Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/41d06de338be1d126625ba9c6d2daf3cb56c3e4c.roa
File:                     41d06de338be1d126625ba9c6d2daf3cb56c3e4c.roa (raw, json)
Hash identifier:          tLOMko5m8U4ZiCCwMIK+IUdfdPqkHun0IHSheb4V/2Q=
Subject key identifier:   4D:45:38:D7:58:FF:65:C5:14:CA:CB:CD:14:3A:12:12:AB:53:94:12
Certificate issuer:       /CN=25d19738e269ec170203b5c4767bdf0fe844b512
Certificate serial:       02590F
Authority key identifier: 9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d19738e269ec170203b5c4767bdf0fe844b512.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/41d06de338be1d126625ba9c6d2daf3cb56c3e4c.roa
Signing time:             Fri 29 Jul 2022 14:38:36 +0000
ROA not before:           Fri 29 Jul 2022 03:00:00 +0000
ROA not after:            Mon 29 Jul 2024 03:00:00 +0000
asID:                     58349
IP address blocks:        181.233.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153871 (0x2590f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d19738e269ec170203b5c4767bdf0fe844b512
        Validity
            Not Before: Jul 29 03:00:00 2022 GMT
            Not After : Jul 29 03:00:00 2024 GMT
        Subject: CN=41d06de338be1d126625ba9c6d2daf3cb56c3e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:e5:7b:19:2d:d7:75:e5:1d:1d:e2:cb:12:
                    7d:db:b7:98:59:21:c1:fb:c6:70:a3:09:24:e5:7f:
                    f5:9c:c7:b6:9c:1c:08:c3:a8:c8:d5:89:f1:fc:9e:
                    50:f3:35:9f:d3:b9:b6:a9:74:8f:2b:fd:bf:e7:a0:
                    13:e6:5d:3d:c5:d7:1b:a2:53:92:0a:bd:d4:01:e8:
                    11:c0:4b:03:a8:ae:de:d3:78:db:55:1b:a6:c8:1a:
                    d5:e7:ba:9f:1b:86:c8:16:fd:e7:3d:88:18:ac:a5:
                    85:ee:b6:3f:55:05:c3:43:99:61:47:9f:d4:57:4f:
                    38:20:e0:7f:3c:47:90:9d:51:0f:a5:ab:cd:6e:d2:
                    a5:9c:75:95:9c:41:33:fe:91:f9:e3:93:36:0d:d8:
                    89:c3:3e:2e:60:73:a3:81:e5:3c:e7:be:c6:c9:fd:
                    6e:36:ff:12:52:ac:e9:da:00:cb:08:21:64:10:eb:
                    76:30:f3:42:ae:6f:39:ad:c6:4a:b5:8d:2c:ee:1b:
                    15:06:b1:62:96:81:5f:78:3c:2e:8e:dc:60:f3:8d:
                    dc:46:f8:fc:48:48:4e:f5:4e:e9:fc:0f:c6:2b:22:
                    ea:05:fe:00:38:48:26:57:f1:a6:b6:67:1d:6f:b7:
                    5b:c8:1f:48:be:f0:e1:12:6a:b7:17:78:17:7c:b6:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:45:38:D7:58:FF:65:C5:14:CA:CB:CD:14:3A:12:12:AB:53:94:12
            X509v3 Authority Key Identifier:
                keyid:9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d19738e269ec170203b5c4767bdf0fe844b512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/41d06de338be1d126625ba9c6d2daf3cb56c3e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/25d19738e269ec170203b5c4767bdf0fe844b512.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:62:75:24:a7:aa:01:a3:16:ea:8a:4d:27:02:07:2b:9b:
