Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0b1ccc03-b344-455f-b91b-342a76b8d060/700e67f33f12cc89a047d9e613b3187937f6fdfb.roa
File:                     700e67f33f12cc89a047d9e613b3187937f6fdfb.roa (raw, json)
Hash identifier:          f1dR3ZItv9HjilqPOnYgGjQI3TW4v3RyHdAurLtDpdI=
Subject key identifier:   2F:4C:DB:42:E6:3B:F1:49:32:7C:C2:DA:21:A6:08:7E:77:C1:36:49
Certificate issuer:       /CN=6c8a4b07cb08ab3c53324618779575295829f1ff
Certificate serial:       0697C0
Authority key identifier: 9F:D4:EE:23:DD:0E:72:70:44:2D:91:DA:53:8A:88:77:66:A5:D5:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c8a4b07cb08ab3c53324618779575295829f1ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0b1ccc03-b344-455f-b91b-342a76b8d060/700e67f33f12cc89a047d9e613b3187937f6fdfb.roa
Signing time:             Sat 10 Feb 2024 02:54:15 +0000
ROA not before:           Sat 10 Feb 2024 02:54:15 +0000
ROA not after:            Tue 10 Feb 2026 02:54:15 +0000
asID:                     270149
IP address blocks:        159.16.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432064 (0x697c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8a4b07cb08ab3c53324618779575295829f1ff
        Validity
            Not Before: Feb 10 02:54:15 2024 GMT
            Not After : Feb 10 02:54:15 2026 GMT
        Subject: CN=700e67f33f12cc89a047d9e613b3187937f6fdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:b3:0a:54:52:87:82:7a:25:59:05:13:a1:
                    d0:a1:7a:ee:bb:cb:4b:84:07:c6:26:81:6a:ef:c7:
                    30:eb:c7:70:f7:65:4b:99:81:58:5d:1b:27:47:e2:
                    0e:d9:5a:92:6b:8a:e6:1e:f2:49:be:a3:d8:d4:93:
                    25:fe:64:3f:af:26:a5:d8:65:ed:d9:0c:f0:86:e0:
                    1c:7b:c2:6f:1d:25:7c:3e:6a:f4:2d:8b:ee:ca:b5:
                    4a:31:52:2a:d1:f8:99:63:ce:df:81:29:bc:18:48:
                    07:d4:2e:39:1d:26:0e:93:fd:17:2b:a2:5a:18:b6:
                    1c:b4:d8:86:6e:8a:b8:14:2e:fe:00:e7:ea:0d:5a:
                    d5:47:1f:e8:f6:0f:06:19:81:1e:1d:42:8e:93:a1:
                    3b:51:a5:79:f6:d1:9c:78:26:d9:56:45:37:54:53:
                    28:4b:ba:0f:e1:8e:76:14:e9:cf:0b:36:e2:fa:51:
                    77:a0:d4:3d:8f:bc:6b:e2:b1:50:56:fe:5d:5a:cb:
                    6d:d8:6d:64:20:28:ee:f3:66:2a:fc:56:55:c1:07:
                    75:5a:57:c5:94:c9:de:df:cd:8a:52:81:2f:8c:23:
                    94:14:78:ea:7d:a7:6c:ad:c6:d1:ae:f6:45:5d:ec:
                    4d:df:38:34:8a:65:ad:e0:ab:1d:fc:1b:51:f5:48:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4C:DB:42:E6:3B:F1:49:32:7C:C2:DA:21:A6:08:7E:77:C1:36:49
            X509v3 Authority Key Identifier:
