Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/ed4ff3adedf27f4cc1ccacab3e3c25bd0ce33df6.roa
File:                     ed4ff3adedf27f4cc1ccacab3e3c25bd0ce33df6.roa (raw, json)
Hash identifier:          ijI1RG2iG9klkuFQ89In8Xixfzn/DVo6PRiO2WJ0lW0=
Subject key identifier:   10:93:43:B8:F3:B3:63:84:AC:07:58:18:72:59:ED:D4:35:D2:1B:E7
Certificate issuer:       /CN=74b184780ab11522108afea08bba6483c8a4038c
Certificate serial:       121532
Authority key identifier: 55:25:D9:C8:3C:B5:EC:05:1E:0B:45:87:46:F1:59:28:93:13:ED:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74b184780ab11522108afea08bba6483c8a4038c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/ed4ff3adedf27f4cc1ccacab3e3c25bd0ce33df6.roa
Signing time:             Fri 01 Mar 2024 08:30:13 +0000
ROA not before:           Fri 01 Mar 2024 08:30:13 +0000
ROA not after:            Sun 01 Mar 2026 08:30:13 +0000
asID:                     28024
IP address blocks:        179.59.64.0/18 maxlen: 18
                          179.59.128.0/18 maxlen: 18
                          161.22.128.0/17 maxlen: 17
                          161.22.128.0/19 maxlen: 19
                          161.22.160.0/19 maxlen: 19
                          161.22.192.0/19 maxlen: 19
                          161.22.224.0/19 maxlen: 19
                          161.56.0.0/16 maxlen: 16
                          161.56.0.0/18 maxlen: 18
                          161.56.64.0/18 maxlen: 18
                          161.56.128.0/18 maxlen: 18
                          161.56.192.0/18 maxlen: 18
                          161.138.0.0/16 maxlen: 16
                          161.138.0.0/18 maxlen: 18
                          161.138.64.0/18 maxlen: 18
                          161.138.128.0/18 maxlen: 18
                          161.138.192.0/18 maxlen: 18
                          179.58.0.0/16 maxlen: 16
                          179.58.0.0/18 maxlen: 18
                          179.58.64.0/18 maxlen: 18
                          179.58.128.0/18 maxlen: 18
                          179.58.192.0/18 maxlen: 18
                          179.59.0.0/16 maxlen: 16
                          179.59.0.0/18 maxlen: 18
                          179.59.192.0/18 maxlen: 18
                          181.227.0.0/16 maxlen: 16
                          181.227.0.0/18 maxlen: 18
                          181.227.64.0/18 maxlen: 18
                          181.227.128.0/18 maxlen: 18
                          181.227.192.0/18 maxlen: 18
                          186.2.0.0/17 maxlen: 17
                          186.2.0.0/18 maxlen: 18
                          186.2.0.0/19 maxlen: 19
                          186.2.32.0/19 maxlen: 19
                          186.2.64.0/18 maxlen: 18
                          186.2.64.0/19 maxlen: 19
                          186.2.96.0/19 maxlen: 19
                          186.27.0.0/17 maxlen: 17
                          186.27.0.0/18 maxlen: 18
