Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d7910ef48a2a0a34a9904aa99d298b5d5a323310.roa
File:                     d7910ef48a2a0a34a9904aa99d298b5d5a323310.roa (raw, json)
Hash identifier:          hmG2P+e8cg1ZFN+WkUy4Jx8Lmt1AGP/Tf0MYc4ByHC8=
Subject key identifier:   74:D3:30:D5:95:6E:9E:13:7C:F3:AF:0C:F1:9D:0D:7E:CA:2F:59:3F
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       069A44
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d7910ef48a2a0a34a9904aa99d298b5d5a323310.roa
Signing time:             Wed 24 Mar 2021 14:33:36 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     200872
IP address blocks:        181.214.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432708 (0x69a44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=d7910ef48a2a0a34a9904aa99d298b5d5a323310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dd:1e:f2:d7:4f:ef:f2:78:df:2e:aa:c7:ed:
                    e3:b3:b1:61:a8:c0:7a:ec:ba:17:a9:f2:4b:59:19:
                    a5:b6:87:e6:fe:ab:5e:0c:2c:e2:19:cb:c3:fa:2d:
                    58:91:cd:f1:32:b2:93:b0:f5:3b:af:c8:26:59:e8:
                    5f:f7:13:4e:a1:6c:32:9e:b4:a5:83:0c:ee:7f:17:
                    79:4a:fd:68:22:ce:ae:cf:f5:05:40:0e:0f:24:89:
                    1c:5e:71:a8:16:84:bd:29:1d:d7:f3:a3:dd:ff:2e:
                    cd:a6:d9:2e:6d:a5:1d:7a:8d:8f:b2:01:81:d8:c3:
                    d9:66:fb:02:f0:33:b8:51:45:df:65:71:33:96:d3:
                    6c:f3:e4:7b:57:ca:87:91:8c:74:72:10:9b:10:53:
                    b6:6e:76:64:05:7a:5c:42:aa:1a:89:60:aa:23:3e:
                    33:fd:08:17:70:7d:b4:21:9a:28:6e:d9:34:29:ab:
                    77:56:0c:f9:1f:fe:be:04:f6:29:4f:2b:3e:bc:71:
                    37:cc:45:6d:ba:83:0b:62:d2:c2:3c:6e:b6:7c:49:
                    79:2e:3b:c4:8c:60:41:13:19:0b:6b:ad:e4:46:16:
                    08:c5:c1:ac:de:67:8c:dc:34:de:68:de:cd:ab:f2:
                    de:5a:a9:31:9a:22:15:e3:e1:ac:7c:83:46:91:5e:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D3:30:D5:95:6E:9E:13:7C:F3:AF:0C:F1:9D:0D:7E:CA:2F:59:3F
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d7910ef48a2a0a34a9904aa99d298b5d5a323310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:85:f3:5c:79:71:58:46:15:c0:f5:a8:1b:fd:76:03:14:03:
         cc:2d:ce:7d:9d:65:4c:bb:e0:a2:da:09:78:75:32:73:ef:0d:
         61:8e:be:16:b2:71:b9:39:5b:94:41:b3:6a:63:4f:07:fb:ed:
         1e:4c:d2:20:eb:66:ce:34:75:6e:17:d7:a2:85:10:df:1a:97:
         bb:cf:28:6b:3f:f3:94:9a:b4:b1:39:5f:a3:b3:ce:a7:07:de:
         8f:09:46:67:31:71:9f:17:f5:08:56:94:0c:c9:c4:4b:bb:81:
         c4:9b:ad:7f:68:fd:4d:fa:4a:e6:d0:fc:c7:2d:38:b3:db:f5:
         3e:29:b4:41:4a:97:16:50:a0:e4:3a:dc:b8:bd:a8:20:72:ec:
         dd:bd:fc:a4:de:87:a6:5a:25:25:0a:0b:a7:28:39:60:30:44:
         7d:98:51:51:6a:54:27:37:2a:f5:97:fb:f5:65:b8:8d:9a:c1:
         6d:c9:0c:a5:43:12:1b:6f:f0:e1:3d:b5:c5:d4:ba:e1:d7:f1:
         aa:37:f6:6b:cc:f2:c9:00:72:fa:7d:1f:5b:dd:c3:72:b6:33:
         87:ca:26:fb:f5:2e:cc:11:27:b5:44:31:68:99:13:3b:61:bb:
         ab:a4:80:d9:dc:a3:7b:fa:c0:71:7c:e1:90:df:31:d7:3c:e3:
         63:4a:eb:69
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBppEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MTQzMzI5WhcNMjYwMzI0MTQzMzI5WjAzMTEwLwYDVQQDEyhkNzkxMGVmNDhhMmEw
YTM0YTk5MDRhYTk5ZDI5OGI1ZDVhMzIzMzEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1t0e8tdP7/J43y6qx+3js7FhqMB67LoXqfJLWRmltofm/qte
DCziGcvD+i1Ykc3xMrKTsPU7r8gmWehf9xNOoWwynrSlgwzufxd5Sv1oIs6uz/UF
QA4PJIkcXnGoFoS9KR3X86Pd/y7NptkubaUdeo2PsgGB2MPZZvsC8DO4UUXfZXEz
ltNs8+R7V8qHkYx0chCbEFO2bnZkBXpcQqoaiWCqIz4z/QgXcH20IZoobtk0Kat3
Vgz5H/6+BPYpTys+vHE3zEVtuoMLYtLCPG62fEl5LjvEjGBBExkLa63kRhYIxcGs
3meM3DTeaN7Nq/LeWqkxmiIV4+GsfINGkV5nCwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHTTMNWVbp4TfPOvDPGdDX7KL1k/MB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2Q3OTEwZWY0OGEyYTBhMzRhOTkwNGFhOTlkMjk4YjVkNWEzMjMzMTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALXWTzANBgkqhkiG9w0BAQsFAAOCAQEAR4XzXHlxWEYVwPWo
G/12AxQDzC3OfZ1lTLvgotoJeHUyc+8NYY6+FrJxuTlblEGzamNPB/vtHkzSIOtm
zjR1bhfXooUQ3xqXu88oaz/zlJq0sTlfo7POpwfejwlGZzFxnxf1CFaUDMnES7uB
xJutf2j9TfpK5tD8xy04s9v1Pim0QUqXFlCg5DrcuL2oIHLs3b38pN6HplolJQoL
pyg5YDBEfZhRUWpUJzcq9Zf79WW4jZrBbckMpUMSG2/w4T21xdS64dfxqjf2a8zy
yQBy+n0fW93DcrYzh8om+/UuzBEntUQxaJkTO2G7q6SA2dyje/rAcXzhkN8x1zzj
Y0rraQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org