Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/337f455f8535939440469578b5f4efe5c54a0b0e.roa
File:                     337f455f8535939440469578b5f4efe5c54a0b0e.roa (raw, json)
Hash identifier:          pe/F/oL8FPQKQkndMRtYDxRRBmk914EaN009cfeEoso=
Subject key identifier:   E3:E4:E2:48:2E:12:D8:AF:13:B4:C3:2D:B9:EB:10:47:29:83:CB:C2
Certificate issuer:       /CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
Certificate serial:       286FD2
Authority key identifier: 66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/337f455f8535939440469578b5f4efe5c54a0b0e.roa
Signing time:             Mon 11 Mar 2024 15:17:54 +0000
ROA not before:           Mon 11 Mar 2024 15:17:54 +0000
ROA not after:            Wed 11 Mar 2026 15:17:54 +0000
asID:                     52286
IP address blocks:        181.189.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2650066 (0x286fd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
        Validity
            Not Before: Mar 11 15:17:54 2024 GMT
            Not After : Mar 11 15:17:54 2026 GMT
        Subject: CN=337f455f8535939440469578b5f4efe5c54a0b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:31:54:58:bd:8a:a6:e1:14:5f:6e:c3:37:58:
                    3c:62:68:0e:1c:48:a1:e0:d5:3d:f2:3f:7d:2b:db:
                    02:3b:cc:46:0f:43:71:48:b0:5b:eb:cb:7d:24:9d:
                    54:f1:20:54:4c:95:65:e8:5c:d5:42:5f:9a:e5:4d:
                    41:4c:24:30:dd:d1:0f:7e:3e:97:de:dc:0f:0d:90:
                    3a:cd:70:7b:ca:9c:b1:97:bb:44:5c:dd:44:f9:34:
                    2d:af:5e:2c:b9:14:d8:4f:54:98:09:44:f5:c3:24:
                    68:05:88:77:c7:79:85:ba:31:3c:9d:2e:cc:79:49:
                    e1:fd:6a:f0:cd:d5:dd:4d:37:69:b5:3b:d0:13:73:
                    e7:54:c3:5a:2c:77:f4:5a:16:44:80:94:42:36:89:
                    bc:0a:1b:c6:43:81:0c:a6:db:0f:e8:31:31:4c:0a:
                    bf:d3:17:13:09:5a:74:c2:99:04:07:95:04:43:af:
                    5a:76:a6:cc:f7:59:f3:17:d6:7f:e5:13:40:5b:99:
                    01:49:f6:b3:6f:c1:de:d5:c4:90:07:60:e4:c5:b0:
                    7e:0f:ea:eb:f6:2a:68:14:7d:24:5e:43:9c:1b:a9:
                    40:42:09:2d:8c:23:14:47:91:99:e7:65:db:55:d2:
                    cf:00:79:9c:99:d1:7f:f6:8a:13:d0:fa:ed:94:ab:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E4:E2:48:2E:12:D8:AF:13:B4:C3:2D:B9:EB:10:47:29:83:CB:C2
            X509v3 Authority Key Identifier:
                keyid:66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/337f455f8535939440469578b5f4efe5c54a0b0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/95f676acfc94ecb8278d82cca69a83a7b785bd05.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:2d:93:ab:86:c9:18:a4:a9:ee:b9:28:16:1f:0e:a4:f0:
