Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/933ede67f451c408498fe9be919e778831f011dc.roa
File:                     933ede67f451c408498fe9be919e778831f011dc.roa (raw, json)
Hash identifier:          jA2Wsr79lo+OsXYrZHU11++ln4+nSNxaMraEUw38AIo=
Subject key identifier:   E3:1D:D8:EC:7C:30:25:3C:D4:75:05:43:9C:0D:8C:1F:85:A5:35:F0
Certificate issuer:       /CN=2a234a7b53d24b6272623544bf02f8d638997781
Certificate serial:       16E789
Authority key identifier: 80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/933ede67f451c408498fe9be919e778831f011dc.roa
Signing time:             Sat 30 Apr 2022 16:23:27 +0000
ROA not before:           Sat 30 Apr 2022 03:00:00 +0000
ROA not after:            Tue 30 Apr 2024 03:00:00 +0000
asID:                     269960
IP address blocks:        170.82.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501065 (0x16e789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a234a7b53d24b6272623544bf02f8d638997781
        Validity
            Not Before: Apr 30 03:00:00 2022 GMT
            Not After : Apr 30 03:00:00 2024 GMT
        Subject: CN=933ede67f451c408498fe9be919e778831f011dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:29:3c:34:e2:01:f0:08:e9:54:c4:d8:f1:19:
                    1b:f8:f3:24:22:46:06:85:f9:f5:ca:72:95:ec:61:
                    1c:1b:eb:67:dd:8a:d3:c5:38:5b:0a:06:98:56:71:
                    ae:bc:09:21:8c:27:df:80:d9:66:6f:78:6b:e3:11:
                    7b:2b:fa:bf:8d:5f:be:ce:22:2b:2e:bd:d0:9b:f0:
                    73:bd:f7:77:6e:84:de:00:a2:a0:ea:18:c5:e7:4f:
                    a1:cb:74:51:30:59:ec:86:27:9f:c0:7c:80:54:2b:
                    d3:01:bc:91:80:63:97:e4:2b:97:2d:97:65:3d:ad:
                    68:88:24:16:6a:48:ad:4b:57:6a:4d:1a:9f:22:47:
                    a5:6b:ea:23:66:f7:36:bd:d7:74:8f:52:ef:09:26:
                    54:bc:5a:09:4d:cf:ce:1e:d1:71:56:ec:ff:04:05:
                    40:bc:74:48:60:e0:e5:29:4d:cf:f8:80:05:b9:69:
                    6e:52:9f:aa:ae:b0:2c:41:92:1d:93:e0:d0:fa:cd:
                    99:ba:f0:22:e3:75:bd:e1:ee:f7:95:f5:cd:23:7d:
                    cc:b9:43:62:71:37:11:eb:71:18:f7:30:4a:6a:da:
                    2f:24:4d:06:29:95:0c:54:20:a8:7a:ce:89:49:7c:
                    37:49:cf:d0:0a:80:ee:0a:2f:02:5f:da:c1:df:d2:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1D:D8:EC:7C:30:25:3C:D4:75:05:43:9C:0D:8C:1F:85:A5:35:F0
            X509v3 Authority Key Identifier:
                keyid:80:E5:BF:B2:D6:E6:9A:A6:8D:AE:56:9B:06:44:59:9C:22:FD:D1:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a234a7b53d24b6272623544bf02f8d638997781.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/933ede67f451c408498fe9be919e778831f011dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecd2eb4-6487-4b0e-a489-e1d63564bee6/2a234a7b53d24b6272623544bf02f8d638997781.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:a8:3e:b6:62:f1:b2:11:69:9e:ad:75:e2:9a:67:fb:28:d7:
