Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/843242c9d8a1245ca4cfbee8891bce5b9c175043.roa
File:                     843242c9d8a1245ca4cfbee8891bce5b9c175043.roa (raw, json)
Hash identifier:          TM+3JIgqvCxURmsNHa1lEYWHNdqjFxfy2Qb3ysXssU8=
Subject key identifier:   92:A0:0F:88:3F:DD:F8:34:BE:E1:ED:EA:D7:6D:7D:5D:F0:DD:FD:03
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       11FAE4
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/843242c9d8a1245ca4cfbee8891bce5b9c175043.roa
Signing time:             Sun 19 Sep 2021 18:29:41 +0000
ROA not before:           Sun 19 Sep 2021 03:00:00 +0000
ROA not after:            Tue 19 Sep 2023 03:00:00 +0000
asID:                     52468
IP address blocks:        177.234.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178340 (0x11fae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Sep 19 03:00:00 2021 GMT
            Not After : Sep 19 03:00:00 2023 GMT
        Subject: CN=843242c9d8a1245ca4cfbee8891bce5b9c175043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:7c:d0:cb:76:4f:13:bf:37:9a:b2:35:b5:
                    7c:b2:87:c7:0f:5b:aa:b4:3d:8a:81:51:f0:c7:93:
                    ab:48:24:b0:05:53:ea:4a:42:2e:20:f6:4b:7d:c2:
                    04:08:56:83:7a:13:6c:59:3d:4e:58:79:25:6b:92:
                    06:3d:be:04:d2:44:20:27:35:92:b1:25:1f:db:37:
                    8f:38:9a:32:53:03:db:b0:79:99:34:95:0a:80:8f:
                    c5:34:6d:b4:9e:8b:6f:07:be:75:65:62:6c:b4:8e:
                    06:3b:9c:67:11:92:42:3f:c1:0a:08:bd:56:8d:21:
                    13:3b:bc:b0:49:f9:92:d2:63:fb:6f:2b:3e:19:21:
                    47:f6:71:15:13:0e:7c:d1:89:23:a3:1a:54:f4:23:
                    2d:af:48:76:44:ac:36:6c:f8:98:0f:13:a9:e7:ec:
                    a0:ab:69:16:ab:90:e7:3d:ed:b4:35:20:af:16:1c:
                    27:ff:86:21:01:b0:a7:7e:80:fb:76:9d:50:b3:11:
                    96:30:ba:fc:e6:e6:8a:8c:0a:e8:b2:7d:e9:33:fe:
                    e5:e9:78:56:5f:72:32:9a:b9:cb:46:b1:d6:38:90:
                    24:7a:bd:45:f6:9b:36:45:80:e6:27:44:8e:00:52:
                    fe:b7:2c:76:13:f0:db:4a:3c:f0:73:a9:19:50:3e:
                    64:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A0:0F:88:3F:DD:F8:34:BE:E1:ED:EA:D7:6D:7D:5D:F0:DD:FD:03
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/843242c9d8a1245ca4cfbee8891bce5b9c175043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:3c:8e:28:ea:40:d4:27:88:9d:13:75:8a:90:d6:71:8c:5e:
         48:5f:92:05:cc:d6:81:e8:3e:fa:aa:64:da:ce:be:b0:fe:16:
         72:6c:7f:c0:fe:1b:9a:99:d8:d6:dd:a0:53:23:08:fb:f8:39:
         7d:6d:9a:4e:03:6e:86:b1:c4:89:83:1d:58:f1:24:b1:c3:90:
         ac:3a:24:68:36:8c:e9:ca:2f:0c:a3:93:79:9b:25:64:74:2d:
         bf:9c:14:bc:e2:5c:1c:ff:98:9e:3b:53:6e:37:c7:14:4f:8a:
         71:93:15:a6:2f:3e:e7:f7:50:4d:b2:9a:96:be:15:24:69:60:
         c6:57:43:c9:7f:77:6a:bb:b9:bf:ac:59:99:e3:1a:e1:13:ca:
         1e:6a:dd:ba:ba:88:d3:8b:2e:44:9b:b0:88:b6:62:67:8b:b5:
         a2:0d:02:29:2e:45:df:6c:a4:0e:16:05:81:c8:48:96:1e:5e:
         ca:3c:92:4a:c4:28:b5:f0:f1:5f:94:a8:1f:34:2c:b4:61:d6:
         01:66:1b:4b:a5:2a:a1:48:61:59:64:22:a9:b5:b8:df:87:f2:
         76:2c:6b:52:76:40:43:b6:94:1b:da:da:b2:72:9e:b5:d2:ff:
         b6:70:48:c6:48:22:0f:dd:e7:c7:65:6b:9b:89:28:05:c0:e1:
         cc:bf:96:bd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEfrkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
M2Q2MDAyMjc2ZTIyOTUyMDBjODVhNjYxMjljNDJlNGQ0ODNjMzQwHhcNMjEwOTE5
MDMwMDAwWhcNMjMwOTE5MDMwMDAwWjAzMTEwLwYDVQQDEyg4NDMyNDJjOWQ4YTEy
NDVjYTRjZmJlZTg4OTFiY2U1YjljMTc1MDQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyvJ80Mt2TxO/N5qyNbV8sofHD1uqtD2KgVHwx5OrSCSwBVPq
SkIuIPZLfcIECFaDehNsWT1OWHkla5IGPb4E0kQgJzWSsSUf2zePOJoyUwPbsHmZ
NJUKgI/FNG20notvB751ZWJstI4GO5xnEZJCP8EKCL1WjSETO7ywSfmS0mP7bys+
GSFH9nEVEw580YkjoxpU9CMtr0h2RKw2bPiYDxOp5+ygq2kWq5DnPe20NSCvFhwn
/4YhAbCnfoD7dp1QsxGWMLr85uaKjArosn3pM/7l6XhWX3IymrnLRrHWOJAker1F
9ps2RYDmJ0SOAFL+tyx2E/DbSjzwc6kZUD5kxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJKgD4g/3fg0vuHt6tdtfV3w3f0DMB8GA1UdIwQYMBaAFDAh+wtyXfK860HI
D7qAy4I4YPkKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWIzZDYw
MDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2MzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTI2M2RjNTctZTExYy00NjA4LTlhZjItYmRmYjE2
ZTIxNmRjLzg0MzI0MmM5ZDhhMTI0NWNhNGNmYmVlODg5MWJjZTViOWMxNzUwNDMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMjYzZGM1Ny1lMTFjLTQ2MDgtOWFmMi1iZGZi
MTZlMjE2ZGMvOWIzZDYwMDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2Mz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALHq1jANBgkqhkiG9w0BAQsFAAOCAQEAMDyOKOpA1CeInRN1
ipDWcYxeSF+SBczWgeg++qpk2s6+sP4Wcmx/wP4bmpnY1t2gUyMI+/g5fW2aTgNu
hrHEiYMdWPEkscOQrDokaDaM6covDKOTeZslZHQtv5wUvOJcHP+YnjtTbjfHFE+K
cZMVpi8+5/dQTbKalr4VJGlgxldDyX93aru5v6xZmeMa4RPKHmrdurqI04suRJuw
iLZiZ4u1og0CKS5F32ykDhYFgchIlh5eyjySSsQotfDxX5SoHzQstGHWAWYbS6Uq
oUhhWWQiqbW434fydixrUnZAQ7aUG9rasnKetdL/tnBIxkgiD93nx2Vrm4koBcDh
zL+WvQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org