Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/177dacedc9be7ac037844f0671e027992db1a2e7.roa
File:                     177dacedc9be7ac037844f0671e027992db1a2e7.roa (raw, json)
Hash identifier:          GXDve2noHKtb5XQE2KA4MA3cnKFd9Yd94SM3gtEn0TM=
Subject key identifier:   25:59:7F:1B:41:F5:5A:FA:A5:5C:AF:BF:23:D5:CD:17:96:1C:C4:2F
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2E03D4
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/177dacedc9be7ac037844f0671e027992db1a2e7.roa
Signing time:             Thu 07 Dec 2023 12:43:19 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     271984
IP address blocks:        181.13.217.0/24 maxlen: 24
                          186.108.88.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3015636 (0x2e03d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=177dacedc9be7ac037844f0671e027992db1a2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d0:f6:c7:7c:85:57:db:96:a0:5b:e9:8c:cc:
                    2b:a6:32:7e:3d:84:98:f1:a1:b4:c6:03:d7:73:fa:
                    05:df:f8:7c:0f:eb:c3:da:55:5e:0b:8c:56:c4:69:
                    0a:d2:c7:25:af:84:5d:67:b4:51:f8:e2:ff:39:78:
                    25:44:4b:77:a1:d9:a4:35:aa:9d:72:be:26:9d:41:
                    70:f8:df:ea:6e:4e:8b:fa:4e:84:df:b5:c4:59:c5:
                    a6:24:41:b0:2a:09:60:a8:09:0c:ac:91:a7:b4:1d:
                    a5:79:1e:b8:d4:6b:fb:d1:c5:e3:44:e5:6a:4a:e5:
                    5c:90:17:d0:aa:a5:0b:7a:7b:45:ec:d1:6b:5b:13:
                    dc:0d:1b:b8:39:3a:a1:f4:8b:4d:48:04:4f:1a:93:
                    56:e9:37:3a:3d:a1:f6:89:ad:93:fa:64:20:5b:81:
                    97:f7:94:ac:ac:eb:06:7a:75:4c:e9:05:48:5c:92:
                    db:f4:58:ea:66:4d:0c:76:ad:2c:21:8e:66:eb:59:
                    4f:82:09:5a:7e:ac:3d:03:cc:06:fc:5f:5b:81:92:
                    c8:73:55:10:0d:01:70:e7:da:87:39:20:d8:00:b0:
                    88:f4:8e:9f:87:61:0b:bb:04:c4:22:23:b3:fd:c0:
                    d1:7f:aa:27:59:a2:8c:4e:29:ea:b5:7a:7e:4c:54:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:59:7F:1B:41:F5:5A:FA:A5:5C:AF:BF:23:D5:CD:17:96:1C:C4:2F
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/177dacedc9be7ac037844f0671e027992db1a2e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.217.0/24
                  186.108.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:e9:e8:4c:43:5c:a3:84:fe:f2:e7:f3:69:af:91:7b:9b:
         aa:54:43:2b:aa:2f:33:9e:20:1f:d5:eb:4f:46:d4:5d:c6:09:
         72:31:c7:5f:fb:57:9a:84:56:5f:93:58:16:88:71:00:5c:79:
         ba:39:b0:c6:3d:c1:0f:54:79:7e:8b:0c:c7:35:4c:5c:b4:53:
         c8:70:b3:f6:a5:2b:e4:c0:0c:03:80:17:11:7e:4a:cb:06:47:
         41:88:a9:6f:5e:22:66:95:d1:68:d8:34:59:c8:ef:f2:f9:6e:
         e1:03:bf:41:0b:99:75:81:36:3a:45:c4:6a:1e:d7:a6:17:6c:
         6c:6f:a5:b0:8a:2b:91:1e:63:95:23:7b:8d:cf:67:bb:5f:74:
         e8:ae:5d:6a:50:f9:a7:e3:dc:e8:f6:a2:a0:fe:fa:b0:44:97:
         58:bc:74:ec:a2:06:c2:cf:8a:f3:d4:47:2f:08:53:13:75:d2:
         4b:ae:48:b9:87:ad:47:a0:a8:3d:64:16:c0:e2:87:68:af:e7:
         70:ab:b7:0d:29:e7:f4:55:e0:cc:88:d3:ec:82:57:1e:cf:e7:
         c8:c4:a4:79:1c:8b:65:9e:ed:86:db:80:e7:17:bd:43:9b:b5:
         49:6e:13:d1:52:dc:0e:88:6e:b8:53:cb:ab:fa:b9:79:e1:d5:
         eb:3e:2e:53
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDLgPUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
MjYzZjBlYTFiNTYzMjg5MjA1YWQwMjY0NTMwZjhlNmMzMGU1NjkwHhcNMjMxMjA3
MTI0MTU3WhcNMjgxMjA3MTI0MTU3WjAzMTEwLwYDVQQDEygxNzdkYWNlZGM5YmU3
YWMwMzc4NDRmMDY3MWUwMjc5OTJkYjFhMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAitD2x3yFV9uWoFvpjMwrpjJ+PYSY8aG0xgPXc/oF3/h8D+vD
2lVeC4xWxGkK0sclr4RdZ7RR+OL/OXglREt3odmkNaqdcr4mnUFw+N/qbk6L+k6E
37XEWcWmJEGwKglgqAkMrJGntB2leR641Gv70cXjROVqSuVckBfQqqULentF7NFr
WxPcDRu4OTqh9ItNSARPGpNW6Tc6PaH2ia2T+mQgW4GX95SsrOsGenVM6QVIXJLb
9FjqZk0Mdq0sIY5m61lPgglafqw9A8wG/F9bgZLIc1UQDQFw59qHOSDYALCI9I6f
h2ELuwTEIiOz/cDRf6onWaKMTinqtXp+TFTRHQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFCVZfxtB9Vr6pVyvvyPVzReWHMQvMB8GA1UdIwQYMBaAFMD3ES/X9uODqZpb
XBnhTav8A9wtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgyNjNm
MGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzE3N2RhY2VkYzliZTdhYzAzNzg0NGYwNjcxZTAyNzk5MmRiMWEyZTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZjgyNjNmMGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEALUN2QMEAbpsWDANBgkqhkiG9w0BAQsFAAOCAQEAC6/p6ExD
XKOE/vLn82mvkXubqlRDK6ovM54gH9XrT0bUXcYJcjHHX/tXmoRWX5NYFohxAFx5
ujmwxj3BD1R5fosMxzVMXLRTyHCz9qUr5MAMA4AXEX5KywZHQYipb14iZpXRaNg0
Wcjv8vlu4QO/QQuZdYE2OkXEah7XphdsbG+lsIorkR5jlSN7jc9nu1906K5dalD5
p+Pc6PaioP76sESXWLx07KIGws+K89RHLwhTE3XSS65IuYetR6CoPWQWwOKHaK/n
cKu3DSnn9FXgzIjT7IJXHs/nyMSkeRyLZZ7thtuA5xe9Q5u1SW4T0VLcDohuuFPL
q/q5eeHV6z4uUw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org