Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3004b1ea-45fd-4958-bc0f-85c3ee4452e7/3592751cb9dcb10e63e396c4863c3137b593db87.roa
File:                     3592751cb9dcb10e63e396c4863c3137b593db87.roa (raw, json)
Hash identifier:          BIAVNnWD39RyUx+4Ippi1OiG6CGv59jAHckdx/vfqAA=
Subject key identifier:   92:A0:BE:5F:8A:BF:3B:A8:55:27:32:5D:41:59:9A:C3:9B:BD:CE:F4
Certificate issuer:       /CN=5a3df344441b276a4625cddb05e287e9dd06da42
Certificate serial:       0D6B33
Authority key identifier: C4:CA:E7:84:95:AD:65:2A:72:DA:4B:0F:4E:C6:1D:E3:79:FC:75:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a3df344441b276a4625cddb05e287e9dd06da42.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3004b1ea-45fd-4958-bc0f-85c3ee4452e7/3592751cb9dcb10e63e396c4863c3137b593db87.roa
Signing time:             Wed 24 Mar 2021 14:34:42 +0000
ROA not before:           Wed 24 Mar 2021 14:34:42 +0000
ROA not after:            Tue 24 Mar 2026 14:34:42 +0000
asID:                     263731
IP address blocks:        201.131.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879411 (0xd6b33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3df344441b276a4625cddb05e287e9dd06da42
        Validity
            Not Before: Mar 24 14:34:42 2021 GMT
            Not After : Mar 24 14:34:42 2026 GMT
        Subject: CN=3592751cb9dcb10e63e396c4863c3137b593db87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9b:78:2c:ed:7e:07:b4:06:58:fc:b3:fa:66:
                    00:65:98:d9:eb:dd:ec:cc:42:de:03:45:ab:b1:1d:
                    06:50:14:b5:7b:1d:6e:e0:65:ce:08:bd:c3:23:a6:
                    9f:89:4f:35:4b:8f:20:ed:87:03:13:24:38:94:a6:
                    16:ee:f6:8c:21:fe:ba:c4:de:36:95:16:6b:9f:26:
                    17:37:61:b2:11:d1:46:78:ba:77:a8:81:74:e6:53:
                    46:87:34:b2:dd:c8:2c:4e:e1:4d:ae:9c:e3:1a:4a:
                    4f:10:78:84:89:be:d4:9b:9f:0c:13:99:84:92:15:
                    ae:70:02:cb:c7:96:f7:84:a4:1b:19:b0:d5:56:f0:
                    09:b2:de:db:df:16:69:74:ef:1e:29:ba:6d:c5:51:
                    00:ec:73:46:5e:53:27:8e:26:e9:59:56:ad:4f:a5:
                    ac:73:fc:cc:e4:c8:e4:73:08:f5:65:15:ac:31:58:
                    53:a6:c6:81:f1:35:1b:b3:d4:dd:a1:52:ad:59:25:
                    93:fc:dd:97:7f:9f:83:0c:a7:59:7a:20:fa:02:8f:
                    9f:83:1f:8e:39:e9:36:64:da:14:0c:4b:d8:c4:fb:
                    6b:ae:b2:4f:2d:be:db:e6:22:89:a9:c9:81:fe:c1:
                    07:69:3d:51:61:1d:a3:bf:8d:7e:7b:c3:1c:20:37:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A0:BE:5F:8A:BF:3B:A8:55:27:32:5D:41:59:9A:C3:9B:BD:CE:F4
            X509v3 Authority Key Identifier:
                keyid:C4:CA:E7:84:95:AD:65:2A:72:DA:4B:0F:4E:C6:1D:E3:79:FC:75:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a3df344441b276a4625cddb05e287e9dd06da42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3004b1ea-45fd-4958-bc0f-85c3ee4452e7/3592751cb9dcb10e63e396c4863c3137b593db87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3004b1ea-45fd-4958-bc0f-85c3ee4452e7/5a3df344441b276a4625cddb05e287e9dd06da42.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:0a:fe:eb:cd:42:89:38:1d:b0:1f:ad:a7:91:b0:4a:ed:6e:
         99:87:91:a7:cd:31:8d:fb:0b:d2:27:be:63:bd:9b:42:25:19:
         b6:6c:d7:36:6f:bc:be:16:a0:52:9a:7b:34:9c:0a:92:b0:2e:
         99:ae:3f:19:d4:d5:a2:f1:fd:a8:4f:8a:a3:06:0f:b4:aa:28:
         c0:98:fd:de:80:bf:1b:12:db:62:1e:08:73:2f:3a:a3:43:6d:
         c6:0d:5e:99:33:01:a6:a4:83:cc:e8:20:2d:51:04:5b:d4:64:
         40:69:cb:6c:ee:b1:1f:e5:d7:d1:44:91:de:6b:79:2a:e9:f0:
         f0:cd:97:23:f6:56:bb:5c:cd:da:8e:58:0e:3b:9e:5e:ce:f9:
         37:63:b6:97:08:dd:8f:41:8e:bc:7e:96:77:f6:be:7a:0c:b9:
         eb:2d:58:78:a8:ef:ad:5d:d0:61:92:30:73:ad:bf:e3:1d:e7:
         de:73:95:18:d3:84:43:e8:13:9b:41:86:d5:80:cb:19:fa:28:
         8c:cd:9f:81:b3:53:08:43:30:5a:99:6c:aa:4d:f7:2d:ae:22:
         73:b5:28:22:65:b6:22:63:4f:06:55:5a:2b:99:0d:8d:1a:4c:
         08:4d:31:40:8d:4e:a7:dc:9f:b9:72:ab:5c:d8:9b:74:cb:52:
         9a:eb:a6:7e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDWszMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
M2RmMzQ0NDQxYjI3NmE0NjI1Y2RkYjA1ZTI4N2U5ZGQwNmRhNDIwHhcNMjEwMzI0
MTQzNDQyWhcNMjYwMzI0MTQzNDQyWjAzMTEwLwYDVQQDEygzNTkyNzUxY2I5ZGNi
MTBlNjNlMzk2YzQ4NjNjMzEzN2I1OTNkYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzJt4LO1+B7QGWPyz+mYAZZjZ693szELeA0WrsR0GUBS1ex1u
4GXOCL3DI6afiU81S48g7YcDEyQ4lKYW7vaMIf66xN42lRZrnyYXN2GyEdFGeLp3
qIF05lNGhzSy3cgsTuFNrpzjGkpPEHiEib7Um58ME5mEkhWucALLx5b3hKQbGbDV
VvAJst7b3xZpdO8eKbptxVEA7HNGXlMnjibpWVatT6Wsc/zM5Mjkcwj1ZRWsMVhT
psaB8TUbs9TdoVKtWSWT/N2Xf5+DDKdZeiD6Ao+fgx+OOek2ZNoUDEvYxPtrrrJP
Lb7b5iKJqcmB/sEHaT1RYR2jv41+e8McIDekFQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJKgvl+KvzuoVScyXUFZmsObvc70MB8GA1UdIwQYMBaAFMTK54SVrWUqctpL
D07GHeN5/HVYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWEzZGYz
NDQ0NDFiMjc2YTQ2MjVjZGRiMDVlMjg3ZTlkZDA2ZGE0Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzAwNGIxZWEtNDVmZC00OTU4LWJjMGYtODVjM2Vl
NDQ1MmU3LzM1OTI3NTFjYjlkY2IxMGU2M2UzOTZjNDg2M2MzMTM3YjU5M2RiODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMDA0YjFlYS00NWZkLTQ5NTgtYmMwZi04NWMz
ZWU0NDUyZTcvNWEzZGYzNDQ0NDFiMjc2YTQ2MjVjZGRiMDVlMjg3ZTlkZDA2ZGE0
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMmDTjANBgkqhkiG9w0BAQsFAAOCAQEAQwr+681CiTgdsB+t
p5GwSu1umYeRp80xjfsL0ie+Y72bQiUZtmzXNm+8vhagUpp7NJwKkrAuma4/GdTV
ovH9qE+KowYPtKoowJj93oC/GxLbYh4Icy86o0Ntxg1emTMBpqSDzOggLVEEW9Rk
QGnLbO6xH+XX0USR3mt5Kunw8M2XI/ZWu1zN2o5YDjueXs75N2O2lwjdj0GOvH6W
d/a+egy56y1YeKjvrV3QYZIwc62/4x3n3nOVGNOEQ+gTm0GG1YDLGfoojM2fgbNT
CEMwWplsqk33La4ic7UoImW2ImNPBlVaK5kNjRpMCE0xQI1Op9yfuXKrXNibdMtS
muumfg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org