Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/c843264f01f551afbdd291e2d6605baeed94c295.roa
File:                     c843264f01f551afbdd291e2d6605baeed94c295.roa (raw, json)
Hash identifier:          WZHdJR5qcLzolvBr0xlAQkLqdgujOOxUy+YJprjD2BE=
Subject key identifier:   F5:C5:8D:4E:8F:E7:64:4D:C4:77:FF:1B:B0:92:31:5F:A9:94:86:E2
Certificate issuer:       /CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
Certificate serial:       286A8C
Authority key identifier: 66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/c843264f01f551afbdd291e2d6605baeed94c295.roa
Signing time:             Mon 11 Mar 2024 15:17:12 +0000
ROA not before:           Mon 11 Mar 2024 15:17:12 +0000
ROA not after:            Wed 11 Mar 2026 15:17:12 +0000
asID:                     52286
IP address blocks:        181.189.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2648716 (0x286a8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
        Validity
            Not Before: Mar 11 15:17:12 2024 GMT
            Not After : Mar 11 15:17:12 2026 GMT
        Subject: CN=c843264f01f551afbdd291e2d6605baeed94c295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:0f:e6:ff:2e:98:d8:a2:3a:05:f6:aa:8e:
                    0a:ba:ca:fb:23:71:c3:76:80:9d:fe:63:4b:19:6f:
                    c3:a7:9e:7c:2c:69:1c:7a:f8:5b:63:4d:da:04:5f:
                    9f:cd:7d:9d:b9:08:4c:81:75:b8:b4:87:b6:a6:49:
                    5f:a6:20:d0:a7:5c:1f:de:bd:1b:a9:66:c8:6b:8c:
                    75:18:14:5e:88:9f:e7:af:ac:a9:76:29:83:49:8c:
                    b3:1f:23:42:8e:4a:58:60:80:7e:fa:a4:5d:e2:68:
                    8c:1c:68:af:e1:32:89:0a:7f:bc:25:82:1b:bf:d0:
                    cc:30:5e:ac:5c:4b:16:2d:f6:1f:b6:67:f7:9d:84:
                    e5:0c:39:37:02:f5:83:8b:2e:f9:c5:69:f3:66:ef:
                    1b:9a:3f:12:b5:9a:48:9d:93:2b:f1:9e:87:86:c8:
                    b9:cd:75:43:96:90:f6:aa:5c:e6:47:e8:d2:fd:36:
                    3d:bc:99:35:f8:b3:cd:31:3a:93:10:a6:df:ce:9f:
                    2f:8e:58:b7:6c:95:c8:87:63:1c:47:cb:e8:83:fe:
                    ac:a0:8a:da:db:8a:b4:bf:b8:6e:4f:55:e6:73:c2:
                    e4:c1:9b:34:46:5d:75:e0:1b:e3:08:59:87:08:9b:
                    1d:a9:0e:18:34:23:ee:6e:69:61:a8:9e:c9:99:33:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C5:8D:4E:8F:E7:64:4D:C4:77:FF:1B:B0:92:31:5F:A9:94:86:E2
            X509v3 Authority Key Identifier:
                keyid:66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/c843264f01f551afbdd291e2d6605baeed94c295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/95f676acfc94ecb8278d82cca69a83a7b785bd05.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a7:af:77:91:f2:8a:73:00:84:ed:49:e2:66:5f:d9:ef:45:
