Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/eef926d21a974e917e9683e543f4e618f2255fb7.roa
File:                     eef926d21a974e917e9683e543f4e618f2255fb7.roa (raw, json)
Hash identifier:          1W/CBkwFXlCnwdq1ZrVyYWK/p+mXyB0tgaVJDrlN2WU=
Subject key identifier:   E7:C2:68:D2:45:72:D6:A6:8E:42:7C:C4:D8:6D:0E:F5:62:3A:EE:9E
Certificate issuer:       /CN=15cc5e31ff1fd8bfd449b0137858987f6db03d4c
Certificate serial:       1AA9BF
Authority key identifier: F9:DE:9A:F0:1B:A8:91:DF:F3:C8:3D:37:DA:40:26:64:DF:5B:36:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/eef926d21a974e917e9683e543f4e618f2255fb7.roa
Signing time:             Sat 22 Apr 2023 08:30:02 +0000
ROA not before:           Fri 21 Apr 2023 08:30:02 +0000
ROA not after:            Sun 20 Apr 2025 08:30:02 +0000
asID:                     263814
IP address blocks:        138.219.16.0/24 maxlen: 24
                          138.219.17.0/24 maxlen: 24
                          138.219.18.0/24 maxlen: 24
                          138.219.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747391 (0x1aa9bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cc5e31ff1fd8bfd449b0137858987f6db03d4c
        Validity
            Not Before: Apr 21 08:30:02 2023 GMT
            Not After : Apr 20 08:30:02 2025 GMT
        Subject: CN=eef926d21a974e917e9683e543f4e618f2255fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5c:27:e9:1c:73:e0:d5:5d:d4:6e:e4:9c:07:
                    47:ea:8d:9e:88:0c:f9:18:ac:94:06:e9:98:2f:57:
                    27:7c:ed:e2:d5:b9:80:f5:68:80:f1:97:cf:66:08:
                    26:6f:ae:7c:e4:7a:a3:d0:0e:2a:04:8d:50:91:7a:
                    98:36:57:ba:65:f6:36:0e:51:43:1e:b9:24:21:19:
                    80:78:94:38:64:ce:f4:2b:3f:c7:8a:0f:3a:1e:ac:
                    ad:33:87:cc:fc:16:8d:bb:52:15:d0:a0:9e:fe:46:
                    ed:8c:a9:2d:a4:33:49:a8:dd:0f:74:66:a4:0d:e3:
                    87:11:4a:07:25:13:26:34:0a:00:d1:98:8f:da:4d:
                    3f:93:13:b5:0f:df:dc:df:96:4a:e8:07:8f:ca:ab:
                    46:f9:00:cb:37:93:a8:25:21:bc:21:01:97:70:31:
                    ec:49:63:b5:8f:c1:9d:11:20:cb:92:0d:15:d1:2b:
                    a7:6d:96:a4:6e:d5:b2:f8:13:0e:4d:c0:1f:fa:0f:
                    7d:4e:15:71:c3:31:4a:9f:ab:73:51:b1:72:8a:15:
                    4f:e6:f3:19:1e:6e:45:65:27:2c:b4:a3:57:4a:c4:
                    ae:01:6f:94:05:99:01:ad:c9:67:62:d5:46:70:c9:
                    2f:f8:47:b1:b8:08:c1:4c:af:74:f5:3f:fd:20:8c:
                    77:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C2:68:D2:45:72:D6:A6:8E:42:7C:C4:D8:6D:0E:F5:62:3A:EE:9E
            X509v3 Authority Key Identifier:
