Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/edbf954673cdebe416b6e0609725be7c524b1313.roa
File:                     edbf954673cdebe416b6e0609725be7c524b1313.roa (raw, json)
Hash identifier:          57lwhk+f9Hxssxsn12AxlD38GffMg6GWRCtXbrYO85E=
Subject key identifier:   78:EA:45:18:92:67:72:B2:1D:73:31:BC:52:FA:EB:24:90:41:03:CB
Certificate issuer:       /CN=312f25bb43cf12fb021669059d3a617d23ade269
Certificate serial:       1EE3B8
Authority key identifier: DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/edbf954673cdebe416b6e0609725be7c524b1313.roa
Signing time:             Mon 20 Nov 2023 19:34:59 +0000
ROA not before:           Mon 20 Nov 2023 19:34:59 +0000
ROA not after:            Thu 20 Nov 2025 19:34:59 +0000
asID:                     17147
IP address blocks:        163.247.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024376 (0x1ee3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312f25bb43cf12fb021669059d3a617d23ade269
        Validity
            Not Before: Nov 20 19:34:59 2023 GMT
            Not After : Nov 20 19:34:59 2025 GMT
        Subject: CN=edbf954673cdebe416b6e0609725be7c524b1313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c4:a8:3f:3f:b6:a1:2e:36:59:fc:9a:f7:bb:
                    fb:c8:56:a5:35:89:d3:94:20:91:19:f2:67:c1:60:
                    d2:de:04:5f:4c:f1:65:ae:d7:b2:7a:0c:4f:d8:34:
                    a0:36:12:59:fc:40:18:02:cd:c7:8d:56:56:ba:07:
                    75:53:6d:19:12:9f:47:a8:36:b6:2b:19:92:f3:e7:
                    39:99:e2:33:11:91:0f:1b:77:b6:95:75:1a:c6:c7:
                    e5:1b:52:76:c5:ae:ce:de:55:9f:a7:86:0b:33:e9:
                    24:de:8d:e3:8d:4d:ed:b1:e2:b9:03:01:0e:7f:7a:
                    22:d5:5d:c0:87:38:58:31:d6:75:25:b4:3a:a4:b8:
                    76:a5:ba:b0:fb:29:22:9e:b1:c6:2b:97:fb:57:3a:
                    2d:13:10:e5:01:75:c9:31:35:66:28:04:9d:61:2f:
                    fb:17:29:74:20:b2:53:ea:73:cd:82:83:96:60:25:
                    8b:a4:ac:50:b8:b7:88:5b:6c:7d:91:1d:4d:38:28:
                    95:c4:ab:4f:12:44:ea:d2:89:e2:fd:e1:b8:66:4b:
                    1c:05:ec:4f:2d:22:3c:d6:1c:30:71:7e:0d:33:ca:
                    ee:07:5b:41:41:47:c3:a9:24:60:ec:20:12:cb:cb:
                    79:6d:99:ac:81:c2:07:69:8f:5c:20:48:bc:3b:c5:
                    51:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EA:45:18:92:67:72:B2:1D:73:31:BC:52:FA:EB:24:90:41:03:CB
            X509v3 Authority Key Identifier:
                keyid:DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/edbf954673cdebe416b6e0609725be7c524b1313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/312f25bb43cf12fb021669059d3a617d23ade269.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:cb:28:57:34:d3:3d:16:23:33:56:72:c6:f4:b4:c7:56:39:
         4f:ae:60:c6:12:a8:fa:32:66:08:4f:e8:b3:40:06:a4:d1:05:
         65:4b:2c:79:80:aa:91:72:bc:24:62:d7:ab:f9:85:4b:9d:7e:
         c0:79:cd:58:c5:40:ea:dd:80:7b:22:4c:16:31:98:33:3b:a5:
         8b:35:de:60:ba:3a:f1:32:8e:bb:23:38:fe:a1:0f:f4:17:f3:
         56:28:5c:00:02:d5:d2:c3:32:17:d0:bd:f3:70:b1:e6:a1:61:
         92:2e:12:e0:0f:48:4e:89:80:43:cb:22:a4:76:ff:14:0e:8e:
         03:8f:2d:e7:e5:d2:ed:b6:cc:f8:e5:95:df:f6:fd:a8:3f:06:
         b4:21:98:91:f3:4d:ad:c1:c8:e4:c6:c2:04:f9:6f:f5:84:35:
         21:f6:51:a4:03:5f:0e:36:90:60:25:e5:4f:04:92:f6:47:1d:
         33:1f:82:b6:d2:aa:f3:67:0c:cf:18:6a:ad:50:00:be:53:73:
         f2:50:ad:6a:e5:ac:c8:39:16:b2:f0:28:eb:96:bb:d3:9c:a4:
         cd:71:ab:1d:64:d7:cd:f0:12:dc:7d:37:09:5a:60:51:e8:cd:
         47:1c:90:9d:f1:db:ee:28:4f:73:83:8f:61:ba:1a:48:fc:c3:
         c9:a7:6f:47
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHuO4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMx
MmYyNWJiNDNjZjEyZmIwMjE2NjkwNTlkM2E2MTdkMjNhZGUyNjkwHhcNMjMxMTIw
MTkzNDU5WhcNMjUxMTIwMTkzNDU5WjAzMTEwLwYDVQQDEyhlZGJmOTU0NjczY2Rl
YmU0MTZiNmUwNjA5NzI1YmU3YzUyNGIxMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAksSoPz+2oS42Wfya97v7yFalNYnTlCCRGfJnwWDS3gRfTPFl
rteyegxP2DSgNhJZ/EAYAs3HjVZWugd1U20ZEp9HqDa2KxmS8+c5meIzEZEPG3e2
lXUaxsflG1J2xa7O3lWfp4YLM+kk3o3jjU3tseK5AwEOf3oi1V3AhzhYMdZ1JbQ6
pLh2pbqw+ykinrHGK5f7VzotExDlAXXJMTVmKASdYS/7Fyl0ILJT6nPNgoOWYCWL
pKxQuLeIW2x9kR1NOCiVxKtPEkTq0oni/eG4ZkscBexPLSI81hwwcX4NM8ruB1tB
QUfDqSRg7CASy8t5bZmsgcIHaY9cIEi8O8VRUwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHjqRRiSZ3KyHXMxvFL66ySQQQPLMB8GA1UdIwQYMBaAFNr+bj3Ni3PrNsbz
/unP1WXzF6BiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzEyZjI1
YmI0M2NmMTJmYjAyMTY2OTA1OWQzYTYxN2QyM2FkZTI2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjZjYzNlOGUtNWQyYS00NGM2LTlmYjUtNmE1OGNh
OWMyYzczL2VkYmY5NTQ2NzNjZGViZTQxNmI2ZTA2MDk3MjViZTdjNTI0YjEzMTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iNmNjM2U4ZS01ZDJhLTQ0YzYtOWZiNS02YTU4
Y2E5YzJjNzMvMzEyZjI1YmI0M2NmMTJmYjAyMTY2OTA1OWQzYTYxN2QyM2FkZTI2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKP3MjANBgkqhkiG9w0BAQsFAAOCAQEAR8soVzTTPRYjM1Zy
xvS0x1Y5T65gxhKo+jJmCE/os0AGpNEFZUsseYCqkXK8JGLXq/mFS51+wHnNWMVA
6t2AeyJMFjGYMzulizXeYLo68TKOuyM4/qEP9BfzVihcAALV0sMyF9C983Cx5qFh
ki4S4A9ITomAQ8sipHb/FA6OA48t5+XS7bbM+OWV3/b9qD8GtCGYkfNNrcHI5MbC
BPlv9YQ1IfZRpANfDjaQYCXlTwSS9kcdMx+CttKq82cMzxhqrVAAvlNz8lCtauWs
yDkWsvAo65a705ykzXGrHWTXzfAS3H03CVpgUejNRxyQnfHb7ihPc4OPYboaSPzD
yadvRw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org