         9f:50:88:04:9a:38:b1:05:46:d3:e3:2f:51:ca:2f:c3:dc:b9:
         5e:36:46:9d:de:2f:82:ba:13:c5:13:06:03:c3:af:dc:ee:71:
         77:f1:22:c1:5e:92:cc:35:b4:35:4f:91:1d:1a:50:29:44:1a:
         f3:c5:ef:48:4b:bb:77:d0:e2:40:e8:c1:cc:4c:ab:5d:8b:3c:
         ec:71:b5:30:e6:45:10:8f:10:3b:4e:59:f7:ef:6e:b3:20:49:
         91:42:02:cb:cf:23:8a:e5:5b:f8:0f:03:0a:56:0c:1f:f9:4b:
         46:95:2a:a1:70:8a:39:8b:f1:72:95:96:2e:53:b6:ad:6d:e8:
         71:9e:37:b0:d1:0c:aa:29:d4:e0:e1:e5:f1:96:66:f0:78:50:
         c3:4c:ee:4c:c2:4c:a3:94:1b:5c:e7:04:52:1f:65:d3:68:73:
         35:b9:de:d6:e3:00:6d:5f:e2:89:24:d8:15:fe:20:89:58:81:
         2a:8f:5f:c2:c1:a7:0d:19:1e:80:60:aa:54:db:fa:dd:2c:96:
         f1:4a:61:85:3a:a2:a3:d6:9d:35:e6:9b:7f:74:ec:8c:46:07:
         c2:20:c2:e1:bb:26:9c:80:46:02:99:d1:f2:cc:81:c4:d4:92:
         75:90:2e:fe
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKGqMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk1
ZjY3NmFjZmM5NGVjYjgyNzhkODJjY2E2OWE4M2E3Yjc4NWJkMDUwHhcNMjQwMzEx
MTUxNzEyWhcNMjYwMzExMTUxNzEyWjAzMTEwLwYDVQQDEyhjODQzMjY0ZjAxZjU1
MWFmYmRkMjkxZTJkNjYwNWJhZWVkOTRjMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq4sP5v8umNiiOgX2qo4Kusr7I3HDdoCd/mNLGW/Dp558LGkc
evhbY03aBF+fzX2duQhMgXW4tIe2pklfpiDQp1wf3r0bqWbIa4x1GBReiJ/nr6yp
dimDSYyzHyNCjkpYYIB++qRd4miMHGiv4TKJCn+8JYIbv9DMMF6sXEsWLfYftmf3
nYTlDDk3AvWDiy75xWnzZu8bmj8StZpInZMr8Z6Hhsi5zXVDlpD2qlzmR+jS/TY9
vJk1+LPNMTqTEKbfzp8vjli3bJXIh2McR8vog/6soIra24q0v7huT1Xmc8LkwZs0
Rl114BvjCFmHCJsdqQ4YNCPubmlhqJ7JmTOCKwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPXFjU6P52RNxHf/G7CSMV+plIbiMB8GA1UdIwQYMBaAFGZ5bnmgBXMzCEbS
4yGydSTMf/quMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTVmNjc2
YWNmYzk0ZWNiODI3OGQ4MmNjYTY5YTgzYTdiNzg1YmQwNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWYyNTkyZGEtODE3My00MGRmLWE3OWEtZTkwNzVm
NzY5ZTcyL2M4NDMyNjRmMDFmNTUxYWZiZGQyOTFlMmQ2NjA1YmFlZWQ5NGMyOTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjI1OTJkYS04MTczLTQwZGYtYTc5YS1lOTA3
NWY3NjllNzIvOTVmNjc2YWNmYzk0ZWNiODI3OGQ4MmNjYTY5YTgzYTdiNzg1YmQw
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALW97TANBgkqhkiG9w0BAQsFAAOCAQEAhaevd5HyinMAhO1J
4mZf2e9Fn1CIBJo4sQVG0+MvUcovw9y5XjZGnd4vgroTxRMGA8Ov3O5xd/EiwV6S
zDW0NU+RHRpQKUQa88XvSEu7d9DiQOjBzEyrXYs87HG1MOZFEI8QO05Z9+9usyBJ
kUICy88jiuVb+A8DClYMH/lLRpUqoXCKOYvxcpWWLlO2rW3ocZ43sNEMqinU4OHl
8ZZm8HhQw0zuTMJMo5QbXOcEUh9l02hzNbne1uMAbV/iiSTYFf4giViBKo9fwsGn
DRkegGCqVNv63SyW8UphhTqio9adNeabf3TsjEYHwiDC4bsmnIBGApnR8syBxNSS
dZAu/g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org