Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/5f9b91b1adc0fa94a0f0af3499fa4cc142e748fb.roa
File:                     5f9b91b1adc0fa94a0f0af3499fa4cc142e748fb.roa (raw, json)
Hash identifier:          4XDuQXX1NBBpEoohqX2xV/vxsldmnsGIf1eg6reoyRM=
Subject key identifier:   AC:3D:1F:39:4F:14:4C:5D:25:E4:E8:03:E9:B9:38:9C:D4:7D:1C:28
Certificate issuer:       /CN=75ca6b0d77865de43b29133289fdba29f69c958f
Certificate serial:       201FD3
Authority key identifier: 23:CA:1E:E1:CF:08:73:D1:D0:CB:1C:C0:0A:04:65:2C:86:97:49:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ca6b0d77865de43b29133289fdba29f69c958f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/5f9b91b1adc0fa94a0f0af3499fa4cc142e748fb.roa
Signing time:             Wed 05 Apr 2023 15:49:53 +0000
ROA not before:           Mon 03 Apr 2023 15:37:40 +0000
ROA not after:            Sat 05 Apr 2025 15:37:40 +0000
asID:                     264831
IP address blocks:        181.114.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2105299 (0x201fd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ca6b0d77865de43b29133289fdba29f69c958f
        Validity
            Not Before: Apr  3 15:37:40 2023 GMT
            Not After : Apr  5 15:37:40 2025 GMT
        Subject: CN=5f9b91b1adc0fa94a0f0af3499fa4cc142e748fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:6a:11:19:e3:b3:65:4a:48:ae:3f:7a:73:
                    bb:ec:13:25:9a:d0:c7:82:3d:2b:17:7a:dd:2a:00:
                    4b:26:df:ea:ca:17:78:38:95:82:01:19:a6:1b:5a:
                    22:74:d5:86:d5:72:66:52:ea:60:93:97:10:bb:85:
                    4b:55:4a:5a:39:d0:8a:4a:51:52:79:4b:b9:a7:10:
                    43:a3:b6:5a:3e:47:e3:18:77:5d:0a:f0:87:cb:c6:
                    a6:f1:1b:75:6f:e6:ec:b5:7e:eb:b8:84:f8:e1:ec:
                    0f:00:27:5a:5e:ae:c3:62:1e:72:4b:a2:7d:61:7b:
                    ec:7b:34:99:a8:ed:41:81:d0:62:c9:32:33:10:c2:
                    d9:90:b1:9e:a7:33:5f:c9:1b:e5:ed:c1:fc:6f:41:
                    1c:c1:82:40:1e:b8:19:1b:d0:7e:a6:f9:39:66:10:
                    14:0a:c7:c8:9c:c6:95:aa:6d:b0:b0:33:35:00:94:
                    cc:b3:cd:7c:9a:2b:9b:a9:b6:1a:a9:e9:e4:db:ac:
                    b1:82:fa:cb:46:a1:36:f1:21:b6:6d:be:34:20:2e:
                    fe:99:d4:93:67:99:56:ba:5c:69:e1:7e:ae:66:4b:
                    52:85:8f:bc:da:aa:71:66:d6:da:ac:3b:5c:27:6f:
                    98:6b:42:1c:30:91:02:d6:69:51:4d:57:31:aa:83:
                    c4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3D:1F:39:4F:14:4C:5D:25:E4:E8:03:E9:B9:38:9C:D4:7D:1C:28
            X509v3 Authority Key Identifier:
                keyid:23:CA:1E:E1:CF:08:73:D1:D0:CB:1C:C0:0A:04:65:2C:86:97:49:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ca6b0d77865de43b29133289fdba29f69c958f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/5f9b91b1adc0fa94a0f0af3499fa4cc142e748fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98779f99-e2a8-4f8e-ab86-6f6c9c2a79c8/75ca6b0d77865de43b29133289fdba29f69c958f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:ce:77:0d:f7:5d:64:7e:0b:22:54:e9:73:1a:6c:d3:21:2e:
         a5:ad:07:ab:30:29:0c:a7:3e:08:e2:aa:e0:3a:85:56:61:33:
         5c:ee:72:c5:9a:ef:d4:a7:0b:52:4a:e8:06:c0:4c:df:f2:0e:
         93:06:54:5a:ff:bb:d4:bc:db:08:18:d3:ad:33:7b:71:2f:91:
         9f:6f:b7:a6:ca:14:5d:f5:8a:70:6d:91:3e:06:96:81:c4:be:
         4b:fd:ae:10:e9:c8:10:f0:ce:25:87:f2:48:94:cd:18:a8:53:
         ee:f0:77:e7:a7:60:a2:62:e7:0d:0e:92:f7:af:54:5f:a6:87:
         e2:70:bb:a7:c9:75:da:d1:57:38:54:26:95:c5:44:5c:da:11:
         01:1a:67:bc:ec:58:2a:76:51:ce:98:8a:fd:6d:6f:85:8e:2a:
         58:4d:27:6a:4a:1e:0c:51:7e:96:8e:20:f3:99:0c:58:b5:78:
         ba:12:f9:6d:0c:97:e0:50:83:0f:e0:fe:26:a7:34:10:57:16:
         e4:56:b7:59:73:e8:fc:f3:44:59:01:eb:eb:5d:e6:e4:d0:14:
         8c:f4:62:b1:6b:be:d7:a6:ab:ca:7a:33:6a:4f:6a:11:0d:14:
         a9:62:c0:bd:6a:f1:3a:25:c6:ca:52:8c:97:38:27:64:8b:a7:
         62:a8:64:a4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIB/TMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc1
Y2E2YjBkNzc4NjVkZTQzYjI5MTMzMjg5ZmRiYTI5ZjY5Yzk1OGYwHhcNMjMwNDAz
MTUzNzQwWhcNMjUwNDA1MTUzNzQwWjAzMTEwLwYDVQQDEyg1ZjliOTFiMWFkYzBm
YTk0YTBmMGFmMzQ5OWZhNGNjMTQyZTc0OGZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnLNqERnjs2VKSK4/enO77BMlmtDHgj0rF3rdKgBLJt/qyhd4
OJWCARmmG1oidNWG1XJmUupgk5cQu4VLVUpaOdCKSlFSeUu5pxBDo7ZaPkfjGHdd
CvCHy8am8Rt1b+bstX7ruIT44ewPACdaXq7DYh5yS6J9YXvsezSZqO1BgdBiyTIz
EMLZkLGepzNfyRvl7cH8b0EcwYJAHrgZG9B+pvk5ZhAUCsfInMaVqm2wsDM1AJTM
s818miubqbYaqenk26yxgvrLRqE28SG2bb40IC7+mdSTZ5lWulxp4X6uZktShY+8
2qpxZtbarDtcJ2+Ya0IcMJEC1mlRTVcxqoPE4QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKw9HzlPFExdJeToA+m5OJzUfRwoMB8GA1UdIwQYMBaAFCPKHuHPCHPR0Msc
wAoEZSyGl0l9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzVjYTZi
MGQ3Nzg2NWRlNDNiMjkxMzMyODlmZGJhMjlmNjljOTU4Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTg3NzlmOTktZTJhOC00ZjhlLWFiODYtNmY2Yzlj
MmE3OWM4LzVmOWI5MWIxYWRjMGZhOTRhMGYwYWYzNDk5ZmE0Y2MxNDJlNzQ4ZmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85ODc3OWY5OS1lMmE4LTRmOGUtYWI4Ni02ZjZj
OWMyYTc5YzgvNzVjYTZiMGQ3Nzg2NWRlNDNiMjkxMzMyODlmZGJhMjlmNjljOTU4
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALVyPzANBgkqhkiG9w0BAQsFAAOCAQEAp853DfddZH4LIlTp
cxps0yEupa0HqzApDKc+COKq4DqFVmEzXO5yxZrv1KcLUkroBsBM3/IOkwZUWv+7
1LzbCBjTrTN7cS+Rn2+3psoUXfWKcG2RPgaWgcS+S/2uEOnIEPDOJYfySJTNGKhT
7vB356dgomLnDQ6S969UX6aH4nC7p8l12tFXOFQmlcVEXNoRARpnvOxYKnZRzpiK
/W1vhY4qWE0nakoeDFF+lo4g85kMWLV4uhL5bQyX4FCDD+D+Jqc0EFcW5Fa3WXPo
/PNEWQHr613m5NAUjPRisWu+16arynozak9qEQ0UqWLAvWrxOiXGylKMlzgnZIun
YqhkpA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org