Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aeda5aac-d4c0-41bb-9811-28695819f451/316f4d902b8646275420a3959451f1b64b691673.roa
File:                     316f4d902b8646275420a3959451f1b64b691673.roa (raw, json)
Hash identifier:          ICFtAvud/7QHV/1xn9PQN3PbSm3ODNJQsW2OfbFvzSw=
Subject key identifier:   92:18:6A:99:30:9B:94:F7:B3:A3:66:02:78:20:90:26:7D:50:86:03
Certificate issuer:       /CN=3e0b31ff244e0fe7f2ee28aa611fe0b310ff4ee5
Certificate serial:       0458E3
Authority key identifier: 3B:67:31:14:73:FC:21:0F:B6:0F:F4:42:7D:78:E2:89:20:F3:58:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e0b31ff244e0fe7f2ee28aa611fe0b310ff4ee5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aeda5aac-d4c0-41bb-9811-28695819f451/316f4d902b8646275420a3959451f1b64b691673.roa
Signing time:             Wed 24 Mar 2021 14:30:17 +0000
ROA not before:           Wed 24 Mar 2021 14:30:17 +0000
ROA not after:            Tue 24 Mar 2026 14:30:17 +0000
asID:                     52401
IP address blocks:        200.124.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284899 (0x458e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e0b31ff244e0fe7f2ee28aa611fe0b310ff4ee5
        Validity
            Not Before: Mar 24 14:30:17 2021 GMT
            Not After : Mar 24 14:30:17 2026 GMT
        Subject: CN=316f4d902b8646275420a3959451f1b64b691673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:02:cb:24:4c:0b:4f:93:ee:3a:b2:8e:3d:
                    9e:c1:16:9d:c5:b3:f6:27:71:19:e5:97:54:74:99:
                    66:61:b5:a0:e5:6e:7b:7a:9d:85:a3:6d:8d:8e:fe:
                    a2:d3:53:f4:11:ec:12:87:1d:6b:d7:ba:31:b1:2c:
                    5e:61:e7:e0:9d:27:9f:fe:84:a5:65:36:81:62:b6:
                    97:bc:7b:ea:37:aa:4d:12:27:d9:46:c6:9d:fa:dd:
                    ae:53:79:45:17:47:14:26:fc:b6:be:f5:64:3d:d6:
                    dc:06:cb:e4:7e:81:e0:5d:fe:d8:5f:d5:75:c7:d8:
                    37:f5:99:a6:ac:4c:86:09:c1:3b:e7:3c:00:21:46:
                    ff:32:51:53:1e:6a:ef:6a:ea:c5:e6:7b:98:8e:c4:
                    28:cc:ea:cf:9a:76:b1:97:77:b0:36:7a:a3:a7:59:
                    1c:2e:f6:08:34:61:48:49:3a:df:92:9e:d7:1a:74:
                    ff:88:2b:21:e2:c5:b7:31:37:a3:41:52:ec:74:92:
                    99:1c:92:6e:48:68:de:64:f8:ab:d6:00:91:06:6e:
                    31:16:55:33:73:c5:7e:64:4b:71:ff:5d:13:22:a0:
                    c6:5b:ec:f4:a0:a9:27:c4:58:0b:2d:2c:8d:95:a9:
                    3d:20:87:13:6a:a2:b7:76:c9:12:a2:ef:b3:37:dd:
                    0a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:18:6A:99:30:9B:94:F7:B3:A3:66:02:78:20:90:26:7D:50:86:03
            X509v3 Authority Key Identifier:
                keyid:3B:67:31:14:73:FC:21:0F:B6:0F:F4:42:7D:78:E2:89:20:F3:58:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e0b31ff244e0fe7f2ee28aa611fe0b310ff4ee5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aeda5aac-d4c0-41bb-9811-28695819f451/316f4d902b8646275420a3959451f1b64b691673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aeda5aac-d4c0-41bb-9811-28695819f451/3e0b31ff244e0fe7f2ee28aa611fe0b310ff4ee5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:c6:50:60:99:f8:29:7d:70:83:c1:57:1b:8e:b0:d4:97:8f:
         b3:85:cb:ba:6c:3b:34:ba:53:37:b6:94:a8:fb:37:cb:ef:ce:
         fa:60:ac:bc:f6:08:d0:82:48:f0:2f:86:a0:ce:c8:b6:9f:cd:
         8f:d2:90:4c:9f:19:3f:c1:26:8e:f7:cc:a1:1c:16:a6:2b:25:
         d2:df:b4:be:24:9c:c4:cb:96:6f:73:69:15:c4:f0:4f:56:63:
         b6:96:4b:90:63:31:e7:84:99:0d:e7:2e:5b:a4:06:2a:18:28:
         c5:21:bc:bc:27:8d:22:c9:a2:69:8f:0f:2f:99:21:81:07:91:
         e9:b2:13:fb:36:a4:83:e3:f9:cf:3b:dc:ca:e5:f4:5b:28:53:
         a0:d6:3f:d9:79:7d:3f:c9:55:2f:6a:36:d7:e0:e9:0a:3b:2a:
         b8:87:67:ad:49:44:a3:3e:2b:2a:01:5a:ee:ee:2f:1e:c1:3f:
         8f:f1:83:d8:03:4f:4f:e8:16:f3:65:9b:25:d4:eb:af:26:51:
         b8:81:42:ab:a3:4d:4a:cc:9e:e0:32:3e:a3:56:a1:10:88:d1:
         54:73:ec:c5:db:a1:10:8c:5b:cc:6a:b4:ca:4f:35:b7:ed:d8:
         ea:a5:3c:5d:c3:11:8d:06:34:e1:b8:82:4a:1d:c8:c0:48:35:
         e5:0b:50:a3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBFjjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNl
MGIzMWZmMjQ0ZTBmZTdmMmVlMjhhYTYxMWZlMGIzMTBmZjRlZTUwHhcNMjEwMzI0
MTQzMDE3WhcNMjYwMzI0MTQzMDE3WjAzMTEwLwYDVQQDEygzMTZmNGQ5MDJiODY0
NjI3NTQyMGEzOTU5NDUxZjFiNjRiNjkxNjczMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlV0CyyRMC0+T7jqyjj2ewRadxbP2J3EZ5ZdUdJlmYbWg5W57
ep2Fo22Njv6i01P0EewShx1r17oxsSxeYefgnSef/oSlZTaBYraXvHvqN6pNEifZ
Rsad+t2uU3lFF0cUJvy2vvVkPdbcBsvkfoHgXf7YX9V1x9g39ZmmrEyGCcE75zwA
IUb/MlFTHmrvaurF5nuYjsQozOrPmnaxl3ewNnqjp1kcLvYINGFISTrfkp7XGnT/
iCsh4sW3MTejQVLsdJKZHJJuSGjeZPir1gCRBm4xFlUzc8V+ZEtx/10TIqDGW+z0
oKknxFgLLSyNlak9IIcTaqK3dskSou+zN90K/QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJIYapkwm5T3s6NmAnggkCZ9UIYDMB8GA1UdIwQYMBaAFDtnMRRz/CEPtg/0
Qn144okg81hkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvM2UwYjMx
ZmYyNDRlMGZlN2YyZWUyOGFhNjExZmUwYjMxMGZmNGVlNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWVkYTVhYWMtZDRjMC00MWJiLTk4MTEtMjg2OTU4
MTlmNDUxLzMxNmY0ZDkwMmI4NjQ2Mjc1NDIwYTM5NTk0NTFmMWI2NGI2OTE2NzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hZWRhNWFhYy1kNGMwLTQxYmItOTgxMS0yODY5
NTgxOWY0NTEvM2UwYjMxZmYyNDRlMGZlN2YyZWUyOGFhNjExZmUwYjMxMGZmNGVl
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsh8uDANBgkqhkiG9w0BAQsFAAOCAQEAZcZQYJn4KX1wg8FX
G46w1JePs4XLumw7NLpTN7aUqPs3y+/O+mCsvPYI0IJI8C+GoM7Itp/Nj9KQTJ8Z
P8EmjvfMoRwWpisl0t+0viScxMuWb3NpFcTwT1ZjtpZLkGMx54SZDecuW6QGKhgo
xSG8vCeNIsmiaY8PL5khgQeR6bIT+zakg+P5zzvcyuX0WyhToNY/2Xl9P8lVL2o2
1+DpCjsquIdnrUlEoz4rKgFa7u4vHsE/j/GD2ANPT+gW82WbJdTrryZRuIFCq6NN
Ssye4DI+o1ahEIjRVHPsxduhEIxbzGq0yk81t+3Y6qU8XcMRjQY04biCSh3IwEg1
5QtQow==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org