Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/999811079c7639615df694a1e6f3ff934b7bba7d.roa
File:                     999811079c7639615df694a1e6f3ff934b7bba7d.roa (raw, json)
Hash identifier:          1A8EqdCCHVVQtam6NgBU64sydyEXrfYAd8VE8ZWl/pI=
Subject key identifier:   73:DF:88:F4:E6:67:C1:27:E1:75:33:9F:7D:77:F3:EA:C7:9A:60:38
Certificate issuer:       /CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
Certificate serial:       255BEC
Authority key identifier: 61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/999811079c7639615df694a1e6f3ff934b7bba7d.roa
Signing time:             Wed 30 Aug 2023 17:24:18 +0000
ROA not before:           Tue 29 Aug 2023 17:24:17 +0000
ROA not after:            Sat 30 Aug 2025 17:24:17 +0000
asID:                     3816
IP address blocks:        190.96.184.0/21 maxlen: 21
                          186.183.232.0/23 maxlen: 23
                          186.183.240.0/22 maxlen: 23
                          186.183.244.0/23 maxlen: 23
                          190.96.200.0/21 maxlen: 21
                          186.183.254.0/23 maxlen: 23
                          190.13.16.0/21 maxlen: 21
                          190.96.224.0/19 maxlen: 21
                          190.96.136.0/21 maxlen: 21
                          201.221.150.0/24 maxlen: 24
                          190.13.48.0/20 maxlen: 21
                          190.96.144.0/20 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2448364 (0x255bec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
        Validity
            Not Before: Aug 29 17:24:17 2023 GMT
            Not After : Aug 30 17:24:17 2025 GMT
        Subject: CN=999811079c7639615df694a1e6f3ff934b7bba7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:96:b6:1d:33:80:3a:ad:15:12:02:94:44:78:
                    a1:b1:21:e1:2c:5f:ab:dc:68:de:53:b4:35:11:fa:
                    05:7d:82:cf:7c:f7:01:40:24:73:f2:92:cc:7d:02:
                    8f:1e:02:e1:97:45:d5:d6:bf:3d:a7:58:e0:8f:de:
                    4d:bf:f1:49:ee:17:98:99:9f:43:7b:34:53:47:71:
                    22:d1:b4:06:54:c7:a3:1a:b4:94:6e:81:eb:c8:29:
                    5f:0e:f4:5e:fc:e6:53:6b:86:81:c1:bc:cf:57:39:
                    5b:89:0f:00:4d:ab:09:2a:23:56:5d:11:bd:0e:f0:
                    45:7e:c0:05:c5:57:ed:0b:43:19:17:93:12:17:99:
                    9b:ec:94:66:f5:8a:4c:b5:30:5b:e8:60:68:04:8f:
                    10:cd:20:64:f2:45:eb:bd:2b:23:61:a7:6c:b3:69:
                    6d:6a:aa:84:f7:cc:21:1e:87:ab:41:73:4c:d3:91:
                    1a:34:72:7c:23:9d:b7:5c:8c:6b:38:47:4a:90:a1:
                    cd:38:db:93:06:90:4f:3b:9c:9e:4b:8e:6b:97:25:
                    f4:e5:b5:fd:33:ec:4a:dc:42:ea:73:b9:5d:d3:fd:
                    3d:64:0c:a7:70:f1:eb:0e:31:ab:01:de:bf:7c:c0:
                    9c:b5:0a:f1:ea:15:af:3f:aa:f9:0b:45:67:9b:d2:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DF:88:F4:E6:67:C1:27:E1:75:33:9F:7D:77:F3:EA:C7:9A:60:38
            X509v3 Authority Key Identifier:
                keyid:61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/999811079c7639615df694a1e6f3ff934b7bba7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.183.232.0/23
