Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/80e5c38182f89d129cbabeb3a14cd7a169c27bd5.roa
File:                     80e5c38182f89d129cbabeb3a14cd7a169c27bd5.roa (raw, json)
Hash identifier:          6lOwG1fVQQErXgWxvdcUOFMqnbO8r8Q8/7bMii5WhxI=
Subject key identifier:   8F:B7:0F:43:91:99:93:57:05:8A:40:AA:7E:28:6E:0B:F7:19:FC:43
Certificate issuer:       /CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
Certificate serial:       245530
Authority key identifier: BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/80e5c38182f89d129cbabeb3a14cd7a169c27bd5.roa
Signing time:             Sun 24 Sep 2023 01:43:50 +0000
ROA not before:           Sat 23 Sep 2023 01:43:50 +0000
ROA not after:            Wed 24 Sep 2025 01:43:50 +0000
asID:                     269918
IP address blocks:        131.72.169.0/24 maxlen: 24
                          131.72.170.0/23 maxlen: 24
                          131.72.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381104 (0x245530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42687bcebd27d6fd68fc0f95a18fd8af8b436bb
        Validity
            Not Before: Sep 23 01:43:50 2023 GMT
            Not After : Sep 24 01:43:50 2025 GMT
        Subject: CN=80e5c38182f89d129cbabeb3a14cd7a169c27bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:83:90:22:df:0c:10:22:06:45:3b:89:19:c2:
                    00:75:b8:0d:ab:e4:9e:2f:e2:f4:b3:1d:9a:4b:f6:
                    68:90:fe:4c:f6:b0:10:26:47:f4:a6:e9:8c:bb:f6:
                    34:33:55:d6:9d:82:09:0e:cd:3f:16:43:71:38:ad:
                    a5:bd:37:dd:aa:1f:32:af:17:61:44:47:c8:5c:6b:
                    91:09:41:a4:74:fd:67:9b:df:16:05:82:2c:55:55:
                    2b:01:d9:ed:7e:56:ff:b5:26:50:2e:37:70:ff:a7:
                    85:9b:51:a3:a8:62:a2:3d:00:2b:a0:3d:69:e2:13:
                    9d:c0:86:5c:a4:cb:81:c7:bf:81:c3:df:7f:16:52:
                    5a:64:d7:32:d6:c0:4a:c9:7d:8a:12:b5:c5:70:a8:
                    7e:bb:a0:45:6f:d1:30:1a:04:34:60:57:5f:ca:87:
                    21:c5:82:4c:02:4f:0e:74:c0:1c:ab:de:fa:52:fb:
                    51:73:bc:17:03:f3:d1:e5:db:56:e9:3c:56:60:a6:
                    eb:66:11:1d:8a:97:d7:73:b5:f1:59:6f:23:c8:54:
                    23:af:a0:ce:7d:63:a2:e4:99:2e:b0:65:0a:ab:2f:
                    fb:83:bc:ad:18:81:e3:3e:47:ad:ff:d8:17:4a:59:
                    92:7d:e8:b8:f2:3d:1a:d8:d9:da:9d:e9:05:45:fa:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B7:0F:43:91:99:93:57:05:8A:40:AA:7E:28:6E:0B:F7:19:FC:43
            X509v3 Authority Key Identifier:
                keyid:BE:3E:AB:7A:10:6B:40:B0:F6:42:8F:4B:70:13:51:7C:9C:66:64:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/80e5c38182f89d129cbabeb3a14cd7a169c27bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0134565-9f3c-49b1-aaf6-dff2ea3146fe/c42687bcebd27d6fd68fc0f95a18fd8af8b436bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.169.0-131.72.171.255

