Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/c4394769fa01d9ef89a914a9fba3194e3e0c0657.roa
File:                     c4394769fa01d9ef89a914a9fba3194e3e0c0657.roa (raw, json)
Hash identifier:          vvA23YpnFuEmdTEv50+1gIFn4NDdvQzlWpf8LzFfuTs=
Subject key identifier:   48:A8:37:1B:C2:FF:96:6C:A2:86:56:F1:76:9D:23:E4:E5:80:12:8B
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       20AC2E
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/c4394769fa01d9ef89a914a9fba3194e3e0c0657.roa
Signing time:             Wed 22 Feb 2023 15:46:53 +0000
ROA not before:           Tue 23 Mar 2021 14:38:31 +0000
ROA not after:            Tue 24 Mar 2026 14:38:31 +0000
asID:                     27948
IP address blocks:        181.211.208.0/21 maxlen: 22
                          181.211.248.0/22 maxlen: 22
                          190.214.76.0/22 maxlen: 22
                          181.196.0.0/22 maxlen: 22
                          190.214.216.0/24 maxlen: 24
                          181.113.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2141230 (0x20ac2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 23 14:38:31 2021 GMT
            Not After : Mar 24 14:38:31 2026 GMT
        Subject: CN=c4394769fa01d9ef89a914a9fba3194e3e0c0657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:4a:ac:f2:2a:a8:ce:2f:3e:2f:ea:e1:aa:
                    cc:3f:78:47:25:6e:48:ac:d0:0c:06:7b:40:0c:42:
                    1c:0a:37:53:cf:9a:6d:97:d5:d7:ea:71:ff:e0:a2:
                    5a:24:4b:c2:c5:9e:b0:3c:4a:06:07:3e:ba:46:f0:
                    aa:40:d9:63:e8:7a:54:16:96:18:bf:6c:03:5c:ac:
                    16:51:5a:44:9c:cb:bd:5a:f7:3a:57:66:27:58:83:
                    c4:bb:23:88:04:a0:4b:b3:63:62:dc:86:8d:30:1e:
                    bc:e8:d6:e4:d5:27:47:6e:0c:1f:b6:80:98:31:d3:
                    d4:89:ba:eb:17:31:fa:f6:7e:3f:4f:d2:3c:26:7d:
                    24:c8:6f:5c:c1:60:67:d2:be:e0:c1:50:ac:2c:bb:
                    dd:11:c0:2d:77:7c:2f:a6:fa:85:9f:f9:0a:e4:1a:
                    28:fe:2a:44:f3:a6:07:1f:8c:94:40:50:c4:91:a5:
                    d3:70:36:4b:56:53:57:fe:5d:8c:9e:41:4a:b7:1f:
                    83:0d:0d:a4:12:b2:39:91:41:5a:05:b0:c0:bc:e3:
                    87:8b:8d:84:94:ae:08:0e:7d:48:bc:cf:79:d7:01:
                    2f:0c:25:21:e1:47:73:48:8f:47:43:46:da:c3:cd:
                    60:11:40:2d:fd:72:d5:2a:a6:28:eb:72:74:a1:35:
                    ce:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A8:37:1B:C2:FF:96:6C:A2:86:56:F1:76:9D:23:E4:E5:80:12:8B
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/c4394769fa01d9ef89a914a9fba3194e3e0c0657.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.113.192.0/24
                  181.196.0.0/22
                  181.211.208.0/21
                  181.211.248.0/22
                  190.214.76.0/22
                  190.214.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:1a:80:bd:cc:45:4e:c5:88:b9:0b:c6:77:bb:fb:89:36:22:
         e7:0b:54:e1:df:85:f7:53:20:3f:bb:dc:fe:b4:dd:86:97:d3:
         59:94:e3:ed:dc:d7:80:4e:b1:14:c7:59:f6:e7:50:ac:a9:d2:
         58:dc:61:3a:8f:ab:14:36:96:b2:cd:13:0f:cc:c0:c3:4c:78:
         c9:03:de:04:94:03:85:37:ac:88:f5:bf:e0:8d:8c:d7:6f:1a:
         ad:58:da:ab:2a:68:b0:09:49:1b:f4:0f:f2:e3:32:d4:22:22:
         bf:11:b1:96:cd:d6:8c:9a:48:19:19:8a:ed:a4:77:25:50:87:
         e9:73:38:a1:2e:a2:2b:14:d4:3a:20:4e:83:1d:14:3b:d2:bb:
         75:9d:8b:fd:17:aa:d9:dd:73:8a:a1:03:07:71:27:56:29:ec:
         ab:fe:d0:34:40:1c:43:af:85:73:73:1f:23:db:7b:47:a6:49:
         94:67:4b:bc:5c:98:ef:1f:bf:e0:14:b6:6d:04:48:3e:a4:db:
         07:ad:8e:a8:5c:35:6a:fd:36:cd:73:cd:39:15:c7:cb:f9:a1:
         eb:d7:da:fe:4a:35:b9:65:fa:fb:56:f7:32:46:6a:b9:54:9c:
         2d:ec:94:70:af:8b:09:e6:1d:2a:40:6e:dd:e1:a4:87:f2:d3:
         40:45:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org