         95:19:2b:29:dd:71:3a:03:d4:d3:8f:50:e7:44:3f:20:2d:13:
         f5:f6:62:de:8b:d5:0e:9c:06:eb:68:0e:07:b6:18:ed:31:ff:
         68:b7:80:67:e1:60:f8:85:96:f1:02:d0:0d:e7:df:40:8d:ab:
         86:12:96:ef:0d:40:ba:14:8e:82:44:bd:ab:9c:b8:9d:ad:bd:
         b1:62:40:a5:46:b4:3f:33:e2:4d:b8:3b:a2:62:5d:0b:89:bc:
         cb:7d:27:ad:76:55:0b:a8:92:ad:49:04:9b:bd:b3:47:56:57:
         6d:2a:78:2f:1a:bd:72:4d:b0:96:81:ad:db:17:7e:a4:ca:ce:
         69:46:77:b0:78:92:6c:63:bc:ef:14:8d:97:80:36:a6:3c:b2:
         fd:75:f2:3b:1d:69:2a:e7:34:ed:6d:c6:0e:45:da:d6:29:64:
         ef:83:c2:a1:e1:4a:2a:35:a7:a4:9c:e7:52:33:c2:e1:4d:53:
         4e:c1:18:2d:4c:32:c8:b8:10:e4:8a:0f:b8:00:18:3b:e3:47:
         79:d4:80:aa:fa:6c:ee:7d:45:57:04:5b:b1:e3:44:4a:f7:e5:
         c8:6b:4c:95:46:17:0d:ed:d9:bb:6c:0b:14:7b:45:cc:d2:83:
         7e:1e:9d:16
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKG/SMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk1
ZjY3NmFjZmM5NGVjYjgyNzhkODJjY2E2OWE4M2E3Yjc4NWJkMDUwHhcNMjQwMzEx
MTUxNzU0WhcNMjYwMzExMTUxNzU0WjAzMTEwLwYDVQQDEygzMzdmNDU1Zjg1MzU5
Mzk0NDA0Njk1NzhiNWY0ZWZlNWM1NGEwYjBlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApjFUWL2KpuEUX27DN1g8YmgOHEih4NU98j99K9sCO8xGD0Nx
SLBb68t9JJ1U8SBUTJVl6FzVQl+a5U1BTCQw3dEPfj6X3twPDZA6zXB7ypyxl7tE
XN1E+TQtr14suRTYT1SYCUT1wyRoBYh3x3mFujE8nS7MeUnh/WrwzdXdTTdptTvQ
E3PnVMNaLHf0WhZEgJRCNom8ChvGQ4EMptsP6DExTAq/0xcTCVp0wpkEB5UEQ69a
dqbM91nzF9Z/5RNAW5kBSfazb8He1cSQB2DkxbB+D+rr9ipoFH0kXkOcG6lAQgkt
jCMUR5GZ52XbVdLPAHmcmdF/9ooT0PrtlKul6wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOPk4kguEtivE7TDLbnrEEcpg8vCMB8GA1UdIwQYMBaAFGZ5bnmgBXMzCEbS
4yGydSTMf/quMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTVmNjc2
YWNmYzk0ZWNiODI3OGQ4MmNjYTY5YTgzYTdiNzg1YmQwNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWYyNTkyZGEtODE3My00MGRmLWE3OWEtZTkwNzVm
NzY5ZTcyLzMzN2Y0NTVmODUzNTkzOTQ0MDQ2OTU3OGI1ZjRlZmU1YzU0YTBiMGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjI1OTJkYS04MTczLTQwZGYtYTc5YS1lOTA3
NWY3NjllNzIvOTVmNjc2YWNmYzk0ZWNiODI3OGQ4MmNjYTY5YTgzYTdiNzg1YmQw
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALW97zANBgkqhkiG9w0BAQsFAAOCAQEARp0tk6uGyRikqe65
KBYfDqTwlRkrKd1xOgPU049Q50Q/IC0T9fZi3ovVDpwG62gOB7YY7TH/aLeAZ+Fg
+IWW8QLQDeffQI2rhhKW7w1AuhSOgkS9q5y4na29sWJApUa0PzPiTbg7omJdC4m8
y30nrXZVC6iSrUkEm72zR1ZXbSp4Lxq9ck2wloGt2xd+pMrOaUZ3sHiSbGO87xSN
l4A2pjyy/XXyOx1pKuc07W3GDkXa1ilk74PCoeFKKjWnpJznUjPC4U1TTsEYLUwy
yLgQ5IoPuAAYO+NHedSAqvps7n1FVwRbseNESvflyGtMlUYXDe3Zu2wLFHtFzNKD
fh6dFg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org