Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f6d7f6a035ffb4e1bc8c3d74a07a147db1eef391.roa
File:                     f6d7f6a035ffb4e1bc8c3d74a07a147db1eef391.roa (raw, json)
Hash identifier:          hXfTO8cipOn0AFnNF57+t240juPYow3QE2doKwiREQs=
Subject key identifier:   8C:38:66:0C:19:5F:68:7D:36:7E:15:E0:7C:F0:15:02:2F:8F:AE:91
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1D625F
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f6d7f6a035ffb4e1bc8c3d74a07a147db1eef391.roa
Signing time:             Mon 03 Oct 2022 14:08:08 +0000
ROA not before:           Thu 29 Sep 2022 19:54:15 +0000
ROA not after:            Sun 29 Sep 2024 19:54:15 +0000
asID:                     22368
IP address blocks:        179.33.108.0/24 maxlen: 24
                          179.33.109.0/24 maxlen: 24
                          181.236.176.0/23 maxlen: 23
                          181.236.178.0/23 maxlen: 23
                          181.236.180.0/23 maxlen: 23
                          181.236.182.0/24 maxlen: 24
                          181.236.183.0/24 maxlen: 24
                          181.236.184.0/23 maxlen: 23
                          181.236.186.0/23 maxlen: 23
                          181.236.188.0/23 maxlen: 23
                          181.236.190.0/23 maxlen: 23
                          181.236.192.0/23 maxlen: 23
                          181.236.194.0/23 maxlen: 23
                          181.236.196.0/23 maxlen: 23
                          181.236.198.0/23 maxlen: 23
                          181.236.222.0/24 maxlen: 24
                          181.236.224.0/23 maxlen: 23
                          181.236.224.0/24 maxlen: 24
                          181.236.225.0/24 maxlen: 24
                          181.236.226.0/23 maxlen: 23
                          181.236.228.0/23 maxlen: 23
                          181.236.230.0/23 maxlen: 23
                          181.236.232.0/23 maxlen: 23
                          181.236.234.0/23 maxlen: 23
                          181.236.236.0/23 maxlen: 23
                          181.236.238.0/23 maxlen: 23
                          181.236.240.0/23 maxlen: 23
                          181.236.242.0/23 maxlen: 23
                          181.236.244.0/23 maxlen: 23
                          181.236.246.0/23 maxlen: 23
                          181.236.248.0/23 maxlen: 23
                          181.236.250.0/23 maxlen: 23
                          181.236.252.0/23 maxlen: 23
                          181.236.254.0/23 maxlen: 23
                          190.252.104.0/24 maxlen: 24
                          190.252.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925727 (0x1d625f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 29 19:54:15 2022 GMT
            Not After : Sep 29 19:54:15 2024 GMT
        Subject: CN=f6d7f6a035ffb4e1bc8c3d74a07a147db1eef391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:a9:ab:a7:7d:ce:f9:a3:06:cd:58:b4:d1:
                    ae:7d:65:37:f2:a7:2e:b8:3a:21:2e:9d:72:68:78:
                    3a:12:14:fa:7f:74:70:4c:1a:21:6f:a9:39:a8:ed:
                    d5:9c:75:0c:a5:71:0d:7c:bf:15:94:57:74:30:0a:
                    7b:f4:3d:ef:3a:4f:34:e7:90:4a:63:e0:93:5b:7e:
                    53:6b:17:8f:7d:8a:81:ef:90:05:c6:32:cf:8f:77:
                    d5:0f:63:44:83:61:70:d8:02:df:5f:ff:51:0d:92:
                    9f:e3:6c:71:42:4e:70:00:56:51:fd:40:49:6f:dc:
                    56:15:ee:43:a9:63:8e:a2:e4:fb:7d:d5:88:e5:34:
                    9f:ad:ae:e1:a8:d2:0e:a6:53:24:3d:41:96:e0:b6:
                    07:27:42:f5:e5:5c:7e:f3:cd:69:5f:a7:0e:98:21:
                    20:81:66:50:32:75:db:6f:28:29:8d:e0:86:f9:2b:
                    7f:96:11:73:1e:76:cd:5b:eb:fa:e8:c6:d6:0d:da:
                    d8:9a:b2:78:57:be:0e:26:e4:45:28:ef:34:10:70:
                    22:e4:ab:fa:ef:a5:cb:48:6f:d0:e6:8c:52:99:23:
                    1f:47:87:2c:28:3b:31:e3:4f:68:d2:cb:12:87:80:
                    b3:e8:b8:78:04:0e:1c:28:4e:9f:5a:0b:b4:6a:62:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:38:66:0C:19:5F:68:7D:36:7E:15:E0:7C:F0:15:02:2F:8F:AE:91
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f6d7f6a035ffb4e1bc8c3d74a07a147db1eef391.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.33.108.0/23
                  181.236.176.0-181.236.199.255
                  181.236.222.0/24
                  181.236.224.0/19
                  190.252.104.0/24
                  190.252.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d0:a9:59:a6:f5:4f:fa:0f:e9:c2:91:07:ef:65:1e:d2:8f:
         98:21:2f:f4:eb:da:8d:62:d2:c5:54:1e:ad:d2:2e:cd:6e:74:
         aa:1e:06:af:d8:d9:55:96:c2:89:42:18:57:52:e7:80:10:be:
         c3:e3:5c:53:30:e0:2c:b0:7b:ae:34:bf:bc:3e:f4:b5:73:c3:
         66:b7:67:3f:d2:7f:6e:97:b3:6c:26:d8:d4:4a:cd:45:3f:57:
         24:f1:23:77:e1:21:6f:b2:fe:15:41:d0:7d:63:31:80:58:40:
         c0:b3:1d:f0:e2:31:af:ff:6e:ce:39:aa:14:28:2c:44:c0:ab:
         06:b2:5e:ad:26:0e:9c:cb:26:3b:c5:78:88:53:15:0b:d5:f4:
         5f:a2:25:86:d3:60:a0:54:ef:0c:b4:44:83:66:d8:1d:0d:28:
         9d:99:03:94:bd:a8:a0:c4:98:36:cf:8c:73:13:c3:cd:e7:f4:
         53:c3:bd:7b:11:64:72:8f:45:ea:93:d3:ed:4c:1b:d1:54:07:
         51:8d:97:b1:c6:e1:03:93:0a:c8:1d:10:16:71:6e:98:f9:bc:
         28:47:b4:3e:88:11:aa:d9:47:4a:f2:1f:2a:a8:15:06:b1:e9:
         dd:60:9d:63:f6:9d:d8:38:97:a8:7e:09:7d:74:df:a7:0f:8c:
         1c:ed:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org