Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/86c82baac01e948bccbf5a5ccae33658f6afc8c3.roa
File:                     86c82baac01e948bccbf5a5ccae33658f6afc8c3.roa (raw, json)
Hash identifier:          ai3HDc2fq0Huf7i4QQe8z/c0CUeWOt1C+UzyLN55KR4=
Subject key identifier:   6E:16:40:DA:C0:24:70:C6:D2:05:1A:8B:95:9C:88:97:1F:93:E6:DA
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1D4D1E
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/86c82baac01e948bccbf5a5ccae33658f6afc8c3.roa
Signing time:             Mon 03 Oct 2022 13:42:29 +0000
ROA not before:           Mon 26 Sep 2022 20:11:47 +0000
ROA not after:            Thu 26 Sep 2024 20:11:47 +0000
asID:                     3816
IP address blocks:        179.32.0.0/20 maxlen: 20
                          179.32.16.0/22 maxlen: 22
                          179.32.20.0/22 maxlen: 22
                          179.32.24.0/22 maxlen: 22
                          179.32.28.0/22 maxlen: 22
                          179.32.32.0/22 maxlen: 22
                          179.32.34.0/23 maxlen: 23
                          179.32.36.0/22 maxlen: 22
                          179.32.40.0/22 maxlen: 22
                          179.32.44.0/22 maxlen: 22
                          179.32.48.0/22 maxlen: 22
                          179.32.52.0/22 maxlen: 22
                          179.32.56.0/22 maxlen: 22
                          179.32.60.0/22 maxlen: 22
                          179.32.64.0/20 maxlen: 20
                          179.32.80.0/20 maxlen: 20
                          179.32.96.0/20 maxlen: 20
                          179.32.112.0/20 maxlen: 20
                          179.32.128.0/20 maxlen: 20
                          179.32.144.0/20 maxlen: 20
                          179.32.160.0/20 maxlen: 20
                          179.32.176.0/20 maxlen: 20
                          179.32.192.0/20 maxlen: 20
                          179.32.208.0/20 maxlen: 20
                          179.32.224.0/20 maxlen: 20
                          179.32.240.0/20 maxlen: 20
                          179.33.0.0/22 maxlen: 22
                          179.33.4.0/22 maxlen: 22
                          179.33.8.0/22 maxlen: 22
                          179.33.12.0/22 maxlen: 22
                          179.33.16.0/22 maxlen: 22
                          179.33.20.0/22 maxlen: 22
                          179.33.24.0/22 maxlen: 22
                          179.33.28.0/22 maxlen: 22
                          179.33.32.0/20 maxlen: 20
                          179.33.48.0/20 maxlen: 20
                          179.33.64.0/20 maxlen: 20
                          179.33.80.0/20 maxlen: 20
                          179.33.96.0/24 maxlen: 24
                          179.33.97.0/24 maxlen: 24
                          179.33.98.0/24 maxlen: 24
                          179.33.99.0/24 maxlen: 24
                          179.33.100.0/24 maxlen: 24
                          179.33.101.0/24 maxlen: 24
                          179.33.102.0/24 maxlen: 24
                          179.33.103.0/24 maxlen: 24
                          179.33.104.0/22 maxlen: 22
                          179.33.110.0/23 maxlen: 23
                          179.33.112.0/20 maxlen: 20
                          179.33.128.0/21 maxlen: 21
                          179.33.136.0/22 maxlen: 22
                          179.33.140.0/22 maxlen: 22
                          179.33.144.0/20 maxlen: 20
                          179.33.160.0/21 maxlen: 21
                          179.33.168.0/23 maxlen: 23
