Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/a241a43a7c8300a0cb725cefa7a3d707666636e4.roa
File:                     a241a43a7c8300a0cb725cefa7a3d707666636e4.roa (raw, json)
Hash identifier:          bCXd8dhSNh5+aSNSD1Xx8JhOVck7Slbelx5dzVeoWt0=
Subject key identifier:   30:BF:B5:B0:E8:60:11:CE:E1:83:54:9D:FA:06:69:68:B7:40:95:7A
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       271F44
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/a241a43a7c8300a0cb725cefa7a3d707666636e4.roa
Signing time:             Tue 19 Dec 2023 23:52:22 +0000
ROA not before:           Tue 19 Dec 2023 23:52:22 +0000
ROA not after:            Fri 19 Dec 2025 23:52:22 +0000
asID:                     272097
IP address blocks:        186.5.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2563908 (0x271f44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Dec 19 23:52:22 2023 GMT
            Not After : Dec 19 23:52:22 2025 GMT
        Subject: CN=a241a43a7c8300a0cb725cefa7a3d707666636e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:21:e7:a4:f5:51:48:60:cc:8c:aa:dd:79:
                    e2:9b:22:5c:82:65:dc:d9:7e:26:4d:f9:70:0f:b6:
                    bb:59:55:cb:cd:70:70:60:cd:31:81:02:36:0a:b1:
                    bd:83:5d:1a:87:fb:b4:e7:0f:7f:c6:5e:3e:06:b7:
                    e9:e5:53:9c:f7:34:0a:03:19:ba:94:0d:5b:d9:f5:
                    1e:dd:6e:76:d7:1e:91:15:83:af:61:0c:c7:80:0b:
                    cd:09:6f:27:7f:e9:60:c6:95:c0:d0:4c:44:13:71:
                    a8:a0:ac:0b:51:3a:1a:52:2c:6c:ce:66:c6:3d:d9:
                    13:8b:92:64:d8:27:cf:6e:7d:d0:86:3e:bf:73:fc:
                    3a:59:b4:d7:4f:0d:93:40:eb:15:a1:d7:40:4c:42:
                    65:b0:32:74:a6:ab:cd:b6:2b:62:28:fa:04:38:f6:
                    45:26:74:5d:b8:73:78:7d:2a:41:c6:d0:20:8c:3f:
                    a9:fd:e1:29:1c:38:36:21:34:8c:43:e6:e9:60:8e:
                    61:c1:19:cb:b8:9d:63:1b:4c:84:83:0a:4f:6a:48:
                    fd:a7:a3:58:21:d5:ba:d8:0a:dc:01:00:bf:c7:b3:
                    5e:aa:ba:45:5a:c2:08:c7:0f:b8:c0:9a:b3:26:a0:
                    24:df:ca:a8:b0:e9:5a:90:10:09:f4:1c:7c:75:f3:
                    04:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BF:B5:B0:E8:60:11:CE:E1:83:54:9D:FA:06:69:68:B7:40:95:7A
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/a241a43a7c8300a0cb725cefa7a3d707666636e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:dd:28:8a:39:80:74:ee:59:9f:23:7c:91:29:bb:e3:0c:cf:
         25:25:59:02:7c:29:0a:35:24:8e:82:6d:68:7d:4c:d5:48:f5:
         bc:e8:b0:ec:77:c5:a2:53:69:66:dc:d8:72:ac:37:73:a5:e9:
         6d:69:57:a0:29:de:18:75:ee:cb:13:95:a0:55:c8:46:86:4a:
         6f:c2:fa:71:29:0e:c3:59:da:d3:ad:7b:8b:33:0a:18:72:a4:
         c3:68:22:65:eb:13:4f:4a:78:30:a5:10:91:cf:69:1e:c6:04:
         e1:5b:75:58:1f:93:d2:32:2d:22:04:5e:f4:dc:30:bd:d7:02:
         8c:4f:ee:73:b5:de:c7:f4:02:36:75:89:45:c7:38:39:57:a7:
         44:76:fc:81:4e:14:c7:01:02:ac:19:91:3e:96:eb:81:23:c1:
         0d:8b:5d:25:3b:27:9d:af:e5:09:60:40:ab:e5:58:27:37:76:
         dd:43:8f:03:28:20:c5:63:1b:11:2c:e2:72:cf:27:98:a3:cf:
         09:11:e1:f5:4d:a1:44:7e:f3:aa:ef:c4:74:76:13:68:91:d2:
         13:10:ee:66:66:6f:c4:77:a5:a4:c7:cc:f2:a4:00:f0:c4:da:
         4f:ea:e9:bb:9f:d9:17:97:54:66:40:c2:eb:a9:c2:d5:0d:e7:
         62:ff:5b:32
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJx9EMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjMxMjE5
MjM1MjIyWhcNMjUxMjE5MjM1MjIyWjAzMTEwLwYDVQQDEyhhMjQxYTQzYTdjODMw
MGEwY2I3MjVjZWZhN2EzZDcwNzY2NjYzNmU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnkUh56T1UUhgzIyq3XnimyJcgmXc2X4mTflwD7a7WVXLzXBw
YM0xgQI2CrG9g10ah/u05w9/xl4+Brfp5VOc9zQKAxm6lA1b2fUe3W521x6RFYOv
YQzHgAvNCW8nf+lgxpXA0ExEE3GooKwLUToaUixszmbGPdkTi5Jk2CfPbn3Qhj6/
c/w6WbTXTw2TQOsVoddATEJlsDJ0pqvNtitiKPoEOPZFJnRduHN4fSpBxtAgjD+p
/eEpHDg2ITSMQ+bpYI5hwRnLuJ1jG0yEgwpPakj9p6NYIdW62ArcAQC/x7NeqrpF
WsIIxw+4wJqzJqAk38qosOlakBAJ9Bx8dfME9QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDC/tbDoYBHO4YNUnfoGaWi3QJV6MB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r
EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm
MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5
YzE0NTY0L2EyNDFhNDNhN2M4MzAwYTBjYjcyNWNlZmE3YTNkNzA3NjY2NjM2ZTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk
NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALoFfTANBgkqhkiG9w0BAQsFAAOCAQEAfd0oijmAdO5ZnyN8
kSm74wzPJSVZAnwpCjUkjoJtaH1M1Uj1vOiw7HfFolNpZtzYcqw3c6XpbWlXoCne
GHXuyxOVoFXIRoZKb8L6cSkOw1na0617izMKGHKkw2giZesTT0p4MKUQkc9pHsYE
4Vt1WB+T0jItIgRe9NwwvdcCjE/uc7Xex/QCNnWJRcc4OVenRHb8gU4UxwECrBmR
PpbrgSPBDYtdJTsnna/lCWBAq+VYJzd23UOPAyggxWMbESzics8nmKPPCRHh9U2h
RH7zqu/EdHYTaJHSExDuZmZvxHelpMfM8qQA8MTaT+rpu5/ZF5dUZkDC66nC1Q3n
Yv9bMg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org