Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/7c700f57ee361ed24128f72b936f54a1ee4ecb05.roa
File:                     7c700f57ee361ed24128f72b936f54a1ee4ecb05.roa (raw, json)
Hash identifier:          wwTJzjAB8HLt81gITrxouOdAjuJgYysa41GpO8ha9Q0=
Subject key identifier:   55:70:C9:F1:07:CA:1F:5D:C8:74:97:0C:B7:83:97:93:67:A9:D5:34
Certificate issuer:       /CN=3070426b746ffaf94407f39e1e550bba97179b09
Certificate serial:       046633
Authority key identifier: 4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/7c700f57ee361ed24128f72b936f54a1ee4ecb05.roa
Signing time:             Wed 24 Mar 2021 14:42:58 +0000
ROA not before:           Wed 24 Mar 2021 14:42:55 +0000
ROA not after:            Tue 24 Mar 2026 14:42:55 +0000
asID:                     265540
IP address blocks:        190.123.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288307 (0x46633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3070426b746ffaf94407f39e1e550bba97179b09
        Validity
            Not Before: Mar 24 14:42:55 2021 GMT
            Not After : Mar 24 14:42:55 2026 GMT
        Subject: CN=7c700f57ee361ed24128f72b936f54a1ee4ecb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:96:5c:1a:b7:99:fa:91:e2:2d:69:92:20:
                    f6:c5:6e:9a:34:bd:55:3a:2e:65:df:c2:37:95:04:
                    2f:ec:61:5a:73:7a:46:a0:08:8d:11:8d:95:3b:13:
                    67:43:87:26:96:c7:c9:fa:7e:8a:d1:99:24:f7:b2:
                    5d:79:e5:99:1d:b4:db:71:ed:7e:41:72:30:5b:a6:
                    51:38:da:02:96:5c:83:25:54:c4:2f:5f:62:60:e3:
                    91:54:1a:99:ee:c8:5b:03:d6:62:76:a1:92:00:28:
                    a7:1f:20:e7:cb:89:ad:ea:8a:2c:11:af:3b:8f:89:
                    c5:af:f0:53:a4:3c:9b:e9:41:7c:4e:2e:c5:9c:e6:
                    b1:93:f9:18:ce:f1:79:9f:62:5d:1b:7a:89:d5:1f:
                    1b:54:0c:b2:a5:93:d4:35:fb:e7:a7:56:88:ae:97:
                    87:9c:af:c1:27:1f:75:e9:1b:6f:bd:b6:99:58:1d:
                    1e:93:f9:5d:99:bc:8b:c9:6f:05:07:6d:44:7b:d4:
                    2d:e1:ce:1e:f2:23:70:4d:8f:87:6e:dc:86:7b:33:
                    45:d0:39:2c:9e:f4:33:0b:9d:38:f7:8a:e1:a9:40:
                    be:0c:5e:d0:00:b0:29:b1:e1:60:aa:db:4d:74:9c:
                    7b:28:e4:25:da:bd:44:8d:fe:a0:3b:ab:d6:de:2d:
                    f3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:70:C9:F1:07:CA:1F:5D:C8:74:97:0C:B7:83:97:93:67:A9:D5:34
            X509v3 Authority Key Identifier:
                keyid:4B:07:95:9B:1B:BB:5F:F3:F5:C4:7D:C6:6C:33:B9:37:3B:FC:EF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3070426b746ffaf94407f39e1e550bba97179b09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/7c700f57ee361ed24128f72b936f54a1ee4ecb05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c0edfb24-be89-4e67-ae08-dd7edc5666ea/3070426b746ffaf94407f39e1e550bba97179b09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:0d:69:1a:94:83:97:0a:2d:78:09:b7:39:f0:c2:97:c1:0f:
         50:32:f5:aa:80:f0:e6:97:c7:40:54:e7:04:5d:8a:46:02:94:
         e8:79:5e:ed:6d:78:ed:48:49:a2:95:50:99:3f:ce:7c:9f:d1:
         b1:74:fe:d1:59:bd:91:66:a7:4b:c8:ec:bf:0a:a6:16:e0:c3:
         03:21:49:e4:7b:a3:89:fc:e5:80:59:3d:4c:2b:82:0a:f5:d3:
         f1:5c:e1:eb:b1:7c:16:81:7c:96:71:83:e6:4c:3b:db:a4:10:
         9d:dc:d1:ea:31:53:ce:15:b8:b7:f5:16:d7:47:2d:88:64:74:
         b2:89:a1:d6:92:25:7b:be:d7:00:b2:e1:2e:49:87:65:14:85:
         78:16:bc:c0:84:fc:26:aa:3c:26:1e:3b:64:68:50:49:51:81:
         96:f9:0f:bf:a4:e8:83:84:a2:44:64:a9:76:47:79:55:d7:25:
         29:f9:44:c8:5f:f9:20:09:44:25:65:6e:b4:dc:76:b2:c8:e6:
         96:7a:7a:96:a0:8c:1d:0d:51:ed:21:80:d4:5a:08:dd:bb:62:
         a3:b3:73:ee:a5:fc:fb:2a:67:e7:55:d6:39:32:ed:a9:63:2b:
         67:df:64:7d:41:88:dd:0c:b8:60:5b:d3:65:4a:1c:05:3d:c6:
         ab:3e:b7:c5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBGYzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMw
NzA0MjZiNzQ2ZmZhZjk0NDA3ZjM5ZTFlNTUwYmJhOTcxNzliMDkwHhcNMjEwMzI0
MTQ0MjU1WhcNMjYwMzI0MTQ0MjU1WjAzMTEwLwYDVQQDEyg3YzcwMGY1N2VlMzYx
ZWQyNDEyOGY3MmI5MzZmNTRhMWVlNGVjYjA1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn3yWXBq3mfqR4i1pkiD2xW6aNL1VOi5l38I3lQQv7GFac3pG
oAiNEY2VOxNnQ4cmlsfJ+n6K0Zkk97JdeeWZHbTbce1+QXIwW6ZRONoCllyDJVTE
L19iYOORVBqZ7shbA9ZidqGSACinHyDny4mt6oosEa87j4nFr/BTpDyb6UF8Ti7F
nOaxk/kYzvF5n2JdG3qJ1R8bVAyypZPUNfvnp1aIrpeHnK/BJx916RtvvbaZWB0e
k/ldmbyLyW8FB21Ee9Qt4c4e8iNwTY+HbtyGezNF0DksnvQzC50494rhqUC+DF7Q
ALApseFgqttNdJx7KOQl2r1Ejf6gO6vW3i3zCwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFVwyfEHyh9dyHSXDLeDl5NnqdU0MB8GA1UdIwQYMBaAFEsHlZsbu1/z9cR9
xmwzuTc7/O8nMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzA3MDQy
NmI3NDZmZmFmOTQ0MDdmMzllMWU1NTBiYmE5NzE3OWIwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzBlZGZiMjQtYmU4OS00ZTY3LWFlMDgtZGQ3ZWRj
NTY2NmVhLzdjNzAwZjU3ZWUzNjFlZDI0MTI4ZjcyYjkzNmY1NGExZWU0ZWNiMDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMGVkZmIyNC1iZTg5LTRlNjctYWUwOC1kZDdl
ZGM1NjY2ZWEvMzA3MDQyNmI3NDZmZmFmOTQ0MDdmMzllMWU1NTBiYmE5NzE3OWIw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL57KjANBgkqhkiG9w0BAQsFAAOCAQEAiA1pGpSDlwoteAm3
OfDCl8EPUDL1qoDw5pfHQFTnBF2KRgKU6Hle7W147UhJopVQmT/OfJ/RsXT+0Vm9
kWanS8jsvwqmFuDDAyFJ5HujifzlgFk9TCuCCvXT8Vzh67F8FoF8lnGD5kw726QQ
ndzR6jFTzhW4t/UW10ctiGR0somh1pIle77XALLhLkmHZRSFeBa8wIT8Jqo8Jh47
ZGhQSVGBlvkPv6Tog4SiRGSpdkd5VdclKflEyF/5IAlEJWVutNx2ssjmlnp6lqCM
HQ1R7SGA1FoI3btio7Nz7qX8+ypn51XWOTLtqWMrZ99kfUGI3Qy4YFvTZUocBT3G
qz63xQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org