Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/e659c3c4d2faf6ce19d49ec3604b7f9659ca15a4.roa
File:                     e659c3c4d2faf6ce19d49ec3604b7f9659ca15a4.roa (raw, json)
Hash identifier:          /tOhBMgiuSxq7SQmWrRuf9VK+o71HbJiNXBHlH5W5X8=
Subject key identifier:   5F:DF:32:0D:92:B3:B1:6A:70:5E:E8:B7:4B:3D:39:DD:A0:1C:59:DF
Certificate issuer:       /CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
Certificate serial:       1F6F
Authority key identifier: F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/e659c3c4d2faf6ce19d49ec3604b7f9659ca15a4.roa
Signing time:             Wed 09 Aug 2023 14:36:54 +0000
ROA not before:           Tue 08 Aug 2023 14:36:54 +0000
ROA not after:            Sat 09 Aug 2025 14:36:54 +0000
asID:                     11344
IP address blocks:        181.224.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8047 (0x1f6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
        Validity
            Not Before: Aug  8 14:36:54 2023 GMT
            Not After : Aug  9 14:36:54 2025 GMT
        Subject: CN=e659c3c4d2faf6ce19d49ec3604b7f9659ca15a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:48:31:03:33:ba:05:23:ae:db:64:f0:90:
                    6c:c2:9f:85:da:5e:08:ce:dc:6d:b0:81:d2:56:51:
                    cb:81:24:3c:2d:be:ab:92:e0:a1:28:0e:72:a9:d6:
                    10:02:28:5f:b1:c8:78:7c:5a:b8:18:a3:58:be:4a:
                    69:bc:df:5e:7d:93:71:59:78:d1:4d:db:f7:90:d4:
                    d7:27:33:f3:fb:be:3c:c4:35:56:0a:12:55:20:c3:
                    82:1c:88:90:28:cb:fe:3b:dc:b3:fe:90:ed:b3:cb:
                    97:02:58:05:2d:07:62:89:b4:2a:78:6c:28:ff:d2:
                    39:54:9f:22:f8:ce:8c:fa:a8:86:37:f4:7d:11:da:
                    57:2a:cd:7f:5b:08:a2:6e:dd:c3:70:b5:7c:26:98:
                    e8:6f:1c:00:c1:38:a4:34:73:34:5e:88:18:70:f5:
                    66:95:a8:6e:5b:f9:cc:48:f5:b6:46:05:0a:34:b0:
                    6c:08:d6:89:c5:ec:9c:56:2a:e6:8a:7d:fc:a2:d5:
                    96:a9:bb:bd:d0:5f:7f:c1:27:82:eb:05:3e:5d:be:
                    25:ae:7f:f7:6c:7e:36:df:f4:b2:17:34:8c:c3:24:
                    8a:8a:d8:ea:b9:f5:27:cf:00:51:7a:27:a5:db:a2:
                    2a:16:08:25:92:b9:a6:f0:47:44:b1:20:e6:f5:50:
                    aa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DF:32:0D:92:B3:B1:6A:70:5E:E8:B7:4B:3D:39:DD:A0:1C:59:DF
            X509v3 Authority Key Identifier:
                keyid:F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/e659c3c4d2faf6ce19d49ec3604b7f9659ca15a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:ce:92:79:f3:94:e9:4a:14:c4:f4:10:1c:09:58:07:0a:05:
         44:a6:fa:7c:7d:0b:65:fd:2f:71:09:0d:e7:76:5d:75:c6:27:
         39:ff:cd:0b:57:64:f5:bb:6f:2c:b1:50:9f:78:86:82:20:29:
         06:f3:3a:22:59:f9:28:74:ea:a5:79:49:2c:b9:a0:04:02:94:
         a0:b7:a3:c0:35:16:63:d6:af:67:f4:5f:b6:60:e5:07:f2:57:
         6b:7d:23:68:51:fa:5e:63:ad:0c:82:b9:a2:40:47:f8:9c:81:
         4a:32:b0:d7:ad:ca:fe:cc:c9:35:49:42:2e:b7:34:2a:1a:e0:
         8e:db:85:aa:1d:2b:56:cb:b6:14:75:db:23:c2:ee:a5:f2:ed:
         35:8e:0c:88:08:4a:6e:63:11:3e:a5:c4:a5:b6:f9:22:35:2d:
         f6:40:a8:18:0d:b6:a0:aa:a8:f9:f2:25:fd:e2:d4:a0:c3:84:
         90:e4:c7:fd:c3:94:fe:27:ae:5b:41:07:cd:b1:63:dd:35:aa:
         89:26:e4:30:1d:7e:18:08:e8:33:88:20:a3:73:34:a9:de:70:
         6a:58:5e:72:98:18:cf:a4:1b:09:2d:01:5a:83:ad:99:c9:29:
         70:92:e4:14:08:f5:02:01:7a:65:3b:50:74:a8:64:7a:5d:85:
         39:d6:1d:b8
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICH28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzk0
NzVmMTdjZTBkM2RkMzIxZDhmYWNkZDFmNGI2OTU5ZGI0ZmM3ZTAeFw0yMzA4MDgx
NDM2NTRaFw0yNTA4MDkxNDM2NTRaMDMxMTAvBgNVBAMTKGU2NTljM2M0ZDJmYWY2
Y2UxOWQ0OWVjMzYwNGI3Zjk2NTljYTE1YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCihUgxAzO6BSOu22TwkGzCn4XaXgjO3G2wgdJWUcuBJDwtvquS
4KEoDnKp1hACKF+xyHh8WrgYo1i+Smm83159k3FZeNFN2/eQ1NcnM/P7vjzENVYK
ElUgw4IciJAoy/473LP+kO2zy5cCWAUtB2KJtCp4bCj/0jlUnyL4zoz6qIY39H0R
2lcqzX9bCKJu3cNwtXwmmOhvHADBOKQ0czReiBhw9WaVqG5b+cxI9bZGBQo0sGwI
1onF7JxWKuaKffyi1Zapu73QX3/BJ4LrBT5dviWuf/dsfjbf9LIXNIzDJIqK2Oq5
9SfPAFF6J6XboioWCCWSuabwR0SxIOb1UKqNAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUX98yDZKzsWpwXui3Sz053aAcWd8wHwYDVR0jBBgwFoAU928jxar6BSn8ltmj
D7X36O4EILkwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8zOTQ3NWYx
N2NlMGQzZGQzMjFkOGZhY2RkMWY0YjY5NTlkYjRmYzdlLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy80ZmFiOTM5NS04OWRmLTQ4ZjAtYmY2MC01MzdjYWRk
YWMxODUvZTY1OWMzYzRkMmZhZjZjZTE5ZDQ5ZWMzNjA0YjdmOTY1OWNhMTVhNC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzRmYWI5Mzk1LTg5ZGYtNDhmMC1iZjYwLTUzN2Nh
ZGRhYzE4NS8zOTQ3NWYxN2NlMGQzZGQzMjFkOGZhY2RkMWY0YjY5NTlkYjRmYzdl
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAteDOMA0GCSqGSIb3DQEBCwUAA4IBAQBJzpJ585TpShTE9BAc
CVgHCgVEpvp8fQtl/S9xCQ3ndl11xic5/80LV2T1u28ssVCfeIaCICkG8zoiWfko
dOqleUksuaAEApSgt6PANRZj1q9n9F+2YOUH8ldrfSNoUfpeY60MgrmiQEf4nIFK
MrDXrcr+zMk1SUIutzQqGuCO24WqHStWy7YUddsjwu6l8u01jgyICEpuYxE+pcSl
tvkiNS32QKgYDbagqqj58iX94tSgw4SQ5Mf9w5T+J65bQQfNsWPdNaqJJuQwHX4Y
COgziCCjczSp3nBqWF5ymBjPpBsJLQFag62ZySlwkuQUCPUCAXplO1B0qGR6XYU5
1h24
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org