Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e37b5a44b7c1b0bbd0060049d28915b8ec349117.roa
File:                     e37b5a44b7c1b0bbd0060049d28915b8ec349117.roa (raw, json)
Hash identifier:          kUcFJrnAioeCiDlQjijj7ENJRHAQKdL+wvHUmWR51bw=
Subject key identifier:   8A:93:84:35:B6:3D:91:D7:5E:1B:3D:7A:7D:23:C2:89:70:B6:B1:36
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       14AC06
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e37b5a44b7c1b0bbd0060049d28915b8ec349117.roa
Signing time:             Fri 21 Jan 2022 21:16:04 +0000
ROA not before:           Fri 21 Jan 2022 03:00:00 +0000
ROA not after:            Sun 21 Jan 2024 03:00:00 +0000
asID:                     13876
IP address blocks:        181.215.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1354758 (0x14ac06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Jan 21 03:00:00 2022 GMT
            Not After : Jan 21 03:00:00 2024 GMT
        Subject: CN=e37b5a44b7c1b0bbd0060049d28915b8ec349117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:a7:84:88:56:5d:11:4e:c3:46:0f:75:3d:
                    9d:dd:d3:d3:6d:b8:6a:25:df:b5:8a:99:11:27:46:
                    43:3d:8f:f9:20:2f:f5:17:b9:a8:f0:df:7c:98:9c:
                    d7:89:e1:06:0c:d2:f5:b8:93:b2:cc:5b:8a:08:74:
                    ac:61:bb:68:be:11:89:1a:12:a8:9a:91:0c:44:3e:
                    f0:5d:f1:f5:29:0d:1b:c8:ff:45:ee:14:5e:95:80:
                    7b:8c:40:67:34:c6:7d:5a:de:c4:45:9e:9a:88:d6:
                    ab:58:9d:fe:64:b2:db:26:55:4f:28:d9:1b:29:09:
                    8e:b3:4d:47:bf:a2:f1:22:fe:a7:65:a7:4f:da:83:
                    85:2f:c0:48:d1:cd:a0:7a:71:22:34:e1:f9:66:e9:
                    36:32:c8:de:4f:41:cd:1b:76:dc:bc:1e:ab:0c:d4:
                    d5:53:c9:cf:a6:e6:96:f7:43:7d:bb:f8:0c:47:5f:
                    18:9e:2f:b4:1c:8d:9d:69:92:70:52:4b:e6:49:45:
                    f8:f4:eb:c3:96:94:8a:4f:e9:c9:e2:3c:20:b6:6d:
                    64:0e:eb:e1:18:b6:57:28:3e:cb:33:46:eb:5b:e8:
                    68:5b:ed:f6:c0:94:f4:4b:81:bc:95:1e:ea:9e:2f:
                    c2:8b:08:29:3e:03:69:64:2d:cf:2e:7e:eb:5f:41:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:93:84:35:B6:3D:91:D7:5E:1B:3D:7A:7D:23:C2:89:70:B6:B1:36
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e37b5a44b7c1b0bbd0060049d28915b8ec349117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:16:6c:f3:34:ca:83:f6:53:30:d3:c3:cb:b1:17:02:c4:e9:
         a0:80:e9:f7:f8:75:ed:14:6a:d9:5d:88:a7:a7:85:eb:80:2f:
         c4:5a:4c:0f:f9:27:66:6f:4f:ce:1b:2d:f8:85:64:71:bc:71:
         52:b7:10:85:c2:e3:40:e6:59:a6:1d:44:e0:f5:33:6c:ab:e9:
         9a:7b:db:ca:35:08:0d:09:64:09:8c:eb:97:6d:30:2e:44:9f:
         11:36:58:26:dc:d6:0d:e0:80:72:dc:41:00:da:53:40:91:db:
         fd:07:dc:02:d8:1e:91:f2:70:63:21:bd:e5:44:67:8e:36:da:
         bc:fc:bd:af:51:4a:80:47:39:9e:af:5e:24:d7:de:98:8e:b0:
         54:b8:4f:aa:0b:d9:af:3d:0a:86:5a:91:4c:db:2c:98:f2:ca:
         92:36:af:ba:17:53:75:cd:6b:aa:e3:af:a7:31:32:4a:eb:b8:
         a3:65:83:f9:58:a5:68:87:86:47:b0:43:a6:89:1e:3e:18:3f:
         fc:af:de:e3:d2:7a:c6:40:e2:53:98:67:62:ee:3d:12:1c:f2:
         27:a5:b9:76:27:04:65:51:8c:0d:73:a9:aa:4c:89:bd:d8:75:
         6f:56:42:27:43:fb:80:65:75:ad:98:dd:ac:93:2b:fc:2c:7a:
         7d:ae:8f:0d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFKwGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjIwMTIx
MDMwMDAwWhcNMjQwMTIxMDMwMDAwWjAzMTEwLwYDVQQDEyhlMzdiNWE0NGI3YzFi
MGJiZDAwNjAwNDlkMjg5MTViOGVjMzQ5MTE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlzWnhIhWXRFOw0YPdT2d3dPTbbhqJd+1ipkRJ0ZDPY/5IC/1
F7mo8N98mJzXieEGDNL1uJOyzFuKCHSsYbtovhGJGhKompEMRD7wXfH1KQ0byP9F
7hRelYB7jEBnNMZ9Wt7ERZ6aiNarWJ3+ZLLbJlVPKNkbKQmOs01Hv6LxIv6nZadP
2oOFL8BI0c2genEiNOH5Zuk2MsjeT0HNG3bcvB6rDNTVU8nPpuaW90N9u/gMR18Y
ni+0HI2daZJwUkvmSUX49OvDlpSKT+nJ4jwgtm1kDuvhGLZXKD7LM0brW+hoW+32
wJT0S4G8lR7qni/CiwgpPgNpZC3PLn7rX0GWowIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIqThDW2PZHXXhs9en0jwolwtrE2MB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2UzN2I1YTQ0YjdjMWIwYmJkMDA2MDA0OWQyODkxNWI4ZWMzNDkxMTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALXXrTANBgkqhkiG9w0BAQsFAAOCAQEAThZs8zTKg/ZTMNPD
y7EXAsTpoIDp9/h17RRq2V2Ip6eF64AvxFpMD/knZm9Pzhst+IVkcbxxUrcQhcLj
QOZZph1E4PUzbKvpmnvbyjUIDQlkCYzrl20wLkSfETZYJtzWDeCActxBANpTQJHb
/QfcAtgekfJwYyG95URnjjbavPy9r1FKgEc5nq9eJNfemI6wVLhPqgvZrz0KhlqR
TNssmPLKkjavuhdTdc1rquOvpzEySuu4o2WD+VilaIeGR7BDpokePhg//K/e49J6
xkDiU5hnYu49EhzyJ6W5dicEZVGMDXOpqkyJvdh1b1ZCJ0P7gGV1rZjdrJMr/Cx6
fa6PDQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org