                          186.27.0.0/19 maxlen: 19
                          186.27.32.0/19 maxlen: 19
                          186.27.64.0/18 maxlen: 18
                          186.27.64.0/19 maxlen: 19
                          186.27.96.0/19 maxlen: 19
                          200.85.144.0/21 maxlen: 21
                          200.85.144.0/24 maxlen: 24
                          200.85.145.0/24 maxlen: 24
                          200.85.146.0/24 maxlen: 24
                          200.85.147.0/24 maxlen: 24
                          200.85.148.0/24 maxlen: 24
                          200.85.149.0/24 maxlen: 24
                          200.85.150.0/24 maxlen: 24
                          2803:5700::/32 maxlen: 32
                          2803:5700:4000::/34 maxlen: 34
                          2803:5700::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185074 (0x121532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b184780ab11522108afea08bba6483c8a4038c
        Validity
            Not Before: Mar  1 08:30:13 2024 GMT
            Not After : Mar  1 08:30:13 2026 GMT
        Subject: CN=ed4ff3adedf27f4cc1ccacab3e3c25bd0ce33df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:c3:56:10:aa:0b:fa:ec:36:0d:dc:8e:a8:
                    2b:cc:1f:26:05:48:03:91:be:9e:d1:1a:ee:01:a4:
                    a9:8c:a2:9d:dc:96:0c:d7:14:b6:f2:ef:e6:9f:23:
                    c7:cf:5d:84:8e:0d:f4:87:3e:d2:91:ce:ae:4c:ab:
                    9c:6a:6c:26:65:b1:5d:65:c5:42:dd:2b:b6:9b:aa:
                    a3:bc:52:3b:09:74:97:da:94:0f:8d:61:9f:43:5c:
                    00:dc:84:f4:ce:d1:32:58:63:81:08:52:45:5b:5b:
                    d9:1f:f9:54:88:17:1c:b1:18:ca:20:43:9a:a9:20:
                    ac:df:7a:16:76:ac:8c:25:41:bd:2c:1a:dd:2a:b5:
                    67:f2:c1:26:2b:a8:82:1a:ce:22:c8:16:dd:87:f7:
                    0a:0d:53:23:24:2f:23:23:44:89:a6:08:c5:86:ae:
                    75:4e:8c:c3:34:15:06:ef:fd:cf:11:bd:27:30:55:
                    86:72:b0:30:a4:b2:59:41:c6:43:0d:1d:a7:c8:cf:
                    ae:66:af:1d:b1:9c:30:69:7d:5d:07:7e:8c:d6:52:
                    10:4a:b6:f9:19:25:48:46:a9:8f:57:cf:18:1b:69:
                    f9:69:b5:27:e8:62:4b:40:4d:00:da:04:4b:83:71:
                    20:02:fb:bb:47:d7:a1:20:a7:fe:3d:2a:d8:f4:62:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:93:43:B8:F3:B3:63:84:AC:07:58:18:72:59:ED:D4:35:D2:1B:E7
            X509v3 Authority Key Identifier:
                keyid:55:25:D9:C8:3C:B5:EC:05:1E:0B:45:87:46:F1:59:28:93:13:ED:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74b184780ab11522108afea08bba6483c8a4038c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/ed4ff3adedf27f4cc1ccacab3e3c25bd0ce33df6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/74b184780ab11522108afea08bba6483c8a4038c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.128.0/17
                  161.56.0.0/16
                  161.138.0.0/16
