Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/77a81c5714a15614f6b66b1ffbf6045e969f5253.roa
File:                     77a81c5714a15614f6b66b1ffbf6045e969f5253.roa (raw, json)
Hash identifier:          89x4Ekx9ryDFew5nirQKEmIbCO2OmFoqSQXs2xhniLc=
Subject key identifier:   84:F2:D9:12:18:47:E2:A4:87:64:FE:2C:49:0B:27:D1:14:56:A4:7B
Certificate issuer:       /CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
Certificate serial:       5186
Authority key identifier: 1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/77a81c5714a15614f6b66b1ffbf6045e969f5253.roa
Signing time:             Thu 14 Dec 2023 22:35:12 +0000
ROA not before:           Thu 14 Dec 2023 22:35:11 +0000
ROA not after:            Sun 14 Dec 2025 22:35:11 +0000
asID:                     14795
IP address blocks:        161.131.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20870 (0x5186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
        Validity
            Not Before: Dec 14 22:35:11 2023 GMT
            Not After : Dec 14 22:35:11 2025 GMT
        Subject: CN=77a81c5714a15614f6b66b1ffbf6045e969f5253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1d:54:93:dd:3a:23:eb:cd:b9:bc:5a:6a:88:
                    9f:a9:44:d6:9d:97:d8:63:f8:3e:73:4c:b5:e3:0f:
                    18:ac:7f:36:93:6a:4f:0a:54:7a:76:f7:78:3d:df:
                    cf:ea:ed:53:79:2c:70:1a:11:49:05:a9:f3:02:9a:
                    74:07:90:ab:5e:41:74:09:ae:59:a2:38:9a:64:93:
                    13:d6:b0:6b:dc:69:c6:ea:fb:69:72:20:bb:8f:51:
                    5d:9f:74:0a:f3:44:8a:c0:e8:83:bd:23:97:28:cf:
                    62:ce:47:8c:fb:66:27:09:a7:ac:d0:b0:14:f3:41:
                    52:90:0f:51:18:0b:02:52:9a:85:be:d7:e9:da:2b:
                    9c:a9:5f:6d:d3:e9:4d:43:6b:04:42:d3:b4:e1:55:
                    d8:9a:e2:a5:d1:f7:a7:ec:f8:b0:79:c6:c8:c5:c9:
                    9f:72:89:08:02:d7:f3:8d:41:dc:da:07:fb:28:06:
                    ac:c1:62:fc:66:a5:42:bd:2d:be:fa:ed:eb:4d:8e:
                    e4:09:57:eb:dd:68:42:08:7d:04:0d:04:31:2f:dd:
                    aa:00:c8:bb:13:3c:83:de:bf:1d:be:d6:d8:b5:af:
                    9f:38:dc:70:90:47:77:59:11:7b:cb:62:d7:02:ef:
                    76:d9:68:21:fb:a2:6f:f7:23:b2:a1:1a:fb:20:6e:
                    81:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F2:D9:12:18:47:E2:A4:87:64:FE:2C:49:0B:27:D1:14:56:A4:7B
            X509v3 Authority Key Identifier:
                keyid:1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/77a81c5714a15614f6b66b1ffbf6045e969f5253.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8a52488a17bd4e27c842765d04aa1a4a5371aba0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.131.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:b7:7d:8c:c8:6a:b9:c3:25:03:a8:a0:db:f1:25:09:2e:37:
