Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/a866f4184fc614b852ae5a3347ef9735172e4195.roa
File:                     a866f4184fc614b852ae5a3347ef9735172e4195.roa (raw, json)
Hash identifier:          CnJIGSeeMp5sa32Hdngji1X0Bx2+3UO/5GtNM+Yt3jg=
Subject key identifier:   93:E5:67:29:8C:43:36:FC:53:80:08:B2:43:37:83:2E:DF:39:3E:AD
Certificate issuer:       /CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
Certificate serial:       26BC1A
Authority key identifier: 3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/a866f4184fc614b852ae5a3347ef9735172e4195.roa
Signing time:             Fri 27 Oct 2023 16:38:26 +0000
ROA not before:           Fri 27 Oct 2023 16:37:36 +0000
ROA not after:            Fri 27 Oct 2028 16:37:36 +0000
asID:                     19114
IP address blocks:        181.188.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538522 (0x26bc1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c15241c6af8fc9ae625639bdbfa2bef6919be4
        Validity
            Not Before: Oct 27 16:37:36 2023 GMT
            Not After : Oct 27 16:37:36 2028 GMT
        Subject: CN=a866f4184fc614b852ae5a3347ef9735172e4195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:50:6a:d4:21:f8:5a:f7:3c:71:09:7e:3b:6f:
                    a0:28:26:b4:21:17:28:85:ff:53:dd:fa:be:7d:2f:
                    aa:bf:0e:2c:59:03:aa:2a:4e:d7:01:b6:68:64:bb:
                    23:5a:af:b6:a1:b1:28:36:75:48:96:6c:11:28:bb:
                    57:ad:cc:f5:20:b5:c8:72:90:0c:3b:a2:9f:b3:be:
                    44:14:62:5d:7d:e3:12:92:9a:3b:36:56:e6:d2:90:
                    99:09:4a:0a:e5:11:b0:1e:5a:3d:94:9f:fe:7a:bc:
                    76:c5:a4:dc:d5:69:93:96:a0:0d:28:88:1c:5d:db:
                    f0:b5:23:c9:e8:b8:61:6f:95:db:27:44:18:74:33:
                    22:d1:c0:61:a6:2e:d4:48:93:d5:bf:3d:6c:55:7f:
                    a9:2f:54:16:e8:98:49:f5:f4:4a:d8:b5:47:37:78:
                    e0:dd:44:82:71:12:ce:a7:0e:af:5d:f4:5b:00:a4:
                    9d:b2:ac:34:89:6e:37:56:f7:73:28:dc:62:d9:1f:
                    c9:f8:eb:4e:82:ee:53:34:a7:71:e9:c6:c5:ec:38:
                    73:c4:30:88:49:df:03:53:27:94:85:d7:d7:2f:fa:
                    89:54:6f:23:70:85:0b:fb:cf:78:ee:13:b7:22:6e:
                    2a:4e:ac:90:87:9f:c1:f9:89:9c:33:f1:77:55:c2:
                    91:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E5:67:29:8C:43:36:FC:53:80:08:B2:43:37:83:2E:DF:39:3E:AD
            X509v3 Authority Key Identifier:
                keyid:3C:FD:2C:04:4E:72:7D:FE:5B:BA:4A:C2:19:80:E0:F4:7A:F9:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/a866f4184fc614b852ae5a3347ef9735172e4195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/d3c15241c6af8fc9ae625639bdbfa2bef6919be4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:0e:98:46:e6:05:fe:d6:f0:90:f9:2f:83:ee:32:c4:60:4b:
         29:9a:52:89:6d:03:8f:25:a1:6b:16:26:dd:1d:51:29:d8:c9:
         b8:d2:4a:b4:ad:20:31:19:cf:91:49:7f:6b:f5:78:8c:12:aa:
         55:0a:e7:4b:d2:a8:64:81:50:24:a1:70:2e:9d:ae:a2:90:c8:
         b4:96:46:7b:30:3c:33:6e:d2:a0:a2:37:1c:9e:a6:50:3b:4a:
         e9:e3:0e:24:ba:70:8d:fc:c3:34:f6:21:9e:52:a2:74:68:95:
         e7:49:ad:00:8d:48:98:4a:0c:92:01:69:49:4a:5c:ad:54:c2:
         01:e2:fc:44:d3:81:68:2f:23:1e:c4:c3:f1:2f:df:36:71:e7:
         b6:ac:0b:c9:74:eb:40:9e:b2:53:67:f2:44:1d:81:ec:ea:2e:
         32:61:ea:8d:09:77:68:cb:7d:dd:6b:33:f1:db:36:2f:bd:7f:
         fe:50:2a:25:07:6c:26:7f:98:67:a0:05:0f:7e:5c:8b:1c:dc:
         de:dd:46:d4:84:61:f6:50:5c:68:3f:db:d6:fa:5b:7c:34:41:
         d2:41:35:40:c6:8e:be:c3:9e:a5:4a:34:f1:ba:bf:16:e0:3e:
         96:fb:7f:83:77:1c:2f:aa:69:00:46:79:e3:50:fc:a2:0c:db:
         9a:a4:d9:63
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJrwaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQz
YzE1MjQxYzZhZjhmYzlhZTYyNTYzOWJkYmZhMmJlZjY5MTliZTQwHhcNMjMxMDI3
MTYzNzM2WhcNMjgxMDI3MTYzNzM2WjAzMTEwLwYDVQQDEyhhODY2ZjQxODRmYzYx
NGI4NTJhZTVhMzM0N2VmOTczNTE3MmU0MTk1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApFBq1CH4Wvc8cQl+O2+gKCa0IRcohf9T3fq+fS+qvw4sWQOq
Kk7XAbZoZLsjWq+2obEoNnVIlmwRKLtXrcz1ILXIcpAMO6Kfs75EFGJdfeMSkpo7
Nlbm0pCZCUoK5RGwHlo9lJ/+erx2xaTc1WmTlqANKIgcXdvwtSPJ6Lhhb5XbJ0QY
dDMi0cBhpi7USJPVvz1sVX+pL1QW6JhJ9fRK2LVHN3jg3USCcRLOpw6vXfRbAKSd
sqw0iW43VvdzKNxi2R/J+OtOgu5TNKdx6cbF7DhzxDCISd8DUyeUhdfXL/qJVG8j
cIUL+8947hO3Im4qTqyQh5/B+YmcM/F3VcKR1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJPlZymMQzb8U4AIskM3gy7fOT6tMB8GA1UdIwQYMBaAFDz9LAROcn3+W7pK
whmA4PR6+SKvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDNjMTUy
NDFjNmFmOGZjOWFlNjI1NjM5YmRiZmEyYmVmNjkxOWJlNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThhNzQ1MWYtMjYxNy00ZDBmLTllNzUtNmQyYWU5
Y2NmNTY2L2E4NjZmNDE4NGZjNjE0Yjg1MmFlNWEzMzQ3ZWY5NzM1MTcyZTQxOTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGE3NDUxZi0yNjE3LTRkMGYtOWU3NS02ZDJh
ZTljY2Y1NjYvZDNjMTUyNDFjNmFmOGZjOWFlNjI1NjM5YmRiZmEyYmVmNjkxOWJl
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALW86zANBgkqhkiG9w0BAQsFAAOCAQEAqQ6YRuYF/tbwkPkv
g+4yxGBLKZpSiW0DjyWhaxYm3R1RKdjJuNJKtK0gMRnPkUl/a/V4jBKqVQrnS9Ko
ZIFQJKFwLp2uopDItJZGezA8M27SoKI3HJ6mUDtK6eMOJLpwjfzDNPYhnlKidGiV
50mtAI1ImEoMkgFpSUpcrVTCAeL8RNOBaC8jHsTD8S/fNnHntqwLyXTrQJ6yU2fy
RB2B7OouMmHqjQl3aMt93Wsz8ds2L71//lAqJQdsJn+YZ6AFD35cixzc3t1G1IRh
9lBcaD/b1vpbfDRB0kE1QMaOvsOepUo08bq/FuA+lvt/g3ccL6ppAEZ541D8ogzb
mqTZYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:44 2024 by rpki-client on console-ams.rpki-client.org