Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/378abc1910aaecea73d480a208273e39a2d898d1.roa
File:                     378abc1910aaecea73d480a208273e39a2d898d1.roa (raw, json)
Hash identifier:          ZR5LDmdfJp1+ABR0N5qvw3iY1gdKKXLyFj50DwBfB3Q=
Subject key identifier:   8B:21:85:60:D5:57:72:A4:32:1B:8E:5F:3F:92:D5:5A:50:F6:C7:07
Certificate issuer:       /CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
Certificate serial:       286C92
Authority key identifier: 66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/378abc1910aaecea73d480a208273e39a2d898d1.roa
Signing time:             Mon 11 Mar 2024 15:17:34 +0000
ROA not before:           Mon 11 Mar 2024 15:17:34 +0000
ROA not after:            Wed 11 Mar 2026 15:17:34 +0000
asID:                     52286
IP address blocks:        181.189.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2649234 (0x286c92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
        Validity
            Not Before: Mar 11 15:17:34 2024 GMT
            Not After : Mar 11 15:17:34 2026 GMT
        Subject: CN=378abc1910aaecea73d480a208273e39a2d898d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:c5:96:0b:97:93:e2:78:81:28:91:55:62:
                    14:df:9e:0c:06:94:0c:cf:01:c2:1f:26:b1:15:e3:
                    ab:99:b9:34:ed:71:89:28:95:80:5b:25:59:4a:4e:
                    0d:74:c4:ea:2a:2d:8d:02:c6:03:e6:4c:56:b7:4c:
                    f2:26:3f:95:d9:1e:7f:6f:42:0d:2b:ad:59:bf:b4:
                    37:13:8f:38:c6:0c:51:e2:aa:76:5f:a0:c0:03:bc:
                    21:08:41:80:ab:b5:92:0e:19:b2:f5:06:bc:e9:85:
                    8c:46:15:cf:7b:a6:d8:33:ca:37:e1:9f:d5:89:50:
                    8b:a5:b1:6e:b9:1e:62:27:d8:dc:dc:da:78:49:91:
                    56:d2:ac:ab:3e:e6:75:49:76:c2:2b:67:6e:08:3c:
                    5b:0e:36:46:cf:0e:e0:47:86:40:c3:20:43:80:5d:
                    31:3c:8d:4d:1b:e3:3d:fb:df:17:b6:f4:8b:ae:92:
                    10:bb:19:2d:45:7a:8c:af:1d:76:5d:98:3a:0c:11:
                    51:52:71:59:bb:45:60:38:9e:94:b3:9a:ab:59:4b:
                    3b:c5:9c:28:1f:67:5d:13:80:e6:ad:9d:be:ed:55:
                    21:6a:57:7d:11:12:be:cc:eb:f3:3a:e1:97:8c:60:
                    09:cb:51:7e:96:00:f1:13:86:a7:9a:cd:d1:ed:8d:
                    bb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:21:85:60:D5:57:72:A4:32:1B:8E:5F:3F:92:D5:5A:50:F6:C7:07
            X509v3 Authority Key Identifier:
                keyid:66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/378abc1910aaecea73d480a208273e39a2d898d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/95f676acfc94ecb8278d82cca69a83a7b785bd05.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:75:76:36:04:40:1a:fd:51:09:3d:7a:32:8b:11:e0:2b:36:
