Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/38a342fbeed544805dea06b7591e7709524d79e3.roa
File:                     38a342fbeed544805dea06b7591e7709524d79e3.roa (raw, json)
Hash identifier:          Ved3unMxe4xOMDtLls5Eu6L+eVeYA1bLy+QVtXM4FCQ=
Subject key identifier:   B7:AD:E2:98:FD:CC:A1:7A:2E:80:F0:4A:F4:0C:7B:80:E2:D6:51:31
Certificate issuer:       /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial:       27D0B1
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/38a342fbeed544805dea06b7591e7709524d79e3.roa
Signing time:             Thu 01 Feb 2024 00:56:22 +0000
ROA not before:           Thu 01 Feb 2024 00:56:22 +0000
ROA not after:            Sun 01 Feb 2026 00:56:22 +0000
asID:                     52228
IP address blocks:        179.50.128.0/17 maxlen: 30
                          186.64.128.0/17 maxlen: 30
                          186.15.192.0/18 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2609329 (0x27d0b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
        Validity
            Not Before: Feb  1 00:56:22 2024 GMT
            Not After : Feb  1 00:56:22 2026 GMT
        Subject: CN=38a342fbeed544805dea06b7591e7709524d79e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:ba:04:57:24:1e:1d:e5:75:84:fd:99:cb:
                    f4:1a:61:55:0a:50:01:f5:e4:4c:87:81:18:96:ac:
                    ee:3f:02:a5:24:cd:13:06:08:be:ed:0c:ba:23:7e:
                    1c:05:69:f4:fd:96:43:79:8f:f8:d6:53:69:fe:1f:
                    bf:fd:d0:45:d3:ec:82:95:4f:3e:61:90:07:b7:ea:
                    d4:2a:29:c6:81:6d:f5:cb:58:8b:ce:a7:93:01:20:
                    fc:60:ef:d7:45:6b:be:59:0b:42:8b:6d:a8:cc:a8:
                    db:cc:46:16:7b:7f:13:0c:da:97:8e:56:c2:5f:b3:
                    a6:c6:bc:ea:49:bf:7b:85:e1:33:ca:cc:fd:35:42:
                    29:5f:c9:53:76:04:2c:6b:d6:08:95:43:ff:8d:ff:
                    5a:87:dd:ae:37:20:72:13:cb:cf:e8:ff:0e:7e:a9:
                    8c:cc:67:b0:39:67:db:e6:bf:13:6d:96:a3:e9:8d:
                    48:70:af:a3:4d:ed:bf:67:29:58:74:33:43:79:ea:
                    11:63:75:4e:60:6e:98:48:e1:b4:40:c8:ff:fb:e9:
                    47:50:e4:2a:a7:d4:f7:25:a2:2a:c5:dc:4d:82:fc:
                    84:0b:6d:c6:04:68:32:7e:4a:e1:55:6d:fa:22:24:
                    18:a4:68:8c:a2:26:c1:59:50:1b:b9:51:f5:19:00:
                    c0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AD:E2:98:FD:CC:A1:7A:2E:80:F0:4A:F4:0C:7B:80:E2:D6:51:31
            X509v3 Authority Key Identifier:
                keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/38a342fbeed544805dea06b7591e7709524d79e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.128.0/17
                  186.15.192.0/18
