Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/c6e8be12e22ea5ac30a4813544088771a08ac62d.roa
File:                     c6e8be12e22ea5ac30a4813544088771a08ac62d.roa (raw, json)
Hash identifier:          Tw++8wGyPTKc09aQTYD7QzeId5kZ/IxPnrCW2HAlupc=
Subject key identifier:   F1:32:D1:BB:DC:F3:33:A2:08:D8:9C:4F:83:CD:DC:51:8E:49:91:86
Certificate issuer:       /CN=74b184780ab11522108afea08bba6483c8a4038c
Certificate serial:       B37E
Authority key identifier: 55:25:D9:C8:3C:B5:EC:05:1E:0B:45:87:46:F1:59:28:93:13:ED:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74b184780ab11522108afea08bba6483c8a4038c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/c6e8be12e22ea5ac30a4813544088771a08ac62d.roa
Signing time:             Tue 22 Mar 2022 16:15:02 +0000
ROA not before:           Wed 02 Mar 2022 03:00:00 +0000
ROA not after:            Sat 02 Mar 2024 03:00:00 +0000
asID:                     28024
IP address blocks:        179.59.64.0/18 maxlen: 18
                          179.59.128.0/18 maxlen: 18
                          161.22.128.0/17 maxlen: 17
                          161.22.128.0/19 maxlen: 19
                          161.22.160.0/19 maxlen: 19
                          161.22.192.0/19 maxlen: 19
                          161.22.224.0/19 maxlen: 19
                          161.56.0.0/16 maxlen: 16
                          161.56.0.0/18 maxlen: 18
                          161.56.64.0/18 maxlen: 18
                          161.56.128.0/18 maxlen: 18
                          161.56.192.0/18 maxlen: 18
                          161.138.0.0/16 maxlen: 16
                          161.138.0.0/18 maxlen: 18
                          161.138.64.0/18 maxlen: 18
                          161.138.128.0/18 maxlen: 18
                          161.138.192.0/18 maxlen: 18
                          179.58.0.0/16 maxlen: 16
                          179.58.0.0/18 maxlen: 18
                          179.58.64.0/18 maxlen: 18
                          179.58.128.0/18 maxlen: 18
                          179.58.192.0/18 maxlen: 18
                          179.59.0.0/16 maxlen: 16
                          179.59.0.0/18 maxlen: 18
                          179.59.192.0/18 maxlen: 18
                          181.227.0.0/16 maxlen: 16
                          181.227.0.0/18 maxlen: 18
                          181.227.64.0/18 maxlen: 18
                          181.227.128.0/18 maxlen: 18
                          181.227.192.0/18 maxlen: 18
                          186.2.0.0/17 maxlen: 17
                          186.2.0.0/19 maxlen: 19
                          186.2.32.0/19 maxlen: 19
                          186.2.64.0/19 maxlen: 19
                          186.2.96.0/19 maxlen: 19
                          186.27.0.0/17 maxlen: 17
                          186.27.0.0/19 maxlen: 19
                          186.27.32.0/19 maxlen: 19
                          186.27.64.0/19 maxlen: 19
                          186.27.96.0/19 maxlen: 19
                          200.85.144.0/21 maxlen: 21
                          200.85.144.0/24 maxlen: 24
                          200.85.145.0/24 maxlen: 24
                          200.85.146.0/24 maxlen: 24
                          200.85.147.0/24 maxlen: 24
                          200.85.148.0/24 maxlen: 24
                          200.85.149.0/24 maxlen: 24
                          200.85.150.0/24 maxlen: 24
                          2803:5700::/32 maxlen: 32
                          2803:5700:4000::/34 maxlen: 34
                          2803:5700::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45950 (0xb37e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b184780ab11522108afea08bba6483c8a4038c
        Validity
            Not Before: Mar  2 03:00:00 2022 GMT
            Not After : Mar  2 03:00:00 2024 GMT
        Subject: CN=c6e8be12e22ea5ac30a4813544088771a08ac62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:2c:18:d7:dd:16:c3:79:67:d7:f9:d5:32:
                    6b:3a:85:ee:11:1a:34:d6:a7:e9:8e:98:31:b1:67:
                    db:6d:c9:a1:97:4b:be:7d:8e:4c:af:df:83:6d:61:
                    da:dc:75:45:60:2c:f4:b3:97:ae:54:df:64:b1:ff:
                    17:63:12:d0:3d:43:15:26:10:a9:a5:43:92:b5:3d:
                    ea:96:39:e0:e4:e9:21:fb:9d:fc:22:21:d8:36:0c:
