Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/27f6c7180dab88bd186cf45a6df8501aa396b48d.roa
File:                     27f6c7180dab88bd186cf45a6df8501aa396b48d.roa (raw, json)
Hash identifier:          UC5kTJAYd8iKHTqy5bfndl7HV0o7imnO3s4ofn4Qv0U=
Subject key identifier:   64:46:B9:EB:2A:78:BE:4C:5F:B3:30:30:85:48:48:93:EB:59:E4:91
Certificate issuer:       /CN=7e5ad0382aaf9a61199883acec8acb56379f4413
Certificate serial:       258B6F
Authority key identifier: 13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/27f6c7180dab88bd186cf45a6df8501aa396b48d.roa
Signing time:             Sun 10 Dec 2023 07:30:01 +0000
ROA not before:           Sun 10 Dec 2023 07:30:01 +0000
ROA not after:            Tue 09 Dec 2025 07:30:01 +0000
asID:                     266776
IP address blocks:        170.78.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2460527 (0x258b6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5ad0382aaf9a61199883acec8acb56379f4413
        Validity
            Not Before: Dec 10 07:30:01 2023 GMT
            Not After : Dec  9 07:30:01 2025 GMT
        Subject: CN=27f6c7180dab88bd186cf45a6df8501aa396b48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:29:4e:66:b5:08:56:1c:88:78:d2:87:e2:36:
                    8c:df:2a:c6:5e:c7:7f:f1:24:cb:54:6e:c6:69:e9:
                    7c:29:a3:c1:1e:1f:0e:b0:e4:74:35:3d:58:f4:b5:
                    8c:07:6b:64:a5:37:ae:d3:6b:c6:dd:88:2d:69:cb:
                    6a:0a:b7:81:58:dc:e1:e4:16:63:20:f3:99:e1:9b:
                    2d:27:03:13:b6:74:22:87:cc:37:be:7f:02:51:1d:
                    8b:da:5c:90:48:1d:17:8b:3f:2c:fc:f3:dd:94:30:
                    c4:21:77:95:b7:bd:1d:c8:29:f1:24:69:9d:fb:dc:
                    ee:76:73:14:10:da:3c:1a:d9:d0:a5:cd:20:3c:a6:
                    62:89:6c:4f:79:ca:26:fa:f9:af:ef:63:e5:cb:03:
                    0a:ba:0e:8c:2d:03:41:59:d8:ff:c7:cb:94:62:e7:
                    f1:36:ce:b1:f9:72:ac:1c:70:00:f3:03:0b:fa:f2:
                    c3:b3:7b:36:2b:b9:92:0e:e2:19:a6:28:9e:0f:1c:
                    a2:e7:96:b7:e0:6c:4f:a4:4c:ca:fc:c1:21:9d:38:
                    1a:25:0f:62:06:07:07:47:0c:77:95:b7:ae:e1:a0:
                    25:87:ea:0b:c9:49:50:b8:c6:18:03:6a:64:66:ec:
                    13:9e:e0:74:26:60:04:59:6d:6b:87:c0:69:e4:23:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:46:B9:EB:2A:78:BE:4C:5F:B3:30:30:85:48:48:93:EB:59:E4:91
            X509v3 Authority Key Identifier:
                keyid:13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/27f6c7180dab88bd186cf45a6df8501aa396b48d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/7e5ad0382aaf9a61199883acec8acb56379f4413.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:23:02:83:36:ef:09:d4:4d:cb:be:fd:f3:cb:cf:ae:cc:a5:
         98:6c:82:41:33:85:ba:44:4c:c7:12:f8:5b:c5:be:c0:be:2d:
         42:94:3d:7e:1b:ef:3e:5f:0f:cc:57:ff:2a:fe:f3:fc:3e:cd:
         0a:87:50:9b:83:fe:18:19:f9:91:60:26:f2:33:89:8e:db:aa:
         1e:54:22:4b:8c:4c:97:36:f7:a6:a3:77:bd:99:2b:34:3e:52:
         80:dc:34:7d:7b:e6:73:dd:66:a8:1b:7c:70:55:c3:3f:ea:3c:
         f9:23:ca:6f:73:2e:10:28:19:f2:e5:c6:92:5d:ba:7a:36:a1:
         27:13:b6:91:9c:2b:14:53:b1:e0:75:2b:e8:7e:28:3a:67:62:
         55:79:a8:97:01:92:5e:02:1b:41:d8:52:63:68:02:fa:b6:7e:
         a1:df:73:bd:47:26:0e:4e:e4:0a:5a:85:94:44:4c:10:1e:0f:
         96:db:d4:4b:a0:51:11:a8:5f:4e:70:83:30:05:ff:a4:cd:05:
         3f:41:b9:e5:2d:76:27:11:38:32:45:64:71:a0:95:5c:06:43:
         38:69:d5:89:b1:64:9b:25:08:7b:94:ec:b2:4b:3a:c4:47:cd:
         df:b6:08:3d:e3:3e:d4:80:d9:9f:69:16:4c:b3:a2:43:17:f2:
         af:b6:44:04
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJYtvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdl
NWFkMDM4MmFhZjlhNjExOTk4ODNhY2VjOGFjYjU2Mzc5ZjQ0MTMwHhcNMjMxMjEw
MDczMDAxWhcNMjUxMjA5MDczMDAxWjAzMTEwLwYDVQQDEygyN2Y2YzcxODBkYWI4
OGJkMTg2Y2Y0NWE2ZGY4NTAxYWEzOTZiNDhkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlClOZrUIVhyIeNKH4jaM3yrGXsd/8STLVG7Gael8KaPBHh8O
sOR0NT1Y9LWMB2tkpTeu02vG3YgtactqCreBWNzh5BZjIPOZ4ZstJwMTtnQih8w3
vn8CUR2L2lyQSB0Xiz8s/PPdlDDEIXeVt70dyCnxJGmd+9zudnMUENo8GtnQpc0g
PKZiiWxPecom+vmv72PlywMKug6MLQNBWdj/x8uUYufxNs6x+XKsHHAA8wML+vLD
s3s2K7mSDuIZpiieDxyi55a34GxPpEzK/MEhnTgaJQ9iBgcHRwx3lbeu4aAlh+oL
yUlQuMYYA2pkZuwTnuB0JmAEWW1rh8Bp5CMqBwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGRGuesqeL5MX7MwMIVISJPrWeSRMB8GA1UdIwQYMBaAFBP+QV/cIiMSa0kG
BMgPfh7ufz0GMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2U1YWQw
MzgyYWFmOWE2MTE5OTg4M2FjZWM4YWNiNTYzNzlmNDQxMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGUxNzFkNGMtMmE5OC00OTg3LTg5MDMtMzA5NjE4
ODgwN2YwLzI3ZjZjNzE4MGRhYjg4YmQxODZjZjQ1YTZkZjg1MDFhYTM5NmI0OGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84ZTE3MWQ0Yy0yYTk4LTQ5ODctODkwMy0zMDk2
MTg4ODA3ZjAvN2U1YWQwMzgyYWFmOWE2MTE5OTg4M2FjZWM4YWNiNTYzNzlmNDQx
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKpOcDANBgkqhkiG9w0BAQsFAAOCAQEAfCMCgzbvCdRNy779
88vPrsylmGyCQTOFukRMxxL4W8W+wL4tQpQ9fhvvPl8PzFf/Kv7z/D7NCodQm4P+
GBn5kWAm8jOJjtuqHlQiS4xMlzb3pqN3vZkrND5SgNw0fXvmc91mqBt8cFXDP+o8
+SPKb3MuECgZ8uXGkl26ejahJxO2kZwrFFOx4HUr6H4oOmdiVXmolwGSXgIbQdhS
Y2gC+rZ+od9zvUcmDk7kClqFlERMEB4PltvUS6BREahfTnCDMAX/pM0FP0G55S12
JxE4MkVkcaCVXAZDOGnVibFkmyUIe5Tssks6xEfN37YIPeM+1IDZn2kWTLOiQxfy
r7ZEBA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org