    Signature Algorithm: sha256WithRSAEncryption
         a2:4d:cf:4a:9b:e8:35:90:0e:6f:c6:4a:94:e1:23:e4:e5:cb:
         72:64:4e:9d:38:21:b5:59:a7:c4:eb:cf:a9:32:2d:6c:f9:41:
         de:56:bd:e9:52:a8:43:a6:f3:c9:4c:18:32:23:f3:7e:73:d1:
         c8:f8:d1:e3:c2:56:0c:43:02:0e:61:a7:9c:34:ac:bb:ee:92:
         32:b2:37:6d:0d:fa:f5:c4:7d:8a:0b:63:35:d5:c0:d0:b6:5a:
         bd:58:fc:ea:7e:fc:fd:cd:cf:03:10:88:b2:18:fa:8f:c7:ae:
         92:13:5b:59:a5:e8:54:05:44:1c:60:0d:7c:b9:46:38:c9:68:
         12:01:37:cb:97:e7:99:05:6e:ef:f4:2c:c4:bf:75:62:97:8a:
         d7:c7:e0:a8:53:17:57:e3:e4:a4:c6:ac:ec:1f:b8:84:ce:2d:
         3b:4a:dd:e8:2c:89:59:c9:5e:bd:51:5c:2e:42:a9:db:df:2f:
         9e:a1:47:a3:00:dd:8a:e7:1f:0a:c9:33:a4:3d:23:01:53:96:
         4b:ca:44:71:b3:4f:ad:62:0d:d1:94:81:f5:8b:e5:3b:66:22:
         7e:52:13:10:a1:b8:18:d3:35:f2:22:e5:44:44:88:90:4b:68:
         33:74:e1:2a:1f:a4:64:39:fd:03:c6:09:99:b0:b0:b0:9f:d2:
         86:38:8f:92
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDJFUwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM0
MjY4N2JjZWJkMjdkNmZkNjhmYzBmOTVhMThmZDhhZjhiNDM2YmIwHhcNMjMwOTIz
MDE0MzUwWhcNMjUwOTI0MDE0MzUwWjAzMTEwLwYDVQQDEyg4MGU1YzM4MTgyZjg5
ZDEyOWNiYWJlYjNhMTRjZDdhMTY5YzI3YmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6YOQIt8MECIGRTuJGcIAdbgNq+SeL+L0sx2aS/ZokP5M9rAQ
Jkf0pumMu/Y0M1XWnYIJDs0/FkNxOK2lvTfdqh8yrxdhREfIXGuRCUGkdP1nm98W
BYIsVVUrAdntflb/tSZQLjdw/6eFm1GjqGKiPQAroD1p4hOdwIZcpMuBx7+Bw99/
FlJaZNcy1sBKyX2KErXFcKh+u6BFb9EwGgQ0YFdfyochxYJMAk8OdMAcq976UvtR
c7wXA/PR5dtW6TxWYKbrZhEdipfXc7XxWW8jyFQjr6DOfWOi5JkusGUKqy/7g7yt
GIHjPket/9gXSlmSfei48j0a2NnanekFRfoNSQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFI+3D0ORmZNXBYpAqn4obgv3GfxDMB8GA1UdIwQYMBaAFL4+q3oQa0Cw9kKP
S3ATUXycZmTgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzQyNjg3
YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZiYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTAxMzQ1NjUtOWYzYy00OWIxLWFhZjYtZGZmMmVh
MzE0NmZlLzgwZTVjMzgxODJmODlkMTI5Y2JhYmViM2ExNGNkN2ExNjljMjdiZDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMDEzNDU2NS05ZjNjLTQ5YjEtYWFmNi1kZmYy
ZWEzMTQ2ZmUvYzQyNjg3YmNlYmQyN2Q2ZmQ2OGZjMGY5NWExOGZkOGFmOGI0MzZi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAg0ipAwQCg0ioMA0GCSqGSIb3DQEBCwUAA4IBAQCiTc9K
m+g1kA5vxkqU4SPk5ctyZE6dOCG1WafE68+pMi1s+UHeVr3pUqhDpvPJTBgyI/N+
c9HI+NHjwlYMQwIOYaecNKy77pIysjdtDfr1xH2KC2M11cDQtlq9WPzqfvz9zc8D
EIiyGPqPx66SE1tZpehUBUQcYA18uUY4yWgSATfLl+eZBW7v9CzEv3Vil4rXx+Co
UxdX4+SkxqzsH7iEzi07St3oLIlZyV69UVwuQqnb3y+eoUejAN2K5x8KyTOkPSMB
U5ZLykRxs0+tYg3RlIH1i+U7ZiJ+UhMQobgY0zXyIuVERIiQS2gzdOEqH6RkOf0D
xgmZsLCwn9KGOI+S
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:17 2023 by rpki-client on console.sobornost.net