                keyid:F9:DE:9A:F0:1B:A8:91:DF:F3:C8:3D:37:DA:40:26:64:DF:5B:36:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/eef926d21a974e917e9683e543f4e618f2255fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:c4:05:5b:97:d9:1a:2f:17:71:fd:91:1b:03:ec:6c:2d:df:
         12:40:1e:67:98:19:1d:2c:2e:57:1c:e4:f1:83:a1:5d:6a:63:
         88:3a:a3:df:93:ca:63:fa:a9:b8:71:2a:42:35:51:28:45:93:
         9e:fd:fb:86:61:ae:3e:ca:d6:b4:46:38:c9:d3:3a:3e:24:e4:
         19:6c:e7:7d:25:67:17:dd:25:15:f6:12:04:e7:46:d3:eb:d4:
         f2:df:96:9d:f0:a3:59:d6:a5:a3:17:51:39:64:4e:49:e3:f7:
         4f:cf:32:82:a8:14:0a:1f:fb:9a:f0:02:9d:c9:bb:59:dc:d1:
         20:c2:c3:dd:75:3c:5c:ed:fb:df:78:3b:e4:b0:ca:62:b5:be:
         af:65:e9:05:8f:02:90:0d:ca:84:22:20:2f:e6:6a:51:eb:dd:
         e9:d5:eb:c9:fe:59:11:3c:cb:95:77:34:50:c0:6a:45:13:f8:
         6a:b8:22:e3:f1:ec:bb:51:3f:8c:3a:93:b4:65:cc:ea:ca:3f:
         39:2e:2c:a5:b3:81:05:0f:c4:18:bc:1d:c4:72:be:86:a3:dd:
         7a:dc:b2:0b:f7:18:d3:7b:ba:66:f4:d3:67:8a:dd:d9:c0:88:
         1e:35:30:d3:67:e8:8e:3e:00:12:da:db:4a:99:78:f7:83:4c:
         31:69:ce:ec
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGqm/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE1
Y2M1ZTMxZmYxZmQ4YmZkNDQ5YjAxMzc4NTg5ODdmNmRiMDNkNGMwHhcNMjMwNDIx
MDgzMDAyWhcNMjUwNDIwMDgzMDAyWjAzMTEwLwYDVQQDEyhlZWY5MjZkMjFhOTc0
ZTkxN2U5NjgzZTU0M2Y0ZTYxOGYyMjU1ZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4Vwn6Rxz4NVd1G7knAdH6o2eiAz5GKyUBumYL1cnfO3i1bmA
9WiA8ZfPZggmb6585Hqj0A4qBI1QkXqYNle6ZfY2DlFDHrkkIRmAeJQ4ZM70Kz/H
ig86HqytM4fM/BaNu1IV0KCe/kbtjKktpDNJqN0PdGakDeOHEUoHJRMmNAoA0ZiP
2k0/kxO1D9/c35ZK6AePyqtG+QDLN5OoJSG8IQGXcDHsSWO1j8GdESDLkg0V0Sun
bZakbtWy+BMOTcAf+g99ThVxwzFKn6tzUbFyihVP5vMZHm5FZScstKNXSsSuAW+U
BZkBrclnYtVGcMkv+EexuAjBTK909T/9IIx3pwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOfCaNJFctamjkJ8xNhtDvViOu6eMB8GA1UdIwQYMBaAFPnemvAbqJHf88g9
N9pAJmTfWzZ3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTVjYzVl
MzFmZjFmZDhiZmQ0NDliMDEzNzg1ODk4N2Y2ZGIwM2Q0Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjRiY2EyNmQtM2QyNC00NWI2LTg3YTEtYThiZTcy
ZjBhZjVhL2VlZjkyNmQyMWE5NzRlOTE3ZTk2ODNlNTQzZjRlNjE4ZjIyNTVmYjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNGJjYTI2ZC0zZDI0LTQ1YjYtODdhMS1hOGJl
NzJmMGFmNWEvMTVjYzVlMzFmZjFmZDhiZmQ0NDliMDEzNzg1ODk4N2Y2ZGIwM2Q0
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAorbEDANBgkqhkiG9w0BAQsFAAOCAQEAV8QFW5fZGi8Xcf2R
GwPsbC3fEkAeZ5gZHSwuVxzk8YOhXWpjiDqj35PKY/qpuHEqQjVRKEWTnv37hmGu
PsrWtEY4ydM6PiTkGWznfSVnF90lFfYSBOdG0+vU8t+WnfCjWdaloxdROWROSeP3
T88ygqgUCh/7mvACncm7WdzRIMLD3XU8XO3733g75LDKYrW+r2XpBY8CkA3KhCIg
L+ZqUevd6dXryf5ZETzLlXc0UMBqRRP4argi4/Hsu1E/jDqTtGXM6so/OS4spbOB
BQ/EGLwdxHK+hqPdetyyC/cY03u6ZvTTZ4rd2cCIHjUw02fojj4AEtrbSpl494NM
MWnO7A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org