Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/e3fbab65f6b71664804a54e140b1328e84697b3b.roa
File:                     e3fbab65f6b71664804a54e140b1328e84697b3b.roa (raw, json)
Hash identifier:          VQo3en4MZvFhv/nqvBjtD5ppTO3iDw7KdrURYpF5og0=
Subject key identifier:   2C:A6:FB:7D:29:59:E1:1A:C1:42:80:1A:13:F6:B6:B6:CE:C1:9C:45
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       09F7DA
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/e3fbab65f6b71664804a54e140b1328e84697b3b.roa
Signing time:             Wed 24 Mar 2021 14:43:17 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        189.202.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653274 (0x9f7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=e3fbab65f6b71664804a54e140b1328e84697b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:39:76:3f:79:14:d3:d4:b2:8b:cd:c6:ce:
                    e6:23:5f:08:64:d2:cb:f6:ea:0e:7e:9f:69:3c:a9:
                    5c:ee:37:0f:f9:d9:23:ba:0c:48:79:1b:74:24:32:
                    88:f3:d1:f5:de:ad:dc:5b:81:2f:f4:0a:e6:22:00:
                    54:da:e5:7b:e0:aa:11:9d:0a:4f:38:c4:e3:bb:77:
                    1c:33:d1:d3:a8:89:2b:dc:3c:a3:d7:42:c8:ca:90:
                    fa:81:51:95:20:58:1a:b2:07:85:37:d3:13:ef:28:
                    fa:6a:dd:6e:35:11:47:ff:d0:1f:f0:6e:81:3f:72:
                    5c:a0:0e:af:98:29:83:62:89:cb:23:7e:bc:6b:bc:
                    43:89:44:5f:29:74:45:f5:2e:c5:ea:76:1e:82:8e:
                    03:dd:96:8a:62:a1:57:87:7f:2c:44:eb:44:9b:d1:
                    9e:8c:d3:dd:13:a3:2a:e8:ee:3e:37:bc:25:68:1d:
                    cf:05:a1:20:81:6a:2e:fd:04:b2:97:39:3a:b7:e6:
                    10:f3:a6:dd:37:31:32:38:60:f8:c8:b1:f8:81:e2:
                    3e:1f:cc:01:03:7a:09:76:af:83:7a:61:71:90:25:
                    6d:8d:d8:d9:a3:f0:c2:e8:31:7d:a4:6f:ab:50:04:
                    84:eb:7f:9c:28:ba:d0:3c:45:53:f8:6b:de:5c:0b:
                    36:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A6:FB:7D:29:59:E1:1A:C1:42:80:1A:13:F6:B6:B6:CE:C1:9C:45
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/e3fbab65f6b71664804a54e140b1328e84697b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c7:4f:5a:2c:a5:85:cd:64:15:0e:7a:26:76:a8:f0:1a:09:
         fc:9f:39:fb:b0:13:cc:8b:ee:97:c5:f4:af:11:3a:30:43:78:
         e5:3d:ac:32:85:3a:06:d7:07:3d:4c:c7:59:b1:14:b1:9d:a1:
         15:bb:bb:da:77:45:54:01:05:35:f3:cb:65:9b:42:c3:2d:e0:
         70:4c:ea:97:45:86:5d:dc:17:6c:51:05:b7:89:2a:ee:aa:39:
         13:d9:cf:38:30:9c:43:3a:9b:35:bb:06:b1:0e:12:99:82:fb:
         6f:73:b9:22:be:80:a9:f0:4d:02:ee:94:fb:18:13:6e:fb:20:
         44:85:69:bc:ed:2e:93:1c:62:97:4b:b2:ef:4d:31:c5:29:3f:
         13:29:ac:38:0b:b2:4a:f7:78:78:23:39:2e:09:47:52:de:50:
         a2:51:94:01:1a:e7:38:a0:67:33:b2:ad:c4:27:01:72:f3:ff:
         39:8e:1f:e5:03:3b:85:b0:fc:d1:cc:52:50:1c:46:b4:26:68:
         84:4c:8c:7c:2e:1f:a0:21:e2:a2:d0:8c:a4:ef:4f:d7:c6:a3:
         f7:36:75:60:4e:16:19:ec:2d:ab:2e:5c:4b:c8:30:3d:5e:4a:
         f3:36:ad:c0:74:64:ee:dd:d7:85:09:76:48:e8:14:c9:c6:87:
         4f:e8:46:89
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCffaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk3
ODNhYzliYWQyYjdiOTIyZjY0OGM5MGU4ODFiZjQ0OTc4MDY5YWQwHhcNMjEwMzI0
MTQ0MzE2WhcNMjYwMzI0MTQ0MzE2WjAzMTEwLwYDVQQDEyhlM2ZiYWI2NWY2Yjcx
NjY0ODA0YTU0ZTE0MGIxMzI4ZTg0Njk3YjNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkl05dj95FNPUsovNxs7mI18IZNLL9uoOfp9pPKlc7jcP+dkj
ugxIeRt0JDKI89H13q3cW4Ev9ArmIgBU2uV74KoRnQpPOMTju3ccM9HTqIkr3Dyj
10LIypD6gVGVIFgasgeFN9MT7yj6at1uNRFH/9Af8G6BP3JcoA6vmCmDYonLI368
a7xDiURfKXRF9S7F6nYego4D3ZaKYqFXh38sROtEm9GejNPdE6Mq6O4+N7wlaB3P
BaEggWou/QSylzk6t+YQ86bdNzEyOGD4yLH4geI+H8wBA3oJdq+DemFxkCVtjdjZ
o/DC6DF9pG+rUASE63+cKLrQPEVT+GveXAs24QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCym+30pWeEawUKAGhP2trbOwZxFMB8GA1UdIwQYMBaAFMqL6Qa6lrLFhJ+G
RkANLQxgDZdgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTc4M2Fj
OWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTBjNGI0YTAtNjQxNy00YTdjLTg3NTgtOWU2ZjRi
MGU5Njc5L2UzZmJhYjY1ZjZiNzE2NjQ4MDRhNTRlMTQwYjEzMjhlODQ2OTdiM2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMGM0YjRhMC02NDE3LTRhN2MtODc1OC05ZTZm
NGIwZTk2NzkvOTc4M2FjOWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL3KtTANBgkqhkiG9w0BAQsFAAOCAQEANsdPWiylhc1kFQ56
Jnao8BoJ/J85+7ATzIvul8X0rxE6MEN45T2sMoU6BtcHPUzHWbEUsZ2hFbu72ndF
VAEFNfPLZZtCwy3gcEzql0WGXdwXbFEFt4kq7qo5E9nPODCcQzqbNbsGsQ4SmYL7
b3O5Ir6AqfBNAu6U+xgTbvsgRIVpvO0ukxxil0uy700xxSk/EymsOAuySvd4eCM5
LglHUt5QolGUARrnOKBnM7KtxCcBcvP/OY4f5QM7hbD80cxSUBxGtCZohEyMfC4f
oCHiotCMpO9P18aj9zZ1YE4WGewtqy5cS8gwPV5K8zatwHRk7t3XhQl2SOgUycaH
T+hGiQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org