Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/7978dd66212022e44cf5b873c9e473ff3b85384f.roa
File:                     7978dd66212022e44cf5b873c9e473ff3b85384f.roa (raw, json)
Hash identifier:          w66DAcy9E+IS9THuGMTp3+oJT6mqfi5mVoRG8GDiMaE=
Subject key identifier:   80:B5:CB:78:45:C4:89:8B:98:46:5B:46:21:F7:D4:13:BC:67:0A:72
Certificate issuer:       /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial:       012A65
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/7978dd66212022e44cf5b873c9e473ff3b85384f.roa
Signing time:             Wed 02 Nov 2022 13:11:03 +0000
ROA not before:           Tue 01 Nov 2022 13:08:48 +0000
ROA not after:            Sat 02 Nov 2024 13:08:48 +0000
asID:                     8163
IP address blocks:        181.192.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76389 (0x12a65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
        Validity
            Not Before: Nov  1 13:08:48 2022 GMT
            Not After : Nov  2 13:08:48 2024 GMT
        Subject: CN=7978dd66212022e44cf5b873c9e473ff3b85384f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dc:10:64:a2:40:42:77:5d:68:39:82:d8:22:
                    f5:4c:25:ea:3f:0d:65:f8:59:a1:a0:9f:64:ed:e5:
                    d2:92:ec:b2:12:fe:e0:35:c7:60:ef:07:6a:94:7e:
                    46:fa:ed:80:b6:81:6a:b5:5c:b2:bc:2b:9e:e8:6d:
                    2a:f1:fd:c2:5e:ea:00:42:ec:2b:bc:71:5f:7a:5a:
                    05:d9:9d:71:f3:db:5a:76:26:73:b8:10:3a:3e:e1:
                    e5:93:a0:94:cb:a5:eb:12:f1:3a:48:90:f7:14:4b:
                    f9:5d:ba:bc:d4:32:a0:6b:f7:b9:0e:d9:7c:21:c0:
                    cf:d3:20:c0:db:f1:bb:ef:45:67:69:f5:84:cc:c7:
                    e7:d5:37:c4:5e:35:25:85:2d:80:16:af:ac:27:28:
                    0a:8a:b6:14:01:07:75:ca:c2:89:20:e8:c0:63:6d:
                    48:cd:f8:15:58:13:7b:71:56:78:2d:a0:50:7c:fe:
                    15:88:c2:cf:41:3b:6a:7e:62:5b:74:48:cd:17:63:
                    82:ec:d6:83:2d:fe:bf:1f:86:83:52:1c:25:96:67:
                    bb:c5:05:0c:aa:04:88:70:3b:ea:ed:6e:21:e7:68:
                    b9:c7:86:8f:c6:23:c0:0e:0f:c8:e8:67:e7:00:74:
                    e7:f6:e9:1a:21:dd:67:f3:cf:c2:6d:78:94:ae:30:
                    4c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B5:CB:78:45:C4:89:8B:98:46:5B:46:21:F7:D4:13:BC:67:0A:72
            X509v3 Authority Key Identifier:
                keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/7978dd66212022e44cf5b873c9e473ff3b85384f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         89:9a:1f:4d:aa:31:99:46:34:46:f7:1e:37:cb:48:ca:05:7e:
