Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/e0af4b2c0907185eb42a87716e10aeccd2680d73.roa
File:                     e0af4b2c0907185eb42a87716e10aeccd2680d73.roa (raw, json)
Hash identifier:          FGnCbqsqFBw5aTAZKWMYbwc9uMmKVY1QjPOM6KS4RLo=
Subject key identifier:   EB:E9:78:30:77:46:4B:96:51:A4:74:A6:DD:20:53:CF:EB:F6:46:6E
Certificate issuer:       /CN=3443505eddac7b5aa6eddaedee91340561a130ec
Certificate serial:       0A19
Authority key identifier: D5:D4:C7:13:9B:11:47:DC:25:7C:2F:DF:A7:B0:B2:78:CA:FE:A8:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3443505eddac7b5aa6eddaedee91340561a130ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/e0af4b2c0907185eb42a87716e10aeccd2680d73.roa
Signing time:             Wed 30 Jun 2021 18:03:44 +0000
ROA not before:           Wed 30 Jun 2021 03:00:00 +0000
ROA not after:            Fri 30 Jun 2023 03:00:00 +0000
asID:                     52393
IP address blocks:        168.0.212.0/22 maxlen: 22
                          186.179.0.0/18 maxlen: 18
                          190.185.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2585 (0xa19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3443505eddac7b5aa6eddaedee91340561a130ec
        Validity
            Not Before: Jun 30 03:00:00 2021 GMT
            Not After : Jun 30 03:00:00 2023 GMT
        Subject: CN=e0af4b2c0907185eb42a87716e10aeccd2680d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:d9:bf:af:65:21:e4:2a:a0:73:3f:06:27:
                    01:90:a9:8f:78:82:e8:99:3e:3f:98:c4:e1:c7:9a:
                    c4:a2:68:fb:ed:74:ca:24:82:8c:75:ff:44:ed:bd:
                    07:e8:9f:60:22:d2:4f:f6:0b:01:69:5e:c7:a7:66:
                    70:20:94:0d:29:da:46:c1:12:93:ed:91:36:41:74:
                    d2:a9:41:7a:69:f5:03:63:a5:e0:cd:0f:7b:09:96:
                    3f:13:d9:a5:8f:bb:20:84:77:ba:32:3f:0e:1e:ba:
                    bc:84:29:f8:04:5c:2b:07:a4:60:91:52:ee:0a:1c:
                    cb:72:15:45:7a:8a:3b:a6:57:d0:25:a8:27:f6:ba:
                    5d:bc:76:b7:b7:8d:03:5b:da:a8:a9:a4:54:59:3f:
                    d7:2c:73:59:49:a9:53:be:71:02:ca:fe:be:15:26:
                    84:55:93:26:9f:13:32:4d:95:ed:21:93:a5:2d:59:
                    c8:f2:64:71:0c:1a:73:8b:c0:cc:3f:1c:d8:69:70:
                    1e:87:06:b4:94:59:20:df:da:eb:52:85:39:31:37:
                    99:2c:d5:f4:af:ab:95:9c:f4:51:ab:f9:57:89:c3:
                    92:b1:da:ed:c5:49:45:ff:a0:f6:65:bf:d1:84:77:
                    23:d4:b9:70:91:e3:b5:31:db:ba:ab:41:0e:f7:b1:
                    0b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E9:78:30:77:46:4B:96:51:A4:74:A6:DD:20:53:CF:EB:F6:46:6E
            X509v3 Authority Key Identifier:
                keyid:D5:D4:C7:13:9B:11:47:DC:25:7C:2F:DF:A7:B0:B2:78:CA:FE:A8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3443505eddac7b5aa6eddaedee91340561a130ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/e0af4b2c0907185eb42a87716e10aeccd2680d73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/3443505eddac7b5aa6eddaedee91340561a130ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.212.0/22