         ee:a1:bd:9a:5b:b5:50:b5:f9:7d:fd:34:ab:da:2d:e3:f6:03:
         9e:92:cb:a9:0a:77:a7:38:ef:69:d0:90:65:84:42:e3:c1:d4:
         d7:3d:4f:26:58:2a:9b:8b:9f:18:7d:49:0c:1f:8f:72:bc:bb:
         07:e6:2f:dc:6c:9d:ac:8a:df:a7:da:87:02:52:74:5e:70:ff:
         e1:7d:2e:ef:49:92:49:a4:ad:0c:79:b3:02:87:ed:f8:8a:e8:
         42:3e:9b:ef:60:ee:1e:13:39:9e:3a:5b:a0:1d:92:6a:dc:02:
         e8:fb:27:39:30:9f:89:b9:9c:d3:57:4e:57:a5:96:1b:f1:0b:
         0f:a1:57:c4:1d:2d:83:d6:9c:11:20:50:01:64:4d:35:f9:ae:
         35:37:70:50:69:63:b0:84:b0:4e:78:cd:3f:6d:cd:4a:e7:74:
         ce:03:ba:b6:3e:43:09:ab:ff:4c:d8:0d:0d:47:98:5c:66:51:
         a1:b7:45:64:57:9f:06:a0:35:e1:9d:8f:66:f7:2d:5b:13:f0:
         0c:4a:91:76:37:2b:f9:57:d8:6c:e8:58:fc:57:99:22:99:68:
         a2:d3:30:1f:7e:98:2a:38:b3:22:df:9a:6f:ae:25:3a:36:f1:
         34:ca:42:75
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICUYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOGE1
MjQ4OGExN2JkNGUyN2M4NDI3NjVkMDRhYTFhNGE1MzcxYWJhMDAeFw0yMzEyMTQy
MjM1MTFaFw0yNTEyMTQyMjM1MTFaMDMxMTAvBgNVBAMTKDc3YTgxYzU3MTRhMTU2
MTRmNmI2NmIxZmZiZjYwNDVlOTY5ZjUyNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCHHVST3Toj6825vFpqiJ+pRNadl9hj+D5zTLXjDxisfzaTak8K
VHp293g938/q7VN5LHAaEUkFqfMCmnQHkKteQXQJrlmiOJpkkxPWsGvcacbq+2ly
ILuPUV2fdArzRIrA6IO9I5coz2LOR4z7ZicJp6zQsBTzQVKQD1EYCwJSmoW+1+na
K5ypX23T6U1DawRC07ThVdia4qXR96fs+LB5xsjFyZ9yiQgC1/ONQdzaB/soBqzB
YvxmpUK9Lb767etNjuQJV+vdaEIIfQQNBDEv3aoAyLsTPIPevx2+1ti1r5843HCQ
R3dZEXvLYtcC73bZaCH7om/3I7KhGvsgboF3AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUhPLZEhhH4qSHZP4sSQsn0RRWpHswHwYDVR0jBBgwFoAUGm80yacV1+ZZg+Xb
ILV4sp/8eRkwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84YTUyNDg4
YTE3YmQ0ZTI3Yzg0Mjc2NWQwNGFhMWE0YTUzNzFhYmEwLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy80MGU1MzBiZi1lYmY3LTQ1ZTItYmUwZi01MjA4MWY1
ZjE2OGMvNzdhODFjNTcxNGExNTYxNGY2YjY2YjFmZmJmNjA0NWU5NjlmNTI1My5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzQwZTUzMGJmLWViZjctNDVlMi1iZTBmLTUyMDgx
ZjVmMTY4Yy84YTUyNDg4YTE3YmQ0ZTI3Yzg0Mjc2NWQwNGFhMWE0YTUzNzFhYmEw
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAoYO2MA0GCSqGSIb3DQEBCwUAA4IBAQB0t32MyGq5wyUDqKDb
8SUJLjfuob2aW7VQtfl9/TSr2i3j9gOeksupCnenOO9p0JBlhELjwdTXPU8mWCqb
i58YfUkMH49yvLsH5i/cbJ2sit+n2ocCUnRecP/hfS7vSZJJpK0MebMCh+34iuhC
PpvvYO4eEzmeOlugHZJq3ALo+yc5MJ+JuZzTV05XpZYb8QsPoVfEHS2D1pwRIFAB
ZE01+a41N3BQaWOwhLBOeM0/bc1K53TOA7q2PkMJq/9M2A0NR5hcZlGht0VkV58G
oDXhnY9m9y1bE/AMSpF2Nyv5V9hs6Fj8V5kimWii0zAffpgqOLMi35pvriU6NvE0
ykJ1
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org