Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/392247c189efbfb82f02a30226b3f4e21af2ca01.roa
File:                     392247c189efbfb82f02a30226b3f4e21af2ca01.roa (raw, json)
Hash identifier:          KpWUFc+1XK+aiIdfafJKQA5nLKI/Q5sIko52GWzPOHo=
Subject key identifier:   E1:5A:09:9C:A5:D0:42:DA:2C:92:A2:6D:B0:DB:48:95:E6:BB:2C:43
Certificate issuer:       /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial:       1BFEB3
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/392247c189efbfb82f02a30226b3f4e21af2ca01.roa
Signing time:             Fri 16 Dec 2022 13:37:47 +0000
ROA not before:           Sun 21 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     18747
IP address blocks:        181.78.32.0/24 maxlen: 24
                          181.78.128.0/18 maxlen: 18
                          181.78.128.0/19 maxlen: 19
                          181.78.160.0/21 maxlen: 21
                          181.78.192.0/18 maxlen: 18
                          181.78.192.0/19 maxlen: 19
                          181.78.224.0/21 maxlen: 21
                          181.78.64.0/18 maxlen: 18
                          181.78.64.0/19 maxlen: 19
                          181.78.96.0/21 maxlen: 21
                          181.78.160.0/19 maxlen: 24
                          181.78.160.0/24 maxlen: 24
                          181.78.161.0/24 maxlen: 24
                          181.78.162.0/24 maxlen: 24
                          181.78.163.0/24 maxlen: 24
                          181.78.164.0/24 maxlen: 24
                          181.79.64.0/21 maxlen: 21
                          181.79.72.0/23 maxlen: 23
                          181.79.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1834675 (0x1bfeb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
        Validity
            Not Before: Mar 21 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=392247c189efbfb82f02a30226b3f4e21af2ca01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:66:d0:0b:e2:68:d6:63:72:34:0f:4c:27:
                    97:bf:f2:05:b6:19:91:2a:fb:89:02:09:5c:63:9d:
                    bd:e8:f4:8c:3d:c2:c3:ec:3a:a3:9b:76:02:43:4f:
                    86:02:91:30:ae:4e:e1:8a:3e:58:b4:63:32:ac:e6:
                    79:94:01:49:2e:2f:2a:73:2d:3c:c4:9c:8a:0d:65:
                    d2:07:bd:a5:03:d6:18:20:ff:de:bc:1f:f8:8c:17:
                    4c:20:4a:b9:4d:ec:65:1c:ec:c7:a3:cd:e8:fb:cd:
                    29:6d:87:e4:c7:43:61:eb:ab:c2:bb:1b:73:11:b6:
                    84:ed:d2:c6:cd:c0:f5:19:b8:58:36:76:44:f1:bd:
                    1b:21:ae:6d:1b:41:c8:5a:29:bb:f3:bb:23:87:54:
                    07:71:6f:74:d2:9c:58:cb:d9:c1:ad:1e:61:31:db:
                    69:9b:cf:a0:00:fd:cd:fb:f3:ad:cc:5f:44:15:19:
                    23:31:2d:33:b9:4d:eb:7a:e9:e7:2b:b2:16:96:b9:
                    65:af:66:c6:fb:15:eb:0c:05:63:7a:f4:73:00:e6:
                    0a:8d:ac:32:0b:24:18:24:30:4f:88:f9:af:30:25:
                    bc:f5:69:54:9a:6c:83:8b:dd:ec:59:db:ff:0f:28:
                    a8:ea:c0:ac:34:b5:fa:39:61:65:2c:b7:f0:4b:08:
                    ba:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5A:09:9C:A5:D0:42:DA:2C:92:A2:6D:B0:DB:48:95:E6:BB:2C:43
            X509v3 Authority Key Identifier:
                keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/392247c189efbfb82f02a30226b3f4e21af2ca01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.78.32.0/24
                  181.78.64.0-181.78.255.255
                  181.79.64.0-181.79.73.255
                  181.79.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:04:34:5c:0c:5b:60:53:62:7f:3c:63:18:75:46:ad:bc:
         d7:0b:33:ab:c0:1f:9d:01:1e:8d:72:dd:92:38:3a:8c:bf:c9:
         89:52:84:54:e5:3c:46:e7:92:74:3b:24:44:09:38:95:01:bb:
         17:a2:76:cb:7a:e9:f2:33:b5:36:10:27:13:89:30:92:bd:dd:
         62:80:ea:37:d2:e4:25:d7:12:82:a4:23:da:8b:d1:1d:6d:fb:
         8d:da:e0:02:65:79:f0:69:1d:86:84:32:4a:69:22:59:cb:96:
         46:44:99:24:b4:b5:6b:6b:6e:0b:d2:1d:ce:b0:86:15:b8:25:
         0a:1a:82:ad:c2:c6:97:32:b2:6e:52:6e:29:bf:76:7c:fd:fd:
         e5:f4:3f:44:e6:4b:5a:31:25:9f:bf:ca:bd:1d:eb:a1:d5:2b:
         0d:01:25:42:59:2d:4f:20:81:3d:b8:13:a7:bb:72:c0:92:c4:
         e0:cb:a1:f5:e5:a2:57:6f:86:59:cf:30:f8:25:99:d6:6f:19:
         2f:68:ce:1e:d4:f0:a4:f5:11:c2:6b:23:cc:bf:13:01:3f:5a:
         d2:06:be:24:68:88:e0:74:82:86:ac:2b:27:58:91:77:75:c2:
         d2:b3:43:9d:92:15:81:07:c4:48:af:2c:5e:d6:9d:08:55:8e:
         99:20:bf:9e
-----BEGIN CERTIFICATE-----
MIIFYTCCBEmgAwIBAgIDG/6zMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMy
Y2ZjMzIxMjQ1NTQ2NGNkOGY4NTZhMzQ4YjJkNWNhZjczZGNkNzMwHhcNMjEwMzIx
MDMwMDAwWhcNMjMwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygzOTIyNDdjMTg5ZWZi
ZmI4MmYwMmEzMDIyNmIzZjRlMjFhZjJjYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnWFm0AviaNZjcjQPTCeXv/IFthmRKvuJAglcY5296PSMPcLD
7Dqjm3YCQ0+GApEwrk7hij5YtGMyrOZ5lAFJLi8qcy08xJyKDWXSB72lA9YYIP/e
vB/4jBdMIEq5TexlHOzHo83o+80pbYfkx0Nh66vCuxtzEbaE7dLGzcD1GbhYNnZE
8b0bIa5tG0HIWim787sjh1QHcW900pxYy9nBrR5hMdtpm8+gAP3N+/OtzF9EFRkj
MS0zuU3reunnK7IWlrllr2bG+xXrDAVjevRzAOYKjawyCyQYJDBPiPmvMCW89WlU
mmyDi93sWdv/Dyio6sCsNLX6OWFlLLfwSwi6kQIDAQABo4ICfDCCAngwHQYDVR0O
BBYEFOFaCZyl0ELaLJKibbDbSJXmuyxDMB8GA1UdIwQYMBaAFO2XYCMHZoB2YyKf
bUEoBQfvncIpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzJjZmMz
MjEyNDU1NDY0Y2Q4Zjg1NmEzNDhiMmQ1Y2FmNzNkY2Q3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGVmNTY4NmQtZmM2Ni00YzhlLWJlNGYtZGE2OWZi
YzJiZmI1LzM5MjI0N2MxODllZmJmYjgyZjAyYTMwMjI2YjNmNGUyMWFmMmNhMDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wZWY1Njg2ZC1mYzY2LTRjOGUtYmU0Zi1kYTY5
ZmJjMmJmYjUvYzJjZmMzMjEyNDU1NDY0Y2Q4Zjg1NmEzNDhiMmQ1Y2FmNzNkY2Q3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQx
MC8wLQQCAAEwJwMEALVOIDALAwQGtU5AAwMAtU4wDAMEBrVPQAMEAbVPSAMEArVP
3DANBgkqhkiG9w0BAQsFAAOCAQEALc8ENFwMW2BTYn88Yxh1Rq281wszq8AfnQEe
jXLdkjg6jL/JiVKEVOU8RueSdDskRAk4lQG7F6J2y3rp8jO1NhAnE4kwkr3dYoDq
N9LkJdcSgqQj2ovRHW37jdrgAmV58GkdhoQySmkiWcuWRkSZJLS1a2tuC9IdzrCG
FbglChqCrcLGlzKyblJuKb92fP395fQ/ROZLWjEln7/KvR3rodUrDQElQlktTyCB
PbgTp7tywJLE4Muh9eWiV2+GWc8w+CWZ1m8ZL2jOHtTwpPURwmsjzL8TAT9a0ga+
JGiI4HSChqwrJ1iRd3XC0rNDnZIVgQfESK8sXtadCFWOmSC/ng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org