Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/fefc57adae3867232a36ac96fb361c99f430c33c.roa
File:                     fefc57adae3867232a36ac96fb361c99f430c33c.roa (raw, json)
Hash identifier:          f4iNTGrR8DC4sRqeWM+yt7qwtLe9Z0gvrpISbChEFvQ=
Subject key identifier:   31:20:F4:FA:63:E2:A8:EB:20:6E:F8:E5:91:FE:16:26:C0:E4:D0:30
Certificate issuer:       /CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Certificate serial:       25D6EF
Authority key identifier: 82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/fefc57adae3867232a36ac96fb361c99f430c33c.roa
Signing time:             Mon 18 Sep 2023 11:36:37 +0000
ROA not before:           Sun 17 Sep 2023 11:36:31 +0000
ROA not after:            Mon 18 Sep 2028 11:36:31 +0000
asID:                     264764
IP address blocks:        181.199.210.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2479855 (0x25d6ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
        Validity
            Not Before: Sep 17 11:36:31 2023 GMT
            Not After : Sep 18 11:36:31 2028 GMT
        Subject: CN=fefc57adae3867232a36ac96fb361c99f430c33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:57:b5:7f:44:62:0d:75:9a:10:c6:76:3d:
                    35:64:51:ef:34:eb:8c:a0:4a:9d:58:8b:dd:48:f3:
                    07:2d:41:9a:8d:d1:3d:21:67:1b:04:71:01:24:28:
                    32:be:cb:76:50:ad:de:2b:e5:07:0f:48:87:5a:d7:
                    27:ab:b1:88:fa:ac:4f:0b:4d:80:53:93:f0:55:f9:
                    23:09:c4:9f:48:f8:c8:fd:92:f1:99:ac:d4:dc:96:
                    e5:4e:ff:da:dd:62:d8:b3:41:0e:a5:ac:ac:03:22:
                    5b:34:63:84:8b:97:7d:b4:ca:3d:b0:b5:25:7f:13:
                    29:44:b8:cc:e4:b9:7d:fe:1e:0a:e6:f4:6c:3e:df:
                    8e:f9:e6:82:a4:43:97:1c:d5:6f:b1:68:0b:25:27:
                    28:cf:50:e3:0b:0f:e0:e6:1e:c9:d9:6b:c1:fe:c9:
                    f1:43:c5:1d:0b:d6:20:0f:49:f2:05:50:c5:9b:fc:
                    e6:51:a9:b1:ca:fd:b2:f3:0b:c3:9a:ef:92:0d:c4:
                    d8:67:1b:0a:eb:42:59:7c:6a:9b:dc:40:54:e3:7d:
                    84:16:49:9d:1f:28:a6:f6:0b:1c:58:9f:67:9e:df:
                    55:8e:30:d0:aa:02:ce:43:6d:09:9c:4c:34:f0:cd:
                    3f:8c:2a:cf:e5:ba:3d:71:0e:69:4a:34:6d:67:c5:
                    80:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:20:F4:FA:63:E2:A8:EB:20:6E:F8:E5:91:FE:16:26:C0:E4:D0:30
            X509v3 Authority Key Identifier:
                keyid:82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/fefc57adae3867232a36ac96fb361c99f430c33c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:65:a4:eb:0d:c8:c9:c7:22:0d:71:fd:ad:6c:02:44:04:4b:
         5b:92:4c:c4:2f:9f:6b:e8:49:cd:c1:db:31:e4:40:27:25:c5:
         bb:1c:b3:49:e7:51:ac:17:72:6f:0d:86:13:9e:9d:dc:47:bb:
         c1:a3:d9:10:b4:02:ec:7a:92:61:4f:1a:67:b9:56:07:83:91:
         4d:0c:72:49:7a:4a:05:9f:cf:9e:81:87:ed:dd:ca:7f:f7:87:
         42:32:10:4d:7b:ee:0b:e9:33:7e:68:ac:e7:2a:51:2e:ce:90:
         f7:9e:6f:37:33:12:98:e1:b7:56:9a:01:e4:6e:90:f8:90:f0:
         2c:c0:f3:b4:52:ee:ef:10:36:7b:c1:76:3b:7b:07:8e:4e:e4:
         a2:18:19:85:8f:90:40:67:07:60:05:a8:fe:71:b7:0b:12:3b:
         b2:be:b9:d7:22:74:83:25:3d:77:4a:67:9d:59:09:cb:47:86:
         17:13:02:0b:08:3d:a5:69:fd:0c:1f:69:0e:d4:e0:e8:de:41:
         0f:51:02:77:8a:78:36:2f:c9:e1:5f:6e:9b:6c:77:93:67:c5:
         43:94:cb:ed:c6:cf:74:66:f3:cc:6e:f6:9b:b8:e8:b7:8e:91:
         f3:22:89:9a:19:30:15:63:de:92:e0:b1:a9:27:9a:3d:76:d5:
         b9:b6:d8:4f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJdbvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhk
MmY0ZDgxYmJmMWU3ZDIyNzQxOWE1MTM1Mjk1M2NlOWM2YWNhM2EwHhcNMjMwOTE3
MTEzNjMxWhcNMjgwOTE4MTEzNjMxWjAzMTEwLwYDVQQDEyhmZWZjNTdhZGFlMzg2
NzIzMmEzNmFjOTZmYjM2MWM5OWY0MzBjMzNjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiTtXtX9EYg11mhDGdj01ZFHvNOuMoEqdWIvdSPMHLUGajdE9
IWcbBHEBJCgyvst2UK3eK+UHD0iHWtcnq7GI+qxPC02AU5PwVfkjCcSfSPjI/ZLx
mazU3JblTv/a3WLYs0EOpaysAyJbNGOEi5d9tMo9sLUlfxMpRLjM5Ll9/h4K5vRs
Pt+O+eaCpEOXHNVvsWgLJScoz1DjCw/g5h7J2WvB/snxQ8UdC9YgD0nyBVDFm/zm
Uamxyv2y8wvDmu+SDcTYZxsK60JZfGqb3EBU432EFkmdHyim9gscWJ9nnt9VjjDQ
qgLOQ20JnEw08M0/jCrP5bo9cQ5pSjRtZ8WAlQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDEg9Ppj4qjrIG745ZH+FibA5NAwMB8GA1UdIwQYMBaAFIKbIo/20c/QFbE+
p/9yWlP9yjx/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGQyZjRk
ODFiYmYxZTdkMjI3NDE5YTUxMzUyOTUzY2U5YzZhY2EzYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDZmMjFhOGMtM2E3MS00N2E3LTlmNmUtYzliNDQx
NDI3ZmNkL2ZlZmM1N2FkYWUzODY3MjMyYTM2YWM5NmZiMzYxYzk5ZjQzMGMzM2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNmYyMWE4Yy0zYTcxLTQ3YTctOWY2ZS1jOWI0
NDE0MjdmY2QvOGQyZjRkODFiYmYxZTdkMjI3NDE5YTUxMzUyOTUzY2U5YzZhY2Ez
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAbXH0jANBgkqhkiG9w0BAQsFAAOCAQEAFmWk6w3IycciDXH9
rWwCRARLW5JMxC+fa+hJzcHbMeRAJyXFuxyzSedRrBdybw2GE56d3Ee7waPZELQC
7HqSYU8aZ7lWB4ORTQxySXpKBZ/PnoGH7d3Kf/eHQjIQTXvuC+kzfmis5ypRLs6Q
955vNzMSmOG3VpoB5G6Q+JDwLMDztFLu7xA2e8F2O3sHjk7kohgZhY+QQGcHYAWo
/nG3CxI7sr651yJ0gyU9d0pnnVkJy0eGFxMCCwg9pWn9DB9pDtTg6N5BD1ECd4p4
Ni/J4V9um2x3k2fFQ5TL7cbPdGbzzG72m7jot46R8yKJmhkwFWPekuCxqSeaPXbV
ubbYTw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org