         54:03:55:62:6e:04:ef:d9:90:c0:90:e7:28:cf:3f:bb:55:88:
         ab:cd:54:47:24:26:39:19:6f:74:bd:dc:36:14:47:6b:67:ec:
         a7:19:db:f3:64:8b:40:0c:a4:3f:50:0b:e2:f2:0a:3e:85:44:
         e2:04:78:1c:07:10:cf:a0:09:8c:00:97:91:ab:27:45:fd:6f:
         9c:52:53:b8:f3:48:17:8d:8f:1a:13:e5:bb:bc:4f:41:21:3a:
         09:92:2f:36:2c:dc:9f:26:69:83:7b:93:12:2b:ca:26:b5:31:
         70:42:9a:e4:39:fc:08:53:11:a5:59:31:7b:89:c0:1a:a0:e6:
         11:15:5d:5a:e8:df:82:43:c4:f0:57:04:30:87:d4:7b:42:1a:
         63:44:89:8c:30:99:50:8e:08:6c:f3:43:87:46:fd:ec:62:be:
         43:e3:25:15:b7:0d:39:ab:54:28:c6:f1:0b:9c:6f:75:24:67:
         21:5e:e8:92:3a:08:24:ea:b0:14:ab:29:b5:ea:61:6c:fa:31:
         5a:4d:2f:8b:ca:c5:0d:e6:b2:77:66:d1:c8:b9:51:da:99:82:
         8b:45:92:20:e5:9e:34:8a:03:99:c0:17:28:57:8b:be:ed:74:
         75:76:e4:45
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDASplMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIw
Y2ZkMzZhNTU2ZTFhNDZjMThkZTUzZDNmYTgxYjBlMWU5NzBmMjMwHhcNMjIxMTAx
MTMwODQ4WhcNMjQxMTAyMTMwODQ4WjAzMTEwLwYDVQQDEyg3OTc4ZGQ2NjIxMjAy
MmU0NGNmNWI4NzNjOWU0NzNmZjNiODUzODRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl9wQZKJAQnddaDmC2CL1TCXqPw1l+FmhoJ9k7eXSkuyyEv7g
Ncdg7wdqlH5G+u2AtoFqtVyyvCue6G0q8f3CXuoAQuwrvHFfeloF2Z1x89tadiZz
uBA6PuHlk6CUy6XrEvE6SJD3FEv5Xbq81DKga/e5Dtl8IcDP0yDA2/G770VnafWE
zMfn1TfEXjUlhS2AFq+sJygKirYUAQd1ysKJIOjAY21IzfgVWBN7cVZ4LaBQfP4V
iMLPQTtqfmJbdEjNF2OC7NaDLf6/H4aDUhwllme7xQUMqgSIcDvq7W4h52i5x4aP
xiPADg/I6GfnAHTn9ukaId1n88/CbXiUrjBMHwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIC1y3hFxImLmEZbRiH31BO8ZwpyMB8GA1UdIwQYMBaAFNZ2VHhR6W89h/rv
pAXq1KS3DYkAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjBjZmQz
NmE1NTZlMWE0NmMxOGRlNTNkM2ZhODFiMGUxZTk3MGYyMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTU4YjMxZWMtMzEzMy00MjNkLThhZGItMzgxMzZi
M2M5ZjUxLzc5NzhkZDY2MjEyMDIyZTQ0Y2Y1Yjg3M2M5ZTQ3M2ZmM2I4NTM4NGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NThiMzFlYy0zMTMzLTQyM2QtOGFkYi0zODEz
NmIzYzlmNTEvMjBjZmQzNmE1NTZlMWE0NmMxOGRlNTNkM2ZhODFiMGUxZTk3MGYy
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEB7XAgDANBgkqhkiG9w0BAQsFAAOCAQEAiZofTaoxmUY0Rvce
N8tIygV+VANVYm4E79mQwJDnKM8/u1WIq81URyQmORlvdL3cNhRHa2fspxnb82SL
QAykP1AL4vIKPoVE4gR4HAcQz6AJjACXkasnRf1vnFJTuPNIF42PGhPlu7xPQSE6
CZIvNizcnyZpg3uTEivKJrUxcEKa5Dn8CFMRpVkxe4nAGqDmERVdWujfgkPE8FcE
MIfUe0IaY0SJjDCZUI4IbPNDh0b97GK+Q+MlFbcNOatUKMbxC5xvdSRnIV7okjoI
JOqwFKsptephbPoxWk0vi8rFDeayd2bRyLlR2pmCi0WSIOWeNIoDmcAXKFeLvu10
dXbkRQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org