Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/10809a984c00b3333c2ea2fbe136f40f81ae20d9.roa
File:                     10809a984c00b3333c2ea2fbe136f40f81ae20d9.roa (raw, json)
Hash identifier:          VKo9py4gwt7bz43zJ2vN/bogxZbMXgX1ZyDPs4qgeTU=
Subject key identifier:   45:94:B9:3E:0A:B0:35:B5:3E:D0:14:D2:39:65:3A:99:A5:B2:A0:73
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1C0A58
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/10809a984c00b3333c2ea2fbe136f40f81ae20d9.roa
Signing time:             Tue 27 Sep 2022 14:14:10 +0000
ROA not before:           Tue 27 Sep 2022 14:12:36 +0000
ROA not after:            Fri 27 Sep 2024 14:12:36 +0000
asID:                     3816
IP address blocks:        191.106.128.0/18 maxlen: 18
                          191.106.192.0/18 maxlen: 18
                          191.107.0.0/20 maxlen: 20
                          191.107.16.0/20 maxlen: 20
                          191.107.32.0/20 maxlen: 20
                          191.107.48.0/20 maxlen: 20
                          191.107.64.0/20 maxlen: 20
                          191.107.80.0/20 maxlen: 20
                          191.107.96.0/20 maxlen: 20
                          191.107.112.0/20 maxlen: 20
                          191.107.144.0/20 maxlen: 20
                          191.107.160.0/20 maxlen: 20
                          191.107.176.0/20 maxlen: 20
                          191.107.192.0/20 maxlen: 20
                          191.107.208.0/20 maxlen: 20
                          191.107.224.0/20 maxlen: 20
                          191.107.240.0/20 maxlen: 20
                          191.108.0.0/20 maxlen: 20
                          191.108.16.0/20 maxlen: 20
                          191.108.32.0/20 maxlen: 20
                          191.108.48.0/20 maxlen: 20
                          191.108.64.0/20 maxlen: 20
                          191.108.80.0/20 maxlen: 20
                          191.108.96.0/20 maxlen: 20
                          191.108.112.0/20 maxlen: 20
                          191.108.128.0/20 maxlen: 20
                          191.108.144.0/20 maxlen: 20
                          191.108.160.0/20 maxlen: 20
                          191.108.176.0/20 maxlen: 20
                          191.108.192.0/20 maxlen: 20
                          191.108.208.0/20 maxlen: 20
                          191.108.224.0/20 maxlen: 20
                          191.108.240.0/20 maxlen: 20
                          191.109.0.0/18 maxlen: 18
                          191.109.64.0/18 maxlen: 18
                          191.109.128.0/20 maxlen: 20
                          191.109.144.0/20 maxlen: 20
                          191.109.160.0/20 maxlen: 20
                          191.109.176.0/20 maxlen: 20
                          191.109.192.0/20 maxlen: 20
                          191.109.208.0/20 maxlen: 20
                          191.109.224.0/20 maxlen: 20
                          191.109.240.0/20 maxlen: 20
                          191.110.0.0/20 maxlen: 20
                          191.110.16.0/20 maxlen: 20
                          191.110.32.0/20 maxlen: 20
                          191.110.48.0/20 maxlen: 20
                          191.110.64.0/18 maxlen: 18
                          191.110.128.0/18 maxlen: 18