                  179.58.0.0/15
                  181.227.0.0/16
                  186.2.0.0/17
                  186.27.0.0/17
                  200.85.144.0/21
                IPv6:
                  2803:5700::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:53:b1:23:0b:65:e9:9d:03:bb:f5:f5:66:2e:dd:b5:e3:78:
         b7:14:fd:12:d3:81:67:83:29:9c:ab:22:99:18:70:99:4a:21:
         fa:40:bf:67:72:82:eb:33:f3:11:15:64:48:9c:6a:b6:c9:d5:
         9d:36:e2:ee:1d:12:24:62:8d:c5:0d:13:d2:cd:bb:50:60:b9:
         94:9f:af:7a:41:5b:e3:3d:07:31:b0:f5:3e:97:5b:af:d8:22:
         16:0d:56:93:ad:95:e3:1e:2f:f8:3e:7f:31:8c:39:18:1c:58:
         f0:f7:c9:7b:c3:e4:ca:5f:db:6d:ae:32:53:72:51:c9:7a:a3:
         ce:76:fc:02:0e:ff:1c:4b:41:99:98:92:35:fb:00:6c:a5:79:
         3f:1a:04:61:83:b7:1c:17:72:3d:f3:8b:e2:88:43:52:97:6c:
         39:b0:a6:a3:20:7c:bd:30:8e:af:71:16:5c:7d:15:40:df:fd:
         5b:e1:c0:78:50:8b:2f:ef:e4:2f:7e:5e:fd:e9:af:f5:33:23:
         00:88:49:e7:fe:e5:7d:38:fc:59:83:47:da:e5:71:5d:5a:9f:
         18:12:50:5c:da:88:93:30:32:de:c3:e0:9f:e1:b4:45:09:79:
         f9:8b:33:04:d7:a5:e8:b6:69:8b:0b:d9:73:d8:37:ed:cc:6d:
         a1:f6:b3:98
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIDEhUyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc0
YjE4NDc4MGFiMTE1MjIxMDhhZmVhMDhiYmE2NDgzYzhhNDAzOGMwHhcNMjQwMzAx
MDgzMDEzWhcNMjYwMzAxMDgzMDEzWjAzMTEwLwYDVQQDEyhlZDRmZjNhZGVkZjI3
ZjRjYzFjY2FjYWIzZTNjMjViZDBjZTMzZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzwbDVhCqC/rsNg3cjqgrzB8mBUgDkb6e0RruAaSpjKKd3JYM
1xS28u/mnyPHz12Ejg30hz7Skc6uTKucamwmZbFdZcVC3Su2m6qjvFI7CXSX2pQP
jWGfQ1wA3IT0ztEyWGOBCFJFW1vZH/lUiBccsRjKIEOaqSCs33oWdqyMJUG9LBrd
KrVn8sEmK6iCGs4iyBbdh/cKDVMjJC8jI0SJpgjFhq51TozDNBUG7/3PEb0nMFWG
crAwpLJZQcZDDR2nyM+uZq8dsZwwaX1dB36M1lIQSrb5GSVIRqmPV88YG2n5abUn
6GJLQE0A2gRLg3EgAvu7R9ehIKf+PSrY9GL+NwIDAQABo4ICkDCCAowwHQYDVR0O
BBYEFBCTQ7jzs2OErAdYGHJZ7dQ10hvnMB8GA1UdIwQYMBaAFFUl2cg8tewFHgtF
h0bxWSiTE+0WMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzRiMTg0
NzgwYWIxMTUyMjEwOGFmZWEwOGJiYTY0ODNjOGE0MDM4Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTczZTI3N2MtNDM3My00NjA4LWFhM2ItYWRjY2M3
MGVjNGJjL2VkNGZmM2FkZWRmMjdmNGNjMWNjYWNhYjNlM2MyNWJkMGNlMzNkZjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNzNlMjc3Yy00MzczLTQ2MDgtYWEzYi1hZGNj
YzcwZWM0YmMvNzRiMTg0NzgwYWIxMTUyMjEwOGFmZWEwOGJiYTY0ODNjOGE0MDM4
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBUBggrBgEFBQcBBwEB/wRF
MEMwMgQCAAEwLAMEB6EWgAMDAKE4AwMAoYoDAwGzOgMDALXjAwQHugIAAwQHuhsA
AwQDyFWQMA0EAgACMAcDBQAoA1cAMA0GCSqGSIb3DQEBCwUAA4IBAQBaU7EjC2Xp
nQO79fVmLt2143i3FP0S04FngymcqyKZGHCZSiH6QL9ncoLrM/MRFWRInGq2ydWd
NuLuHRIkYo3FDRPSzbtQYLmUn696QVvjPQcxsPU+l1uv2CIWDVaTrZXjHi/4Pn8x
jDkYHFjw98l7w+TKX9ttrjJTclHJeqPOdvwCDv8cS0GZmJI1+wBspXk/GgRhg7cc
F3I984viiENSl2w5sKajIHy9MI6vcRZcfRVA3/1b4cB4UIsv7+Qvfl796a/1MyMA
iEnn/uV9OPxZg0fa5XFdWp8YElBc2oiTMDLew+Cf4bRFCXn5izME16XotmmLC9lz
2DftzG2h9rOY
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org