Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/8489eadfa9c3caa7ddb094a4065f96d9a88287d1.roa
File:                     8489eadfa9c3caa7ddb094a4065f96d9a88287d1.roa (raw, json)
Hash identifier:          k4bOlHE77YUYKIz1oFIIDuWm0Xs1qO3lhI9/FRnuF8g=
Subject key identifier:   D1:14:65:18:0A:F6:5B:61:E3:66:86:6E:60:A8:C9:52:1F:50:25:83
Certificate issuer:       /CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
Certificate serial:       41B2
Authority key identifier: F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/8489eadfa9c3caa7ddb094a4065f96d9a88287d1.roa
Signing time:             Wed 09 Aug 2023 15:29:24 +0000
ROA not before:           Tue 08 Aug 2023 15:29:24 +0000
ROA not after:            Sat 09 Aug 2025 15:29:24 +0000
asID:                     52412
IP address blocks:        181.224.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16818 (0x41b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
        Validity
            Not Before: Aug  8 15:29:24 2023 GMT
            Not After : Aug  9 15:29:24 2025 GMT
        Subject: CN=8489eadfa9c3caa7ddb094a4065f96d9a88287d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:16:33:31:b3:e3:76:08:e6:5c:8a:c5:5d:55:
                    f9:3c:0c:75:63:b2:24:02:c5:3c:32:46:d7:ae:74:
                    7d:b8:0e:f3:f1:8c:60:36:e9:b9:18:4b:10:b3:3a:
                    7f:31:a4:2c:3f:c3:c3:17:fd:e4:99:9b:a1:22:3b:
                    48:82:b3:61:8c:29:48:74:76:99:c4:67:7a:e2:03:
                    c1:52:d2:b4:57:98:cf:6c:c7:e5:f6:4d:41:52:6c:
                    66:1d:61:cd:c7:cb:7d:c6:18:a4:f0:db:9a:3b:1c:
                    9f:46:f0:db:81:e9:95:ce:3b:05:38:2e:42:b0:4d:
                    44:74:fe:35:93:9c:d1:b5:64:df:76:05:20:f6:da:
                    16:9e:93:87:73:86:67:9e:1e:26:7b:4b:67:7b:d8:
                    9c:91:39:a7:7f:64:63:03:cf:e3:30:f5:7a:0a:ab:
                    cc:df:75:46:d5:2a:23:8b:09:ad:80:10:34:f9:5e:
                    53:a1:d4:a4:74:fe:0c:81:80:e6:06:4f:66:8d:94:
                    4c:1d:be:44:c2:9b:2e:e3:6c:de:13:16:af:e1:35:
                    97:1e:8a:53:89:72:ac:23:e5:cd:b2:87:c5:c2:00:
                    bb:4e:f5:a6:d6:c7:a3:9d:b5:e0:41:5f:57:40:ad:
                    d2:26:a1:6c:2e:16:e0:4b:a5:23:ef:f2:f0:b3:22:
                    18:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:14:65:18:0A:F6:5B:61:E3:66:86:6E:60:A8:C9:52:1F:50:25:83
            X509v3 Authority Key Identifier:
                keyid:F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/8489eadfa9c3caa7ddb094a4065f96d9a88287d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:ca:45:3d:00:01:90:cd:64:a6:1a:a2:a7:39:27:b1:79:a2:
         65:a6:5a:63:75:29:aa:f5:ac:bc:ee:16:27:0e:3c:bf:8c:5b:
         7f:ed:c1:69:67:e2:b3:92:bf:5f:69:f3:7f:84:28:b8:de:5e:
         d8:67:ff:54:3b:25:c7:e5:6d:3a:a9:cd:a8:70:70:33:7e:81:
         f0:8e:7e:fb:29:0a:fc:ba:4d:eb:9a:34:50:61:0d:67:c6:de:
         89:41:2a:c2:ad:fe:29:f6:62:9d:16:36:c6:af:67:8d:3f:d0:
         7f:c2:d3:7b:18:7a:ad:b3:dd:b3:a9:1c:4b:e6:a3:e0:cd:f6:
         ed:e9:9b:5f:68:b2:f4:ec:3a:01:f4:d6:9a:8e:8e:1f:3d:e2:
         02:9d:54:aa:03:88:27:ae:e5:34:6f:e4:cd:21:2b:4b:78:0f:
         e5:e2:2c:e3:01:28:65:4e:8c:1e:ac:9c:09:2f:32:58:be:f7:
         04:2a:56:24:94:99:88:85:c5:b0:76:50:6b:c5:a9:40:c2:c9:
         2e:8e:bc:93:bc:45:52:1f:9d:17:96:4f:82:83:01:c7:a8:f1:
         35:b7:b8:e0:32:51:a1:8b:a8:9d:4a:c9:6d:45:cd:b4:ad:ef:
         9a:9f:8d:9d:b7:c0:b9:72:64:cc:32:1f:d0:e0:8c:e0:d4:d2:
         01:33:18:e0
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICQbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzk0
NzVmMTdjZTBkM2RkMzIxZDhmYWNkZDFmNGI2OTU5ZGI0ZmM3ZTAeFw0yMzA4MDgx
NTI5MjRaFw0yNTA4MDkxNTI5MjRaMDMxMTAvBgNVBAMTKDg0ODllYWRmYTljM2Nh
YTdkZGIwOTRhNDA2NWY5NmQ5YTg4Mjg3ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCCFjMxs+N2COZcisVdVfk8DHVjsiQCxTwyRteudH24DvPxjGA2
6bkYSxCzOn8xpCw/w8MX/eSZm6EiO0iCs2GMKUh0dpnEZ3riA8FS0rRXmM9sx+X2
TUFSbGYdYc3Hy33GGKTw25o7HJ9G8NuB6ZXOOwU4LkKwTUR0/jWTnNG1ZN92BSD2
2haek4dzhmeeHiZ7S2d72JyROad/ZGMDz+Mw9XoKq8zfdUbVKiOLCa2AEDT5XlOh
1KR0/gyBgOYGT2aNlEwdvkTCmy7jbN4TFq/hNZceilOJcqwj5c2yh8XCALtO9abW
x6OdteBBX1dArdImoWwuFuBLpSPv8vCzIhjFAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQU0RRlGAr2W2HjZoZuYKjJUh9QJYMwHwYDVR0jBBgwFoAU928jxar6BSn8ltmj
D7X36O4EILkwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zOTQ3NWYx
N2NlMGQzZGQzMjFkOGZhY2RkMWY0YjY5NTlkYjRmYzdlLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy80ZmFiOTM5NS04OWRmLTQ4ZjAtYmY2MC01MzdjYWRk
YWMxODUvODQ4OWVhZGZhOWMzY2FhN2RkYjA5NGE0MDY1Zjk2ZDlhODgyODdkMS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzRmYWI5Mzk1LTg5ZGYtNDhmMC1iZjYwLTUzN2Nh
ZGRhYzE4NS8zOTQ3NWYxN2NlMGQzZGQzMjFkOGZhY2RkMWY0YjY5NTlkYjRmYzdl
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAteDOMA0GCSqGSIb3DQEBCwUAA4IBAQANykU9AAGQzWSmGqKn
OSexeaJlplpjdSmq9ay87hYnDjy/jFt/7cFpZ+Kzkr9fafN/hCi43l7YZ/9UOyXH
5W06qc2ocHAzfoHwjn77KQr8uk3rmjRQYQ1nxt6JQSrCrf4p9mKdFjbGr2eNP9B/
wtN7GHqts92zqRxL5qPgzfbt6ZtfaLL07DoB9Naajo4fPeICnVSqA4gnruU0b+TN
IStLeA/l4izjAShlTowerJwJLzJYvvcEKlYklJmIhcWwdlBrxalAwskujryTvEVS
H50Xlk+CgwHHqPE1t7jgMlGhi6idSsltRc20re+an42dt8C5cmTMMh/Q4Izg1NIB
Mxjg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org