         ea:7b:aa:68:bb:b0:0c:51:c1:07:e2:8c:63:47:a4:1e:32:e8:
         71:45:a8:37:69:01:7e:c5:51:85:51:47:40:db:ed:10:e5:89:
         13:e5:eb:5d:d8:6f:bf:c3:c9:81:2f:cf:98:7d:01:02:cd:9c:
         88:46:e3:c0:e4:e9:e6:59:19:ca:e4:3f:53:25:1a:62:a8:6a:
         b0:1a:6d:6b:4e:23:d3:0e:bd:29:1e:d4:69:21:2a:7b:ab:c9:
         6b:ea:f1:ff:8d:06:f3:c0:fd:be:64:81:90:b2:b2:83:91:5d:
         54:2e:2e:b0:94:d3:d7:e3:be:a7:f8:35:ca:e7:1f:64:d4:ee:
         e3:7b:5c:fd:c3:8f:23:14:fd:ca:b2:31:c8:1d:e4:eb:fe:c0:
         03:23:05:f2:11:33:8b:00:df:ab:0f:d3:91:d7:d5:07:a4:27:
         bd:23:bd:cb:4b:27:d3:1a:29:91:3c:cd:88:00:17:25:04:a4:
         0e:18:7e:62:58:81:88:7d:21:9a:fd:56:7b:f7:1f:35:0d:43:
         5c:30:4a:7b:94:34:52:77:e5:92:a3:d1:e7:c4:64:22:13:4d:
         f0:73:dd:a4:82:f8:44:21:b8:92:8d:e8:83:e7:2e:53:1f:1a:
         54:37:2e:8b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKGySMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk1
ZjY3NmFjZmM5NGVjYjgyNzhkODJjY2E2OWE4M2E3Yjc4NWJkMDUwHhcNMjQwMzEx
MTUxNzM0WhcNMjYwMzExMTUxNzM0WjAzMTEwLwYDVQQDEygzNzhhYmMxOTEwYWFl
Y2VhNzNkNDgwYTIwODI3M2UzOWEyZDg5OGQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqOrFlguXk+J4gSiRVWIU354MBpQMzwHCHyaxFeOrmbk07XGJ
KJWAWyVZSk4NdMTqKi2NAsYD5kxWt0zyJj+V2R5/b0INK61Zv7Q3E484xgxR4qp2
X6DAA7whCEGAq7WSDhmy9Qa86YWMRhXPe6bYM8o34Z/ViVCLpbFuuR5iJ9jc3Np4
SZFW0qyrPuZ1SXbCK2duCDxbDjZGzw7gR4ZAwyBDgF0xPI1NG+M9+98XtvSLrpIQ
uxktRXqMrx12XZg6DBFRUnFZu0VgOJ6Us5qrWUs7xZwoH2ddE4DmrZ2+7VUhald9
ERK+zOvzOuGXjGAJy1F+lgDxE4anms3R7Y27ywIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIshhWDVV3KkMhuOXz+S1VpQ9scHMB8GA1UdIwQYMBaAFGZ5bnmgBXMzCEbS
4yGydSTMf/quMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTVmNjc2
YWNmYzk0ZWNiODI3OGQ4MmNjYTY5YTgzYTdiNzg1YmQwNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWYyNTkyZGEtODE3My00MGRmLWE3OWEtZTkwNzVm
NzY5ZTcyLzM3OGFiYzE5MTBhYWVjZWE3M2Q0ODBhMjA4MjczZTM5YTJkODk4ZDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjI1OTJkYS04MTczLTQwZGYtYTc5YS1lOTA3
NWY3NjllNzIvOTVmNjc2YWNmYzk0ZWNiODI3OGQ4MmNjYTY5YTgzYTdiNzg1YmQw
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALW97jANBgkqhkiG9w0BAQsFAAOCAQEAgnV2NgRAGv1RCT16
MosR4Cs26nuqaLuwDFHBB+KMY0ekHjLocUWoN2kBfsVRhVFHQNvtEOWJE+XrXdhv
v8PJgS/PmH0BAs2ciEbjwOTp5lkZyuQ/UyUaYqhqsBpta04j0w69KR7UaSEqe6vJ
a+rx/40G88D9vmSBkLKyg5FdVC4usJTT1+O+p/g1yucfZNTu43tc/cOPIxT9yrIx
yB3k6/7AAyMF8hEziwDfqw/TkdfVB6QnvSO9y0sn0xopkTzNiAAXJQSkDhh+YliB
iH0hmv1We/cfNQ1DXDBKe5Q0UnflkqPR58RkIhNN8HPdpIL4RCG4ko3og+cuUx8a
VDcuiw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org