Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/a81b8fe5bb7a11a55a4aa40a471ddf18e49da154.roa
File:                     a81b8fe5bb7a11a55a4aa40a471ddf18e49da154.roa (raw, json)
Hash identifier:          5UQc3wavOnOBxIYuHpcxqlWgHlijWB8EfeN77jlQFWQ=
Subject key identifier:   02:F4:3D:96:31:5C:14:84:93:33:94:73:1D:76:5C:0D:38:14:EB:2A
Certificate issuer:       /CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
Certificate serial:       126E2A
Authority key identifier: 45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/a81b8fe5bb7a11a55a4aa40a471ddf18e49da154.roa
Signing time:             Wed 17 Nov 2021 19:28:29 +0000
ROA not before:           Wed 17 Nov 2021 03:00:00 +0000
ROA not after:            Fri 17 Nov 2023 03:00:00 +0000
asID:                     266728
IP address blocks:        179.0.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1207850 (0x126e2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
        Validity
            Not Before: Nov 17 03:00:00 2021 GMT
            Not After : Nov 17 03:00:00 2023 GMT
        Subject: CN=a81b8fe5bb7a11a55a4aa40a471ddf18e49da154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:8d:f8:b8:1b:9e:09:f7:1c:b2:fb:8f:7b:
                    84:d6:47:6e:3e:d2:f0:23:63:1e:41:53:91:a4:87:
                    53:8e:d8:60:53:19:82:68:c0:0e:9c:82:c3:5a:28:
                    05:83:ff:03:ae:01:0c:e4:00:32:2f:fe:25:1d:92:
                    e6:d2:09:e5:76:c9:be:2f:a1:f3:28:a7:89:53:13:
                    32:84:78:5b:c7:2f:20:cd:3c:a7:e8:d0:4b:0d:d0:
                    b2:26:f7:e7:69:08:60:a9:25:41:4e:79:f3:8a:a8:
                    19:8c:cb:98:af:ed:2e:ca:54:cc:0e:5d:e1:0a:72:
                    d1:f7:7b:ae:51:af:ba:ec:89:7d:7a:ae:35:cb:c3:
                    8a:36:21:ef:97:cd:3b:8f:2c:37:70:04:ea:bc:07:
                    aa:23:4e:c0:1b:40:c6:dd:cf:1c:3c:17:24:15:6a:
                    ec:f4:72:cf:52:d7:7f:72:28:03:6e:f8:b2:62:bd:
                    17:70:57:3e:d1:96:98:0a:1c:d1:29:1a:42:b7:7b:
                    5b:f4:90:60:03:0b:59:f8:fa:e3:1c:5f:42:a6:12:
                    dc:b7:00:34:d0:09:34:51:34:11:d4:d6:b5:bd:37:
                    d5:9c:fa:4e:79:a5:13:bc:b0:e2:fc:4f:10:8a:e6:
                    4b:59:6f:a9:1e:e3:9b:ef:93:fc:91:a3:e1:52:9f:
                    bf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F4:3D:96:31:5C:14:84:93:33:94:73:1D:76:5C:0D:38:14:EB:2A
            X509v3 Authority Key Identifier:
                keyid:45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/a81b8fe5bb7a11a55a4aa40a471ddf18e49da154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e8:c6:55:38:39:d8:8d:e7:bc:21:6f:5d:9a:56:3e:86:f0:
         19:e8:3a:80:f2:12:d1:23:5c:83:77:0b:58:2f:ad:48:af:7e:
         17:26:85:36:46:a9:e5:92:f2:3d:73:30:58:ed:4d:ee:73:30:
         86:04:9c:d9:71:8f:4e:e1:8f:c9:6b:00:c7:ca:63:72:e9:29:
         11:2e:3e:62:c6:77:fa:17:66:9f:89:23:ee:ce:52:33:65:8a:
         9c:23:a2:59:50:f7:0c:01:36:a9:12:af:9b:ff:7c:3f:71:db:
         6c:34:8d:d1:9e:87:59:bd:80:f9:f3:37:b2:ec:4d:58:db:4f:
         ae:dc:fd:17:aa:34:6e:ad:f8:39:75:6d:fc:7c:85:77:e3:8a:
         fa:9e:6e:32:54:a3:f8:64:6e:73:0c:1e:03:a6:f0:85:66:9d:
         9b:5a:a4:db:c9:cf:88:4d:a7:f3:8b:66:43:fd:57:f8:3b:6f:
         08:b1:f6:78:2c:7b:04:29:2f:4d:84:8d:65:49:b9:36:20:fe:
         74:ac:92:86:ef:97:28:48:6c:a7:aa:24:0d:53:3e:7a:9f:61:
         ad:92:c9:3a:14:2c:8d:21:83:f9:84:f0:b8:b2:df:e5:d5:b3:
         5f:9f:60:e3:d3:dd:88:3e:07:81:70:f5:57:8c:3b:e7:94:2a:
         28:ca:38:32
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEm4qMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVm
NTdmYTdlMGVlMTgzYWM3ZmY2YzUyNmFlZDNlOWVkZTBkMTQ4MmUwHhcNMjExMTE3
MDMwMDAwWhcNMjMxMTE3MDMwMDAwWjAzMTEwLwYDVQQDEyhhODFiOGZlNWJiN2Ex
MWE1NWE0YWE0MGE0NzFkZGYxOGU0OWRhMTU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAthiN+Lgbngn3HLL7j3uE1kduPtLwI2MeQVORpIdTjthgUxmC
aMAOnILDWigFg/8DrgEM5AAyL/4lHZLm0gnldsm+L6HzKKeJUxMyhHhbxy8gzTyn
6NBLDdCyJvfnaQhgqSVBTnnziqgZjMuYr+0uylTMDl3hCnLR93uuUa+67Il9eq41
y8OKNiHvl807jyw3cATqvAeqI07AG0DG3c8cPBckFWrs9HLPUtd/cigDbviyYr0X
cFc+0ZaYChzRKRpCt3tb9JBgAwtZ+PrjHF9CphLctwA00Ak0UTQR1Na1vTfVnPpO
eaUTvLDi/E8QiuZLWW+pHuOb75P8kaPhUp+/pwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAL0PZYxXBSEkzOUcx12XA04FOsqMB8GA1UdIwQYMBaAFEUiGVZbETpmXf8C
OcncT5u0lSYtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWY1N2Zh
N2UwZWUxODNhYzdmZjZjNTI2YWVkM2U5ZWRlMGQxNDgyZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzk0OTVhYWMtODU0Ny00YjllLWJjNWUtNjNjMzdk
MWRjZDQ4L2E4MWI4ZmU1YmI3YTExYTU1YTRhYTQwYTQ3MWRkZjE4ZTQ5ZGExNTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jOTQ5NWFhYy04NTQ3LTRiOWUtYmM1ZS02M2Mz
N2QxZGNkNDgvNWY1N2ZhN2UwZWUxODNhYzdmZjZjNTI2YWVkM2U5ZWRlMGQxNDgy
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALMAKTANBgkqhkiG9w0BAQsFAAOCAQEAKejGVTg52I3nvCFv
XZpWPobwGeg6gPIS0SNcg3cLWC+tSK9+FyaFNkap5ZLyPXMwWO1N7nMwhgSc2XGP
TuGPyWsAx8pjcukpES4+YsZ3+hdmn4kj7s5SM2WKnCOiWVD3DAE2qRKvm/98P3Hb
bDSN0Z6HWb2A+fM3suxNWNtPrtz9F6o0bq34OXVt/HyFd+OK+p5uMlSj+GRucwwe
A6bwhWadm1qk28nPiE2n84tmQ/1X+DtvCLH2eCx7BCkvTYSNZUm5NiD+dKyShu+X
KEhsp6okDVM+ep9hrZLJOhQsjSGD+YTwuLLf5dWzX59g49PdiD4HgXD1V4w755Qq
KMo4Mg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:39 2023 by rpki-client on console-fra.rpki-client.org