Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/cf5efaecb4a9b7c7bff0d257f40d5f4e99f8d809.roa
File:                     cf5efaecb4a9b7c7bff0d257f40d5f4e99f8d809.roa (raw, json)
Hash identifier:          Sp2l1+ltNprdGi7oDkgb6yTfHjbq9OJNC3B2q9Ufe04=
Subject key identifier:   A7:C9:3C:12:B0:AA:C3:E6:84:84:B0:DC:90:D8:22:CC:A3:65:90:83
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       061156
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/cf5efaecb4a9b7c7bff0d257f40d5f4e99f8d809.roa
Signing time:             Wed 24 Mar 2021 14:33:34 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     57944
IP address blocks:        181.215.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397654 (0x61156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=cf5efaecb4a9b7c7bff0d257f40d5f4e99f8d809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:91:90:bd:8d:d6:b2:14:df:01:16:2a:24:7c:
                    27:32:69:d8:19:ca:4e:a7:d9:2d:14:9d:23:40:6d:
                    6e:22:3f:54:5e:49:f1:64:b8:09:0d:60:14:80:e1:
                    0b:ac:b3:f1:cc:26:5d:de:a4:98:1c:7b:fd:cf:1f:
                    c5:f3:e5:ef:1d:6c:d1:77:cd:3c:29:a5:4b:3c:fc:
                    51:ad:31:0d:b9:c0:04:ba:06:ec:a0:28:8b:d2:7e:
                    10:1d:20:f3:70:37:46:b9:9e:7b:eb:68:4c:4c:6a:
                    5d:8a:7d:a7:c6:45:83:20:ab:85:d8:32:59:fc:17:
                    64:24:e4:92:75:cd:a2:98:70:5d:a0:ad:ed:37:01:
                    4c:72:e2:bd:bb:52:c1:22:22:3c:bb:02:24:4e:eb:
                    d3:d0:31:3e:27:1a:42:3e:29:27:6a:a0:4a:11:80:
                    24:0c:d8:8f:74:e7:2b:b3:ba:66:f5:25:ff:ff:8d:
                    83:6d:4c:c8:75:ff:0a:c7:44:ff:60:b9:f6:4f:ad:
                    b2:d6:27:b6:e9:64:5c:44:ea:c6:97:22:33:57:1e:
                    0a:5f:37:a1:38:b7:da:ff:30:dc:8e:a9:92:60:76:
                    3e:ff:94:28:ec:67:f6:16:f3:1f:03:09:c3:e4:25:
                    b1:65:78:67:47:09:a3:fa:c3:91:3b:22:82:e2:ae:
                    82:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C9:3C:12:B0:AA:C3:E6:84:84:B0:DC:90:D8:22:CC:A3:65:90:83
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/cf5efaecb4a9b7c7bff0d257f40d5f4e99f8d809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:a1:61:47:d8:39:95:93:ed:ab:1b:20:a2:26:ba:27:09:25:
         ee:ae:84:aa:bc:0a:4b:f0:86:3f:44:bc:fe:c2:e9:4b:ac:cf:
         37:65:ad:93:ea:d8:dd:34:59:9b:f5:43:c9:18:27:95:f9:ae:
         58:e2:ab:17:60:5b:9f:48:43:77:8e:06:26:55:78:0e:e6:e0:
         4b:07:ca:e6:66:2d:14:07:08:81:d6:31:04:a2:2c:12:39:b5:
         45:28:53:a6:2a:7b:bf:8d:59:dd:cb:4f:33:4c:97:ff:9d:c7:
         39:5e:84:2d:56:42:b1:54:df:09:80:f0:14:a5:8f:9c:d2:04:
         d1:fe:e0:ec:f5:bb:78:65:7b:3a:f1:86:05:d7:2f:68:f2:21:
         ae:de:2b:e5:ed:50:6d:04:31:b9:16:f2:6a:43:ff:d2:ce:ff:
         f3:b8:8e:92:1b:2d:30:9a:1d:8d:fe:29:45:d7:17:08:93:31:
         18:b0:5d:32:15:f2:17:06:ca:69:55:7f:7d:01:ba:ff:39:cf:
         d0:d1:7b:2c:47:10:aa:56:73:7b:d7:17:e6:0e:3a:26:5d:a7:
         e2:42:08:f4:d9:1e:b0:8a:c2:d2:c6:da:68:78:19:ae:8a:24:
         44:81:82:a9:65:7a:c4:9b:ec:14:02:95:1e:d0:22:cf:7f:1c:
         81:9f:1a:d3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBhFWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MTQzMzI5WhcNMjYwMzI0MTQzMzI5WjAzMTEwLwYDVQQDEyhjZjVlZmFlY2I0YTli
N2M3YmZmMGQyNTdmNDBkNWY0ZTk5ZjhkODA5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq5GQvY3WshTfARYqJHwnMmnYGcpOp9ktFJ0jQG1uIj9UXknx
ZLgJDWAUgOELrLPxzCZd3qSYHHv9zx/F8+XvHWzRd808KaVLPPxRrTENucAEugbs
oCiL0n4QHSDzcDdGuZ5762hMTGpdin2nxkWDIKuF2DJZ/BdkJOSSdc2imHBdoK3t
NwFMcuK9u1LBIiI8uwIkTuvT0DE+JxpCPiknaqBKEYAkDNiPdOcrs7pm9SX//42D
bUzIdf8Kx0T/YLn2T62y1ie26WRcROrGlyIzVx4KXzehOLfa/zDcjqmSYHY+/5Qo
7Gf2FvMfAwnD5CWxZXhnRwmj+sOROyKC4q6CQQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKfJPBKwqsPmhISw3JDYIsyjZZCDMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2NmNWVmYWVjYjRhOWI3YzdiZmYwZDI1N2Y0MGQ1ZjRlOTlmOGQ4MDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALXX9zANBgkqhkiG9w0BAQsFAAOCAQEAC6FhR9g5lZPtqxsg
oia6Jwkl7q6EqrwKS/CGP0S8/sLpS6zPN2Wtk+rY3TRZm/VDyRgnlfmuWOKrF2Bb
n0hDd44GJlV4DubgSwfK5mYtFAcIgdYxBKIsEjm1RShTpip7v41Z3ctPM0yX/53H
OV6ELVZCsVTfCYDwFKWPnNIE0f7g7PW7eGV7OvGGBdcvaPIhrt4r5e1QbQQxuRby
akP/0s7/87iOkhstMJodjf4pRdcXCJMxGLBdMhXyFwbKaVV/fQG6/znP0NF7LEcQ
qlZze9cX5g46Jl2n4kII9NkesIrC0sbaaHgZrookRIGCqWV6xJvsFAKVHtAiz38c
gZ8a0w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org