                  186.179.0.0/18
                  190.185.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:4b:d3:01:6f:80:c8:63:99:55:db:e8:7a:01:39:c8:8d:89:
         12:f5:56:88:38:e4:85:02:e8:80:c7:93:fb:c2:ec:43:28:55:
         78:c1:b1:37:dd:5d:cc:b1:2f:e9:d1:a1:97:d2:a7:df:9d:86:
         af:0a:8f:30:ab:56:ec:af:0d:07:f9:8d:a5:30:f0:19:8c:d1:
         f8:0d:eb:02:7a:fc:ec:ed:1f:94:81:ed:93:31:87:7e:e7:ff:
         f0:70:8b:8c:cf:ca:77:3d:78:c7:7a:30:47:06:9c:3e:ef:48:
         ee:eb:58:06:ba:72:8a:23:e7:b9:40:af:45:ad:91:bb:96:c3:
         1d:de:fe:2b:45:b2:1c:e0:aa:91:c1:60:82:7a:b5:2f:d2:3c:
         e1:aa:44:06:ad:03:5e:71:8b:6b:1f:dd:39:f6:d2:be:86:14:
         a2:76:b2:a9:18:4f:04:c2:3b:68:88:46:61:04:9b:a0:39:ba:
         c6:bd:44:06:9c:bb:27:5e:7a:20:6a:60:c6:9b:d2:9c:9f:42:
         17:8f:89:12:a7:80:b9:b8:85:0b:e6:86:51:19:51:7b:0e:4b:
         f7:23:ae:c0:66:2d:90:a3:54:68:0f:ef:95:a8:80:e8:16:87:
         d2:54:b7:9c:60:cd:51:9a:6a:d6:28:f4:aa:89:27:0d:a2:4a:
         50:5f:31:2c
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICChkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzQ0
MzUwNWVkZGFjN2I1YWE2ZWRkYWVkZWU5MTM0MDU2MWExMzBlYzAeFw0yMTA2MzAw
MzAwMDBaFw0yMzA2MzAwMzAwMDBaMDMxMTAvBgNVBAMTKGUwYWY0YjJjMDkwNzE4
NWViNDJhODc3MTZlMTBhZWNjZDI2ODBkNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCTwNm/r2Uh5Cqgcz8GJwGQqY94guiZPj+YxOHHmsSiaPvtdMok
gox1/0TtvQfon2Ai0k/2CwFpXsenZnAglA0p2kbBEpPtkTZBdNKpQXpp9QNjpeDN
D3sJlj8T2aWPuyCEd7oyPw4euryEKfgEXCsHpGCRUu4KHMtyFUV6ijumV9AlqCf2
ul28dre3jQNb2qippFRZP9csc1lJqVO+cQLK/r4VJoRVkyafEzJNle0hk6UtWcjy
ZHEMGnOLwMw/HNhpcB6HBrSUWSDf2utShTkxN5ks1fSvq5Wc9FGr+VeJw5Kx2u3F
SUX/oPZlv9GEdyPUuXCR47Ux27qrQQ73sQstAgMBAAGjggJnMIICYzAdBgNVHQ4E
FgQU6+l4MHdGS5ZRpHSm3SBTz+v2Rm4wHwYDVR0jBBgwFoAU1dTHE5sRR9wlfC/f
p7CyeMr+qG0wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zNDQzNTA1
ZWRkYWM3YjVhYTZlZGRhZWRlZTkxMzQwNTYxYTEzMGVjLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mMjgyZmZmYS01ZWFhLTQ2NGMtOTA0MC03OTUwMzIz
NTQ1MzMvZTBhZjRiMmMwOTA3MTg1ZWI0MmE4NzcxNmUxMGFlY2NkMjY4MGQ3My5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2YyODJmZmZhLTVlYWEtNDY0Yy05MDQwLTc5NTAz
MjM1NDUzMy8zNDQzNTA1ZWRkYWM3YjVhYTZlZGRhZWRlZTkxMzQwNTYxYTEzMGVj
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBww
GjAYBAIAATASAwQCqADUAwQGurMAAwQCvrlsMA0GCSqGSIb3DQEBCwUAA4IBAQAL
S9MBb4DIY5lV2+h6ATnIjYkS9VaIOOSFAuiAx5P7wuxDKFV4wbE33V3MsS/p0aGX
0qffnYavCo8wq1bsrw0H+Y2lMPAZjNH4DesCevzs7R+Uge2TMYd+5//wcIuMz8p3
PXjHejBHBpw+70ju61gGunKKI+e5QK9FrZG7lsMd3v4rRbIc4KqRwWCCerUv0jzh
qkQGrQNecYtrH9059tK+hhSidrKpGE8EwjtoiEZhBJugObrGvUQGnLsnXnogamDG
m9Kcn0IXj4kSp4C5uIUL5oZRGVF7Dkv3I67AZi2Qo1RoD++VqIDoFofSVLecYM1R
mmrWKPSqiScNokpQXzEs
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:12 2024 by rpki-client on console-fra.rpki-client.org