         26:52:f3:21:b0:6d:ae:eb:63:66:6e:3b:84:e3:bf:db:01:db:
         e0:db:8c:10:5d:d7:f3:7f:50:98:e8:57:94:14:81:94:0e:c9:
         f7:51:58:67:e0:e8:46:5c:ac:ca:e6:e9:a3:be:45:bf:36:97:
         76:d9:1d:87:a2:fc:c2:33:73:f8:b2:85:cd:22:1e:c3:13:44:
         00:f9:ef:27:a4:3a:fa:bc:4f:e4:a8:da:eb:34:36:a0:bc:18:
         ea:c7:5f:d5:8d:06:38:86:e4:a0:50:22:55:1b:51:d0:8e:45:
         2f:f9:8a:d9:d1:5b:ba:7e:1a:9b:09:24:69:ba:18:a4:a3:8a:
         a8:80:06:cb:df:5f:fb:65:3c:72:91:e2:67:d5:06:76:b9:0a:
         4a:0a:38:2b:2c:4f:c0:b2:7e:ee:da:c7:a0:6f:6a:d7:10:1f:
         7f:61:ef:dc:60:ef:17:2b:f7:8b:02:90:9e:ff:19:8c:79:69:
         90:4d:c4:24:6c:8a:30:9c:96:03:7a:5a:31:a8:ef:87:4f:d3:
         e9:6b:63:63:0f:b8:ee:a8:ba:c6:14:4b:37:5c:bc:15:c2:eb:
         62:7c:f2:e2:db:12:f4:3d:bc:44:f8:1c:e9:61:db:8e:80:af:
         25:a1:83:35
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFueJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJh
MjM0YTdiNTNkMjRiNjI3MjYyMzU0NGJmMDJmOGQ2Mzg5OTc3ODEwHhcNMjIwNDMw
MDMwMDAwWhcNMjQwNDMwMDMwMDAwWjAzMTEwLwYDVQQDEyg5MzNlZGU2N2Y0NTFj
NDA4NDk4ZmU5YmU5MTllNzc4ODMxZjAxMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnSk8NOIB8AjpVMTY8Rkb+PMkIkYGhfn1ynKV7GEcG+tn3YrT
xThbCgaYVnGuvAkhjCffgNlmb3hr4xF7K/q/jV++ziIrLr3Qm/Bzvfd3boTeAKKg
6hjF50+hy3RRMFnshiefwHyAVCvTAbyRgGOX5CuXLZdlPa1oiCQWakitS1dqTRqf
Ikela+ojZvc2vdd0j1LvCSZUvFoJTc/OHtFxVuz/BAVAvHRIYODlKU3P+IAFuWlu
Up+qrrAsQZIdk+DQ+s2ZuvAi43W94e73lfXNI33MuUNicTcR63EY9zBKatovJE0G
KZUMVCCoes6JSXw3Sc/QCoDuCi8CX9rB39KsxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOMd2Ox8MCU81HUFQ5wNjB+FpTXwMB8GA1UdIwQYMBaAFIDlv7LW5pqmja5W
mwZEWZwi/dEAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmEyMzRh
N2I1M2QyNGI2MjcyNjIzNTQ0YmYwMmY4ZDYzODk5Nzc4MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjZDJlYjQtNjQ4Ny00YjBlLWE0ODktZTFkNjM1
NjRiZWU2LzkzM2VkZTY3ZjQ1MWM0MDg0OThmZTliZTkxOWU3Nzg4MzFmMDExZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNkMmViNC02NDg3LTRiMGUtYTQ4OS1lMWQ2
MzU2NGJlZTYvMmEyMzRhN2I1M2QyNGI2MjcyNjIzNTQ0YmYwMmY4ZDYzODk5Nzc4
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKpSJzANBgkqhkiG9w0BAQsFAAOCAQEAOag+tmLxshFpnq11
4ppn+yjXJlLzIbBtrutjZm47hOO/2wHb4NuMEF3X839QmOhXlBSBlA7J91FYZ+Do
Rlysyubpo75FvzaXdtkdh6L8wjNz+LKFzSIewxNEAPnvJ6Q6+rxP5Kja6zQ2oLwY
6sdf1Y0GOIbkoFAiVRtR0I5FL/mK2dFbun4amwkkaboYpKOKqIAGy99f+2U8cpHi
Z9UGdrkKSgo4KyxPwLJ+7trHoG9q1xAff2Hv3GDvFyv3iwKQnv8ZjHlpkE3EJGyK
MJyWA3paMajvh0/T6WtjYw+47qi6xhRLN1y8FcLrYnzy4tsS9D28RPgc6WHbjoCv
JaGDNQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org