                          179.33.170.0/23 maxlen: 23
                          179.33.172.0/23 maxlen: 23
                          179.33.174.0/24 maxlen: 24
                          179.33.175.0/24 maxlen: 24
                          179.33.176.0/22 maxlen: 22
                          179.33.180.0/22 maxlen: 22
                          179.33.184.0/22 maxlen: 22
                          179.33.188.0/22 maxlen: 22
                          179.33.192.0/20 maxlen: 20
                          179.33.208.0/22 maxlen: 22
                          179.33.210.0/24 maxlen: 24
                          179.33.212.0/22 maxlen: 22
                          179.33.216.0/22 maxlen: 22
                          179.33.220.0/22 maxlen: 22
                          179.33.224.0/21 maxlen: 21
                          179.33.232.0/21 maxlen: 21
                          179.33.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920286 (0x1d4d1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 26 20:11:47 2022 GMT
            Not After : Sep 26 20:11:47 2024 GMT
        Subject: CN=86c82baac01e948bccbf5a5ccae33658f6afc8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:9b:23:4a:46:6c:a0:50:93:36:c8:59:9d:
                    c6:21:81:4a:d2:60:44:fe:12:9d:85:b4:6a:45:01:
                    e8:60:01:4a:9b:53:2a:fa:51:50:9d:91:7d:4b:43:
                    43:71:5a:f1:a9:21:89:2d:f0:a8:f1:b1:c5:26:9c:
                    ec:d6:27:ad:1c:9c:97:c6:22:7a:72:36:2f:60:15:
                    0d:c8:d3:45:0b:ae:b6:13:c4:54:00:d5:f5:80:32:
                    e4:c5:60:3f:4e:79:73:da:7c:fb:5c:20:95:b7:32:
                    2d:c4:9c:95:a1:66:db:17:57:2d:85:ed:bf:c4:08:
                    45:79:4e:02:d1:74:c2:d9:f0:a0:c2:aa:86:bd:63:
                    57:91:9a:fa:ea:f2:87:09:af:82:dd:00:9e:fa:30:
                    9a:17:a6:68:42:37:49:4a:06:2f:a7:4b:3d:7a:7d:
                    2d:3c:05:b3:66:da:95:ec:9c:81:14:d1:4e:dc:b1:
                    21:e8:ac:ce:20:70:65:31:db:c7:5f:00:e0:01:c2:
                    09:bf:41:4f:4c:dc:5d:4e:1c:85:f9:62:e6:92:33:
                    c5:80:0c:9f:39:31:d9:15:7e:9b:d0:12:27:92:5e:
                    12:d3:cc:04:e8:ca:1c:b3:57:00:41:d3:c2:eb:5f:
                    27:92:61:34:2d:f2:88:5a:e7:5a:fb:89:7e:36:80:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:16:40:DA:C0:24:70:C6:D2:05:1A:8B:95:9C:88:97:1F:93:E6:DA
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/86c82baac01e948bccbf5a5ccae33658f6afc8c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.32.0.0-179.33.107.255
                  179.33.110.0-179.33.255.255

    Signature Algorithm: sha256WithRSAEncryption
         7d:57:4f:a5:b6:a8:1b:ff:d2:29:5e:ec:5e:ad:d3:a1:f9:85:
         c5:6c:a3:0a:c5:27:9c:8f:71:bc:fe:c4:08:e4:7d:9a:56:9f:
         e1:a3:08:a0:96:e5:2e:e0:04:6a:8e:dd:06:95:ae:53:6e:71:
         f0:50:06:20:9c:7e:d4:96:b5:d4:e2:a3:ef:7c:ed:3f:7c:14:
         25:08:99:e0:de:b2:46:23:30:60:f2:59:84:76:b9:5c:bc:29:
         16:28:e1:52:d3:3a:44:7d:bb:bc:03:9c:03:4d:19:7e:16:28:
         1f:6c:43:a2:c8:8c:e3:11:b7:ca:f5:c5:43:28:52:d3:c8:f4:
         20:a8:fb:b4:f6:2a:39:d6:1c:0f:7d:fb:84:67:ed:a1:94:99:
         fc:18:52:b5:e9:f3:e5:34:b5:21:b1:92:04:8a:55:66:f5:4f:
         be:05:60:93:88:31:b2:29:cb:cd:91:ee:34:2f:4d:f9:80:5c:
         9b:4b:a6:1b:19:14:52:1d:e8:58:61:f5:c9:4d:41:43:7c:7d:
         10:f1:8d:41:7d:ed:2f:97:31:91:bc:34:ff:79:52:7b:d6:22:
         08:3a:7d:df:ad:55:43:ad:be:53:61:5d:1f:a4:c1:fc:70:a4:
         ad:c5:af:67:9d:99:be:f4:1c:7e:2f:38:5d:9d:48:2b:14:af:
         0f:2a:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org