Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/193e2e6d7adeed87ac35be924f48880d7dbd6769.roa
File:                     193e2e6d7adeed87ac35be924f48880d7dbd6769.roa (raw, json)
Hash identifier:          KeIBuwivgTIMGXtPwLoPddl482nniN+u8ZN/scjw33o=
Subject key identifier:   D7:E7:07:DC:F3:B5:26:18:06:A0:2A:64:50:FE:E7:5F:AB:1C:F0:35
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       19BFEC
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/193e2e6d7adeed87ac35be924f48880d7dbd6769.roa
Signing time:             Tue 19 Jul 2022 13:42:02 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52257
IP address blocks:        181.39.0.0/16 maxlen: 24
                          181.198.128.0/17 maxlen: 24
                          181.199.64.0/18 maxlen: 24
                          186.3.128.0/17 maxlen: 24
                          186.4.128.0/17 maxlen: 24
                          186.101.128.0/17 maxlen: 24
                          181.199.47.0/24 maxlen: 24
                          190.95.131.0/24 maxlen: 24
                          181.199.28.0/22 maxlen: 24
                          181.199.1.0/24 maxlen: 24
                          181.199.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687532 (0x19bfec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=193e2e6d7adeed87ac35be924f48880d7dbd6769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:c5:26:f0:52:f0:8c:2e:a6:67:a1:24:af:
                    29:23:bb:be:9f:7c:71:87:34:f0:8c:bf:a7:a2:dd:
                    94:9b:77:42:85:18:fd:a7:e8:67:39:23:6a:06:53:
                    61:99:a2:a3:6f:8c:70:73:da:7e:6d:1b:ca:58:b6:
                    54:15:96:bc:04:3c:da:b7:3c:49:4e:4d:cb:0e:bc:
                    d6:fa:c1:b1:5c:0d:9e:cd:97:01:1a:0a:03:0f:5e:
                    e0:bf:ba:b3:be:24:6f:dd:43:c8:86:29:ba:1f:c7:
                    0b:78:10:78:7b:50:40:ea:2a:74:e5:17:a0:7f:47:
                    3a:53:a9:76:d8:21:bc:1a:31:6b:cb:33:1f:a1:39:
                    f8:74:3b:51:3e:cc:ae:d3:20:f7:6f:b2:91:81:30:
                    1c:2b:65:f3:3e:a9:c1:1b:f2:51:4d:62:a9:36:54:
                    92:ea:c8:7e:25:10:a3:31:ec:48:d5:d8:ef:fe:2c:
                    8b:2c:d3:3c:8e:d4:53:ab:33:6d:55:7c:d3:d4:82:
                    d4:c4:31:09:fd:bd:2d:35:1a:99:fd:13:5e:cc:c7:
                    5a:50:40:16:0d:57:68:ac:f7:d9:84:de:3c:19:1d:
                    5b:99:3f:4a:e2:21:72:0f:2c:9a:c2:cf:c3:e3:fd:
                    eb:7d:8e:0f:6d:e0:c0:c0:f1:ea:7b:12:5b:09:aa:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E7:07:DC:F3:B5:26:18:06:A0:2A:64:50:FE:E7:5F:AB:1C:F0:35
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/193e2e6d7adeed87ac35be924f48880d7dbd6769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.39.0.0/16
                  181.198.128.0/17
