Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/31c25c5697700f73c38ec296f3c1e46835fa6039.roa
File:                     31c25c5697700f73c38ec296f3c1e46835fa6039.roa (raw, json)
Hash identifier:          fHR8ZgFQJXBkaP6BSm3jNXnN5L16stYAZOOWNbawDBw=
Subject key identifier:   D9:E1:43:72:69:0F:65:39:65:BF:D4:73:55:CA:69:E8:92:6A:C0:B5
Certificate issuer:       /CN=e50dd9ef106afe1a2202d69bd6a27111b0ecc08c
Certificate serial:       1B7ADB
Authority key identifier: 5C:AF:A0:F2:F2:88:AA:E9:28:B8:50:A7:D8:03:FC:27:31:59:B8:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e50dd9ef106afe1a2202d69bd6a27111b0ecc08c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/31c25c5697700f73c38ec296f3c1e46835fa6039.roa
Signing time:             Tue 27 Sep 2022 11:34:08 +0000
ROA not before:           Wed 24 Mar 2021 14:31:06 +0000
ROA not after:            Tue 24 Mar 2026 14:31:06 +0000
asID:                     265659
IP address blocks:        170.247.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1800923 (0x1b7adb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50dd9ef106afe1a2202d69bd6a27111b0ecc08c
        Validity
            Not Before: Mar 24 14:31:06 2021 GMT
            Not After : Mar 24 14:31:06 2026 GMT
        Subject: CN=31c25c5697700f73c38ec296f3c1e46835fa6039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:71:6b:c0:81:c7:43:ad:91:e9:0f:b9:d4:19:
                    dd:b3:b6:32:d9:26:10:df:dd:af:9a:20:2e:c3:56:
                    33:2b:a9:58:41:aa:00:c1:f2:dd:18:5a:71:ef:cf:
                    e8:93:3f:b5:06:91:99:d4:c9:59:e5:36:47:51:99:
                    90:da:bb:ed:d9:bf:8f:ff:cb:36:f1:0f:45:46:25:
                    16:2a:f9:83:97:7d:df:95:e1:90:ba:3c:90:f7:fb:
                    5c:4d:2c:72:e9:a0:c8:a5:a3:ed:f4:1c:09:3f:fd:
                    76:00:38:95:33:16:48:0c:7f:95:21:b1:cb:0d:4b:
                    51:0f:26:54:51:fd:56:35:2b:d2:f0:18:67:65:c6:
                    6b:34:12:50:df:5d:95:30:ef:93:f7:16:9b:90:81:
                    a3:5e:58:d1:c7:ac:de:9d:7e:cb:45:fd:0b:a3:a1:
                    1c:6f:52:f1:b4:56:f9:d9:7c:0c:bc:db:4c:b9:c3:
                    be:10:0c:a3:40:cd:0b:72:be:00:e4:e0:a8:b8:ac:
                    e6:e3:a8:26:bb:a5:34:d5:64:8b:d1:ab:55:33:42:
                    02:5d:ad:ab:2e:34:86:d8:fa:73:fc:09:9e:47:e3:
                    55:bf:f0:8b:39:47:d0:91:fe:08:5c:37:68:07:ff:
                    4f:c9:76:c8:8e:2b:b6:48:52:4d:0f:7a:5e:ee:be:
                    fc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E1:43:72:69:0F:65:39:65:BF:D4:73:55:CA:69:E8:92:6A:C0:B5
            X509v3 Authority Key Identifier:
                keyid:5C:AF:A0:F2:F2:88:AA:E9:28:B8:50:A7:D8:03:FC:27:31:59:B8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e50dd9ef106afe1a2202d69bd6a27111b0ecc08c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/31c25c5697700f73c38ec296f3c1e46835fa6039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/e50dd9ef106afe1a2202d69bd6a27111b0ecc08c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:4a:76:25:6c:19:28:c5:14:8c:9b:46:8d:43:88:6a:68:
         0b:b7:66:b5:03:82:e5:85:fe:71:ea:29:e9:64:f9:40:4d:0d:
         0b:ee:ad:08:30:bf:8f:c9:1a:e0:70:26:95:dd:fe:2d:9e:02:
         8c:85:8e:e6:b4:98:37:24:07:1e:5d:04:50:41:70:50:9b:46:
         a9:e7:0c:94:d1:3b:f8:1b:f9:22:58:08:f5:dd:9f:09:3e:57:
         00:e1:6f:a8:29:b3:08:c8:9a:4d:a4:75:d5:b9:1b:29:29:a2:
         2f:cd:ba:56:e8:a9:b5:3a:45:68:10:70:ad:ab:fd:4e:f0:bd:
         2f:fb:68:d3:a6:fc:16:ba:aa:25:dd:7d:77:46:2d:ba:c1:1b:
         9c:13:62:e9:70:0e:d3:bf:d9:b8:6e:d2:bb:4c:3a:50:7c:62:
         2b:51:16:2a:32:ed:f9:8a:e8:84:19:ab:00:75:b2:d7:2c:87:
         12:32:c4:c6:18:a8:b2:28:2d:2b:e3:a3:f7:b6:1a:7d:5d:ee:
         86:ef:5a:ea:51:cc:12:99:a6:65:ac:0d:d4:5a:7a:50:14:29:
         88:52:34:7c:de:6c:6b:9e:16:88:18:36:29:68:57:dd:df:28:
         2f:45:00:17:d3:35:41:29:f7:d0:ed:73:51:a8:06:c6:30:c7:
         1b:2c:96:90
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDG3rbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
MGRkOWVmMTA2YWZlMWEyMjAyZDY5YmQ2YTI3MTExYjBlY2MwOGMwHhcNMjEwMzI0
MTQzMTA2WhcNMjYwMzI0MTQzMTA2WjAzMTEwLwYDVQQDEygzMWMyNWM1Njk3NzAw
ZjczYzM4ZWMyOTZmM2MxZTQ2ODM1ZmE2MDM5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAknFrwIHHQ62R6Q+51Bnds7Yy2SYQ392vmiAuw1YzK6lYQaoA
wfLdGFpx78/okz+1BpGZ1MlZ5TZHUZmQ2rvt2b+P/8s28Q9FRiUWKvmDl33fleGQ
ujyQ9/tcTSxy6aDIpaPt9BwJP/12ADiVMxZIDH+VIbHLDUtRDyZUUf1WNSvS8Bhn
ZcZrNBJQ312VMO+T9xabkIGjXljRx6zenX7LRf0Lo6Ecb1LxtFb52XwMvNtMucO+
EAyjQM0Lcr4A5OCouKzm46gmu6U01WSL0atVM0ICXa2rLjSG2Ppz/AmeR+NVv/CL
OUfQkf4IXDdoB/9PyXbIjiu2SFJND3pe7r78NwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNnhQ3JpD2U5Zb/Uc1XKaeiSasC1MB8GA1UdIwQYMBaAFFyvoPLyiKrpKLhQ
p9gD/CcxWbg+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTUwZGQ5
ZWYxMDZhZmUxYTIyMDJkNjliZDZhMjcxMTFiMGVjYzA4Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjUwODNjMGUtOWM1YS00N2M3LWFjOTktMDYxZDc3
YmZmNTNjLzMxYzI1YzU2OTc3MDBmNzNjMzhlYzI5NmYzYzFlNDY4MzVmYTYwMzku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNTA4M2MwZS05YzVhLTQ3YzctYWM5OS0wNjFk
NzdiZmY1M2MvZTUwZGQ5ZWYxMDZhZmUxYTIyMDJkNjliZDZhMjcxMTFiMGVjYzA4
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKr3YjANBgkqhkiG9w0BAQsFAAOCAQEAbGhKdiVsGSjFFIyb
Ro1DiGpoC7dmtQOC5YX+ceop6WT5QE0NC+6tCDC/j8ka4HAmld3+LZ4CjIWO5rSY
NyQHHl0EUEFwUJtGqecMlNE7+Bv5IlgI9d2fCT5XAOFvqCmzCMiaTaR11bkbKSmi
L826VuiptTpFaBBwrav9TvC9L/to06b8FrqqJd19d0YtusEbnBNi6XAO07/ZuG7S
u0w6UHxiK1EWKjLt+YrohBmrAHWy1yyHEjLExhiosigtK+Oj97YafV3uhu9a6lHM
EpmmZawN1Fp6UBQpiFI0fN5sa54WiBg2KWhX3d8oL0UAF9M1QSn30O1zUagGxjDH
GyyWkA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org