         3b:b4:a2:24:b9:ff:e4:d0:43:9a:a4:a7:4d:c4:ea:cf:fb:1e:
         ed:2e:d7:14:65:0d:4f:3a:86:5d:09:8c:0a:c5:59:5b:4f:38:
         06:3a:db:07:11:b7:68:90:d0:d6:54:9d:5a:e7:cc:7d:a9:09:
         44:9d:1a:a1:24:b5:b7:27:4e:72:59:a2:8a:2b:b1:fc:8d:7f:
         e1:a0:e2:64:68:2f:75:e6:ea:a2:d9:d2:bc:43:69:41:12:56:
         4d:f3:2a:48:1c:b5:3b:72:5e:c6:14:35:34:ad:c6:46:50:35:
         49:7c:66:ad:7f:da:b6:aa:6c:d2:87:dc:06:be:45:dd:76:49:
         82:dc:f1:2b:f6:c4:2a:91:f1:e0:7b:d4:ea:20:d9:a7:f4:98:
         c4:5f:8b:30:d1:95:78:d0:da:b1:ae:1f:1a:dd:cf:d1:e3:da:
         d7:7d:82:52:1d:93:be:de:04:27:1a:f1:aa:8e:41:bd:5b:b5:
         36:5c:2b:64:ee:63:47:44:47:d2:0f:5d:b5:ca:20:5e:c2:1a:
         39:76:1f:bf:56:89:52:cc:7f:03:2a:bd:18:6a:63:c1:9e:95:
         dc:d5:c6:d7:ed:a9:2a:e0:b5:b3:ec:a9:76:a5:16:44:88:38:
         38:36:8b:20
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAlkPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI1
ZDE5NzM4ZTI2OWVjMTcwMjAzYjVjNDc2N2JkZjBmZTg0NGI1MTIwHhcNMjIwNzI5
MDMwMDAwWhcNMjQwNzI5MDMwMDAwWjAzMTEwLwYDVQQDEyg0MWQwNmRlMzM4YmUx
ZDEyNjYyNWJhOWM2ZDJkYWYzY2I1NmMzZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvqPlexkt13XlHR3iyxJ927eYWSHB+8Zwowkk5X/1nMe2nBwI
w6jI1Ynx/J5Q8zWf07m2qXSPK/2/56AT5l09xdcbolOSCr3UAegRwEsDqK7e03jb
VRumyBrV57qfG4bIFv3nPYgYrKWF7rY/VQXDQ5lhR5/UV084IOB/PEeQnVEPpavN
btKlnHWVnEEz/pH545M2DdiJwz4uYHOjgeU8577Gyf1uNv8SUqzp2gDLCCFkEOt2
MPNCrm85rcZKtY0s7hsVBrFiloFfeDwujtxg843cRvj8SEhO9U7p/A/GKyLqBf4A
OEgmV/Gmtmcdb7dbyB9IvvDhEmq3F3gXfLYpSQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFE1FONdY/2XFFMrLzRQ6EhKrU5QSMB8GA1UdIwQYMBaAFJ5dT2+BYQAOIAvS
W8qMKr8Bd9O9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjVkMTk3
MzhlMjY5ZWMxNzAyMDNiNWM0NzY3YmRmMGZlODQ0YjUxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVlYWYzMTMtNjlmNi00MTdiLThjMTUtZTM2YjI5
ODY4ODMwLzQxZDA2ZGUzMzhiZTFkMTI2NjI1YmE5YzZkMmRhZjNjYjU2YzNlNGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWVhZjMxMy02OWY2LTQxN2ItOGMxNS1lMzZi
Mjk4Njg4MzAvMjVkMTk3MzhlMjY5ZWMxNzAyMDNiNWM0NzY3YmRmMGZlODQ0YjUx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALXpfjANBgkqhkiG9w0BAQsFAAOCAQEALNdidSSnqgGjFuqK
TScCByubO7SiJLn/5NBDmqSnTcTqz/se7S7XFGUNTzqGXQmMCsVZW084BjrbBxG3
aJDQ1lSdWufMfakJRJ0aoSS1tydOclmiiiux/I1/4aDiZGgvdebqotnSvENpQRJW
TfMqSBy1O3JexhQ1NK3GRlA1SXxmrX/atqps0ofcBr5F3XZJgtzxK/bEKpHx4HvU
6iDZp/SYxF+LMNGVeNDasa4fGt3P0ePa132CUh2Tvt4EJxrxqo5BvVu1NlwrZO5j
R0RH0g9dtcogXsIaOXYfv1aJUsx/Ayq9GGpjwZ6V3NXG1+2pKuC1s+ypdqUWRIg4
ODaLIA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org