                          191.110.192.0/18 maxlen: 18
                          191.111.0.0/19 maxlen: 19
                          191.111.32.0/20 maxlen: 20
                          191.111.48.0/20 maxlen: 20
                          191.111.64.0/20 maxlen: 20
                          191.111.80.0/20 maxlen: 20
                          191.111.96.0/20 maxlen: 20
                          191.111.112.0/20 maxlen: 20
                          191.111.128.0/18 maxlen: 18
                          191.111.192.0/19 maxlen: 19
                          191.111.224.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1837656 (0x1c0a58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 27 14:12:36 2022 GMT
            Not After : Sep 27 14:12:36 2024 GMT
        Subject: CN=10809a984c00b3333c2ea2fbe136f40f81ae20d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:47:f4:e3:19:3d:e0:13:7a:ae:54:66:82:
                    e8:dd:50:e3:85:d7:ea:47:d2:c9:37:46:e8:fa:1a:
                    a5:0b:67:bc:a4:ca:96:c7:55:a1:08:84:64:50:51:
                    9a:93:57:b7:ff:4f:5f:8b:a7:d5:1d:ac:f6:9b:d1:
                    48:8f:66:63:c2:67:07:97:07:67:ee:01:07:22:05:
                    0c:83:91:99:c8:06:7b:44:b7:26:91:bc:80:3d:50:
                    eb:77:f0:ad:5b:02:31:ae:64:b5:3c:0d:c5:41:f3:
                    25:4d:60:bc:43:fa:f1:2e:4f:bc:b9:ab:5d:8c:78:
                    c8:63:9f:b0:32:d4:c8:c9:83:17:47:09:a7:0d:74:
                    51:d4:cc:49:4d:3b:d3:f2:b1:eb:f1:ff:67:0f:58:
                    98:56:c6:1c:f9:db:68:15:f7:4d:fa:80:4c:1a:61:
                    3d:e2:be:07:dc:53:7c:7d:fd:2f:bd:45:8b:fe:24:
                    f6:cc:4e:f6:26:1e:2e:8e:ab:68:18:a5:c8:b9:21:
                    f5:b9:a1:7b:56:a4:1a:b0:ba:b9:d6:85:aa:3a:b0:
                    c2:7f:50:8b:63:2b:8b:56:d6:b3:bb:a3:c5:e0:2e:
                    b4:b6:c6:e5:e1:4a:fe:0c:aa:0b:c2:9f:aa:9d:11:
                    fd:55:c4:e1:95:68:ec:30:cd:05:38:59:68:eb:7a:
                    6a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:94:B9:3E:0A:B0:35:B5:3E:D0:14:D2:39:65:3A:99:A5:B2:A0:73
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/10809a984c00b3333c2ea2fbe136f40f81ae20d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.106.128.0-191.107.127.255
                  191.107.144.0-191.111.255.255

    Signature Algorithm: sha256WithRSAEncryption
         78:ab:84:cd:4a:6b:b2:48:3b:a0:d5:96:d5:58:92:af:bc:ad:
         e3:47:b0:ac:b8:a8:4e:65:d7:e4:1b:ab:fe:8c:c5:89:78:df:
         a6:ae:81:9b:b7:d3:92:05:10:80:04:0b:58:f9:92:1e:2e:96:
         de:b0:92:b5:86:36:db:95:9e:93:04:89:ad:a4:34:10:05:10:
         4e:ac:8c:58:a8:75:c0:e6:c2:a1:db:47:40:4c:61:8a:7e:fc:
         7b:f8:b9:7a:56:66:b1:28:95:18:53:cb:c2:d8:98:d1:22:39:
         49:27:27:e2:70:6d:8f:ce:ba:68:9f:c3:04:f2:16:98:b6:74:
         47:9b:5b:36:4a:b5:ee:15:fe:dc:9b:23:fb:02:f0:7f:c0:04:
         3c:ef:f3:cf:ef:eb:bf:4a:32:30:bf:d7:bf:2b:28:82:d6:09:
         4d:14:68:bf:81:d4:16:ea:d3:04:ba:24:b0:72:5b:44:b1:c5:
         80:b2:63:7e:23:c4:a6:30:f0:95:3a:a2:b8:a5:0d:f6:1b:25:
         5a:3d:a9:a4:ea:c3:cd:73:9d:8a:b0:56:0d:32:c0:78:f4:d4:
         06:a4:26:bc:ee:89:66:26:f8:5d:85:d0:39:f1:6b:5d:13:41:
         af:f3:1a:b0:b5:0b:27:f1:03:1e:c7:eb:a6:13:6c:21:b1:6b:
         61:a5:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org