Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/06611f1ff400bf0717c0ffcfa9e636681b674f60.roa
File:                     06611f1ff400bf0717c0ffcfa9e636681b674f60.roa (raw, json)
Hash identifier:          Ks9mPG2i3bnW4LLs/Ob8vPIV1lYDRPlswxxWtkzE/is=
Subject key identifier:   79:11:CC:E0:D8:A9:A7:87:C1:66:2E:9C:16:2E:4F:5F:CC:8C:57:79
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       24B529
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/06611f1ff400bf0717c0ffcfa9e636681b674f60.roa
Signing time:             Sat 02 Dec 2023 07:30:00 +0000
ROA not before:           Sat 02 Dec 2023 07:30:00 +0000
ROA not after:            Mon 01 Dec 2025 07:30:00 +0000
asID:                     271835
IP address blocks:        201.218.157.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405673 (0x24b529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Dec  2 07:30:00 2023 GMT
            Not After : Dec  1 07:30:00 2025 GMT
        Subject: CN=06611f1ff400bf0717c0ffcfa9e636681b674f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:de:50:59:6e:1e:71:ae:5b:bf:12:c8:9a:
                    1e:01:80:02:98:00:00:b0:41:d9:8c:bf:3a:ee:b9:
                    5e:fe:76:29:a7:ad:f9:01:15:c9:3d:38:c5:b8:89:
                    14:dc:a5:a2:b9:91:4a:38:a8:63:b6:90:dc:a9:df:
                    2a:6b:c3:7e:67:be:3e:7e:09:97:c5:cc:49:af:f6:
                    f1:4f:40:72:5f:e7:8c:50:fa:82:b0:cb:e6:57:55:
                    d4:17:1c:ea:6d:ba:26:e0:b7:fa:dd:a9:2c:0d:8a:
                    17:f2:3d:d5:79:bc:fc:90:b4:2a:dc:2e:76:d0:36:
                    b3:4d:43:8c:5b:32:1f:c3:99:b8:75:15:10:13:91:
                    61:6f:4d:02:bb:56:26:14:38:35:85:cd:d3:a0:23:
                    da:98:c6:58:09:35:c3:23:14:ae:9a:ff:b0:6e:51:
                    ed:52:69:5b:9e:52:23:3f:97:c0:10:67:52:44:ba:
                    ba:e6:b8:40:f5:c2:4a:6f:20:ba:33:d8:c5:ab:ee:
                    75:b9:28:a5:7a:c2:e6:cb:74:59:a2:35:5e:29:cd:
                    16:20:5b:e7:00:b7:c6:2f:ff:0d:d9:ab:a8:c4:16:
                    82:c0:47:8f:5d:46:19:8f:c4:4a:2f:47:ac:49:38:
                    df:6f:e4:82:69:38:0b:55:36:e8:13:31:09:7f:67:
                    10:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:11:CC:E0:D8:A9:A7:87:C1:66:2E:9C:16:2E:4F:5F:CC:8C:57:79
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/06611f1ff400bf0717c0ffcfa9e636681b674f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:d6:84:1a:c3:8c:a8:75:38:8b:76:6a:69:b8:01:72:27:a9:
         05:39:a7:5a:31:1e:c2:4d:73:c3:75:55:2d:2b:65:ac:72:b1:
         e1:fa:e1:f5:7c:e9:41:d1:87:3b:6b:6f:08:02:d3:e9:fa:00:
         5e:b1:99:c5:24:52:de:22:77:4d:5e:31:f3:b0:2a:f7:24:8d:
         49:8c:0a:c2:60:35:27:d0:43:9b:8e:38:b2:c9:ad:9f:3d:ef:
         0d:72:7e:9b:7a:01:d2:e4:98:7c:4d:8f:a0:02:ef:6e:43:6e:
         fe:c1:c7:82:63:d6:d8:a5:89:72:eb:36:ff:52:3e:70:d3:ab:
         a1:06:3c:37:0b:5e:26:9e:8b:f8:39:89:f2:60:16:b7:42:8d:
         ef:ee:c8:e0:8d:61:e0:46:01:e4:c9:78:6e:70:a3:07:8c:97:
         ef:ca:18:15:c9:1a:c1:97:21:61:91:ca:7b:53:69:b4:37:8b:
         ee:36:80:a3:38:9b:20:55:6a:99:9d:fa:41:26:1f:15:92:b0:
         e9:b4:ca:a9:ca:83:a6:d4:e6:6b:04:3a:4d:fd:91:ff:47:a7:
         35:01:af:e6:11:c1:f3:64:93:2d:07:f2:92:d6:77:0b:f8:f9:
         d5:7e:91:c4:03:87:18:f5:7b:59:86:40:fa:47:3b:f7:f9:fe:
         10:cf:9a:6f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJLUpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
MzI2MjNiMzNlMDRmYWRjMWFmODBmY2NmNmQxMmFhYmJjZmJmYTUwHhcNMjMxMjAy
MDczMDAwWhcNMjUxMjAxMDczMDAwWjAzMTEwLwYDVQQDEygwNjYxMWYxZmY0MDBi
ZjA3MTdjMGZmY2ZhOWU2MzY2ODFiNjc0ZjYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv/neUFluHnGuW78SyJoeAYACmAAAsEHZjL867rle/nYpp635
ARXJPTjFuIkU3KWiuZFKOKhjtpDcqd8qa8N+Z74+fgmXxcxJr/bxT0ByX+eMUPqC
sMvmV1XUFxzqbbom4Lf63aksDYoX8j3Vebz8kLQq3C520DazTUOMWzIfw5m4dRUQ
E5Fhb00Cu1YmFDg1hc3ToCPamMZYCTXDIxSumv+wblHtUmlbnlIjP5fAEGdSRLq6
5rhA9cJKbyC6M9jFq+51uSilesLmy3RZojVeKc0WIFvnALfGL/8N2auoxBaCwEeP
XUYZj8RKL0esSTjfb+SCaTgLVTboEzEJf2cQCwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHkRzODYqaeHwWYunBYuT1/MjFd5MB8GA1UdIwQYMBaAFH49PYRaISZ7nH72
VKhTBe2GfukbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQzMjYy
M2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZhNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTc3ZDNkMzUtYmJlYy00Y2FkLWEwYzUtMDYwN2Ey
OWUxZjBmLzA2NjExZjFmZjQwMGJmMDcxN2MwZmZjZmE5ZTYzNjY4MWI2NzRmNjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NzdkM2QzNS1iYmVjLTRjYWQtYTBjNS0wNjA3
YTI5ZTFmMGYvNWQzMjYyM2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZh
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnanTANBgkqhkiG9w0BAQsFAAOCAQEAhNaEGsOMqHU4i3Zq
abgBciepBTmnWjEewk1zw3VVLStlrHKx4frh9XzpQdGHO2tvCALT6foAXrGZxSRS
3iJ3TV4x87Aq9ySNSYwKwmA1J9BDm444ssmtnz3vDXJ+m3oB0uSYfE2PoALvbkNu
/sHHgmPW2KWJcus2/1I+cNOroQY8NwteJp6L+DmJ8mAWt0KN7+7I4I1h4EYB5Ml4
bnCjB4yX78oYFckawZchYZHKe1NptDeL7jaAozibIFVqmZ36QSYfFZKw6bTKqcqD
ptTmawQ6Tf2R/0enNQGv5hHB82STLQfyktZ3C/j51X6RxAOHGPV7WYZA+kc79/n+
EM+abw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org