Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/a7db0d90a56f725c98ec9c31b74bbf77d817d5da.roa
File:                     a7db0d90a56f725c98ec9c31b74bbf77d817d5da.roa (raw, json)
Hash identifier:          kha8lTPWgzlYWttmH8L0Zwtnat8tJvHWXASK9EVJfZ0=
Subject key identifier:   F0:AC:EF:DE:02:DE:6A:18:60:F1:2A:FE:06:C4:2A:6F:64:01:39:AE
Certificate issuer:       /CN=9b0e0f420897114db2d68a02564c7a8a56c71d86
Certificate serial:       26F625
Authority key identifier: 94:2E:CB:F2:D9:9C:9A:5A:0B:49:3D:A0:37:F9:50:50:9C:29:15:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b0e0f420897114db2d68a02564c7a8a56c71d86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/a7db0d90a56f725c98ec9c31b74bbf77d817d5da.roa
Signing time:             Fri 05 Jan 2024 07:30:00 +0000
ROA not before:           Fri 05 Jan 2024 07:30:00 +0000
ROA not after:            Sun 04 Jan 2026 07:30:00 +0000
asID:                     266667
IP address blocks:        181.224.172.0/24 maxlen: 24
                          181.224.173.0/24 maxlen: 24
                          181.224.174.0/24 maxlen: 24
                          181.224.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2553381 (0x26f625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0e0f420897114db2d68a02564c7a8a56c71d86
        Validity
            Not Before: Jan  5 07:30:00 2024 GMT
            Not After : Jan  4 07:30:00 2026 GMT
        Subject: CN=a7db0d90a56f725c98ec9c31b74bbf77d817d5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:e1:c9:c2:66:48:8b:d3:61:05:61:25:b4:
                    44:e0:cf:24:3d:28:e1:9f:60:f2:08:ed:6f:4e:53:
                    0b:82:c0:02:f1:bd:cd:69:63:65:8b:0c:bb:60:53:
                    f3:92:c0:8b:aa:ed:a6:aa:8e:0d:71:70:30:4f:8c:
                    9e:89:58:c2:df:8e:03:ca:f2:24:a2:eb:7e:ad:4a:
                    61:8f:26:89:90:78:50:74:6c:05:18:0b:52:56:8a:
                    33:f0:4e:f9:39:17:b6:b5:7f:39:89:94:8c:55:2a:
                    a4:25:13:7c:dc:d9:18:a4:17:38:b6:34:f0:7f:d1:
                    66:25:04:71:21:08:ae:d4:15:5a:c5:74:23:93:55:
                    73:9d:33:67:89:01:d4:45:de:2b:1d:1a:2a:ad:75:
                    07:35:62:19:ab:b2:c3:87:0e:9f:61:2a:ab:40:5e:
                    30:d5:a1:af:65:52:2d:50:d4:e9:ff:f1:f5:fc:2c:
                    92:dd:d4:04:76:2d:f3:bc:aa:0d:3c:6d:b0:80:98:
                    53:b4:95:52:f6:d4:c4:fd:3a:9e:81:02:55:8b:a6:
                    44:c7:76:ed:6a:2f:a1:a2:cb:32:e4:ac:a3:f7:7a:
                    8b:92:f7:ea:dd:30:81:c7:05:8d:f9:b9:c6:ad:e2:
                    00:98:fa:f3:72:2b:4c:57:40:f1:79:b0:b1:ea:06:
                    ff:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AC:EF:DE:02:DE:6A:18:60:F1:2A:FE:06:C4:2A:6F:64:01:39:AE
            X509v3 Authority Key Identifier:
                keyid:94:2E:CB:F2:D9:9C:9A:5A:0B:49:3D:A0:37:F9:50:50:9C:29:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b0e0f420897114db2d68a02564c7a8a56c71d86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/a7db0d90a56f725c98ec9c31b74bbf77d817d5da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/9b0e0f420897114db2d68a02564c7a8a56c71d86.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:90:67:e9:b7:79:9d:6e:32:59:22:66:62:5c:56:fc:46:
         4e:59:3f:a4:3c:1e:b7:97:97:4e:11:b8:cf:67:0d:52:85:6e:
         36:ca:03:14:d2:ad:b3:3f:c5:5e:04:7b:60:32:30:b8:9b:a5:
         fc:5e:27:c2:a1:89:4c:0b:47:ba:a8:bc:db:4b:53:07:d8:1c:
         b1:6f:6c:40:dc:06:53:26:83:ae:75:c9:12:f8:d4:3d:89:18:
         1a:88:60:ba:f2:e5:b8:af:fe:84:fe:25:47:aa:68:36:50:65:
         43:75:bc:cc:f8:65:a4:1f:16:5b:51:63:3f:be:b4:dd:e9:e5:
         90:5d:a8:ec:0e:3f:10:a5:36:5b:42:ef:77:99:c0:35:44:7c:
         99:76:22:6a:d6:30:de:4b:c1:ea:de:2f:30:f6:02:2f:93:b5:
         da:6f:f3:b9:55:26:b4:bc:3e:8c:57:af:98:48:43:89:f8:fa:
         f4:e2:17:f3:a5:2e:41:02:41:ec:68:72:de:cf:f5:c8:73:ae:
         f6:b6:aa:65:fc:c2:4f:da:8b:c4:a5:12:d5:03:73:f6:2c:00:
         f0:61:98:83:5f:56:c0:6e:0b:10:a9:5d:6d:32:48:b2:6a:8e:
         a5:6c:62:29:5d:f4:82:52:a0:f4:e2:fb:8b:92:22:1d:25:54:
         10:ba:7b:de
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJvYlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
MGUwZjQyMDg5NzExNGRiMmQ2OGEwMjU2NGM3YThhNTZjNzFkODYwHhcNMjQwMTA1
MDczMDAwWhcNMjYwMTA0MDczMDAwWjAzMTEwLwYDVQQDEyhhN2RiMGQ5MGE1NmY3
MjVjOThlYzljMzFiNzRiYmY3N2Q4MTdkNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqnHhycJmSIvTYQVhJbRE4M8kPSjhn2DyCO1vTlMLgsAC8b3N
aWNliwy7YFPzksCLqu2mqo4NcXAwT4yeiVjC344DyvIkout+rUphjyaJkHhQdGwF
GAtSVooz8E75ORe2tX85iZSMVSqkJRN83NkYpBc4tjTwf9FmJQRxIQiu1BVaxXQj
k1VznTNniQHURd4rHRoqrXUHNWIZq7LDhw6fYSqrQF4w1aGvZVItUNTp//H1/CyS
3dQEdi3zvKoNPG2wgJhTtJVS9tTE/TqegQJVi6ZEx3btai+hossy5Kyj93qLkvfq
3TCBxwWN+bnGreIAmPrzcitMV0DxebCx6gb/qQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPCs794C3moYYPEq/gbEKm9kATmuMB8GA1UdIwQYMBaAFJQuy/LZnJpaC0k9
oDf5UFCcKRWKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWIwZTBm
NDIwODk3MTE0ZGIyZDY4YTAyNTY0YzdhOGE1NmM3MWQ4Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzcyYTUyOWYtNzYzNy00NGFhLTlkMzYtYTI5NTBm
YjUxNjMzL2E3ZGIwZDkwYTU2ZjcyNWM5OGVjOWMzMWI3NGJiZjc3ZDgxN2Q1ZGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNzJhNTI5Zi03NjM3LTQ0YWEtOWQzNi1hMjk1
MGZiNTE2MzMvOWIwZTBmNDIwODk3MTE0ZGIyZDY4YTAyNTY0YzdhOGE1NmM3MWQ4
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArXgrDANBgkqhkiG9w0BAQsFAAOCAQEACc+QZ+m3eZ1uMlki
ZmJcVvxGTlk/pDwet5eXThG4z2cNUoVuNsoDFNKtsz/FXgR7YDIwuJul/F4nwqGJ
TAtHuqi820tTB9gcsW9sQNwGUyaDrnXJEvjUPYkYGohguvLluK/+hP4lR6poNlBl
Q3W8zPhlpB8WW1FjP7603enlkF2o7A4/EKU2W0Lvd5nANUR8mXYiatYw3kvB6t4v
MPYCL5O12m/zuVUmtLw+jFevmEhDifj69OIX86UuQQJB7Ghy3s/1yHOu9raqZfzC
T9qLxKUS1QNz9iwA8GGYg19WwG4LEKldbTJIsmqOpWxiKV30glKg9OL7i5IiHSVU
ELp73g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org