Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/d9ffcc7a7c49dd43e0e4117a5c239b75f872823f.roa
File:                     d9ffcc7a7c49dd43e0e4117a5c239b75f872823f.roa (raw, json)
Hash identifier:          w4btXy85X8gRJwdiRVszRm9KRV8lhLBoLKLgs1aNjb4=
Subject key identifier:   BF:B7:CF:35:E2:D3:B1:64:B7:6C:44:BA:C5:FC:19:52:F3:12:94:57
Certificate issuer:       /CN=0cf82f2746d0f60feb6900d06d01749fb9fd33bd
Certificate serial:       12B747
Authority key identifier: AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/d9ffcc7a7c49dd43e0e4117a5c239b75f872823f.roa
Signing time:             Fri 05 Apr 2024 15:15:20 +0000
ROA not before:           Fri 05 Apr 2024 15:15:19 +0000
ROA not after:            Sun 05 Apr 2026 15:15:19 +0000
asID:                     265688
IP address blocks:        181.174.228.0/22 maxlen: 22
                          181.174.228.0/23 maxlen: 23
                          181.174.230.0/23 maxlen: 23
                          181.174.228.0/24 maxlen: 24
                          181.174.229.0/24 maxlen: 24
                          181.174.230.0/24 maxlen: 24
                          181.174.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226567 (0x12b747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cf82f2746d0f60feb6900d06d01749fb9fd33bd
        Validity
            Not Before: Apr  5 15:15:19 2024 GMT
            Not After : Apr  5 15:15:19 2026 GMT
        Subject: CN=d9ffcc7a7c49dd43e0e4117a5c239b75f872823f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:72:85:fe:dc:f7:d8:a2:c6:57:f5:37:3f:
                    85:9a:36:0d:0e:1a:26:d2:62:d4:b0:38:18:20:e5:
                    1b:6d:d2:fb:57:15:35:48:b3:7d:4c:09:3b:7e:f4:
                    05:7a:e6:20:62:29:27:76:fb:45:85:36:db:9f:a0:
                    1b:2e:0b:d7:31:d0:c7:c9:d8:e6:7b:90:40:96:3f:
                    44:98:bd:e6:d6:9d:b4:42:df:87:f6:08:ce:ca:bf:
                    cd:a9:a7:0f:d8:96:c8:7a:8b:07:34:7f:d2:d0:2a:
                    97:6c:77:e4:63:9c:4a:09:e0:49:c4:3e:24:68:ae:
                    ad:d6:7a:76:b4:8b:94:61:83:45:d9:8e:fc:bb:a6:
                    b6:c6:de:a3:91:26:97:9a:8a:60:7f:8a:fd:9b:3f:
                    ac:af:07:dc:66:80:4d:f2:ff:5c:c2:dd:fc:ff:77:
                    9e:1c:85:37:dc:03:8f:4b:8c:a3:51:8e:13:96:08:
                    66:66:35:60:01:b6:bf:d0:e1:e4:e5:46:de:a6:21:
                    95:b9:16:32:98:40:04:18:7a:77:95:c4:6d:00:0e:
                    de:34:03:ce:5e:72:ac:11:84:ec:f7:8c:60:37:3c:
                    42:96:1b:80:ce:6f:33:20:e4:d4:a2:38:2e:64:04:
                    ac:0a:25:16:c0:d5:29:c0:ff:b8:2c:ce:9d:42:b5:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B7:CF:35:E2:D3:B1:64:B7:6C:44:BA:C5:FC:19:52:F3:12:94:57
            X509v3 Authority Key Identifier:
                keyid:AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/d9ffcc7a7c49dd43e0e4117a5c239b75f872823f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:bb:fa:ef:6b:a3:65:e2:62:c7:92:e3:a1:0a:b5:44:52:0a:
         d8:35:2d:4f:fe:e9:92:6a:7c:6e:bb:de:f6:dc:56:df:38:c6:
         21:14:1a:06:45:ed:97:7e:1d:61:5e:10:be:fb:dd:ab:9e:bb:
         78:46:f0:9d:15:64:28:c8:c7:eb:e1:5a:e7:06:38:29:e6:47:
         8f:2f:97:93:aa:9e:24:ce:8f:4f:c4:aa:ca:ce:20:8c:9d:27:
         5b:56:4a:42:27:b4:9c:cb:ba:39:2a:84:33:fc:99:f2:f2:01:
         54:87:1c:04:45:ab:24:e9:09:87:ef:14:43:a9:05:a6:07:57:
         84:89:49:b0:5a:b7:9a:02:38:bb:a6:d1:99:c4:5a:f1:ce:c9:
         20:7b:31:e3:63:10:11:cc:c7:d8:1f:28:a4:5a:a9:1d:3e:ee:
         67:b9:53:44:da:d3:e9:2c:ae:e3:20:1f:f9:8a:ec:96:4e:55:
         8f:88:ae:c4:76:53:92:bc:8f:2c:bc:0e:4e:09:37:91:34:45:
         2f:0d:17:3b:8d:60:19:76:f0:81:b1:a5:94:61:54:37:85:17:
         ea:62:30:13:8d:88:92:83:1a:08:25:d4:42:62:d6:f5:8b:5d:
         3b:f6:00:e3:f5:af:a2:65:11:71:24:a3:a0:90:79:1d:9b:75:
         c9:a2:fe:6f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDErdHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBj
ZjgyZjI3NDZkMGY2MGZlYjY5MDBkMDZkMDE3NDlmYjlmZDMzYmQwHhcNMjQwNDA1
MTUxNTE5WhcNMjYwNDA1MTUxNTE5WjAzMTEwLwYDVQQDEyhkOWZmY2M3YTdjNDlk
ZDQzZTBlNDExN2E1YzIzOWI3NWY4NzI4MjNmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvkZyhf7c99iixlf1Nz+FmjYNDhom0mLUsDgYIOUbbdL7VxU1
SLN9TAk7fvQFeuYgYikndvtFhTbbn6AbLgvXMdDHydjme5BAlj9EmL3m1p20Qt+H
9gjOyr/NqacP2JbIeosHNH/S0CqXbHfkY5xKCeBJxD4kaK6t1np2tIuUYYNF2Y78
u6a2xt6jkSaXmopgf4r9mz+srwfcZoBN8v9cwt38/3eeHIU33AOPS4yjUY4Tlghm
ZjVgAba/0OHk5UbepiGVuRYymEAEGHp3lcRtAA7eNAPOXnKsEYTs94xgNzxClhuA
zm8zIOTUojguZASsCiUWwNUpwP+4LM6dQrV5CQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFL+3zzXi07Fkt2xEusX8GVLzEpRXMB8GA1UdIwQYMBaAFKxL7z4wF+w4CqcV
ALWAwz4l73axMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGNmODJm
Mjc0NmQwZjYwZmViNjkwMGQwNmQwMTc0OWZiOWZkMzNiZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjVhZDMxMzItMDY1ZS00OGRhLWJiMWQtY2I0NGQx
ZmFjZjhkL2Q5ZmZjYzdhN2M0OWRkNDNlMGU0MTE3YTVjMjM5Yjc1Zjg3MjgyM2Yu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNWFkMzEzMi0wNjVlLTQ4ZGEtYmIxZC1jYjQ0
ZDFmYWNmOGQvMGNmODJmMjc0NmQwZjYwZmViNjkwMGQwNmQwMTc0OWZiOWZkMzNi
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArWu5DANBgkqhkiG9w0BAQsFAAOCAQEAXrv672ujZeJix5Lj
oQq1RFIK2DUtT/7pkmp8brve9txW3zjGIRQaBkXtl34dYV4Qvvvdq567eEbwnRVk
KMjH6+Fa5wY4KeZHjy+Xk6qeJM6PT8Sqys4gjJ0nW1ZKQie0nMu6OSqEM/yZ8vIB
VIccBEWrJOkJh+8UQ6kFpgdXhIlJsFq3mgI4u6bRmcRa8c7JIHsx42MQEczH2B8o
pFqpHT7uZ7lTRNrT6Syu4yAf+Yrslk5Vj4iuxHZTkryPLLwOTgk3kTRFLw0XO41g
GXbwgbGllGFUN4UX6mIwE42IkoMaCCXUQmLW9YtdO/YA4/WvomURcSSjoJB5HZt1
yaL+bw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org