Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/789736476cf8fb80f6a35ecff62dfbd09173c21f.roa
File:                     789736476cf8fb80f6a35ecff62dfbd09173c21f.roa (raw, json)
Hash identifier:          UhpBfyiQbQA50lYXi+Yt3bBWMFx8kGJmPw3NjFfi0nE=
Subject key identifier:   10:65:EB:11:31:8E:53:19:C8:2D:4B:B0:FD:1D:44:54:B4:14:71:16
Certificate issuer:       /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial:       21C699
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/789736476cf8fb80f6a35ecff62dfbd09173c21f.roa
Signing time:             Wed 14 Jun 2023 20:48:30 +0000
ROA not before:           Tue 13 Jun 2023 20:48:29 +0000
ROA not after:            Sat 14 Jun 2025 20:48:29 +0000
asID:                     52501
IP address blocks:        181.174.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2213529 (0x21c699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
        Validity
            Not Before: Jun 13 20:48:29 2023 GMT
            Not After : Jun 14 20:48:29 2025 GMT
        Subject: CN=789736476cf8fb80f6a35ecff62dfbd09173c21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:55:2f:34:4d:00:c3:f0:ab:d4:2e:8d:c7:e0:
                    8f:54:06:cf:85:31:52:c5:45:ac:b4:7e:12:16:68:
                    34:de:37:2b:a5:90:66:72:cc:38:aa:66:37:fd:2a:
                    f0:6c:f0:29:c5:12:63:88:c4:2e:1b:f3:ef:15:6d:
                    e0:bd:54:e3:6a:22:97:5f:3a:30:24:ad:2d:16:31:
                    ea:84:5f:89:b7:00:39:29:3a:d2:f5:24:a7:6a:51:
                    e9:74:ab:bb:b2:5b:9a:fa:ba:24:06:fc:6d:aa:d1:
                    ee:bb:6e:b5:15:1b:fb:ff:10:60:03:fc:5f:94:6c:
                    91:76:a3:55:f9:86:8a:5e:ba:f7:ec:d6:d2:6f:75:
                    ae:b0:c7:29:4e:d8:eb:0a:5e:6c:02:68:73:02:09:
                    5f:fc:15:59:3d:c8:d3:2c:dc:98:10:21:44:d6:bd:
                    9b:77:c6:a8:15:47:52:99:d5:b1:17:52:76:06:5a:
                    8f:c1:ee:91:f5:90:d0:8a:96:da:b1:e1:df:3d:b8:
                    9c:8a:71:13:5e:67:f5:6d:0f:ab:29:5e:be:69:4b:
                    b6:70:bc:9a:1e:d8:f4:a2:3c:93:aa:32:a3:38:9c:
                    70:64:b9:ee:2e:58:d4:40:4d:c2:99:c6:83:bc:6d:
                    21:94:f8:51:75:e2:bb:be:f3:b8:b6:e0:46:c2:ec:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:65:EB:11:31:8E:53:19:C8:2D:4B:B0:FD:1D:44:54:B4:14:71:16
            X509v3 Authority Key Identifier:
                keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/789736476cf8fb80f6a35ecff62dfbd09173c21f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:da:86:d3:55:f4:07:7a:ec:91:2c:75:60:27:b3:8e:a2:41:
         25:96:ff:cf:5e:69:09:4e:2e:cf:0c:c0:5f:eb:07:65:b9:bd:
         8b:5c:94:9f:50:f2:43:7b:06:3f:f9:79:f7:19:b9:26:94:d0:
         bb:87:38:53:10:0c:e3:2e:1a:1c:a7:2b:40:67:13:e0:d9:61:
         80:9e:a0:dc:49:3f:a3:cc:36:3e:47:b7:b6:08:57:a0:9d:db:
         2c:1c:6f:a6:65:aa:30:90:91:e4:f2:4e:22:09:99:75:4b:79:
         96:1e:18:7e:31:9f:1c:35:93:e4:64:b8:61:d3:ca:dc:47:81:
         d3:07:36:f1:52:c4:27:f9:b8:35:12:fd:9c:91:1c:a3:19:0b:
         e9:0f:d2:e2:ae:76:bd:cd:71:52:9a:56:a1:0d:b8:cd:d2:5b:
         4d:ae:cd:6b:aa:b2:01:5f:21:06:29:33:17:60:46:18:51:f9:
         c9:75:2c:ec:a7:a1:e5:30:21:9f:7b:9f:f7:a0:ee:fc:68:ee:
         f6:5d:2f:7c:11:b5:8d:02:0c:42:54:a9:cc:e9:9b:78:ce:e1:
         a9:d7:1d:b0:b1:b6:8a:4e:0b:a5:e9:94:fb:4e:ed:d1:5f:31:
         73:54:c2:fc:a1:43:f4:88:fd:ac:86:42:64:f7:86:69:80:c0:
         a9:3c:03:4b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIcaZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIx
MjAxMjUwMmI3Y2EzYjBkYTEyNWYyNTAzMTVkZmUxOWJmYjE4ZDUwHhcNMjMwNjEz
MjA0ODI5WhcNMjUwNjE0MjA0ODI5WjAzMTEwLwYDVQQDEyg3ODk3MzY0NzZjZjhm
YjgwZjZhMzVlY2ZmNjJkZmJkMDkxNzNjMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgVUvNE0Aw/Cr1C6Nx+CPVAbPhTFSxUWstH4SFmg03jcrpZBm
csw4qmY3/SrwbPApxRJjiMQuG/PvFW3gvVTjaiKXXzowJK0tFjHqhF+JtwA5KTrS
9SSnalHpdKu7slua+rokBvxtqtHuu261FRv7/xBgA/xflGyRdqNV+YaKXrr37NbS
b3WusMcpTtjrCl5sAmhzAglf/BVZPcjTLNyYECFE1r2bd8aoFUdSmdWxF1J2BlqP
we6R9ZDQipbaseHfPbicinETXmf1bQ+rKV6+aUu2cLyaHtj0ojyTqjKjOJxwZLnu
LljUQE3CmcaDvG0hlPhRdeK7vvO4tuBGwuwgiwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBBl6xExjlMZyC1LsP0dRFS0FHEWMB8GA1UdIwQYMBaAFKCqM8Dl6pwxiuGW
tthyAjWcZxKaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjEyMDEy
NTAyYjdjYTNiMGRhMTI1ZjI1MDMxNWRmZTE5YmZiMThkNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTk5ZDkyMzMtNTkyMi00NDZkLTkxYzItMjdhY2M1
MWZmYTFjLzc4OTczNjQ3NmNmOGZiODBmNmEzNWVjZmY2MmRmYmQwOTE3M2MyMWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OTlkOTIzMy01OTIyLTQ0NmQtOTFjMi0yN2Fj
YzUxZmZhMWMvYjEyMDEyNTAyYjdjYTNiMGRhMTI1ZjI1MDMxNWRmZTE5YmZiMThk
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALWufDANBgkqhkiG9w0BAQsFAAOCAQEAXdqG01X0B3rskSx1
YCezjqJBJZb/z15pCU4uzwzAX+sHZbm9i1yUn1DyQ3sGP/l59xm5JpTQu4c4UxAM
4y4aHKcrQGcT4NlhgJ6g3Ek/o8w2Pke3tghXoJ3bLBxvpmWqMJCR5PJOIgmZdUt5
lh4YfjGfHDWT5GS4YdPK3EeB0wc28VLEJ/m4NRL9nJEcoxkL6Q/S4q52vc1xUppW
oQ24zdJbTa7Na6qyAV8hBikzF2BGGFH5yXUs7Keh5TAhn3uf96Du/Gju9l0vfBG1
jQIMQlSpzOmbeM7hqdcdsLG2ik4LpemU+07t0V8xc1TC/KFD9Ij9rIZCZPeGaYDA
qTwDSw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org