Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/1517a5269b9ea3c31b1e0f1630c311d220bbc142.roa
File:                     1517a5269b9ea3c31b1e0f1630c311d220bbc142.roa (raw, json)
Hash identifier:          ZqO6Fv67IAsmOuiENaPuhledvJMd+fglOalTFxUmIVQ=
Subject key identifier:   54:11:D7:CC:FD:2C:18:72:75:A8:49:81:9F:4C:16:71:3F:5A:02:25
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2EBE90
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/1517a5269b9ea3c31b1e0f1630c311d220bbc142.roa
Signing time:             Fri 08 Dec 2023 00:36:56 +0000
ROA not before:           Fri 08 Dec 2023 00:36:56 +0000
ROA not after:            Mon 08 Dec 2025 00:36:56 +0000
asID:                     271984
IP address blocks:        181.85.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3063440 (0x2ebe90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  8 00:36:56 2023 GMT
            Not After : Dec  8 00:36:56 2025 GMT
        Subject: CN=1517a5269b9ea3c31b1e0f1630c311d220bbc142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:6b:d7:7b:0c:1c:04:e2:19:85:df:cb:5c:
                    bd:d4:16:30:d0:bf:03:5e:54:aa:be:75:2d:84:c6:
                    47:d9:17:7b:ba:51:6b:8b:64:c3:b6:01:77:78:93:
                    50:47:3f:6e:ed:11:aa:cb:32:5d:45:8d:8b:cd:db:
                    ab:ca:06:2d:97:c4:ae:9c:7f:f6:a2:70:a7:ea:a7:
                    f6:47:aa:d8:09:13:09:de:a0:5c:09:08:0e:b7:5b:
                    38:b7:84:fe:f9:dc:8f:d3:a9:31:a1:ca:60:2d:36:
                    f0:3c:b7:12:45:46:b1:ba:4d:ac:24:d4:d2:4b:16:
                    f6:43:45:2f:a8:7e:24:6c:b6:d7:1f:94:16:7b:5f:
                    64:4e:cf:43:77:46:66:7d:c8:03:48:4a:ed:61:33:
                    ec:79:1d:cb:ae:c5:4f:ed:55:73:fd:7a:49:30:26:
                    76:c6:6a:41:cc:33:2b:2e:37:4c:25:ca:21:40:11:
                    96:0f:56:70:47:da:1d:98:82:56:2b:b5:f4:57:6e:
                    08:07:f4:dd:9e:dd:1d:ca:2d:c9:f7:a9:3d:35:2e:
                    42:28:16:fe:67:fb:f2:9b:ba:5d:13:83:be:50:40:
                    d5:cf:2d:17:04:e2:37:32:29:a1:84:86:a4:01:93:
                    de:83:60:d3:35:12:77:d3:00:00:04:dd:16:62:c9:
                    19:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:11:D7:CC:FD:2C:18:72:75:A8:49:81:9F:4C:16:71:3F:5A:02:25
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/1517a5269b9ea3c31b1e0f1630c311d220bbc142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.85.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:ba:dc:e3:26:31:4a:ad:82:92:86:0e:c7:e4:8b:1a:79:ab:
         69:6d:b2:46:96:fc:84:44:39:99:af:3c:fe:1b:0d:75:4a:a1:
         48:5f:2a:80:7f:dc:d6:20:22:a4:98:23:b1:52:1e:e3:c2:1e:
         84:88:dc:7a:e4:4b:9f:a0:ab:85:87:54:69:96:b2:8a:ff:c8:
         eb:86:fa:97:36:05:7f:e1:78:e0:bc:f5:8d:4b:98:0e:e2:56:
         ce:01:8a:e1:8a:e2:fd:2f:b7:58:e3:9e:9e:96:ee:7e:df:03:
         f4:fc:e6:47:fc:fc:92:2c:16:e9:9b:9f:67:63:c4:e1:4f:97:
         36:81:1b:5c:49:ef:00:a0:69:26:be:72:00:6e:38:fc:e5:60:
         ae:3b:78:53:d0:07:6e:5b:c5:fc:3f:58:4f:79:35:ee:bc:db:
         e0:59:a2:8f:85:ef:9c:9b:2f:a8:e8:43:02:08:75:34:c9:b3:
         83:d9:b3:51:fb:b9:db:94:14:45:af:a7:7d:5f:0a:b5:c4:6b:
         18:83:dc:db:bb:61:e4:f1:9b:6a:a3:be:ca:65:a1:33:b1:69:
         3f:d1:46:3f:49:dd:f4:bd:4f:4d:4e:06:5c:86:8a:8b:e2:87:
         00:fa:12:71:79:ed:de:ee:c3:de:ef:78:2a:2c:74:7c:f3:9f:
         6f:c9:b5:b0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDLr6QMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
NzQ0MDlkMGMyYTcwYzkyMWRkNjg1ZTg2M2U5ZjAwY2IxZTI2MmEwHhcNMjMxMjA4
MDAzNjU2WhcNMjUxMjA4MDAzNjU2WjAzMTEwLwYDVQQDEygxNTE3YTUyNjliOWVh
M2MzMWIxZTBmMTYzMGMzMTFkMjIwYmJjMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoARr13sMHATiGYXfy1y91BYw0L8DXlSqvnUthMZH2Rd7ulFr
i2TDtgF3eJNQRz9u7RGqyzJdRY2LzdurygYtl8SunH/2onCn6qf2R6rYCRMJ3qBc
CQgOt1s4t4T++dyP06kxocpgLTbwPLcSRUaxuk2sJNTSSxb2Q0UvqH4kbLbXH5QW
e19kTs9Dd0ZmfcgDSErtYTPseR3LrsVP7VVz/XpJMCZ2xmpBzDMrLjdMJcohQBGW
D1ZwR9odmIJWK7X0V24IB/Tdnt0dyi3J96k9NS5CKBb+Z/vym7pdE4O+UEDVzy0X
BOI3MimhhIakAZPeg2DTNRJ30wAABN0WYskZYQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFQR18z9LBhydahJgZ9MFnE/WgIlMB8GA1UdIwQYMBaAFPuO/GhWAKtj6gJP
ow0fFdW1sMGxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzk3NDQw
OWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzE1MTdhNTI2OWI5ZWEzYzMxYjFlMGYxNjMwYzMxMWQyMjBiYmMxNDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvYzk3NDQwOWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALVVmDANBgkqhkiG9w0BAQsFAAOCAQEAg7rc4yYxSq2CkoYO
x+SLGnmraW2yRpb8hEQ5ma88/hsNdUqhSF8qgH/c1iAipJgjsVIe48IehIjceuRL
n6CrhYdUaZayiv/I64b6lzYFf+F44Lz1jUuYDuJWzgGK4Yri/S+3WOOenpbuft8D
9PzmR/z8kiwW6ZufZ2PE4U+XNoEbXEnvAKBpJr5yAG44/OVgrjt4U9AHblvF/D9Y
T3k17rzb4Fmij4XvnJsvqOhDAgh1NMmzg9mzUfu525QURa+nfV8KtcRrGIPc27th
5PGbaqO+ymWhM7FpP9FGP0nd9L1PTU4GXIaKi+KHAPoScXnt3u7D3u94Kix0fPOf
b8m1sA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org