Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/99228f66ea85bcd3d32c69e0f161378aa57ef0fb.roa
File:                     99228f66ea85bcd3d32c69e0f161378aa57ef0fb.roa (raw, json)
Hash identifier:          aXeRhzj1GJXsaoIHf4lMGaYwHC3h01AAI6svdvaMkeU=
Subject key identifier:   D9:8D:99:5D:A2:DD:6A:46:9D:1D:DA:85:17:A1:7B:4C:65:E4:07:31
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       103FFA
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/99228f66ea85bcd3d32c69e0f161378aa57ef0fb.roa
Signing time:             Wed 24 Mar 2021 14:44:15 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.247.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064954 (0x103ffa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=99228f66ea85bcd3d32c69e0f161378aa57ef0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:63:04:66:d5:39:36:75:a2:b4:36:fb:79:
                    29:32:1b:42:7b:c3:b1:6c:0e:82:60:58:5a:c6:ab:
                    c0:96:7f:d4:58:08:99:45:d6:28:af:3a:65:1f:14:
                    1e:49:f6:65:54:f9:8f:4f:a1:6f:97:ad:69:cf:19:
                    82:3a:a7:22:42:88:7c:d7:b6:cd:18:14:e8:11:3e:
                    b1:da:b4:02:9f:9c:da:02:77:f0:ac:33:1e:3f:fd:
                    25:1e:16:cf:d4:1a:ab:a1:d6:49:fc:0a:d1:48:17:
                    fa:10:b4:5e:8d:3b:b1:0b:63:35:d8:fe:7d:38:a1:
                    3e:9d:60:09:f9:5e:60:a6:a1:7a:ba:ac:7a:c9:80:
                    a4:d8:b2:ed:29:8e:e2:15:bf:ea:20:f3:1d:4a:8f:
                    6f:7b:c9:73:36:b0:c5:e0:4f:ca:f4:3a:45:f6:b8:
                    1b:86:91:73:c2:c2:44:a9:9b:ec:d6:29:27:25:91:
                    5e:df:4b:45:70:25:f2:35:98:9d:41:2b:fb:2e:f6:
                    00:0c:08:dc:76:97:29:8e:cc:4c:fe:7b:fe:e2:83:
                    e4:95:75:24:29:09:d9:ba:b5:ef:ef:bc:5e:2e:09:
                    7d:85:b1:81:06:22:43:57:4c:07:79:d4:ec:ba:f1:
                    91:a3:a4:53:c0:9b:22:ef:6a:a3:7a:b6:b4:3c:56:
                    8f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8D:99:5D:A2:DD:6A:46:9D:1D:DA:85:17:A1:7B:4C:65:E4:07:31
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/99228f66ea85bcd3d32c69e0f161378aa57ef0fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.247.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:ec:43:11:25:ce:85:5f:e9:56:94:67:a3:65:df:50:45:50:
         70:d3:ab:a5:dd:97:06:74:f5:87:56:71:2a:65:81:69:4f:19:
         c1:60:33:1e:0f:10:38:a7:ac:e9:6a:82:a6:d2:b9:34:99:ef:
         04:37:76:96:95:6d:ae:8d:db:38:7d:d2:c5:85:e3:0d:6f:bb:
         65:11:6a:8a:cb:5d:1f:74:26:87:3f:de:41:e9:eb:ca:8d:3f:
         a4:e5:19:63:b0:c4:40:6e:ee:a5:62:e7:53:c9:3e:7f:cf:f3:
         43:ed:25:6a:9a:f4:69:a1:17:1f:e2:43:58:94:08:2a:be:14:
         56:ad:f6:c7:44:9c:ac:84:42:da:36:d3:5a:c9:c1:27:97:f1:
         01:21:28:b1:0c:5f:d5:87:a8:1a:51:f7:4c:f1:b8:9e:70:33:
         68:96:05:33:cf:9e:80:09:ce:0c:33:5a:bd:9a:20:b6:55:47:
         f6:df:86:5d:05:9e:9d:10:73:2a:10:76:55:6c:70:34:f7:e2:
         75:45:0d:2e:49:53:b4:5a:50:83:49:d0:20:1a:d2:06:18:70:
         fc:17:12:c5:1e:57:72:c5:23:ab:28:c3:21:8d:28:fc:55:1b:
         9e:44:a2:65:c8:0c:e2:4b:2b:5f:6e:12:0f:f8:73:c7:62:ab:
         8e:76:7b:d2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDED/6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyg5OTIyOGY2NmVhODVi
Y2QzZDMyYzY5ZTBmMTYxMzc4YWE1N2VmMGZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAraxjBGbVOTZ1orQ2+3kpMhtCe8OxbA6CYFhaxqvAln/UWAiZ
RdYorzplHxQeSfZlVPmPT6Fvl61pzxmCOqciQoh817bNGBToET6x2rQCn5zaAnfw
rDMeP/0lHhbP1BqrodZJ/ArRSBf6ELRejTuxC2M12P59OKE+nWAJ+V5gpqF6uqx6
yYCk2LLtKY7iFb/qIPMdSo9ve8lzNrDF4E/K9DpF9rgbhpFzwsJEqZvs1iknJZFe
30tFcCXyNZidQSv7LvYADAjcdpcpjsxM/nv+4oPklXUkKQnZurXv77xeLgl9hbGB
BiJDV0wHedTsuvGRo6RTwJsi72qjera0PFaP+wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNmNmV2i3WpGnR3ahRehe0xl5AcxMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4Lzk5MjI4ZjY2ZWE4NWJjZDNkMzJjNjllMGYxNjEzNzhhYTU3ZWYwZmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT34DANBgkqhkiG9w0BAQsFAAOCAQEAEexDESXOhV/pVpRn
o2XfUEVQcNOrpd2XBnT1h1ZxKmWBaU8ZwWAzHg8QOKes6WqCptK5NJnvBDd2lpVt
ro3bOH3SxYXjDW+7ZRFqistdH3Qmhz/eQenryo0/pOUZY7DEQG7upWLnU8k+f8/z
Q+0lapr0aaEXH+JDWJQIKr4UVq32x0ScrIRC2jbTWsnBJ5fxASEosQxf1YeoGlH3
TPG4nnAzaJYFM8+egAnODDNavZogtlVH9t+GXQWenRBzKhB2VWxwNPfidUUNLklT
tFpQg0nQIBrSBhhw/BcSxR5XcsUjqyjDIY0o/FUbnkSiZcgM4ksrX24SD/hzx2Kr
jnZ70g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org