Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/4a2dbba7642503c493609f2ededb71c5e4e2a469.roa
File:                     4a2dbba7642503c493609f2ededb71c5e4e2a469.roa (raw, json)
Hash identifier:          r/Gh4n8JENZTynmL0sfHXld4QKQmc3pluF5/hWizOks=
Subject key identifier:   5D:3C:C8:EC:D6:7A:71:ED:66:02:8A:B3:EB:AA:47:73:F4:CF:1D:E6
Certificate issuer:       /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial:       14094F
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/4a2dbba7642503c493609f2ededb71c5e4e2a469.roa
Signing time:             Thu 10 Feb 2022 22:34:33 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     7438
IP address blocks:        200.36.161.0/24 maxlen: 24
                          200.36.162.0/24 maxlen: 24
                          200.36.163.0/24 maxlen: 24
                          200.36.164.0/24 maxlen: 24
                          200.36.166.0/23 maxlen: 23
                          200.36.166.0/24 maxlen: 24
                          200.36.167.0/24 maxlen: 24
                          200.36.168.0/24 maxlen: 24
                          200.36.169.0/24 maxlen: 24
                          200.36.170.0/24 maxlen: 24
                          200.36.171.0/24 maxlen: 24
                          200.36.172.0/24 maxlen: 24
                          200.36.173.0/24 maxlen: 24
                          200.36.174.0/24 maxlen: 24
                          200.36.175.0/24 maxlen: 24
                          200.36.176.0/24 maxlen: 24
                          200.36.177.0/24 maxlen: 24
                          200.36.178.0/23 maxlen: 23
                          200.36.178.0/24 maxlen: 24
                          200.36.180.0/23 maxlen: 23
                          200.36.180.0/24 maxlen: 24
                          200.36.182.0/23 maxlen: 23
                          200.36.182.0/24 maxlen: 24
                          200.36.183.0/24 maxlen: 24
                          200.36.184.0/22 maxlen: 22
                          200.36.184.0/24 maxlen: 24
                          200.36.185.0/24 maxlen: 24
                          200.36.186.0/23 maxlen: 23
                          200.36.186.0/24 maxlen: 24
                          200.36.187.0/24 maxlen: 24
                          200.36.188.0/22 maxlen: 22
                          200.36.188.0/23 maxlen: 23
                          200.36.189.0/24 maxlen: 24
                          200.36.190.0/23 maxlen: 24
                          200.36.190.0/24 maxlen: 24
                          200.36.191.0/24 maxlen: 24
                          200.39.0.0/23 maxlen: 23
                          200.39.11.0/24 maxlen: 24
                          200.39.13.0/24 maxlen: 24
                          200.39.14.0/23 maxlen: 23
                          200.39.14.0/24 maxlen: 24
                          200.39.15.0/24 maxlen: 24
                          200.39.17.0/24 maxlen: 24
                          200.39.18.0/24 maxlen: 24
                          200.39.2.0/24 maxlen: 24
                          200.39.20.0/24 maxlen: 24
                          200.39.21.0/24 maxlen: 24
                          200.39.22.0/24 maxlen: 24
                          200.39.23.0/24 maxlen: 24
                          200.39.24.0/22 maxlen: 22
                          200.39.24.0/24 maxlen: 24
                          200.39.25.0/24 maxlen: 24
                          200.39.26.0/24 maxlen: 24
                          200.39.28.0/23 maxlen: 23
                          200.39.28.0/24 maxlen: 24
                          200.39.29.0/24 maxlen: 24
                          200.39.30.0/24 maxlen: 24
                          200.39.31.0/24 maxlen: 24
                          200.39.7.0/24 maxlen: 24
                          200.39.8.0/24 maxlen: 24
                          200.39.9.0/24 maxlen: 24
                          200.76.80.0/21 maxlen: 21
                          200.76.82.0/24 maxlen: 24
                          200.76.88.0/23 maxlen: 23
                          200.76.90.0/23 maxlen: 24
                          200.76.92.0/22 maxlen: 22
                          201.162.128.0/18 maxlen: 18
                          201.162.128.0/20 maxlen: 20
                          201.162.128.0/21 maxlen: 21
                          201.162.136.0/21 maxlen: 24
                          201.162.144.0/24 maxlen: 24
                          201.162.162.0/24 maxlen: 24
                          201.162.178.0/24 maxlen: 24
                          201.162.191.0/24 maxlen: 24
                          201.162.192.0/23 maxlen: 23
                          201.162.192.0/24 maxlen: 24
                          201.162.193.0/24 maxlen: 24
                          201.162.194.0/24 maxlen: 24
