Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db5e1315-7410-4cd4-9ca1-9f255c7a1d2a/465da32a618d8aa4e475fd4108e32e9f6e1696fb.roa
File:                     465da32a618d8aa4e475fd4108e32e9f6e1696fb.roa (raw, json)
Hash identifier:          950W8r6SqBbtfoAGmJmQ09Ub0YDwMAZyjEX5+iaadSU=
Subject key identifier:   18:92:59:01:5C:5D:5B:63:64:94:33:FD:C1:AD:F5:D4:45:77:71:4D
Certificate issuer:       /CN=51f4bc9212cb82c076353939748ab5027f909298
Certificate serial:       23C8DC
Authority key identifier: 9C:11:5B:A7:0B:F1:D7:3F:92:77:32:7B:06:F3:A3:CB:90:44:70:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/51f4bc9212cb82c076353939748ab5027f909298.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/db5e1315-7410-4cd4-9ca1-9f255c7a1d2a/465da32a618d8aa4e475fd4108e32e9f6e1696fb.roa
Signing time:             Fri 29 Sep 2023 14:03:10 +0000
ROA not before:           Thu 28 Sep 2023 14:03:10 +0000
ROA not after:            Mon 29 Sep 2025 14:03:10 +0000
asID:                     263182
IP address blocks:        181.225.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2345180 (0x23c8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4bc9212cb82c076353939748ab5027f909298
        Validity
            Not Before: Sep 28 14:03:10 2023 GMT
            Not After : Sep 29 14:03:10 2025 GMT
        Subject: CN=465da32a618d8aa4e475fd4108e32e9f6e1696fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5e:f9:21:12:99:f3:d4:4a:e4:11:a5:e1:f5:
                    db:e4:38:b5:f9:66:3c:9c:fd:f7:4d:9f:ac:26:b1:
                    9e:f7:74:30:4d:33:39:ea:e7:c9:17:c4:0b:2d:45:
                    e8:c0:c1:41:a4:42:7f:89:9d:eb:3e:fa:1a:1a:10:
                    e2:dc:62:4f:97:f5:2f:ba:4d:bd:2a:88:ed:4e:03:
                    4d:b7:5e:43:26:79:c7:71:dc:bf:43:5b:c0:49:9b:
                    14:8c:0a:13:bb:07:0a:5e:e9:27:b8:c5:33:3b:2b:
                    3a:7b:0b:5b:6f:67:7b:b1:71:31:af:7e:59:89:de:
                    84:d0:ce:40:87:7a:d1:90:4d:be:dd:69:c3:b7:4c:
                    a7:81:73:6a:a3:d3:f6:0f:ae:16:ab:58:32:42:8f:
                    85:1b:22:1c:96:ac:c9:b9:25:e7:58:a2:a7:79:c7:
                    5f:fa:d9:fe:2f:4f:97:d1:fc:bf:16:b1:5e:b5:03:
                    b7:ee:02:d0:aa:3f:03:44:46:a1:db:96:0e:32:39:
                    ca:96:3d:40:3f:b3:c9:b5:f7:d2:ab:1f:2d:96:65:
                    cf:c9:ca:72:4a:e3:bc:aa:bc:68:10:39:03:31:af:
                    ec:e8:b4:8a:87:15:11:63:e7:08:f1:af:9a:76:fa:
                    8d:e0:7c:c2:da:c6:9c:d8:09:d4:98:49:85:fa:3b:
                    5c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:92:59:01:5C:5D:5B:63:64:94:33:FD:C1:AD:F5:D4:45:77:71:4D
            X509v3 Authority Key Identifier:
                keyid:9C:11:5B:A7:0B:F1:D7:3F:92:77:32:7B:06:F3:A3:CB:90:44:70:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/51f4bc9212cb82c076353939748ab5027f909298.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db5e1315-7410-4cd4-9ca1-9f255c7a1d2a/465da32a618d8aa4e475fd4108e32e9f6e1696fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/db5e1315-7410-4cd4-9ca1-9f255c7a1d2a/51f4bc9212cb82c076353939748ab5027f909298.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:93:20:e5:1b:66:8c:53:45:00:a0:66:0a:42:7e:42:69:9a:
         ce:b4:9a:18:5a:f2:c5:f8:da:9b:c7:b8:08:0b:11:24:7b:15:
         84:d7:92:f4:a3:3c:93:ce:ed:70:ce:9e:6c:58:1e:8b:bc:cb:
         df:ad:31:ef:e3:40:9e:84:a2:25:63:ba:31:92:cf:0b:e2:8a:
         60:0c:8c:6f:49:f8:d5:26:9f:6d:1a:16:52:be:38:65:c9:c3:
         cb:c0:9b:86:97:19:d0:f3:38:fc:50:20:39:58:83:70:85:8a:
         65:25:ce:4b:b3:db:58:66:92:3e:ca:48:1b:06:ec:d2:5c:3d:
         33:55:e3:b8:d6:be:5b:d3:80:74:a2:98:2a:66:f5:54:d0:8f:
         d1:9a:20:44:7c:71:2c:f0:08:50:0f:5d:60:1f:4f:ce:ea:84:
         68:96:f6:61:fb:e0:94:ae:f3:96:cc:40:db:ee:cf:5b:4d:c9:
         fb:06:21:15:b6:5a:9b:fd:ef:82:b0:89:a0:8d:13:86:80:77:
         6a:10:32:2a:24:89:ac:4d:89:89:85:b0:4e:9b:ef:db:bb:6f:
         a6:15:c3:8b:42:3f:0e:5b:3e:d2:bd:04:6d:ab:f6:0a:c6:95:
         b0:a5:40:32:43:b7:25:20:ca:74:ba:a9:63:59:05:2e:d7:22:
         96:f3:a7:54
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI8jcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
ZjRiYzkyMTJjYjgyYzA3NjM1MzkzOTc0OGFiNTAyN2Y5MDkyOTgwHhcNMjMwOTI4
MTQwMzEwWhcNMjUwOTI5MTQwMzEwWjAzMTEwLwYDVQQDEyg0NjVkYTMyYTYxOGQ4
YWE0ZTQ3NWZkNDEwOGUzMmU5ZjZlMTY5NmZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAul75IRKZ89RK5BGl4fXb5Di1+WY8nP33TZ+sJrGe93QwTTM5
6ufJF8QLLUXowMFBpEJ/iZ3rPvoaGhDi3GJPl/Uvuk29KojtTgNNt15DJnnHcdy/
Q1vASZsUjAoTuwcKXuknuMUzOys6ewtbb2d7sXExr35Zid6E0M5Ah3rRkE2+3WnD
t0yngXNqo9P2D64Wq1gyQo+FGyIclqzJuSXnWKKnecdf+tn+L0+X0fy/FrFetQO3
7gLQqj8DREah25YOMjnKlj1AP7PJtffSqx8tlmXPycpySuO8qrxoEDkDMa/s6LSK
hxURY+cI8a+advqN4HzC2sac2AnUmEmF+jtcWwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBiSWQFcXVtjZJQz/cGt9dRFd3FNMB8GA1UdIwQYMBaAFJwRW6cL8dc/kncy
ewbzo8uQRHCaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTFmNGJj
OTIxMmNiODJjMDc2MzUzOTM5NzQ4YWI1MDI3ZjkwOTI5OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGI1ZTEzMTUtNzQxMC00Y2Q0LTljYTEtOWYyNTVj
N2ExZDJhLzQ2NWRhMzJhNjE4ZDhhYTRlNDc1ZmQ0MTA4ZTMyZTlmNmUxNjk2ZmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYjVlMTMxNS03NDEwLTRjZDQtOWNhMS05ZjI1
NWM3YTFkMmEvNTFmNGJjOTIxMmNiODJjMDc2MzUzOTM5NzQ4YWI1MDI3ZjkwOTI5
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALXhPjANBgkqhkiG9w0BAQsFAAOCAQEACZMg5RtmjFNFAKBm
CkJ+QmmazrSaGFryxfjam8e4CAsRJHsVhNeS9KM8k87tcM6ebFgei7zL360x7+NA
noSiJWO6MZLPC+KKYAyMb0n41SafbRoWUr44ZcnDy8CbhpcZ0PM4/FAgOViDcIWK
ZSXOS7PbWGaSPspIGwbs0lw9M1XjuNa+W9OAdKKYKmb1VNCP0ZogRHxxLPAIUA9d
YB9PzuqEaJb2YfvglK7zlsxA2+7PW03J+wYhFbZam/3vgrCJoI0ThoB3ahAyKiSJ
rE2JiYWwTpvv27tvphXDi0I/Dls+0r0Ebav2CsaVsKVAMkO3JSDKdLqpY1kFLtci
lvOnVA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org