Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/7bd5bbc667fe961d7d5298cf8b07f2c561a5696f.roa
File:                     7bd5bbc667fe961d7d5298cf8b07f2c561a5696f.roa (raw, json)
Hash identifier:          2iuBofyxyCTgnFLF5pf7/e+99zOqOdL//nKnVbWFMZI=
Subject key identifier:   2D:90:67:F4:59:CE:D4:4A:78:AA:E4:80:58:2E:C0:F6:1D:6D:F2:EE
Certificate issuer:       /CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
Certificate serial:       5182
Authority key identifier: F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/7bd5bbc667fe961d7d5298cf8b07f2c561a5696f.roa
Signing time:             Wed 09 Aug 2023 16:11:39 +0000
ROA not before:           Tue 08 Aug 2023 16:11:39 +0000
ROA not after:            Sat 09 Aug 2025 16:11:39 +0000
asID:                     52412
IP address blocks:        181.224.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20866 (0x5182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
        Validity
            Not Before: Aug  8 16:11:39 2023 GMT
            Not After : Aug  9 16:11:39 2025 GMT
        Subject: CN=7bd5bbc667fe961d7d5298cf8b07f2c561a5696f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5d:5d:b2:6f:37:56:46:06:ca:d0:22:e9:8c:
                    87:ae:b3:52:55:b0:74:90:58:a4:05:ee:64:b1:78:
                    8e:86:db:76:90:83:37:7d:71:b5:c7:71:52:a3:88:
                    0e:25:20:32:8c:ba:59:4a:f0:94:d8:97:8b:09:90:
                    c2:9d:3c:e4:34:e9:e4:f6:75:fd:61:44:16:ff:8b:
                    f3:a8:57:63:b6:da:9e:50:5e:8e:81:21:80:90:7e:
                    43:fc:d9:71:1f:2c:f2:fd:b8:b6:19:03:70:9d:4b:
                    f2:ae:bc:29:91:74:27:8a:7a:cf:f8:f1:fb:47:20:
                    a7:32:12:d1:16:65:2d:5f:2e:49:24:2f:09:90:f0:
                    8e:3e:a1:f3:cf:76:e6:88:3e:a2:57:ae:bd:4f:88:
                    aa:50:d4:bc:36:ee:65:11:e9:27:34:76:9b:4b:eb:
                    64:c4:0f:e3:f0:9d:ee:d2:83:b2:dd:89:37:f3:79:
                    8d:78:86:a1:e7:00:d6:bc:07:04:1a:cf:91:a1:45:
                    f8:08:7a:43:bf:cf:36:ae:a3:af:98:27:91:1d:3e:
                    c9:c9:71:48:d0:b1:4c:cc:cb:e7:7c:e7:62:86:d8:
                    c6:bd:00:1e:b4:e0:6c:a7:97:64:f4:ca:d0:27:72:
                    4c:87:bb:1c:f3:6e:7b:c5:c2:7b:b5:90:93:9e:41:
                    e9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:90:67:F4:59:CE:D4:4A:78:AA:E4:80:58:2E:C0:F6:1D:6D:F2:EE
            X509v3 Authority Key Identifier:
                keyid:F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/7bd5bbc667fe961d7d5298cf8b07f2c561a5696f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:21:ec:ce:18:a4:3b:a4:f5:ea:0f:7b:d7:c6:d8:d6:00:c2:
         e9:59:5e:d8:8f:42:2a:47:ab:01:12:30:8a:b7:6c:a2:03:79:
         ec:f5:a2:c5:8b:69:d7:e9:3d:43:13:56:39:26:de:15:8e:9d:
         9a:32:a3:8e:89:7e:45:e1:c4:c1:66:4f:8d:04:8a:04:7d:fe:
         44:96:3f:65:d9:dc:23:1a:69:c9:bc:8a:07:09:0c:70:a4:83:
         20:03:1b:08:2c:31:e4:f8:12:ea:ed:13:56:da:b2:d5:a7:77:
         1e:37:51:41:60:fb:99:fa:cf:0b:15:1d:ca:d8:43:a3:6e:00:
         5e:91:8e:ed:57:b8:9e:30:88:4f:4a:63:13:0e:38:29:83:56:
         ea:03:39:49:35:e4:47:16:49:b0:9c:ce:29:b8:7e:e0:b6:d3:
         92:eb:f4:85:db:21:e5:c4:60:82:58:c4:a5:f4:e0:71:d5:73:
         61:3d:4f:e8:ba:09:e0:e8:3d:cc:19:f8:58:5c:4b:c1:4b:df:
         e2:88:5a:e9:da:19:9e:10:bd:9b:c8:ce:95:7a:89:90:f8:e4:
         dd:34:58:a7:20:ba:d7:ce:16:b3:ce:55:20:f3:db:6a:ac:30:
         ec:52:d7:1e:e9:00:10:65:48:aa:64:dd:fc:b5:ad:d1:9f:d4:
         cc:e5:3e:39
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICUYIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzk0
NzVmMTdjZTBkM2RkMzIxZDhmYWNkZDFmNGI2OTU5ZGI0ZmM3ZTAeFw0yMzA4MDgx
NjExMzlaFw0yNTA4MDkxNjExMzlaMDMxMTAvBgNVBAMTKDdiZDViYmM2NjdmZTk2
MWQ3ZDUyOThjZjhiMDdmMmM1NjFhNTY5NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCIXV2ybzdWRgbK0CLpjIeus1JVsHSQWKQF7mSxeI6G23aQgzd9
cbXHcVKjiA4lIDKMullK8JTYl4sJkMKdPOQ06eT2df1hRBb/i/OoV2O22p5QXo6B
IYCQfkP82XEfLPL9uLYZA3CdS/KuvCmRdCeKes/48ftHIKcyEtEWZS1fLkkkLwmQ
8I4+ofPPduaIPqJXrr1PiKpQ1Lw27mUR6Sc0dptL62TED+Pwne7Sg7LdiTfzeY14
hqHnANa8BwQaz5GhRfgIekO/zzauo6+YJ5EdPsnJcUjQsUzMy+d852KG2Ma9AB60
4Gynl2T0ytAnckyHuxzzbnvFwnu1kJOeQel5AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQULZBn9FnO1Ep4quSAWC7A9h1t8u4wHwYDVR0jBBgwFoAU928jxar6BSn8ltmj
D7X36O4EILkwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zOTQ3NWYx
N2NlMGQzZGQzMjFkOGZhY2RkMWY0YjY5NTlkYjRmYzdlLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy80ZmFiOTM5NS04OWRmLTQ4ZjAtYmY2MC01MzdjYWRk
YWMxODUvN2JkNWJiYzY2N2ZlOTYxZDdkNTI5OGNmOGIwN2YyYzU2MWE1Njk2Zi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzRmYWI5Mzk1LTg5ZGYtNDhmMC1iZjYwLTUzN2Nh
ZGRhYzE4NS8zOTQ3NWYxN2NlMGQzZGQzMjFkOGZhY2RkMWY0YjY5NTlkYjRmYzdl
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCteDMMA0GCSqGSIb3DQEBCwUAA4IBAQBaIezOGKQ7pPXqD3vX
xtjWAMLpWV7Yj0IqR6sBEjCKt2yiA3ns9aLFi2nX6T1DE1Y5Jt4Vjp2aMqOOiX5F
4cTBZk+NBIoEff5Elj9l2dwjGmnJvIoHCQxwpIMgAxsILDHk+BLq7RNW2rLVp3ce
N1FBYPuZ+s8LFR3K2EOjbgBekY7tV7ieMIhPSmMTDjgpg1bqAzlJNeRHFkmwnM4p
uH7gttOS6/SF2yHlxGCCWMSl9OBx1XNhPU/ougng6D3MGfhYXEvBS9/iiFrp2hme
EL2byM6VeomQ+OTdNFinILrXzhazzlUg89tqrDDsUtce6QAQZUiqZN38ta3Rn9TM
5T45
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org