                keyid:9F:D4:EE:23:DD:0E:72:70:44:2D:91:DA:53:8A:88:77:66:A5:D5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c8a4b07cb08ab3c53324618779575295829f1ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0b1ccc03-b344-455f-b91b-342a76b8d060/700e67f33f12cc89a047d9e613b3187937f6fdfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0b1ccc03-b344-455f-b91b-342a76b8d060/6c8a4b07cb08ab3c53324618779575295829f1ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.16.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:b8:63:08:b1:f1:30:de:ab:33:ab:d5:16:d3:3f:ac:20:2b:
         01:89:5e:f1:e1:dd:e0:34:e2:2c:f9:88:40:ec:37:8c:f5:12:
         d9:14:ff:db:19:a4:34:a0:46:3e:ad:2a:bf:3a:8d:96:6d:cb:
         9e:5c:06:f4:d4:1b:69:05:31:6a:09:ad:01:96:70:94:bf:d8:
         6f:f8:a2:46:8d:70:c7:20:e3:db:fa:a4:c9:f3:e5:e0:82:df:
         d8:ee:6b:42:36:e0:aa:b9:92:b3:c0:8d:7a:eb:23:a9:b2:5c:
         2e:6c:21:39:43:26:7d:d2:4f:42:4c:9f:9f:89:fc:c0:0c:59:
         24:15:24:55:ee:62:54:4e:f6:d1:b2:82:0a:0c:fa:74:1b:cb:
         05:93:07:b1:c1:25:25:a3:7d:8f:89:36:a6:36:32:5e:23:10:
         b5:91:4b:35:14:bf:24:4b:2f:77:d1:62:47:5b:60:b9:e8:3e:
         c4:95:cf:66:81:5a:e5:2f:cd:52:6b:1f:55:5e:e3:01:d3:71:
         6b:87:47:1c:aa:91:90:9e:4a:45:46:18:63:76:80:93:1c:09:
         a1:68:6c:9b:9c:24:87:7c:ae:76:ec:86:ab:7f:f4:a1:55:0f:
         69:8c:fa:dc:26:b5:08:97:2b:24:1f:27:28:dd:ae:a4:3e:de:
         2c:e1:ec:78
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBpfAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
OGE0YjA3Y2IwOGFiM2M1MzMyNDYxODc3OTU3NTI5NTgyOWYxZmYwHhcNMjQwMjEw
MDI1NDE1WhcNMjYwMjEwMDI1NDE1WjAzMTEwLwYDVQQDEyg3MDBlNjdmMzNmMTJj
Yzg5YTA0N2Q5ZTYxM2IzMTg3OTM3ZjZmZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApWazClRSh4J6JVkFE6HQoXruu8tLhAfGJoFq78cw68dw92VL
mYFYXRsnR+IO2VqSa4rmHvJJvqPY1JMl/mQ/ryal2GXt2QzwhuAce8JvHSV8Pmr0
LYvuyrVKMVIq0fiZY87fgSm8GEgH1C45HSYOk/0XK6JaGLYctNiGboq4FC7+AOfq
DVrVRx/o9g8GGYEeHUKOk6E7UaV59tGceCbZVkU3VFMoS7oP4Y52FOnPCzbi+lF3
oNQ9j7xr4rFQVv5dWstt2G1kICju82Yq/FZVwQd1WlfFlMne382KUoEvjCOUFHjq
fadsrcbRrvZFXexN3zg0imWt4Ksd/BtR9UgIuQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC9M20LmO/FJMnzC2iGmCH53wTZJMB8GA1UdIwQYMBaAFJ/U7iPdDnJwRC2R
2lOKiHdmpdVcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmM4YTRi
MDdjYjA4YWIzYzUzMzI0NjE4Nzc5NTc1Mjk1ODI5ZjFmZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGIxY2NjMDMtYjM0NC00NTVmLWI5MWItMzQyYTc2
YjhkMDYwLzcwMGU2N2YzM2YxMmNjODlhMDQ3ZDllNjEzYjMxODc5MzdmNmZkZmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYjFjY2MwMy1iMzQ0LTQ1NWYtYjkxYi0zNDJh
NzZiOGQwNjAvNmM4YTRiMDdjYjA4YWIzYzUzMzI0NjE4Nzc5NTc1Mjk1ODI5ZjFm
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJ8QBDANBgkqhkiG9w0BAQsFAAOCAQEAkrhjCLHxMN6rM6vV
FtM/rCArAYle8eHd4DTiLPmIQOw3jPUS2RT/2xmkNKBGPq0qvzqNlm3LnlwG9NQb
aQUxagmtAZZwlL/Yb/iiRo1wxyDj2/qkyfPl4ILf2O5rQjbgqrmSs8CNeusjqbJc
LmwhOUMmfdJPQkyfn4n8wAxZJBUkVe5iVE720bKCCgz6dBvLBZMHscElJaN9j4k2
pjYyXiMQtZFLNRS/JEsvd9FiR1tgueg+xJXPZoFa5S/NUmsfVV7jAdNxa4dHHKqR
kJ5KRUYYY3aAkxwJoWhsm5wkh3yuduyGq3/0oVUPaYz63Ca1CJcrJB8nKN2upD7e
LOHseA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org