112.0/23
                  186.42.172.0/22
                  186.42.198.0/23
                  186.46.56.0/22
                  186.46.140.0/23
                  186.46.152.0/21
                  186.46.172.0/24
                  186.46.175.0/24
                  186.46.224.0/24
                  186.46.232.0/21
                  186.47.137.0-186.47.138.255
                  186.47.182.0/23
                  186.178.19.0/24
                  186.178.36.0/23
                  186.178.43.0/24
                  186.178.47.0-186.178.48.255
                  186.178.51.0/24
                  186.178.67.0/24
                  186.178.107.0/24
                  186.178.112.0/24
                  186.178.115.0/24
                  186.178.117.0/24
                  186.178.170.0/24
                  190.11.3.0/24
                  190.11.20.0/24
                  190.11.26.0/24
                  190.152.39.0/24
                  190.152.46.0/24
                  190.152.108.0-190.152.110.255
                  190.152.131.0/24
                  190.152.161.0/24
                  190.152.185.0/24
                  190.152.187.0/24
                  190.152.191.0/24
                  190.152.201.0/24
                  190.152.216.0/23
                  190.152.220.0/24
                  190.152.236.0/24
                  190.152.254.0/23
                  200.107.22.0/24
                  200.107.29.0/24
                  201.219.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:88:e2:44:21:47:e2:fa:fb:bc:c4:60:ce:43:a2:20:dc:80:
         7e:12:fc:3a:7b:9a:33:c6:e4:3a:fa:bd:33:06:2e:04:d3:ce:
         a0:72:00:c0:0f:ff:30:da:54:a7:7c:9d:08:7a:38:70:7e:96:
         70:f7:1d:6e:e6:3c:b9:b5:9a:a1:4a:91:27:0b:f0:c7:e2:ce:
         a7:38:50:27:5c:cb:d8:6b:b8:76:91:d1:b3:96:ba:dd:9d:fb:
         54:62:92:3b:a9:15:e4:ef:e7:c7:f1:fe:ca:47:49:fc:3d:66:
         d9:43:6b:b9:57:e8:61:d9:44:1a:6e:e0:4b:10:a1:87:7c:d5:
         86:3d:b1:07:5e:fe:76:bd:fc:6c:b5:e7:86:f1:52:39:a7:d0:
         21:ef:a7:ca:e0:b2:0c:c0:c0:fa:92:43:b3:7f:27:a1:70:27:
         ec:f0:80:40:13:35:60:df:73:a1:05:05:ac:c6:f7:b0:06:5e:
         2d:da:d2:e4:e0:d3:80:d5:75:c8:e5:83:14:16:15:a8:79:da:
         72:f3:35:11:25:d4:7e:40:6b:31:db:cb:aa:1c:65:d3:14:28:
         c4:08:d5:b0:11:f8:7f:9e:c2:41:19:10:2a:7f:85:af:f5:65:
         3f:8a:3b:66:bb:4f:38:ec:22:c1:e7:c0:d2:a0:e8:9f:83:04:
         ad:0d:39:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org