                  186.183.240.0-186.183.245.255
                  186.183.254.0/23
                  190.13.16.0/21
                  190.13.48.0/20
                  190.96.136.0-190.96.159.255
                  190.96.184.0/21
                  190.96.200.0/21
                  190.96.224.0/19
                  201.221.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:bd:b3:ae:78:6e:6f:6e:16:2e:7a:ed:ec:0a:a8:fb:35:d5:
         00:55:12:32:af:ed:62:ba:8f:78:cc:cc:43:c4:ca:97:14:c9:
         e4:43:81:5d:a6:93:ca:7f:35:a6:b5:97:63:ae:c3:c9:96:db:
         3a:b4:8d:48:37:e2:31:1c:88:1d:70:f7:b6:4a:93:22:10:2e:
         e1:35:f2:d2:f6:67:30:26:dd:44:41:75:d9:8d:57:72:b5:dd:
         2a:ec:d6:36:65:e0:19:a5:9f:54:ea:f5:cc:ae:52:94:8b:c5:
         6c:d9:42:ad:dd:df:ce:47:14:fb:4c:6d:7c:11:05:4a:74:89:
         9e:dd:15:f2:ef:de:f7:ee:2d:5c:df:37:db:3a:c3:65:c4:30:
         39:57:55:84:d8:f2:9a:74:e5:27:1b:25:cf:1b:ce:31:05:ae:
         87:6b:a1:43:e3:dd:0c:07:ab:c4:78:9a:1e:f5:a4:73:f2:ff:
         60:a8:90:72:53:d2:7e:7a:32:19:55:3a:12:e5:c4:5c:cf:4c:
         c1:ac:47:19:51:72:67:c2:27:29:64:09:fa:3e:4d:4a:f4:7b:
         22:d1:d5:12:6f:66:6f:1e:c3:49:16:e0:01:13:c9:11:11:6e:
         29:fa:fc:f9:0a:b8:05:ab:4a:12:40:73:57:c2:03:14:6e:8b:
         e8:c0:3d:23
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgIDJVvsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
N2QzMzA5NDdkMjY0YzgxYjQ1MDNkZjNiMWVmNjdkNDVjYzJkYzQwHhcNMjMwODI5
MTcyNDE3WhcNMjUwODMwMTcyNDE3WjAzMTEwLwYDVQQDEyg5OTk4MTEwNzljNzYz
OTYxNWRmNjk0YTFlNmYzZmY5MzRiN2JiYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlpa2HTOAOq0VEgKURHihsSHhLF+r3GjeU7Q1EfoFfYLPfPcB
QCRz8pLMfQKPHgLhl0XV1r89p1jgj95Nv/FJ7heYmZ9DezRTR3Ei0bQGVMejGrSU
boHryClfDvRe/OZTa4aBwbzPVzlbiQ8ATasJKiNWXRG9DvBFfsAFxVftC0MZF5MS
F5mb7JRm9YpMtTBb6GBoBI8QzSBk8kXrvSsjYadss2ltaqqE98whHoerQXNM05Ea
NHJ8I523XIxrOEdKkKHNONuTBpBPO5yeS45rlyX05bX9M+xK3ELqc7ld0/09ZAyn
cPHrDjGrAd6/fMCctQrx6hWvP6r5C0Vnm9KrJQIDAQABo4ICoTCCAp0wHQYDVR0O
BBYEFHPfiPTmZ8En4XUzn3138+rHmmA4MB8GA1UdIwQYMBaAFGG2jf2H687Wyisk
4qqP9wfaY14ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzM3ZDMz
MDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjNlNWRkOWUtYmJjYS00YzQ5LTkyZjUtOGM2NzUx
MTY1ZTkyLzk5OTgxMTA3OWM3NjM5NjE1ZGY2OTRhMWU2ZjNmZjkzNGI3YmJhN2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iM2U1ZGQ5ZS1iYmNhLTRjNDktOTJmNS04YzY3
NTExNjVlOTIvMzM3ZDMzMDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0NWNjMmRj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBggrBgEFBQcBBwEB/wRW
MFQwUgQCAAEwTAMEAbq36DAMAwQEurfwAwQBurf0AwQBurf+AwQDvg0QAwQEvg0w
MAwDBAO+YIgDBAW+YIADBAO+YLgDBAO+YMgDBAW+YOADBADJ3ZYwDQYJKoZIhvcN
AQELBQADggEBALu9s654bm9uFi567ewKqPs11QBVEjKv7WK6j3jMzEPEypcUyeRD
gV2mk8p/Naa1l2Ouw8mW2zq0jUg34jEciB1w97ZKkyIQLuE18tL2ZzAm3URBddmN
V3K13Srs1jZl4Bmln1Tq9cyuUpSLxWzZQq3d385HFPtMbXwRBUp0iZ7dFfLv3vfu
LVzfN9s6w2XEMDlXVYTY8pp05ScbJc8bzjEFrodroUPj3QwHq8R4mh71pHPy/2Co
kHJT0n56MhlVOhLlxFzPTMGsRxlRcmfCJylkCfo+TUr0eyLR1RJvZm8ew0kW4AET
yRERbin6/PkKuAWrShJAc1fCAxRui+jAPSM=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org