                    04:a2:3c:81:f9:3a:87:33:a8:ba:57:0a:3c:76:75:
                    69:a7:3c:49:f6:06:eb:2a:dc:57:ba:6a:8e:6d:ee:
                    cd:b1:bd:c8:25:c9:11:ff:69:4e:77:b0:35:ce:60:
                    43:0b:10:c5:3b:2b:b6:7a:74:65:b6:ad:84:e3:57:
                    54:33:d8:21:5e:0c:78:02:51:35:5a:5a:31:77:2d:
                    bb:10:07:42:94:52:43:66:aa:32:be:2f:cc:1f:9d:
                    e2:34:34:0c:45:d7:50:de:0d:8c:5d:93:40:94:f1:
                    bd:a9:fd:4d:68:eb:c1:80:da:16:84:9a:c9:ab:ae:
                    29:7f:92:d2:20:2b:cf:7b:5a:88:94:88:a9:4f:97:
                    6a:a7:39:39:f8:76:74:7b:d0:e9:35:02:83:46:5b:
                    23:c8:0b:1c:6a:ad:22:e8:91:04:a0:f9:d0:22:e7:
                    5d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:32:D1:BB:DC:F3:33:A2:08:D8:9C:4F:83:CD:DC:51:8E:49:91:86
            X509v3 Authority Key Identifier:
                keyid:55:25:D9:C8:3C:B5:EC:05:1E:0B:45:87:46:F1:59:28:93:13:ED:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74b184780ab11522108afea08bba6483c8a4038c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/c6e8be12e22ea5ac30a4813544088771a08ac62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/74b184780ab11522108afea08bba6483c8a4038c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.128.0/17
                  161.56.0.0/16
                  161.138.0.0/16
                  179.58.0.0/15
                  181.227.0.0/16
                  186.2.0.0/17
                  186.27.0.0/17
                  200.85.144.0/21
                IPv6:
                  2803:5700::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:9a:74:e1:b2:d8:28:64:43:66:59:3c:35:c9:d4:a3:63:09:
         2e:18:07:76:01:3d:4f:88:a3:8f:89:55:b6:66:23:ea:27:d2:
         87:25:49:08:9a:aa:d9:0b:f1:c5:bb:af:73:1d:e2:4f:8b:e9:
         b9:8f:61:14:63:25:18:ca:eb:30:10:ab:fb:d7:8a:bc:e2:66:
         c6:7d:3a:4e:b3:d0:e5:93:fc:f7:55:53:fa:70:cf:07:b1:98:
         d5:4b:95:dc:1a:fd:94:19:55:9a:94:da:66:ef:8b:0f:47:ab:
         c6:9c:9f:81:90:59:2b:50:d9:a3:bc:ea:90:24:8f:16:3d:07:
         c7:c3:93:cd:6d:9a:97:f2:ef:ad:d6:6a:fa:b7:1a:cb:3a:1f:
         e8:97:97:27:41:ee:20:ee:80:f9:9c:37:63:4d:61:8c:2b:23:
         c8:8f:b6:3b:1a:7f:33:05:a4:9b:fc:a0:81:2f:11:fb:b3:6e:
         42:c8:78:e1:b7:03:b8:0f:86:57:39:d3:43:5c:75:fe:08:5e:
         39:86:30:80:88:55:0d:2c:e0:19:a3:b6:01:5c:6b:78:40:cb:
         17:33:57:66:a2:22:53:1a:44:4b:f2:b3:51:f1:3d:e4:a7:e9:
         46:1f:17:0b:85:c6:16:9b:ec:37:75:fd:1a:98:30:5c:47:51:
         9a:56:b3:8a
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIDALN+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc0
YjE4NDc4MGFiMTE1MjIxMDhhZmVhMDhiYmE2NDgzYzhhNDAzOGMwHhcNMjIwMzAy
MDMwMDAwWhcNMjQwMzAyMDMwMDAwWjAzMTEwLwYDVQQDEyhjNmU4YmUxMmUyMmVh
NWFjMzBhNDgxMzU0NDA4ODc3MWEwOGFjNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt3csGNfdFsN5Z9f51TJrOoXuERo01qfpjpgxsWfbbcmhl0u+
fY5Mr9+DbWHa3HVFYCz0s5euVN9ksf8XYxLQPUMVJhCppUOStT3qljng5Okh+538
IiHYNgwEojyB+TqHM6i6Vwo8dnVppzxJ9gbrKtxXumqObe7Nsb3IJckR/2lOd7A1
zmBDCxDFOyu2enRltq2E41dUM9ghXgx4AlE1Wloxdy27EAdClFJDZqoyvi/MH53i
NDQMRddQ3g2MXZNAlPG9qf1NaOvBgNoWhJrJq64pf5LSICvPe1qIlIipT5dqpzk5
+HZ0e9DpNQKDRlsjyAscaq0i6JEEoPnQIudduQIDAQABo4ICkDCCAowwHQYDVR0O
BBYEFPEy0bvc8zOiCNicT4PN3FGOSZGGMB8GA1UdIwQYMBaAFFUl2cg8tewFHgtF
h0bxWSiTE+0WMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzRiMTg0
NzgwYWIxMTUyMjEwOGFmZWEwOGJiYTY0ODNjOGE0MDM4Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTczZTI3N2MtNDM3My00NjA4LWFhM2ItYWRjY2M3
MGVjNGJjL2M2ZThiZTEyZTIyZWE1YWMzMGE0ODEzNTQ0MDg4NzcxYTA4YWM2MmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNzNlMjc3Yy00MzczLTQ2MDgtYWEzYi1hZGNj
YzcwZWM0YmMvNzRiMTg0NzgwYWIxMTUyMjEwOGFmZWEwOGJiYTY0ODNjOGE0MDM4
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBUBggrBgEFBQcBBwEB/wRF
MEMwMgQCAAEwLAMEB6EWgAMDAKE4AwMAoYoDAwGzOgMDALXjAwQHugIAAwQHuhsA
AwQDyFWQMA0EAgACMAcDBQAoA1cAMA0GCSqGSIb3DQEBCwUAA4IBAQCZmnThstgo
ZENmWTw1ydSjYwkuGAd2AT1PiKOPiVW2ZiPqJ9KHJUkImqrZC/HFu69zHeJPi+m5
j2EUYyUYyuswEKv714q84mbGfTpOs9Dlk/z3VVP6cM8HsZjVS5XcGv2UGVWalNpm
74sPR6vGnJ+BkFkrUNmjvOqQJI8WPQfHw5PNbZqX8u+t1mr6txrLOh/ol5cnQe4g
7oD5nDdjTWGMKyPIj7Y7Gn8zBaSb/KCBLxH7s25CyHjhtwO4D4ZXOdNDXHX+CF45
hjCAiFUNLOAZo7YBXGt4QMsXM1dmoiJTGkRL8rNR8T3kp+lGHxcLhcYWm+w3df0a
mDBcR1GaVrOK
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org