Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/47ad75dad2a50fd11f2cc0028cdaf47e10417548.roa
File:                     47ad75dad2a50fd11f2cc0028cdaf47e10417548.roa (raw, json)
Hash identifier:          yf3tHzVK6fuonkqNmHCBXBNYPZ8dS9yBBFgWCZnrdXc=
Subject key identifier:   7C:AC:55:C2:C7:F7:57:BC:F0:98:DF:F6:6A:01:08:54:D6:66:2D:7F
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0F9602
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/47ad75dad2a50fd11f2cc0028cdaf47e10417548.roa
Signing time:             Wed 24 Mar 2021 14:44:01 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021442 (0xf9602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=47ad75dad2a50fd11f2cc0028cdaf47e10417548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:e0:8a:b3:0a:c4:f9:67:19:30:c0:72:83:
                    1b:f9:70:86:98:64:0d:50:ed:1f:5d:b1:7e:06:eb:
                    87:65:fe:bc:3c:28:16:a0:e0:fb:ae:63:1e:ca:9c:
                    f5:98:d3:91:a6:88:54:ab:94:d9:b0:bb:70:65:ec:
                    42:db:af:54:5a:f5:8c:69:97:21:52:46:37:08:53:
                    42:9a:6b:48:82:62:93:99:7f:b0:e4:3a:f9:e2:1e:
                    2b:87:9a:2b:a4:47:50:b4:3d:73:ea:40:f1:34:62:
                    61:d7:4f:59:84:00:85:e4:6d:42:52:ca:71:ea:00:
                    c2:b4:55:16:ab:2d:46:7a:e3:94:23:6a:1f:3c:1f:
                    ec:df:ed:ab:60:ba:08:5f:dc:fb:34:7f:2a:2e:48:
                    57:87:06:3e:4b:9a:9c:05:c3:59:cb:82:28:d9:bc:
                    35:9f:c3:83:fa:8f:7d:09:b0:0b:85:6d:42:32:c8:
                    71:21:ff:98:18:32:32:30:79:8a:d9:ce:cb:0e:75:
                    a0:20:9c:53:a8:51:72:f8:c8:6d:89:c3:83:78:e3:
                    7e:dc:ef:5e:b8:9c:a9:e2:9b:34:62:d4:98:93:30:
                    f7:a9:af:6f:8d:2a:4b:3d:73:0c:68:ea:53:52:66:
                    17:d0:9c:72:13:b4:a0:ba:f6:78:48:38:17:5e:bf:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AC:55:C2:C7:F7:57:BC:F0:98:DF:F6:6A:01:08:54:D6:66:2D:7F
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/47ad75dad2a50fd11f2cc0028cdaf47e10417548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:01:27:65:c7:8f:b0:01:ee:d1:83:fe:6d:f0:6e:72:c5:25:
         d6:71:07:76:95:5a:00:f0:0a:74:62:5f:e0:18:6f:a9:52:8e:
         37:40:eb:46:51:6d:0f:30:bf:fe:cc:18:7d:11:d7:18:67:95:
         19:ed:6e:5d:95:ff:70:27:48:d0:ec:57:73:65:d0:8a:ed:89:
         25:f4:08:11:d2:21:2c:e0:e9:e5:2b:b6:b7:58:cf:9f:46:77:
         92:d5:a8:6a:ef:a7:d3:22:d1:fb:5a:64:a4:be:39:91:18:43:
         eb:8c:99:21:b5:75:3a:e2:fa:73:c9:55:51:86:09:8f:42:9f:
         62:83:0e:e4:db:dc:f7:96:c1:05:33:2d:4c:bd:51:f7:89:40:
         f9:8c:52:fa:b3:8a:02:27:5e:d2:67:1e:bd:f1:de:bd:0b:fb:
         4d:8f:67:19:ba:c6:85:2c:a5:3c:a1:9b:03:0f:3f:3e:02:26:
         ff:dc:03:c7:74:07:8f:ae:92:3a:d0:c9:cc:1c:9d:ac:cb:f9:
         63:d5:72:ad:fd:e2:b5:12:99:fd:2d:3f:66:a5:b2:a4:7b:00:
         b2:37:5c:7c:17:67:81:42:99:90:43:a9:fe:ec:4a:25:51:f9:
         29:da:54:02:f8:4d:56:43:45:63:63:98:10:0f:5b:c4:cc:a2:
         48:8d:05:ba
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDD5YCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyg0N2FkNzVkYWQyYTUw
ZmQxMWYyY2MwMDI4Y2RhZjQ3ZTEwNDE3NTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAy0ngirMKxPlnGTDAcoMb+XCGmGQNUO0fXbF+BuuHZf68PCgW
oOD7rmMeypz1mNORpohUq5TZsLtwZexC269UWvWMaZchUkY3CFNCmmtIgmKTmX+w
5Dr54h4rh5orpEdQtD1z6kDxNGJh109ZhACF5G1CUspx6gDCtFUWqy1GeuOUI2of
PB/s3+2rYLoIX9z7NH8qLkhXhwY+S5qcBcNZy4Io2bw1n8OD+o99CbALhW1CMshx
If+YGDIyMHmK2c7LDnWgIJxTqFFy+MhticODeON+3O9euJyp4ps0YtSYkzD3qa9v
jSpLPXMMaOpTUmYX0JxyE7SguvZ4SDgXXr9pjwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHysVcLH91e88Jjf9moBCFTWZi1/MB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4LzQ3YWQ3NWRhZDJhNTBmZDExZjJjYzAwMjhjZGFmNDdlMTA0MTc1NDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT3sTANBgkqhkiG9w0BAQsFAAOCAQEARwEnZcePsAHu0YP+
bfBucsUl1nEHdpVaAPAKdGJf4BhvqVKON0DrRlFtDzC//swYfRHXGGeVGe1uXZX/
cCdI0OxXc2XQiu2JJfQIEdIhLODp5Su2t1jPn0Z3ktWoau+n0yLR+1pkpL45kRhD
64yZIbV1OuL6c8lVUYYJj0KfYoMO5Nvc95bBBTMtTL1R94lA+YxS+rOKAide0mce
vfHevQv7TY9nGbrGhSylPKGbAw8/PgIm/9wDx3QHj66SOtDJzBydrMv5Y9Vyrf3i
tRKZ/S0/ZqWypHsAsjdcfBdngUKZkEOp/uxKJVH5KdpUAvhNVkNFY2OYEA9bxMyi
SI0Fug==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-ams.rpki-client.org