                  186.64.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1d:8b:20:51:50:da:81:45:dc:26:df:2e:17:4f:b9:34:df:e4:
         2b:cb:91:5c:e8:4e:2d:32:9b:05:8b:6b:65:5d:34:d1:0f:b1:
         91:fc:57:68:21:fa:7b:b2:9a:11:07:c1:a1:3c:6e:37:17:b5:
         b2:07:f3:4d:bc:25:de:18:a9:92:86:ef:6e:7e:d3:c1:4c:d4:
         65:4a:76:69:a2:40:c2:e4:ef:ee:5e:7a:cf:da:57:10:c1:17:
         b0:9a:f6:7d:76:9e:bd:79:34:65:3f:ae:f5:0a:c7:fa:98:0b:
         a5:68:01:3d:50:fe:ca:a9:27:be:65:da:89:bc:21:13:58:40:
         f3:81:fd:99:9e:7d:26:de:81:12:cd:4c:50:2b:2f:4b:6a:40:
         db:51:03:64:0d:29:a8:57:44:9c:8b:24:bb:71:9b:a4:4f:cb:
         e8:09:b8:29:0a:d2:9f:f5:cd:fa:c4:c2:d7:16:0b:8a:8a:05:
         e3:31:82:c9:61:f3:1d:7f:17:18:0d:9f:74:46:5c:31:87:0b:
         ae:f6:2f:f7:e0:fe:59:82:1a:29:b9:b4:7d:fc:b4:65:03:56:
         2b:d7:c8:b5:86:03:2f:92:e9:13:3b:76:84:ca:00:e5:b7:40:
         fd:9b:02:e2:a2:1c:b3:b1:bf:64:b9:6f:66:e6:76:0c:f2:8e:
         b5:c1:4c:f3
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDJ9CxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdk
NjY2ZmM5NmM4N2I3MTNjMWYxZmM2YjI4OWU1MWZhZTI5OGE5ZmYwHhcNMjQwMjAx
MDA1NjIyWhcNMjYwMjAxMDA1NjIyWjAzMTEwLwYDVQQDEygzOGEzNDJmYmVlZDU0
NDgwNWRlYTA2Yjc1OTFlNzcwOTUyNGQ3OWUzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtDC6BFckHh3ldYT9mcv0GmFVClAB9eRMh4EYlqzuPwKlJM0T
Bgi+7Qy6I34cBWn0/ZZDeY/41lNp/h+//dBF0+yClU8+YZAHt+rUKinGgW31y1iL
zqeTASD8YO/XRWu+WQtCi22ozKjbzEYWe38TDNqXjlbCX7OmxrzqSb97heEzysz9
NUIpX8lTdgQsa9YIlUP/jf9ah92uNyByE8vP6P8OfqmMzGewOWfb5r8TbZaj6Y1I
cK+jTe2/ZylYdDNDeeoRY3VOYG6YSOG0QMj/++lHUOQqp9T3JaIqxdxNgvyEC23G
BGgyfkrhVW36IiQYpGiMoibBWVAbuVH1GQDAKwIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFLet4pj9zKF6LoDwSvQMe4Di1lExMB8GA1UdIwQYMBaAFDRGFVM9N+d+5XHJ
0pVIYegs/s8mMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2Q2NjZm
Yzk2Yzg3YjcxM2MxZjFmYzZiMjg5ZTUxZmFlMjk4YTlmZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjUwNTRjMGYtMTk4YS00N2M2LWIxMTItMTUyZTM0
NjAyMzhjLzM4YTM0MmZiZWVkNTQ0ODA1ZGVhMDZiNzU5MWU3NzA5NTI0ZDc5ZTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNTA1NGMwZi0xOThhLTQ3YzYtYjExMi0xNTJl
MzQ2MDIzOGMvN2Q2NjZmYzk2Yzg3YjcxM2MxZjFmYzZiMjg5ZTUxZmFlMjk4YTlm
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEB7MygAMEBroPwAMEB7pAgDANBgkqhkiG9w0BAQsFAAOCAQEA
HYsgUVDagUXcJt8uF0+5NN/kK8uRXOhOLTKbBYtrZV000Q+xkfxXaCH6e7KaEQfB
oTxuNxe1sgfzTbwl3hipkobvbn7TwUzUZUp2aaJAwuTv7l56z9pXEMEXsJr2fXae
vXk0ZT+u9QrH+pgLpWgBPVD+yqknvmXaibwhE1hA84H9mZ59Jt6BEs1MUCsvS2pA
21EDZA0pqFdEnIsku3GbpE/L6Am4KQrSn/XN+sTC1xYLiooF4zGCyWHzHX8XGA2f
dEZcMYcLrvYv9+D+WYIaKbm0ffy0ZQNWK9fItYYDL5LpEzt2hMoA5bdA/ZsC4qIc
s7G/ZLlvZuZ2DPKOtcFM8w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org