Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/2e7b3276f66cb71f53b71dd40074e5882a7e1c87.roa
File:                     2e7b3276f66cb71f53b71dd40074e5882a7e1c87.roa (raw, json)
Hash identifier:          U/L0xHvG7ENDCcQ905YZLEvtTVbXEgtfpG5tuS0F7Kw=
Subject key identifier:   02:97:97:C7:F2:6D:3C:68:24:36:09:86:82:85:A3:20:C6:FF:8E:71
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       10A632
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/2e7b3276f66cb71f53b71dd40074e5882a7e1c87.roa
Signing time:             Wed 20 Oct 2021 21:37:41 +0000
ROA not before:           Wed 20 Oct 2021 03:00:00 +0000
ROA not after:            Thu 20 Oct 2022 03:00:00 +0000
asID:                     269862
IP address blocks:        201.218.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091122 (0x10a632)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Oct 20 03:00:00 2021 GMT
            Not After : Oct 20 03:00:00 2022 GMT
        Subject: CN=2e7b3276f66cb71f53b71dd40074e5882a7e1c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8f:b9:6a:b2:d4:aa:9e:02:72:4c:11:31:cc:
                    4c:9b:66:d9:7d:0a:8d:3f:d2:f7:08:5e:ca:92:34:
                    74:ae:2e:03:79:d4:11:84:b1:d7:5a:62:60:38:b9:
                    0c:f8:61:10:cf:a5:2d:d0:f5:5a:0f:10:ff:08:7e:
                    56:18:cc:9f:7c:95:a0:9b:7e:0a:ea:0c:d4:f5:74:
                    62:27:22:a5:8d:4b:96:82:b6:2d:80:60:0e:26:85:
                    2e:d8:42:82:40:a2:9b:6c:5a:66:01:33:63:3e:36:
                    53:50:10:e5:b2:6c:51:c8:88:3b:74:25:2e:74:99:
                    59:e4:69:0b:8c:62:eb:5d:82:51:3a:1d:9e:13:4a:
                    de:45:63:18:89:78:c7:a9:0c:d6:40:f1:15:b5:bc:
                    6a:83:4c:c3:71:0f:ec:79:7d:03:17:a2:68:35:a5:
                    f3:7f:59:b9:51:eb:19:1c:8d:bd:50:49:14:68:5a:
                    96:e3:42:09:47:66:b0:b0:a3:67:e2:5d:dc:61:8a:
                    74:40:7f:42:9e:c0:eb:ba:33:af:41:b6:2c:23:32:
                    bf:ad:a5:f2:54:6f:92:13:83:76:94:4d:bd:e0:88:
                    39:95:ce:fa:fb:1c:19:02:f0:4e:17:50:70:4e:08:
                    a3:6d:ae:cf:29:a8:4c:76:f3:78:4d:56:79:3b:e1:
                    30:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:97:C7:F2:6D:3C:68:24:36:09:86:82:85:A3:20:C6:FF:8E:71
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/2e7b3276f66cb71f53b71dd40074e5882a7e1c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:95:9c:81:5e:e3:f9:9c:30:c9:dc:07:84:a0:9d:1a:5d:60:
         b5:68:47:72:33:36:93:db:de:d7:6a:56:99:b8:82:3c:60:75:
         1b:12:0b:16:07:83:ec:9f:0a:09:4b:42:06:5f:62:bb:2c:12:
         c4:02:c9:aa:ae:82:9a:62:cf:96:0b:cd:fc:94:89:aa:b4:3a:
         c7:6d:91:10:06:15:00:5d:c9:04:63:36:60:3b:ce:5e:dd:51:
         b5:3e:d8:64:69:6f:82:f4:48:cb:e6:6d:dc:7e:d0:33:43:6f:
         16:40:73:aa:01:5c:2e:fc:7c:e2:87:09:75:99:13:d4:9e:b6:
         d4:b5:7c:32:2c:64:8b:13:c5:07:a0:d6:15:d0:74:64:e8:94:
         e7:78:ea:b0:0f:0c:48:ac:fc:d9:4a:1d:a0:44:c8:1f:53:56:
         d1:bc:8b:48:27:3d:1b:c1:a7:a6:0a:b2:84:e0:b4:ae:b7:50:
         b3:2a:f3:93:cd:16:60:07:8b:28:28:df:ba:c3:b1:3a:27:25:
         d2:6d:be:4d:fd:60:04:96:8e:e8:09:96:cd:01:76:89:ec:be:
         03:13:73:83:fc:d6:92:0a:75:b3:ce:07:1e:f3:40:89:2f:0a:
         5c:5a:87:63:ad:49:40:c1:c3:d8:b4:d8:ef:58:80:6e:5e:fd:
         4c:f3:d5:27
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEKYyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
MzI2MjNiMzNlMDRmYWRjMWFmODBmY2NmNmQxMmFhYmJjZmJmYTUwHhcNMjExMDIw
MDMwMDAwWhcNMjIxMDIwMDMwMDAwWjAzMTEwLwYDVQQDEygyZTdiMzI3NmY2NmNi
NzFmNTNiNzFkZDQwMDc0ZTU4ODJhN2UxYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhY+5arLUqp4CckwRMcxMm2bZfQqNP9L3CF7KkjR0ri4DedQR
hLHXWmJgOLkM+GEQz6Ut0PVaDxD/CH5WGMyffJWgm34K6gzU9XRiJyKljUuWgrYt
gGAOJoUu2EKCQKKbbFpmATNjPjZTUBDlsmxRyIg7dCUudJlZ5GkLjGLrXYJROh2e
E0reRWMYiXjHqQzWQPEVtbxqg0zDcQ/seX0DF6JoNaXzf1m5UesZHI29UEkUaFqW
40IJR2awsKNn4l3cYYp0QH9CnsDrujOvQbYsIzK/raXyVG+SE4N2lE294Ig5lc76
+xwZAvBOF1BwTgijba7PKahMdvN4TVZ5O+Ew1wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAKXl8fybTxoJDYJhoKFoyDG/45xMB8GA1UdIwQYMBaAFH49PYRaISZ7nH72
VKhTBe2GfukbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQzMjYy
M2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZhNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTc3ZDNkMzUtYmJlYy00Y2FkLWEwYzUtMDYwN2Ey
OWUxZjBmLzJlN2IzMjc2ZjY2Y2I3MWY1M2I3MWRkNDAwNzRlNTg4MmE3ZTFjODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NzdkM2QzNS1iYmVjLTRjYWQtYTBjNS0wNjA3
YTI5ZTFmMGYvNWQzMjYyM2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZh
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnanjANBgkqhkiG9w0BAQsFAAOCAQEAk5WcgV7j+ZwwydwH
hKCdGl1gtWhHcjM2k9ve12pWmbiCPGB1GxILFgeD7J8KCUtCBl9iuywSxALJqq6C
mmLPlgvN/JSJqrQ6x22REAYVAF3JBGM2YDvOXt1RtT7YZGlvgvRIy+Zt3H7QM0Nv
FkBzqgFcLvx84ocJdZkT1J621LV8MixkixPFB6DWFdB0ZOiU53jqsA8MSKz82Uod
oETIH1NW0byLSCc9G8GnpgqyhOC0rrdQsyrzk80WYAeLKCjfusOxOicl0m2+Tf1g
BJaO6AmWzQF2iey+AxNzg/zWkgp1s84HHvNAiS8KXFqHY61JQMHD2LTY71iAbl79
TPPVJw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org