Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd358d71-e781-4dac-915f-6a446b8adccd/6cb555984421f590644a2e5c30ca5027dd610120.roa
File:                     6cb555984421f590644a2e5c30ca5027dd610120.roa (raw, json)
Hash identifier:          htgJlFfbYzp4W93rJwPYxgI7m0mO/YK3U7I6duRd0Ts=
Subject key identifier:   BD:D7:47:4B:BC:CC:A6:BE:0D:80:B4:8C:2B:DC:D5:44:D0:A7:A2:DC
Certificate issuer:       /CN=0205b2072999426c0ad9d8ae26c062cb93100614
Certificate serial:       0D8BAF
Authority key identifier: FC:16:50:0B:81:A0:6E:47:62:79:21:4A:E3:A4:8D:78:8B:B6:31:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0205b2072999426c0ad9d8ae26c062cb93100614.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd358d71-e781-4dac-915f-6a446b8adccd/6cb555984421f590644a2e5c30ca5027dd610120.roa
Signing time:             Wed 24 Mar 2021 14:31:31 +0000
ROA not before:           Wed 24 Mar 2021 14:31:31 +0000
ROA not after:            Tue 24 Mar 2026 14:31:31 +0000
asID:                     52426
IP address blocks:        186.1.225.0/24 maxlen: 24
                          186.1.234.0/24 maxlen: 24
                          186.1.235.0/24 maxlen: 24
                          190.181.122.0/24 maxlen: 24
                          190.181.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887727 (0xd8baf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0205b2072999426c0ad9d8ae26c062cb93100614
        Validity
            Not Before: Mar 24 14:31:31 2021 GMT
            Not After : Mar 24 14:31:31 2026 GMT
        Subject: CN=6cb555984421f590644a2e5c30ca5027dd610120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:c7:3f:f5:60:a9:bf:e8:09:9a:58:cb:93:
                    49:3b:02:fb:fa:b7:29:9b:a2:d2:27:0d:2e:1e:3d:
                    06:cc:8b:eb:97:54:e5:29:a6:e0:ca:90:0e:14:8b:
                    ae:51:d7:01:18:06:db:18:a3:1d:f9:3c:13:86:4e:
                    b5:25:4c:b8:34:d7:db:a6:03:7c:50:b7:a5:91:64:
                    df:04:c7:92:4b:41:37:ac:ac:7f:5b:67:64:34:e2:
                    d7:0b:9e:81:7b:6d:ab:15:f3:5e:33:9e:0c:80:98:
                    05:8f:83:b3:cc:d0:fc:84:fc:d4:8d:ab:c6:61:47:
                    b8:57:c0:bd:d3:69:12:96:d4:f0:84:62:0b:6b:2f:
                    57:3e:1b:95:c1:3e:15:67:ba:d5:1b:b1:ba:97:d2:
                    11:a9:06:af:ee:71:b6:f4:e9:b5:d0:c8:fd:4b:8e:
                    2d:df:ed:f2:88:86:e9:aa:1a:13:8c:73:98:b6:52:
                    13:9a:a5:13:c7:67:0e:7c:c4:1d:6f:1c:5c:d0:b0:
                    ef:33:3d:63:37:8f:12:7e:1e:fb:2b:7a:d0:4f:6a:
                    a5:23:06:63:a7:3a:8d:bc:ee:76:0f:68:c9:5b:b2:
                    2c:26:2a:a9:01:dd:2c:5b:44:71:2f:e4:6b:75:91:
                    5b:d5:4a:1a:d3:b7:bb:5d:8e:04:c5:b4:25:d8:d8:
                    d5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D7:47:4B:BC:CC:A6:BE:0D:80:B4:8C:2B:DC:D5:44:D0:A7:A2:DC
            X509v3 Authority Key Identifier:
                keyid:FC:16:50:0B:81:A0:6E:47:62:79:21:4A:E3:A4:8D:78:8B:B6:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0205b2072999426c0ad9d8ae26c062cb93100614.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd358d71-e781-4dac-915f-6a446b8adccd/6cb555984421f590644a2e5c30ca5027dd610120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd358d71-e781-4dac-915f-6a446b8adccd/0205b2072999426c0ad9d8ae26c062cb93100614.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.225.0/24
                  186.1.234.0/23
                  190.181.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:0d:f8:f8:ff:0e:d5:59:b5:8b:e6:54:79:47:32:08:e9:27:
         b2:51:5f:2f:3a:8d:fd:4d:55:4e:16:27:76:3b:03:0d:a1:10:
         b1:44:85:98:f8:bf:bd:6f:53:1c:4d:a4:d1:d4:22:2c:57:6f:
         fa:24:e2:57:80:ce:bf:fa:39:b1:d8:11:6f:59:df:86:1d:19:
         e9:f7:40:a8:6e:25:16:84:a5:13:d0:71:2a:3b:24:d1:51:82:
         88:e0:ec:cd:27:31:9a:84:49:7a:9c:1a:3f:e7:81:e0:bb:65:
         b2:7e:19:f2:2e:d3:57:10:a3:a8:32:40:4b:a2:37:f6:ed:a8:
         3a:0f:d3:16:25:c9:eb:d6:1f:01:54:3c:53:8f:cc:02:48:92:
         10:b6:0e:bb:b4:28:23:4f:68:ea:fa:80:fb:dc:0e:70:f9:ea:
         2f:43:4f:03:88:39:2d:7d:8f:a7:c2:41:88:de:2b:2e:eb:71:
         e3:1d:7b:b8:31:f4:83:dd:b1:a7:94:03:50:ac:25:17:63:c1:
         36:c5:d3:49:e1:2b:56:47:71:bd:0c:46:2e:f8:a4:46:88:2b:
         90:20:34:86:1c:ef:10:03:d8:ba:d4:3f:07:e6:61:e7:61:46:
         d0:80:ae:b9:73:20:52:87:0e:47:8a:12:7d:56:cd:b3:8d:93:
         ef:3d:5f:f1
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDDYuvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAy
MDViMjA3Mjk5OTQyNmMwYWQ5ZDhhZTI2YzA2MmNiOTMxMDA2MTQwHhcNMjEwMzI0
MTQzMTMxWhcNMjYwMzI0MTQzMTMxWjAzMTEwLwYDVQQDEyg2Y2I1NTU5ODQ0MjFm
NTkwNjQ0YTJlNWMzMGNhNTAyN2RkNjEwMTIwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAs3DHP/Vgqb/oCZpYy5NJOwL7+rcpm6LSJw0uHj0GzIvrl1Tl
KabgypAOFIuuUdcBGAbbGKMd+TwThk61JUy4NNfbpgN8ULelkWTfBMeSS0E3rKx/
W2dkNOLXC56Be22rFfNeM54MgJgFj4OzzND8hPzUjavGYUe4V8C902kSltTwhGIL
ay9XPhuVwT4VZ7rVG7G6l9IRqQav7nG29Om10Mj9S44t3+3yiIbpqhoTjHOYtlIT
mqUTx2cOfMQdbxxc0LDvMz1jN48Sfh77K3rQT2qlIwZjpzqNvO52D2jJW7IsJiqp
Ad0sW0RxL+RrdZFb1Uoa07e7XY4ExbQl2NjVXwIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFL3XR0u8zKa+DYC0jCvc1UTQp6LcMB8GA1UdIwQYMBaAFPwWUAuBoG5HYnkh
SuOkjXiLtjFvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDIwNWIy
MDcyOTk5NDI2YzBhZDlkOGFlMjZjMDYyY2I5MzEwMDYxNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmQzNThkNzEtZTc4MS00ZGFjLTkxNWYtNmE0NDZi
OGFkY2NkLzZjYjU1NTk4NDQyMWY1OTA2NDRhMmU1YzMwY2E1MDI3ZGQ2MTAxMjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZDM1OGQ3MS1lNzgxLTRkYWMtOTE1Zi02YTQ0
NmI4YWRjY2QvMDIwNWIyMDcyOTk5NDI2YzBhZDlkOGFlMjZjMDYyY2I5MzEwMDYx
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEALoB4QMEAboB6gMEAb61ejANBgkqhkiG9w0BAQsFAAOCAQEA
IQ34+P8O1Vm1i+ZUeUcyCOknslFfLzqN/U1VThYndjsDDaEQsUSFmPi/vW9THE2k
0dQiLFdv+iTiV4DOv/o5sdgRb1nfhh0Z6fdAqG4lFoSlE9BxKjsk0VGCiODszScx
moRJepwaP+eB4Ltlsn4Z8i7TVxCjqDJAS6I39u2oOg/TFiXJ69YfAVQ8U4/MAkiS
ELYOu7QoI09o6vqA+9wOcPnqL0NPA4g5LX2Pp8JBiN4rLutx4x17uDH0g92xp5QD
UKwlF2PBNsXTSeErVkdxvQxGLvikRogrkCA0hhzvEAPYutQ/B+Zh52FG0ICuuXMg
UocOR4oSfVbNs42T7z1f8Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org