Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/523f94d7a14679f2eadc0db687b937471be57664.roa
File:                     523f94d7a14679f2eadc0db687b937471be57664.roa (raw, json)
Hash identifier:          Q2udV4Y8l+PAjmaI/W0Pnb7IwJj4K5qsfdSTTbMQtk8=
Subject key identifier:   95:CD:D1:36:AE:21:A9:68:9A:09:47:25:5B:9C:43:AA:FD:AD:66:66
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       0DF6D9
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/523f94d7a14679f2eadc0db687b937471be57664.roa
Signing time:             Wed 24 Mar 2021 14:41:09 +0000
ROA not before:           Wed 24 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     263805
IP address blocks:        181.39.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915161 (0xdf6d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=523f94d7a14679f2eadc0db687b937471be57664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:20:fd:65:5c:97:ef:05:fa:f2:a7:f0:6b:37:
                    f8:0f:88:34:7f:47:fb:7d:f0:5e:4f:a9:30:29:cb:
                    f1:2a:d9:8a:7e:ae:23:2e:31:f1:71:4a:22:4b:0e:
                    e7:3e:af:e2:9f:18:98:63:9c:b6:1c:4b:fe:0e:c4:
                    a2:af:2e:b8:20:f1:35:44:67:45:73:5c:d2:17:f6:
                    19:67:7f:72:34:46:43:f5:57:f2:18:3a:8f:e7:4c:
                    d5:16:0c:d0:31:26:87:60:cc:b7:0a:de:83:30:d9:
                    ca:5b:9a:0e:23:47:a7:cf:22:02:43:cf:ae:3b:b7:
                    61:ab:54:2b:5a:dd:4c:7a:2c:72:7c:9c:5c:07:b5:
                    76:52:e2:9c:73:11:d5:95:3e:1d:d3:cc:43:b6:b7:
                    ff:77:85:fa:c8:ee:a3:08:43:79:cf:38:41:84:1e:
                    1f:4e:87:06:6d:31:1d:05:e9:17:c9:cc:e9:61:65:
                    57:70:0c:7a:4a:f8:6b:c1:5e:b1:b0:0d:50:3d:16:
                    4e:0d:a2:a2:6f:71:66:92:b9:c0:5e:4c:08:e9:00:
                    b8:be:ef:77:f5:96:89:22:e2:e8:7a:1c:27:2b:eb:
                    39:e9:dc:b9:4d:ff:7c:da:f5:b1:9e:5c:f3:09:b9:
                    af:97:44:e2:05:c7:02:d4:ef:89:b7:8f:05:d4:71:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CD:D1:36:AE:21:A9:68:9A:09:47:25:5B:9C:43:AA:FD:AD:66:66
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/523f94d7a14679f2eadc0db687b937471be57664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.39.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:28:a4:63:7b:82:67:49:55:36:d5:da:d1:a1:84:6c:22:b9:
         d7:57:0a:f4:a0:db:b0:84:6c:25:e6:02:49:dc:d4:90:f3:4b:
         59:68:54:22:4d:04:ee:0c:63:fe:a9:59:81:66:a0:72:00:df:
         e9:fa:84:d6:f7:44:d8:14:07:dc:e0:57:8e:ce:67:0c:10:15:
         92:e8:32:5d:33:8a:e4:53:37:22:ed:b2:02:cb:64:33:5a:41:
         47:41:cf:1c:60:bf:37:73:ac:e4:64:24:44:0f:1b:76:40:0e:
         be:75:cb:bf:9c:73:e2:ba:de:d1:9f:d6:ac:df:7d:34:4c:5a:
         eb:d8:48:4c:77:da:f5:c1:08:15:71:26:56:99:26:36:48:de:
         0f:70:28:d4:32:f3:bb:f3:05:d8:93:6e:b1:3f:ab:e3:3d:c8:
         ee:9f:fc:a8:b7:dc:a6:a1:f4:b0:73:16:7a:36:0b:02:79:42:
         86:4e:c5:c0:91:57:c8:27:c1:6e:3c:77:09:19:8e:de:f7:5e:
         d3:5a:98:a5:0d:e7:74:a8:34:ec:bf:8a:fe:0d:05:31:da:3f:
         97:8b:4b:05:f1:12:62:5f:11:e0:b3:3c:cb:ef:43:6e:b6:1a:
         56:38:f6:c9:b6:78:4a:73:ef:6f:bb:c3:ca:e7:e9:39:dd:98:
         8c:7d:9b:b6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDfbZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjEwMzI0
MTQ0MTA4WhcNMjYwMzI0MTQ0MTA4WjAzMTEwLwYDVQQDEyg1MjNmOTRkN2ExNDY3
OWYyZWFkYzBkYjY4N2I5Mzc0NzFiZTU3NjY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkiD9ZVyX7wX68qfwazf4D4g0f0f7ffBeT6kwKcvxKtmKfq4j
LjHxcUoiSw7nPq/inxiYY5y2HEv+DsSiry64IPE1RGdFc1zSF/YZZ39yNEZD9Vfy
GDqP50zVFgzQMSaHYMy3Ct6DMNnKW5oOI0enzyICQ8+uO7dhq1QrWt1MeixyfJxc
B7V2UuKccxHVlT4d08xDtrf/d4X6yO6jCEN5zzhBhB4fTocGbTEdBekXyczpYWVX
cAx6SvhrwV6xsA1QPRZODaKib3FmkrnAXkwI6QC4vu939ZaJIuLoehwnK+s56dy5
Tf982vWxnlzzCbmvl0TiBccC1O+Jt48F1HEvFwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJXN0TauIalomglHJVucQ6r9rWZmMB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r
EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm
MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5
YzE0NTY0LzUyM2Y5NGQ3YTE0Njc5ZjJlYWRjMGRiNjg3YjkzNzQ3MWJlNTc2NjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk
NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALUnRzANBgkqhkiG9w0BAQsFAAOCAQEAMiikY3uCZ0lVNtXa
0aGEbCK511cK9KDbsIRsJeYCSdzUkPNLWWhUIk0E7gxj/qlZgWagcgDf6fqE1vdE
2BQH3OBXjs5nDBAVkugyXTOK5FM3Iu2yAstkM1pBR0HPHGC/N3Os5GQkRA8bdkAO
vnXLv5xz4rre0Z/WrN99NExa69hITHfa9cEIFXEmVpkmNkjeD3Ao1DLzu/MF2JNu
sT+r4z3I7p/8qLfcpqH0sHMWejYLAnlChk7FwJFXyCfBbjx3CRmO3vde01qYpQ3n
dKg07L+K/g0FMdo/l4tLBfESYl8R4LM8y+9DbrYaVjj2ybZ4SnPvb7vDyufpOd2Y
jH2btg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org