Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d3e1983d3eed5557e18d59c48b8315f479686dc6.roa
File:                     d3e1983d3eed5557e18d59c48b8315f479686dc6.roa (raw, json)
Hash identifier:          t60+A7yjSEFwb81UwplCHdxfhqlkka9iYIhSfOsmjIk=
Subject key identifier:   17:80:FD:E6:BF:1F:5B:F7:B9:60:A7:6C:B2:83:56:CC:B9:87:6D:A5
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2DF8DE
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d3e1983d3eed5557e18d59c48b8315f479686dc6.roa
Signing time:             Thu 07 Dec 2023 12:43:10 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     264808
IP address blocks:        181.13.50.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3012830 (0x2df8de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=d3e1983d3eed5557e18d59c48b8315f479686dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:81:a3:ec:53:ca:a0:99:38:1f:3f:32:40:de:
                    e0:45:34:44:21:52:c6:83:3b:5d:07:66:d0:c8:53:
                    cb:77:04:14:ee:9e:4e:3a:5f:5d:22:32:c9:be:32:
                    ac:20:4c:96:12:97:14:ae:83:cc:cf:b7:1f:0f:82:
                    25:cf:a8:61:3e:99:c2:9e:31:a2:79:0f:af:f3:75:
                    b4:78:3d:57:e8:25:b7:e1:ca:a7:b5:9f:9c:88:66:
                    bf:a9:01:22:d8:24:63:c8:c7:c9:69:d0:06:c4:68:
                    7c:46:0d:77:15:99:4f:5c:f6:d1:07:84:3b:d1:d3:
                    4a:42:67:b9:85:78:50:f8:0b:6c:6d:ff:43:3c:2d:
                    ba:2f:16:78:bb:9d:8a:39:6b:4c:e7:70:d2:31:76:
                    77:19:ad:87:b4:35:73:58:b0:56:63:76:a4:6c:c4:
                    96:25:89:a1:98:b9:1b:39:58:15:8c:c1:29:ae:2d:
                    99:e4:bb:46:24:aa:36:86:fb:78:68:bc:4f:67:67:
                    97:ef:68:63:ea:af:eb:0a:b5:88:79:47:71:a6:8f:
                    4f:5b:d7:9e:ed:6e:1b:32:34:3f:ca:fa:e2:a9:49:
                    cb:a8:84:f5:68:90:81:52:59:26:41:7a:67:d1:3e:
                    49:5e:b0:97:83:ea:12:49:4a:89:ad:bb:83:de:1f:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:80:FD:E6:BF:1F:5B:F7:B9:60:A7:6C:B2:83:56:CC:B9:87:6D:A5
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d3e1983d3eed5557e18d59c48b8315f479686dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:19:c2:35:24:52:97:28:d6:9d:4e:f8:57:7b:a5:b3:e1:ff:
         df:3c:4e:19:be:5c:75:31:fb:84:5a:39:28:8f:b7:06:84:f3:
         9d:61:b5:e4:bf:ff:03:78:05:b8:e4:a1:57:d7:4c:7a:09:92:
         d1:69:49:1c:1d:4d:37:a1:cf:03:14:12:3d:a2:ac:7b:55:15:
         e3:ff:01:d2:4a:dc:dc:31:24:31:fc:8d:8c:a4:06:6e:a3:52:
         d7:05:76:1e:71:40:a7:8a:8c:96:ae:fc:48:57:aa:08:84:f7:
         fe:33:b6:07:5c:62:9a:31:f3:88:1a:10:8e:fa:6b:bc:29:a5:
         02:0d:51:7b:f1:fd:be:56:84:d1:48:eb:02:26:dd:75:51:4c:
         bf:b8:71:95:99:47:91:20:ac:f6:e7:1f:81:62:4b:ed:0e:b3:
         82:8c:f6:5c:6d:72:7c:68:d9:10:00:79:b7:cf:8a:05:46:1c:
         a8:14:7b:07:53:53:0e:54:60:2f:66:f0:f9:45:9f:5a:69:9c:
         3f:e7:f1:02:04:b9:b8:9a:19:b1:1a:fc:ac:f0:84:63:06:9e:
         2d:d3:11:26:e4:78:05:7a:0c:40:21:99:62:43:7d:b8:eb:ad:
         66:0a:b2:44:ea:26:cd:a9:e3:7b:2d:b6:ca:16:29:b7:a4:b3:
         21:0c:8f:4d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDLfjeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
MjYzZjBlYTFiNTYzMjg5MjA1YWQwMjY0NTMwZjhlNmMzMGU1NjkwHhcNMjMxMjA3
MTI0MTU3WhcNMjgxMjA3MTI0MTU3WjAzMTEwLwYDVQQDEyhkM2UxOTgzZDNlZWQ1
NTU3ZTE4ZDU5YzQ4YjgzMTVmNDc5Njg2ZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh4Gj7FPKoJk4Hz8yQN7gRTREIVLGgztdB2bQyFPLdwQU7p5O
Ol9dIjLJvjKsIEyWEpcUroPMz7cfD4Ilz6hhPpnCnjGieQ+v83W0eD1X6CW34cqn
tZ+ciGa/qQEi2CRjyMfJadAGxGh8Rg13FZlPXPbRB4Q70dNKQme5hXhQ+Atsbf9D
PC26LxZ4u52KOWtM53DSMXZ3Ga2HtDVzWLBWY3akbMSWJYmhmLkbOVgVjMEpri2Z
5LtGJKo2hvt4aLxPZ2eX72hj6q/rCrWIeUdxpo9PW9ee7W4bMjQ/yvriqUnLqIT1
aJCBUlkmQXpn0T5JXrCXg+oSSUqJrbuD3h9oTQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBeA/ea/H1v3uWCnbLKDVsy5h22lMB8GA1UdIwQYMBaAFMD3ES/X9uODqZpb
XBnhTav8A9wtMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjgyNjNm
MGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3L2QzZTE5ODNkM2VlZDU1NTdlMThkNTljNDhiODMxNWY0Nzk2ODZkYzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZjgyNjNmMGVhMWI1NjMyODkyMDVhZDAyNjQ1MzBmOGU2YzMwZTU2
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAbUNMjANBgkqhkiG9w0BAQsFAAOCAQEAHBnCNSRSlyjWnU74
V3uls+H/3zxOGb5cdTH7hFo5KI+3BoTznWG15L//A3gFuOShV9dMegmS0WlJHB1N
N6HPAxQSPaKse1UV4/8B0krc3DEkMfyNjKQGbqNS1wV2HnFAp4qMlq78SFeqCIT3
/jO2B1ximjHziBoQjvprvCmlAg1Re/H9vlaE0UjrAibddVFMv7hxlZlHkSCs9ucf
gWJL7Q6zgoz2XG1yfGjZEAB5t8+KBUYcqBR7B1NTDlRgL2bw+UWfWmmcP+fxAgS5
uJoZsRr8rPCEYwaeLdMRJuR4BXoMQCGZYkN9uOutZgqyROomzanjey22yhYpt6Sz
IQyPTQ==
-----END CERTIFICATE-----
Generated at Tue May 6 14:12:29 2025 by rpki-client