                          201.162.224.0/23 maxlen: 23
                          201.162.224.0/24 maxlen: 24
                          201.162.233.0/24 maxlen: 24
                          201.162.234.0/24 maxlen: 24
                          201.162.236.0/24 maxlen: 24
                          201.162.247.0/24 maxlen: 24
                          201.166.128.0/19 maxlen: 19
                          201.166.128.0/20 maxlen: 20
                          201.166.128.0/22 maxlen: 22
                          201.166.132.0/24 maxlen: 24
                          201.166.133.0/24 maxlen: 24
                          201.166.137.0/24 maxlen: 24
                          201.166.144.0/20 maxlen: 20
                          201.166.148.0/22 maxlen: 22
                          201.166.151.0/24 maxlen: 24
                          201.166.160.0/20 maxlen: 20
                          201.166.168.0/24 maxlen: 24
                          201.166.169.0/24 maxlen: 24
                          201.166.175.0/24 maxlen: 24
                          201.166.176.0/21 maxlen: 21
                          201.166.176.0/24 maxlen: 24
                          201.166.177.0/24 maxlen: 24
                          201.166.178.0/24 maxlen: 24
                          201.166.180.0/22 maxlen: 24
                          201.166.184.0/21 maxlen: 21
                          201.166.188.0/24 maxlen: 24
                          201.166.189.0/24 maxlen: 24
                          201.166.190.0/24 maxlen: 24
                          201.166.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313103 (0x14094f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=4a2dbba7642503c493609f2ededb71c5e4e2a469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7d:43:26:79:f0:f1:1e:bf:ed:0d:f4:e7:98:
                    09:b0:2e:79:54:b2:f6:68:15:b3:f3:c4:ab:e7:91:
                    1c:84:35:c4:4c:54:8b:22:40:bd:8d:74:de:a2:1b:
                    b8:f5:24:6e:55:ac:f7:13:a5:22:2c:c7:39:62:8b:
                    34:97:c7:68:50:57:8a:58:2c:a6:7c:79:a5:b8:f9:
                    d3:c4:5e:e7:ab:5f:b6:27:d9:9e:df:6a:0c:03:a4:
                    48:34:3b:86:55:3a:56:ce:4e:2e:99:9a:01:87:82:
                    a6:1d:eb:91:76:17:fe:27:81:08:6a:b4:8b:0a:9b:
                    d6:ae:57:63:41:4e:42:02:14:ff:4c:75:30:22:65:
                    01:88:1e:39:31:85:5a:89:d6:65:83:1a:1b:63:c5:
                    1c:94:38:17:1c:42:7f:19:85:ed:3d:df:02:15:f9:
                    2d:cd:90:b9:8c:3a:a0:d3:a6:39:ba:af:3a:e7:38:
                    23:2c:61:7a:0f:65:de:bd:02:7b:86:a9:52:bb:20:
                    69:5f:e7:5a:44:a9:18:3b:fc:e6:4a:c9:55:ed:56:
                    36:18:16:0c:3a:69:75:6b:6f:c7:84:f9:2b:a9:b6:
                    ae:27:2d:10:02:83:a7:8d:fe:37:de:88:a5:06:3c:
                    b0:53:8c:95:64:4d:b8:7e:ce:6f:4d:3f:e6:c1:d3:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3C:C8:EC:D6:7A:71:ED:66:02:8A:B3:EB:AA:47:73:F4:CF:1D:E6
            X509v3 Authority Key Identifier:
                keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/4a2dbba7642503c493609f2ededb71c5e4e2a469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.161.0-200.36.164.255
                  200.36.166.0-200.36.191.255
                  200.39.0.0-200.39.2.255
                  200.39.7.0-200.39.9.255
                  200.39.11.0/24
                  200.39.13.0-200.39.15.255
                  200.39.17.0-200.39.18.255
                  200.39.20.0-200.39.31.255
                  200.76.80.0/20
                  201.162.128.0-201.162.194.255
                  201.162.224.0/23
                  201.162.233.0-201.162.234.255
                  201.162.236.0/24
                  201.162.247.0/24
                  201.166.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         39:23:a0:aa:2e:cd:6e:28:4d:aa:3d:3e:49:fb:65:93:9c:6a:
         ca:73:4a:9c:0e:39:b7:19:c8:6d:6f:b3:22:93:4a:76:61:49:
         8b:85:fd:c5:18:f0:56:dd:cf:ce:89:41:74:86:82:f7:a3:1c:
         23:fd:03:64:09:3f:24:34:40:9e:a3:9c:9c:b1:96:66:05:fc:
         b8:46:73:07:b1:92:bc:a9:38:6b:08:32:8b:08:97:fd:6b:7c:
         ba:cd:59:b4:d3:42:1f:dd:bd:01:25:0c:0d:f4:76:f5:ae:71:
         b2:5c:0c:60:d8:bc:e9:20:57:74:d6:fc:a4:96:16:d5:86:e8:
         34:2b:99:ce:0e:d5:31:6f:4f:01:fe:7d:16:5e:2a:bf:c3:fe:
         74:70:d2:be:25:d6:fa:a9:77:c2:69:3b:d1:d7:10:49:73:42:
         6a:82:2e:a1:ae:84:80:ec:b9:62:b0:74:a8:ca:c8:19:3c:2a:
         f3:aa:39:9f:ca:8b:85:be:7d:88:47:b4:86:71:be:08:94:f2:
         2f:c5:73:af:ff:f5:c6:37:79:3d:b0:56:09:a4:4c:76:49:2a:
         d2:76:29:bf:8e:15:56:8c:e0:f6:81:3d:bf:8d:2f:4a:31:56:
         8a:35:3c:56:fc:76:e9:33:e8:91:71:f2:f1:07:29:a3:12:42:
         4f:35:99:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org