Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/dbc81d834fb83d0fa8c4cf58dc8f5605b13eb5f2.roa
File:                     dbc81d834fb83d0fa8c4cf58dc8f5605b13eb5f2.roa (raw, json)
Hash identifier:          KLhSiFyB5TElm3LR9Mx4+QuBcooLBHTSQyv3bEnEJ7g=
Subject key identifier:   8C:18:0C:30:03:6E:17:65:BA:E4:55:2A:64:DD:18:32:28:42:B8:29
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       0E7F34
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/dbc81d834fb83d0fa8c4cf58dc8f5605b13eb5f2.roa
Signing time:             Wed 24 Mar 2021 14:38:33 +0000
ROA not before:           Wed 24 Mar 2021 14:38:31 +0000
ROA not after:            Tue 24 Mar 2026 14:38:31 +0000
asID:                     26613
IP address blocks:        190.152.252.0/24 maxlen: 24
                          190.152.255.0/24 maxlen: 24
                          190.214.252.0/24 maxlen: 24
                          201.219.56.0/24 maxlen: 24
                          190.152.251.0/24 maxlen: 24
                          190.152.253.0/24 maxlen: 24
                          190.214.253.0/24 maxlen: 24
                          200.107.34.0/24 maxlen: 24
                          200.125.206.0/24 maxlen: 24
                          190.214.250.0/24 maxlen: 24
                          190.152.110.0/24 maxlen: 24
                          190.152.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950068 (0xe7f34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 14:38:31 2021 GMT
            Not After : Mar 24 14:38:31 2026 GMT
        Subject: CN=dbc81d834fb83d0fa8c4cf58dc8f5605b13eb5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b5:5c:73:78:fa:dc:19:cd:9d:78:60:27:9d:
                    98:26:c2:98:c8:87:7a:90:55:53:ec:a9:03:92:b0:
                    5b:ac:02:84:cd:f0:55:e4:83:97:a5:8a:49:14:26:
                    71:ef:2b:b7:e6:8e:7e:22:a1:47:8c:26:0c:95:2b:
                    57:90:c6:4e:89:5c:76:36:ec:ed:6e:51:38:e2:45:
                    93:71:8b:8d:f9:3a:11:0a:bf:90:f2:92:47:6e:ce:
                    73:75:63:94:4c:50:a2:4f:d3:73:20:a2:58:e7:e3:
                    f6:db:36:92:33:1e:f4:48:9c:24:da:15:0e:87:69:
                    e3:a2:6f:df:d2:90:2b:2c:69:dc:55:34:42:d4:0c:
                    03:2d:11:3b:a3:c1:b6:30:ac:5b:99:76:5a:fe:45:
                    38:6b:7c:99:38:ff:1e:d8:99:fc:5c:a1:65:ad:8d:
                    85:dd:5f:6c:a3:d6:a3:6d:35:5f:25:d3:0c:cd:75:
                    f7:31:d0:dc:14:49:00:4f:7b:8e:5f:5a:d6:38:ad:
                    83:ad:80:f7:50:9f:e7:ce:73:66:78:ae:9a:35:3d:
                    47:3b:f5:4b:d6:0a:23:a5:61:d7:cc:15:ca:62:f3:
                    7b:a7:2b:68:47:af:14:8a:23:bf:78:f0:0b:9f:e7:
                    66:b0:f7:95:92:12:87:95:c6:29:af:90:95:3d:5b:
                    61:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:18:0C:30:03:6E:17:65:BA:E4:55:2A:64:DD:18:32:28:42:B8:29
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/dbc81d834fb83d0fa8c4cf58dc8f5605b13eb5f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.152.110.0/24
                  190.152.251.0-190.152.255.255
                  190.214.250.0/24
                  190.214.252.0/23
                  200.107.34.0/24
                  200.125.206.0/24
                  201.219.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:4c:7a:d3:8e:42:49:e0:09:6b:91:5f:36:e0:b5:fb:ba:9b:
         77:b0:59:67:1f:74:a9:38:b5:63:3a:22:bf:f4:1e:64:c6:2f:
         7b:75:eb:38:95:e7:46:04:e4:8d:f7:f0:0d:e8:a5:fc:6b:dc:
         35:b0:97:d2:f9:0b:78:4c:a8:f4:77:cb:11:3e:fd:12:fc:ca:
         d7:88:4a:3d:ee:d4:fd:ea:2b:35:21:5c:9e:29:59:fc:c6:11:
         0f:e8:ae:d3:b7:04:88:2c:b0:fe:d1:2c:47:d3:8f:63:57:78:
         72:16:55:37:54:51:2d:8a:97:fb:82:2a:00:38:51:99:c3:88:
         a3:3f:9b:9e:b3:13:93:fb:ac:73:e2:37:77:bb:b1:8c:e4:43:
         80:73:36:81:eb:c2:98:b7:fd:24:31:ca:5a:c8:2e:fe:e2:fd:
         a8:80:d5:a1:00:09:ee:84:32:31:b9:f4:5b:6e:72:78:fa:45:
         b7:55:6c:48:d3:a0:a2:7c:b7:bd:3f:66:e5:50:d0:f0:ce:d3:
         88:5f:e4:92:ef:55:5b:da:8c:3f:6f:56:e8:10:02:5f:7c:2d:
         35:96:27:63:4e:55:57:10:a3:c3:12:91:48:bd:68:83:4d:ad:
         b0:1e:c5:b9:a8:53:29:8a:2b:34:96:8e:ae:51:ee:c4:ea:79:
         44:92:09:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org