Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/7faedc788c078f9300ce5efb28bb95d4ce1103a2.roa
File:                     7faedc788c078f9300ce5efb28bb95d4ce1103a2.roa (raw, json)
Hash identifier:          3lAeHWAbM1ot9rvbFdanUOMXhIbUd6pRFXWuT675p4E=
Subject key identifier:   19:4F:FC:B4:B2:5E:AE:EF:CA:AE:8A:1A:84:1D:42:B6:ED:05:9B:AD
Certificate issuer:       /CN=dbd36e815108aff3b7b3a80ea6302316bea35e09
Certificate serial:       12BE41
Authority key identifier: 77:88:5B:39:00:EE:9E:4E:18:31:E5:B3:56:5A:B0:E7:AA:12:1C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbd36e815108aff3b7b3a80ea6302316bea35e09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/7faedc788c078f9300ce5efb28bb95d4ce1103a2.roa
Signing time:             Tue 09 Nov 2021 14:03:01 +0000
ROA not before:           Mon 01 Nov 2021 03:00:00 +0000
ROA not after:            Fri 31 Jul 2026 03:00:00 +0000
asID:                     263766
IP address blocks:        131.196.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1228353 (0x12be41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd36e815108aff3b7b3a80ea6302316bea35e09
        Validity
            Not Before: Nov  1 03:00:00 2021 GMT
            Not After : Jul 31 03:00:00 2026 GMT
        Subject: CN=7faedc788c078f9300ce5efb28bb95d4ce1103a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c0:51:c5:37:7f:9e:28:df:d4:e4:03:80:bf:
                    1c:dd:8f:3d:c9:b4:89:da:ad:8f:74:b5:a1:df:14:
                    0f:17:17:0e:14:a5:93:75:b7:5d:3d:95:80:26:c3:
                    13:0b:40:b0:8d:84:b4:5a:85:86:ee:7f:0c:d8:1b:
                    53:91:0b:40:fc:a3:62:ad:71:44:dd:47:6a:8d:3a:
                    66:4e:f6:bd:89:89:34:af:a4:cb:b1:f7:8f:bc:1d:
                    11:9c:ad:60:14:11:1a:f4:8f:1f:f6:1b:26:fc:7f:
                    d3:b5:1c:11:98:db:1c:bc:df:e8:0c:69:4c:3b:14:
                    bb:c6:60:ea:f6:f4:2c:3a:ef:d8:30:da:5a:ca:1f:
                    d8:71:ec:ed:8e:96:56:45:77:f5:1b:65:c5:2e:80:
                    2f:b8:b0:3e:60:bc:2d:96:4f:a1:45:e5:dd:7b:1a:
                    cc:72:9b:db:2c:10:ce:b8:87:9e:50:7a:5e:1a:04:
                    30:30:82:f3:6e:02:38:a6:b0:40:47:80:e8:89:16:
                    a1:33:a2:fd:bd:48:7a:99:02:37:80:92:d5:ed:4d:
                    7b:a6:da:f1:fd:c1:e1:17:9d:fb:52:11:a6:0f:4c:
                    87:6c:9a:87:a1:26:44:f9:9e:ca:18:1b:96:19:d6:
                    bf:77:63:6f:c4:82:7d:14:4e:15:ec:ab:91:71:fb:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:4F:FC:B4:B2:5E:AE:EF:CA:AE:8A:1A:84:1D:42:B6:ED:05:9B:AD
            X509v3 Authority Key Identifier:
                keyid:77:88:5B:39:00:EE:9E:4E:18:31:E5:B3:56:5A:B0:E7:AA:12:1C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbd36e815108aff3b7b3a80ea6302316bea35e09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/7faedc788c078f9300ce5efb28bb95d4ce1103a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/dbd36e815108aff3b7b3a80ea6302316bea35e09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:78:f5:3b:aa:50:ee:8a:4e:b6:8d:66:41:c1:b1:4d:95:ab:
         a7:21:3d:00:ef:f9:bd:92:c3:52:40:2d:1c:99:16:01:08:b7:
         cb:6f:ad:b9:e5:47:2e:1d:2f:9b:77:01:8f:ee:d4:24:fe:05:
         e8:0c:bc:ab:fb:71:a2:b5:6c:61:c1:61:6c:a0:d6:7a:94:0d:
         2c:c4:23:51:07:75:4a:d9:72:78:03:87:0d:bc:e4:4d:3a:45:
         f1:45:eb:b9:7f:82:74:8d:b3:06:67:a7:06:fc:a2:d2:29:56:
         8c:35:54:b9:24:39:e3:16:c6:1c:29:6d:6b:40:eb:20:9e:7f:
         20:ce:88:24:81:2f:f0:54:f7:1f:18:c1:bf:81:ca:4b:c7:bd:
         db:53:35:94:d5:41:c3:a2:7c:1a:df:51:0b:4e:66:15:38:da:
         31:20:2f:6f:ba:8c:78:37:08:6c:61:3a:7c:8d:5d:c3:39:d6:
         d7:49:ed:81:ee:d5:b3:56:d0:25:9a:3a:c1:0a:d9:0d:17:f5:
         0b:6b:2a:51:a5:f0:5c:a0:84:23:e0:13:ad:02:02:16:5b:14:
         33:00:0d:af:50:27:66:ed:2f:15:76:24:b7:3b:1f:d4:50:63:
         e6:f1:19:c3:2d:4e:47:b6:bb:79:39:27:85:7f:0f:65:92:a0:
         64:7c:22:64
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEr5BMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRi
ZDM2ZTgxNTEwOGFmZjNiN2IzYTgwZWE2MzAyMzE2YmVhMzVlMDkwHhcNMjExMTAx
MDMwMDAwWhcNMjYwNzMxMDMwMDAwWjAzMTEwLwYDVQQDEyg3ZmFlZGM3ODhjMDc4
ZjkzMDBjZTVlZmIyOGJiOTVkNGNlMTEwM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmcBRxTd/nijf1OQDgL8c3Y89ybSJ2q2PdLWh3xQPFxcOFKWT
dbddPZWAJsMTC0CwjYS0WoWG7n8M2BtTkQtA/KNirXFE3UdqjTpmTva9iYk0r6TL
sfePvB0RnK1gFBEa9I8f9hsm/H/TtRwRmNscvN/oDGlMOxS7xmDq9vQsOu/YMNpa
yh/YceztjpZWRXf1G2XFLoAvuLA+YLwtlk+hReXdexrMcpvbLBDOuIeeUHpeGgQw
MILzbgI4prBAR4DoiRahM6L9vUh6mQI3gJLV7U17ptrx/cHhF537UhGmD0yHbJqH
oSZE+Z7KGBuWGda/d2NvxIJ9FE4V7KuRcfuRpQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBlP/LSyXq7vyq6KGoQdQrbtBZutMB8GA1UdIwQYMBaAFHeIWzkA7p5OGDHl
s1ZasOeqEhzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGJkMzZl
ODE1MTA4YWZmM2I3YjNhODBlYTYzMDIzMTZiZWEzNWUwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDlkZGRmMDgtY2M5Mi00MzVlLWE2NjAtNjU3ODFk
YTNjOTRlLzdmYWVkYzc4OGMwNzhmOTMwMGNlNWVmYjI4YmI5NWQ0Y2UxMTAzYTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wOWRkZGYwOC1jYzkyLTQzNWUtYTY2MC02NTc4
MWRhM2M5NGUvZGJkMzZlODE1MTA4YWZmM2I3YjNhODBlYTYzMDIzMTZiZWEzNWUw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoPEvDANBgkqhkiG9w0BAQsFAAOCAQEAnHj1O6pQ7opOto1m
QcGxTZWrpyE9AO/5vZLDUkAtHJkWAQi3y2+tueVHLh0vm3cBj+7UJP4F6Ay8q/tx
orVsYcFhbKDWepQNLMQjUQd1StlyeAOHDbzkTTpF8UXruX+CdI2zBmenBvyi0ilW
jDVUuSQ54xbGHClta0DrIJ5/IM6IJIEv8FT3HxjBv4HKS8e921M1lNVBw6J8Gt9R
C05mFTjaMSAvb7qMeDcIbGE6fI1dwznW10ntge7Vs1bQJZo6wQrZDRf1C2sqUaXw
XKCEI+ATrQICFlsUMwANr1AnZu0vFXYktzsf1FBj5vEZwy1OR7a7eTknhX8PZZKg
ZHwiZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org