                  181.199.1.0/24
                  181.199.13.0/24
                  181.199.28.0/22
                  181.199.47.0/24
                  181.199.64.0/18
                  186.3.128.0/17
                  186.4.128.0/17
                  186.101.128.0/17
                  190.95.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:d6:24:f2:e9:65:01:b4:05:2a:05:f8:94:f6:f6:c7:3e:d6:
         24:11:a7:96:1e:1c:ad:dd:c9:f5:bb:96:80:6f:ec:a1:16:62:
         62:37:46:12:f9:43:20:9c:bc:8b:53:49:cf:54:e4:22:de:19:
         31:e1:ce:c0:8d:81:ef:07:73:7f:21:f0:91:a7:5c:f6:75:fe:
         c2:b6:75:44:c6:26:2f:0f:cd:ba:aa:5f:8c:10:40:c6:32:f4:
         77:fc:70:20:0e:9a:9e:57:74:af:f3:18:21:aa:f2:98:34:21:
         a7:d4:b7:33:7a:4a:94:81:71:00:3b:b9:f0:5a:56:9f:ba:9d:
         10:5a:67:e4:ae:f2:21:eb:a0:04:7d:cd:4a:be:e2:01:8e:94:
         41:d0:25:2a:9d:41:e2:78:b2:47:f7:31:6a:fb:5b:c4:99:01:
         c0:4f:6a:35:37:06:14:79:02:4c:73:ea:24:4e:14:00:97:e8:
         e4:42:bf:b8:33:4f:be:2c:86:fe:7d:07:5d:c1:ca:f9:b0:89:
         35:45:35:ad:c6:5f:9a:bf:66:7a:ba:c2:87:4b:1d:23:51:32:
         7f:da:f8:c6:46:a5:65:2b:29:7b:ff:f2:05:f6:d9:01:71:c9:
         1e:65:f4:90:b4:d5:ac:0b:73:f8:22:8e:d9:ae:31:f6:a8:7e:
         7e:61:ba:6b
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIDGb/sMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygxOTNlMmU2ZDdhZGVl
ZDg3YWMzNWJlOTI0ZjQ4ODgwZDdkYmQ2NzY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnfDFJvBS8IwupmehJK8pI7u+n3xxhzTwjL+not2Um3dChRj9
p+hnOSNqBlNhmaKjb4xwc9p+bRvKWLZUFZa8BDzatzxJTk3LDrzW+sGxXA2ezZcB
GgoDD17gv7qzviRv3UPIhim6H8cLeBB4e1BA6ip05Regf0c6U6l22CG8GjFryzMf
oTn4dDtRPsyu0yD3b7KRgTAcK2XzPqnBG/JRTWKpNlSS6sh+JRCjMexI1djv/iyL
LNM8jtRTqzNtVXzT1ILUxDEJ/b0tNRqZ/RNezMdaUEAWDVdorPfZhN48GR1bmT9K
4iFyDyyaws/D4/3rfY4PbeDAwPHqexJbCao3DwIDAQABo4ICljCCApIwHQYDVR0O
BBYEFNfnB9zztSYYBqAqZFD+51+rHPA1MB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r
EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm
MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5
YzE0NTY0LzE5M2UyZTZkN2FkZWVkODdhYzM1YmU5MjRmNDg4ODBkN2RiZDY3Njku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk
NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBggrBgEFBQcBBwEB/wRL
MEkwRwQCAAEwQQMDALUnAwQHtcaAAwQAtccBAwQAtccNAwQCtcccAwQAtccvAwQG
tcdAAwQHugOAAwQHugSAAwQHumWAAwQAvl+DMA0GCSqGSIb3DQEBCwUAA4IBAQA6
1iTy6WUBtAUqBfiU9vbHPtYkEaeWHhyt3cn1u5aAb+yhFmJiN0YS+UMgnLyLU0nP
VOQi3hkx4c7AjYHvB3N/IfCRp1z2df7CtnVExiYvD826ql+MEEDGMvR3/HAgDpqe
V3Sv8xghqvKYNCGn1LczekqUgXEAO7nwWlafup0QWmfkrvIh66AEfc1KvuIBjpRB
0CUqnUHieLJH9zFq+1vEmQHAT2o1NwYUeQJMc+okThQAl+jkQr+4M0++LIb+fQdd
wcr5sIk1RTWtxl+av2Z6usKHSx0jUTJ/2vjGRqVlKyl7//IF9tkBcckeZfSQtNWs
C3P4Io7ZrjH2qH5+Ybpr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org