Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f3af4c6-7147-48ec-8e92-b5391c96bcf1/292987154d8078d4ad76730232db6678d873449d.roa
File:                     292987154d8078d4ad76730232db6678d873449d.roa (raw, json)
Hash identifier:          LrpZxvxzVF6S9tiHFmsnPIf855ZV9LTqXnYY6Upj/Hc=
Subject key identifier:   3D:4A:E2:A6:2B:26:E2:24:3D:3D:6A:2F:0B:73:2C:B6:C6:D3:CD:EB
Certificate issuer:       /CN=77d1e953644fdfcf162478bd24b8610efc19a79d
Certificate serial:       04B7
Authority key identifier: EE:EA:81:B5:A0:61:95:09:A9:94:73:FF:03:18:C4:10:E7:55:8F:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77d1e953644fdfcf162478bd24b8610efc19a79d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3f3af4c6-7147-48ec-8e92-b5391c96bcf1/292987154d8078d4ad76730232db6678d873449d.roa
Signing time:             Mon 11 Jul 2022 14:08:40 +0000
ROA not before:           Mon 11 Jul 2022 03:00:00 +0000
ROA not after:            Thu 11 Jul 2024 03:00:00 +0000
asID:                     52425
IP address blocks:        181.191.25.0/24 maxlen: 24
                          181.191.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1207 (0x4b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77d1e953644fdfcf162478bd24b8610efc19a79d
        Validity
            Not Before: Jul 11 03:00:00 2022 GMT
            Not After : Jul 11 03:00:00 2024 GMT
        Subject: CN=292987154d8078d4ad76730232db6678d873449d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:11:cc:dc:02:35:cd:67:ae:fe:80:03:cb:4c:
                    dc:13:a8:fb:81:29:1c:65:e2:4e:18:1f:b0:55:e3:
                    56:42:ef:e0:08:fe:09:79:24:83:51:53:d9:04:d2:
                    e1:5b:b4:ed:06:f6:88:4b:cb:2f:76:19:65:1f:7a:
                    eb:5a:3d:a4:75:17:2e:f2:85:d9:a4:a2:ec:ca:7e:
                    28:a4:76:ce:d2:43:a6:e9:bf:bd:f0:12:7f:ee:aa:
                    0c:24:07:9e:26:92:f4:df:8d:4b:af:c1:89:59:64:
                    9d:ab:4d:de:60:7d:40:d2:16:e1:47:14:ee:45:9c:
                    bb:bd:69:1b:2e:f2:e6:0a:04:38:24:7e:82:ef:a1:
                    82:85:1d:9e:cb:8c:f5:ac:fe:1a:04:21:2f:72:e9:
                    82:ac:6f:9c:70:26:56:3d:bf:34:db:82:a5:33:59:
                    58:d8:5f:69:1d:cb:d6:53:b0:be:72:d8:c3:5a:ec:
                    a9:f5:c8:79:ec:d9:ed:83:01:cf:71:d0:e8:63:da:
                    b5:d2:96:b0:22:40:0e:de:39:d1:82:10:df:55:3c:
                    37:08:c0:56:dd:5b:7f:8e:5a:6c:43:67:f5:57:f2:
                    23:be:eb:3d:dc:d3:16:6b:97:05:56:d8:7c:6c:f1:
                    dd:ab:45:8e:88:76:44:96:fc:cd:a1:df:e7:d4:ba:
                    0f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4A:E2:A6:2B:26:E2:24:3D:3D:6A:2F:0B:73:2C:B6:C6:D3:CD:EB
            X509v3 Authority Key Identifier:
