Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8dd334f3ac3c4d72a7bd61d63d19c80f7449e62.roa
File:                     f8dd334f3ac3c4d72a7bd61d63d19c80f7449e62.roa (raw, json)
Hash identifier:          X71/n0rEqGJgMxinUW6HlBzo0Ab4Kj+bPnxRjpoRgl4=
Subject key identifier:   B6:AC:05:60:85:93:CC:DF:C7:07:A3:C1:FE:6C:B3:90:8F:BB:E4:72
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       278C71
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8dd334f3ac3c4d72a7bd61d63d19c80f7449e62.roa
Signing time:             Mon 17 Apr 2023 13:01:39 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     265704
IP address blocks:        181.13.180.0/24 maxlen: 24
                          181.13.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2591857 (0x278c71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=f8dd334f3ac3c4d72a7bd61d63d19c80f7449e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ac:9a:a0:e1:9a:d8:a8:66:28:a7:8c:4a:cd:
                    c9:2c:1d:81:62:3f:94:10:c2:73:16:32:a8:bb:06:
                    bc:0e:e7:29:5c:51:bf:07:fb:db:ee:bc:76:a0:47:
                    ca:b4:50:eb:c5:73:fb:a5:f9:76:ea:8d:15:76:5a:
                    0b:64:b0:c9:bd:f9:c1:11:e6:a0:5b:8a:59:ad:32:
                    5c:ae:bd:7e:5f:f1:74:e2:e3:95:60:fa:22:8b:83:
                    e4:97:cc:56:a0:fa:93:35:7b:31:28:20:99:08:e0:
                    9e:c9:29:88:ca:e6:eb:c1:5c:57:e7:51:1b:13:85:
                    04:1f:fe:a0:4d:14:c7:40:44:85:13:13:51:b8:e4:
                    63:f1:80:13:6d:ac:f4:5e:9f:08:5e:b6:fd:3f:48:
                    05:95:06:34:4c:b6:d3:9d:78:ee:8b:ce:76:21:eb:
                    9d:d3:db:6c:a5:ae:20:09:3c:40:7d:65:47:8a:f6:
                    b0:b5:ae:1c:67:bd:e1:1b:49:8c:a2:65:58:a5:ab:
                    b2:01:70:80:3c:1e:28:83:63:fe:f5:e7:90:47:2a:
                    84:58:62:fe:e7:d4:38:ac:70:cb:13:99:d6:f3:ed:
                    e8:8a:07:25:dc:1d:af:fa:56:34:ab:e9:a8:b9:d6:
                    ac:97:44:be:0b:33:d9:fe:20:6f:27:7e:d0:2b:e9:
                    f0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AC:05:60:85:93:CC:DF:C7:07:A3:C1:FE:6C:B3:90:8F:BB:E4:72
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8dd334f3ac3c4d72a7bd61d63d19c80f7449e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.180.0/24
                  181.13.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:d9:f9:35:6c:6a:e9:90:8a:42:14:d9:44:28:30:77:81:a2:
         fa:13:3c:4a:bf:31:3c:d5:c9:3b:4d:75:d6:f9:ba:da:ca:d5:
         e6:c2:43:48:2b:61:79:92:8c:22:bb:1a:71:39:56:67:e2:4b:
         02:ca:bd:a1:3b:dd:4c:9a:cb:16:c4:c8:7a:9c:10:7a:b3:81:
         f9:7e:ac:a2:f3:1a:a3:73:c8:57:ad:6d:ee:db:99:6e:79:bd:
         16:01:11:19:9f:d1:4e:cf:98:98:68:7d:6c:20:ae:04:7a:0b:
         57:56:8a:cf:dc:92:16:bc:30:85:8b:85:67:40:d1:38:26:55:
         9d:3a:8f:1d:5a:5e:8d:a7:eb:76:ef:17:04:6d:43:3d:2f:f7:
         74:eb:b5:9e:74:be:fc:b7:d1:1d:e6:ea:be:8f:31:a2:67:9f:
         aa:03:a7:f8:f8:5b:75:06:2a:45:0b:25:d1:ca:2f:a5:de:5c:
         b8:40:e5:96:76:bf:90:6f:5c:5c:c8:9b:b4:2f:92:af:94:4b:
         43:8d:70:09:82:c6:7c:7b:cc:47:4e:db:94:2f:9f:2f:56:cf:
         bc:a0:f6:3e:a2:89:89:3e:da:d6:a9:e9:63:0b:33:ff:71:37:
         33:04:50:92:71:0a:21:10:44:6c:52:92:ea:fb:b0:6b:81:e3:
         4b:2e:b1:56
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDJ4xxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjMwNDE2
MTMwMDI4WhcNMjUwNDE3MTMwMDI4WjAzMTEwLwYDVQQDEyhmOGRkMzM0ZjNhYzNj
NGQ3MmE3YmQ2MWQ2M2QxOWM4MGY3NDQ5ZTYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmKyaoOGa2KhmKKeMSs3JLB2BYj+UEMJzFjKouwa8DucpXFG/
B/vb7rx2oEfKtFDrxXP7pfl26o0VdloLZLDJvfnBEeagW4pZrTJcrr1+X/F04uOV
YPoii4Pkl8xWoPqTNXsxKCCZCOCeySmIyubrwVxX51EbE4UEH/6gTRTHQESFExNR
uORj8YATbaz0Xp8IXrb9P0gFlQY0TLbTnXjui852Ieud09tspa4gCTxAfWVHivaw
ta4cZ73hG0mMomVYpauyAXCAPB4og2P+9eeQRyqEWGL+59Q4rHDLE5nW8+3oigcl
3B2v+lY0q+moudasl0S+CzPZ/iBvJ37QK+nwZQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFLasBWCFk8zfxwejwf5ss5CPu+RyMB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3L2Y4ZGQzMzRmM2FjM2M0ZDcyYTdiZDYxZDYzZDE5YzgwZjc0NDllNjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEALUNtAMEALUNtjANBgkqhkiG9w0BAQsFAAOCAQEAl9n5NWxq
6ZCKQhTZRCgwd4Gi+hM8Sr8xPNXJO0111vm62srV5sJDSCtheZKMIrsacTlWZ+JL
Asq9oTvdTJrLFsTIepwQerOB+X6sovMao3PIV61t7tuZbnm9FgERGZ/RTs+YmGh9
bCCuBHoLV1aKz9ySFrwwhYuFZ0DROCZVnTqPHVpejafrdu8XBG1DPS/3dOu1nnS+
/LfRHebqvo8xomefqgOn+PhbdQYqRQsl0covpd5cuEDllna/kG9cXMibtC+Sr5RL
Q41wCYLGfHvMR07blC+fL1bPvKD2PqKJiT7a1qnpYwsz/3E3MwRQknEKIRBEbFKS
6vuwa4HjSy6xVg==
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:10:27 2023 by rpki-client on console-fra.rpki-client.org