Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/2e165bff781494a9c6318d06fe308789021cd493.roa
File:                     2e165bff781494a9c6318d06fe308789021cd493.roa (raw, json)
Hash identifier:          m3uX1mdyXsYyjZND/HAPQdQQ7thTt1q1IK3soprX+Jo=
Subject key identifier:   13:2C:76:43:03:24:02:F4:17:4C:3D:8C:89:25:A7:3B:D2:F6:1D:D2
Certificate issuer:       /CN=5d6739fb330fec46825943b9c33eaee7782d7827
Certificate serial:       1BEF0B
Authority key identifier: 4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/2e165bff781494a9c6318d06fe308789021cd493.roa
Signing time:             Wed 02 Nov 2022 16:41:52 +0000
ROA not before:           Tue 01 Nov 2022 16:39:31 +0000
ROA not after:            Sat 02 Nov 2024 16:39:31 +0000
asID:                     263195
IP address blocks:        179.42.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1830667 (0x1bef0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6739fb330fec46825943b9c33eaee7782d7827
        Validity
            Not Before: Nov  1 16:39:31 2022 GMT
            Not After : Nov  2 16:39:31 2024 GMT
        Subject: CN=2e165bff781494a9c6318d06fe308789021cd493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:84:64:5e:00:dc:63:ec:eb:d6:74:11:9d:34:
                    d2:b7:01:38:c0:bc:5a:14:f2:dd:2e:d5:39:b3:ae:
                    3a:3c:2b:52:1a:fd:94:f3:77:88:0e:77:93:f0:f8:
                    54:24:2f:2e:b7:0a:84:22:bf:5f:df:52:c6:a6:a5:
                    6b:a3:73:25:50:64:e0:cf:b0:43:a6:3f:cc:5b:5b:
                    0c:52:bd:6c:c9:8d:ec:dc:b7:17:db:67:01:4b:06:
                    aa:30:53:3b:0c:88:f5:c5:fd:3c:04:27:75:63:15:
                    88:d9:ca:cf:b9:2c:04:57:ce:54:c5:85:f0:43:07:
                    b9:75:f2:64:f5:59:4d:87:90:82:99:ea:c2:f2:d1:
                    57:3d:aa:ee:36:8c:b4:16:6a:9f:50:b4:40:5b:2d:
                    4a:b8:0c:73:11:89:3c:b9:13:ef:f8:e9:47:2b:2b:
                    17:03:e4:c0:53:0d:04:fd:b2:36:1b:99:48:0b:fa:
                    cc:cd:d0:90:0e:86:d0:8b:ba:64:d1:f0:83:57:cf:
                    00:1b:e7:01:a2:cf:62:68:bb:69:47:dc:0a:fe:ce:
                    49:1b:ac:f1:75:de:60:75:1a:f7:a5:6c:6a:76:78:
                    7e:4a:07:11:e4:49:08:70:60:53:b9:81:02:e6:5b:
                    a1:67:b8:6f:03:75:f5:27:12:c1:2a:53:a8:45:e6:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2C:76:43:03:24:02:F4:17:4C:3D:8C:89:25:A7:3B:D2:F6:1D:D2
            X509v3 Authority Key Identifier:
                keyid:4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/2e165bff781494a9c6318d06fe308789021cd493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5d6739fb330fec46825943b9c33eaee7782d7827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:1a:34:1e:40:42:5e:60:1c:44:b3:7c:fc:98:ba:50:cf:bb:
         77:3c:6e:8c:8f:bd:c1:fb:f2:b8:b4:7d:82:aa:75:02:d5:7c:
         b0:92:f5:2e:5d:17:d1:3c:db:2f:e5:4a:3f:80:80:22:e0:93:
         1b:84:1a:e4:31:0b:86:b0:f8:fe:5b:4c:4f:bc:51:03:c0:85:
         57:b5:b3:6f:b8:0d:2e:27:fe:e2:ec:57:df:2e:8a:08:da:29:
         56:bb:69:9d:13:15:d3:c6:bf:1b:7b:42:62:aa:16:5d:86:7e:
         4b:d4:ba:9f:78:20:7e:17:e6:20:97:dd:e9:c5:22:b4:66:67:
         86:cf:f0:90:19:f2:4f:05:c5:97:38:8d:da:0c:19:47:a4:4b:
         40:65:c6:63:57:7a:ce:ea:bf:6a:81:f0:cc:a8:ac:86:f4:6d:
         2b:81:f2:05:e4:2a:34:45:b2:7c:4d:07:6d:20:24:a6:1e:18:
         28:e2:17:dc:ba:ef:94:d8:be:3f:6c:96:ec:be:b3:c5:59:66:
         5d:59:03:14:38:94:a9:20:fa:34:44:59:de:8c:a6:d5:d3:0c:
         4a:69:b5:dd:2c:f4:3e:c9:0d:d7:e0:4c:3b:c2:bd:37:3f:c9:
         b7:6e:3c:b8:5c:bb:38:44:e0:bc:17:9c:f2:e2:24:41:86:db:
         e0:fe:5c:8f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDG+8LMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
NjczOWZiMzMwZmVjNDY4MjU5NDNiOWMzM2VhZWU3NzgyZDc4MjcwHhcNMjIxMTAx
MTYzOTMxWhcNMjQxMTAyMTYzOTMxWjAzMTEwLwYDVQQDEygyZTE2NWJmZjc4MTQ5
NGE5YzYzMThkMDZmZTMwODc4OTAyMWNkNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5IRkXgDcY+zr1nQRnTTStwE4wLxaFPLdLtU5s646PCtSGv2U
83eIDneT8PhUJC8utwqEIr9f31LGpqVro3MlUGTgz7BDpj/MW1sMUr1syY3s3LcX
22cBSwaqMFM7DIj1xf08BCd1YxWI2crPuSwEV85UxYXwQwe5dfJk9VlNh5CCmerC
8tFXParuNoy0FmqfULRAWy1KuAxzEYk8uRPv+OlHKysXA+TAUw0E/bI2G5lIC/rM
zdCQDobQi7pk0fCDV88AG+cBos9iaLtpR9wK/s5JG6zxdd5gdRr3pWxqdnh+SgcR
5EkIcGBTuYEC5luhZ7hvA3X1JxLBKlOoRebtiQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBMsdkMDJAL0F0w9jIklpzvS9h3SMB8GA1UdIwQYMBaAFEsCxjmldtSgQ0Bd
542qYYQGaS98MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQ2NzM5
ZmIzMzBmZWM0NjgyNTk0M2I5YzMzZWFlZTc3ODJkNzgyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWUzODYzODUtMjJjOS00NGVkLTgyMDUtNWMyOWE2
OTUwMGE2LzJlMTY1YmZmNzgxNDk0YTljNjMxOGQwNmZlMzA4Nzg5MDIxY2Q0OTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZTM4NjM4NS0yMmM5LTQ0ZWQtODIwNS01YzI5
YTY5NTAwYTYvNWQ2NzM5ZmIzMzBmZWM0NjgyNTk0M2I5YzMzZWFlZTc3ODJkNzgy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALMqrTANBgkqhkiG9w0BAQsFAAOCAQEACBo0HkBCXmAcRLN8
/Ji6UM+7dzxujI+9wfvyuLR9gqp1AtV8sJL1Ll0X0TzbL+VKP4CAIuCTG4Qa5DEL
hrD4/ltMT7xRA8CFV7Wzb7gNLif+4uxX3y6KCNopVrtpnRMV08a/G3tCYqoWXYZ+
S9S6n3ggfhfmIJfd6cUitGZnhs/wkBnyTwXFlziN2gwZR6RLQGXGY1d6zuq/aoHw
zKishvRtK4HyBeQqNEWyfE0HbSAkph4YKOIX3LrvlNi+P2yW7L6zxVlmXVkDFDiU
qSD6NERZ3oym1dMMSmm13Sz0PskN1+BMO8K9Nz/Jt248uFy7OETgvBec8uIkQYbb
4P5cjw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org