                keyid:EE:EA:81:B5:A0:61:95:09:A9:94:73:FF:03:18:C4:10:E7:55:8F:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77d1e953644fdfcf162478bd24b8610efc19a79d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f3af4c6-7147-48ec-8e92-b5391c96bcf1/292987154d8078d4ad76730232db6678d873449d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3f3af4c6-7147-48ec-8e92-b5391c96bcf1/77d1e953644fdfcf162478bd24b8610efc19a79d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.25.0/24
                  181.191.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:e9:a6:09:ee:db:47:18:67:24:8b:c8:93:37:73:07:f8:af:
         39:5e:38:0a:49:92:a4:2a:10:cb:5c:42:f1:b7:20:cc:33:96:
         98:12:ed:50:66:d1:d3:3e:6f:65:fe:79:43:ef:bf:25:e1:9e:
         c4:5b:bf:8b:22:12:b1:33:3b:f9:9a:aa:ab:5a:3f:43:19:25:
         1f:4b:da:a4:b6:2f:36:ed:9e:4e:dd:c0:bd:d3:38:ca:9b:4a:
         0d:1f:a9:c8:2c:49:b7:14:a9:76:c8:6c:31:2b:2b:b6:bc:e4:
         7e:d4:f4:f4:f5:ab:f8:a9:30:13:7c:f9:d4:d5:0a:94:42:ab:
         a7:8b:5a:3a:0b:68:6f:96:87:ba:0e:58:6d:78:a8:8c:d9:e8:
         c5:ce:c7:80:e5:fc:e9:51:df:31:93:22:21:8b:ac:b8:f0:02:
         24:0e:98:56:33:19:50:f2:eb:08:7b:0e:88:8e:60:83:b1:e9:
         55:25:c3:5b:c2:84:24:b1:4d:35:dd:88:9f:31:c5:a7:b3:14:
         20:82:11:d6:4b:44:ff:f9:8e:8c:8d:42:55:05:e9:8c:e8:4c:
         96:cd:cd:9e:54:c8:5e:c6:cb:94:45:a6:43:ba:4f:0b:c8:c7:
         18:03:c4:4f:27:d6:52:95:e7:91:9a:fd:ed:32:61:4d:3e:19:
         a4:8c:ed:18
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzdk
MWU5NTM2NDRmZGZjZjE2MjQ3OGJkMjRiODYxMGVmYzE5YTc5ZDAeFw0yMjA3MTEw
MzAwMDBaFw0yNDA3MTEwMzAwMDBaMDMxMTAvBgNVBAMTKDI5Mjk4NzE1NGQ4MDc4
ZDRhZDc2NzMwMjMyZGI2Njc4ZDg3MzQ0OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCKEczcAjXNZ67+gAPLTNwTqPuBKRxl4k4YH7BV41ZC7+AI/gl5
JINRU9kE0uFbtO0G9ohLyy92GWUfeutaPaR1Fy7yhdmkouzKfiikds7SQ6bpv73w
En/uqgwkB54mkvTfjUuvwYlZZJ2rTd5gfUDSFuFHFO5FnLu9aRsu8uYKBDgkfoLv
oYKFHZ7LjPWs/hoEIS9y6YKsb5xwJlY9vzTbgqUzWVjYX2kdy9ZTsL5y2MNa7Kn1
yHns2e2DAc9x0Ohj2rXSlrAiQA7eOdGCEN9VPDcIwFbdW3+OWmxDZ/VX8iO+6z3c
0xZrlwVW2Hxs8d2rRY6IdkSW/M2h3+fUug8HAgMBAAGjggJhMIICXTAdBgNVHQ4E
FgQUPUripism4iQ9PWovC3MstsbTzeswHwYDVR0jBBgwFoAU7uqBtaBhlQmplHP/
AxjEEOdVj9UwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS83N2QxZTk1
MzY0NGZkZmNmMTYyNDc4YmQyNGI4NjEwZWZjMTlhNzlkLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8zZjNhZjRjNi03MTQ3LTQ4ZWMtOGU5Mi1iNTM5MWM5
NmJjZjEvMjkyOTg3MTU0ZDgwNzhkNGFkNzY3MzAyMzJkYjY2NzhkODczNDQ5ZC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzNmM2FmNGM2LTcxNDctNDhlYy04ZTkyLWI1Mzkx
Yzk2YmNmMS83N2QxZTk1MzY0NGZkZmNmMTYyNDc4YmQyNGI4NjEwZWZjMTlhNzlk
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYw
FDASBAIAATAMAwQAtb8ZAwQAtb8bMA0GCSqGSIb3DQEBCwUAA4IBAQBJ6aYJ7ttH
GGcki8iTN3MH+K85XjgKSZKkKhDLXELxtyDMM5aYEu1QZtHTPm9l/nlD778l4Z7E
W7+LIhKxMzv5mqqrWj9DGSUfS9qkti827Z5O3cC90zjKm0oNH6nILEm3FKl2yGwx
Kyu2vOR+1PT09av4qTATfPnU1QqUQquni1o6C2hvloe6DlhteKiM2ejFzseA5fzp
Ud8xkyIhi6y48AIkDphWMxlQ8usIew6IjmCDselVJcNbwoQksU013YifMcWnsxQg
ghHWS0T/+Y6MjUJVBemM6EyWzc2eVMhexsuURaZDuk8LyMcYA8RPJ9ZSleeRmv3t
MmFNPhmkjO0Y
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org