Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/a497309a335c91e5f8049e192a3083d1a5a5fb7e.roa
File:                     a497309a335c91e5f8049e192a3083d1a5a5fb7e.roa (raw, json)
Hash identifier:          OYr/iDjZmMyRnJU6qnYtXOs64eVxXEB5wEBZmyHXi2I=
Subject key identifier:   18:DD:9A:FC:9F:D6:58:88:EB:5A:4F:7B:6A:13:44:E7:34:DB:71:A8
Certificate issuer:       /CN=a17e16a16dcad72b297e376ab8c89b4770e59c66
Certificate serial:       22D5BD
Authority key identifier: BA:AE:3F:96:99:2F:0F:66:20:A9:CE:74:0C:75:8A:15:95:04:FE:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a17e16a16dcad72b297e376ab8c89b4770e59c66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/a497309a335c91e5f8049e192a3083d1a5a5fb7e.roa
Signing time:             Wed 09 Aug 2023 22:05:07 +0000
ROA not before:           Tue 08 Aug 2023 22:05:06 +0000
ROA not after:            Sat 09 Aug 2025 22:05:06 +0000
asID:                     10697
IP address blocks:        160.238.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282941 (0x22d5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a17e16a16dcad72b297e376ab8c89b4770e59c66
        Validity
            Not Before: Aug  8 22:05:06 2023 GMT
            Not After : Aug  9 22:05:06 2025 GMT
        Subject: CN=a497309a335c91e5f8049e192a3083d1a5a5fb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:7b:4b:df:e3:30:b0:17:86:bf:c2:a7:5f:
                    2f:dc:77:ef:af:dc:4d:bf:6b:eb:83:78:26:9e:66:
                    08:b4:91:e1:db:9a:82:9c:2e:6b:1a:34:0a:c2:18:
                    1f:fb:f2:08:c0:87:e4:13:af:dc:21:76:49:d5:e7:
                    a5:26:75:e2:f2:28:52:d6:82:57:9f:c5:88:6e:fa:
                    73:d1:b0:45:40:b2:99:e5:95:89:05:51:00:a6:ef:
                    4c:64:7d:65:ac:cd:33:9b:dd:c1:5e:d1:6d:06:cb:
                    b9:db:d8:df:62:1c:92:b6:c2:c5:38:0f:e1:94:85:
                    b9:61:4b:8b:d7:bb:60:94:41:38:c2:8a:fe:5a:01:
                    2a:f7:70:7a:5d:ef:82:8c:7a:8a:bc:7a:46:a6:d0:
                    f8:84:43:9e:cb:7e:88:06:f5:b0:bd:e6:c3:be:12:
                    10:73:28:61:3d:6c:1b:20:a5:b0:2a:37:1a:15:58:
                    9c:08:2f:83:f3:55:eb:bd:4e:ff:2a:48:a7:25:16:
                    e5:8d:b4:fc:b6:0b:d6:22:24:6e:4c:c1:54:fa:5e:
                    fc:30:c4:4b:f1:53:67:ba:61:aa:ef:dd:18:6a:2f:
                    b4:ae:00:23:ff:d0:c5:8b:d3:03:d9:a4:55:10:f1:
                    ea:7e:18:f2:dc:5a:ff:3b:0e:6b:28:fb:24:30:e0:
                    52:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DD:9A:FC:9F:D6:58:88:EB:5A:4F:7B:6A:13:44:E7:34:DB:71:A8
            X509v3 Authority Key Identifier:
                keyid:BA:AE:3F:96:99:2F:0F:66:20:A9:CE:74:0C:75:8A:15:95:04:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a17e16a16dcad72b297e376ab8c89b4770e59c66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/a497309a335c91e5f8049e192a3083d1a5a5fb7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47c26e2f-8345-41d4-abfa-e92bfaf5d5af/a17e16a16dcad72b297e376ab8c89b4770e59c66.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:66:5c:69:1c:be:04:cc:fd:5f:fa:63:ef:17:99:65:79:a1:
         24:40:d3:4c:cb:71:ac:a8:d3:8a:09:75:3c:aa:7d:7a:a2:2a:
         4b:76:90:6a:28:f0:ca:ae:df:40:a8:3d:6c:e2:73:70:3f:c1:
         ea:5f:08:db:52:48:99:0a:91:78:d1:2e:72:4b:9e:5a:50:0e:
         9c:31:a7:f0:a9:18:65:09:6b:d3:a1:3f:f5:bf:47:8d:87:b0:
         ce:6a:cf:4f:a3:f1:13:b6:e2:be:fe:86:3a:86:03:03:f7:6a:
         54:ec:3c:9c:1d:2c:9d:20:35:c7:22:d7:6f:18:cf:c1:cc:23:
         2f:f2:14:4e:eb:54:7f:c5:b3:88:95:1e:2e:75:96:ac:6a:49:
         95:80:00:22:93:0c:88:f6:07:5d:4e:2a:6a:b4:bf:c9:13:a3:
         b2:bd:75:01:0a:13:08:a6:a5:9c:16:42:66:0d:4b:04:e2:d4:
         2c:8c:c3:86:c9:93:16:3e:d1:36:5c:2b:7a:92:77:48:4f:bb:
         f6:97:8d:f5:e5:21:02:ca:6d:e4:68:de:da:2d:44:ed:b3:b2:
         f3:02:23:81:b1:56:83:3d:b6:75:31:5b:96:42:d6:af:32:5a:
         2b:b4:12:dc:c6:09:da:a2:af:8e:2b:9a:07:d3:ea:b4:f4:88:
         32:7f:bf:89
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDItW9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEx
N2UxNmExNmRjYWQ3MmIyOTdlMzc2YWI4Yzg5YjQ3NzBlNTljNjYwHhcNMjMwODA4
MjIwNTA2WhcNMjUwODA5MjIwNTA2WjAzMTEwLwYDVQQDEyhhNDk3MzA5YTMzNWM5
MWU1ZjgwNDllMTkyYTMwODNkMWE1YTVmYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnRF7S9/jMLAXhr/Cp18v3Hfvr9xNv2vrg3gmnmYItJHh25qC
nC5rGjQKwhgf+/IIwIfkE6/cIXZJ1eelJnXi8ihS1oJXn8WIbvpz0bBFQLKZ5ZWJ
BVEApu9MZH1lrM0zm93BXtFtBsu529jfYhyStsLFOA/hlIW5YUuL17tglEE4wor+
WgEq93B6Xe+CjHqKvHpGptD4hEOey36IBvWwvebDvhIQcyhhPWwbIKWwKjcaFVic
CC+D81XrvU7/KkinJRbljbT8tgvWIiRuTMFU+l78MMRL8VNnumGq790Yai+0rgAj
/9DFi9MD2aRVEPHqfhjy3Fr/Ow5rKPskMOBSFQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBjdmvyf1liI61pPe2oTROc023GoMB8GA1UdIwQYMBaAFLquP5aZLw9mIKnO
dAx1ihWVBP47MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTE3ZTE2
YTE2ZGNhZDcyYjI5N2UzNzZhYjhjODliNDc3MGU1OWM2Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDdjMjZlMmYtODM0NS00MWQ0LWFiZmEtZTkyYmZh
ZjVkNWFmL2E0OTczMDlhMzM1YzkxZTVmODA0OWUxOTJhMzA4M2QxYTVhNWZiN2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80N2MyNmUyZi04MzQ1LTQxZDQtYWJmYS1lOTJi
ZmFmNWQ1YWYvYTE3ZTE2YTE2ZGNhZDcyYjI5N2UzNzZhYjhjODliNDc3MGU1OWM2
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqDuzDANBgkqhkiG9w0BAQsFAAOCAQEAgmZcaRy+BMz9X/pj
7xeZZXmhJEDTTMtxrKjTigl1PKp9eqIqS3aQaijwyq7fQKg9bOJzcD/B6l8I21JI
mQqReNEuckueWlAOnDGn8KkYZQlr06E/9b9HjYewzmrPT6PxE7bivv6GOoYDA/dq
VOw8nB0snSA1xyLXbxjPwcwjL/IUTutUf8WziJUeLnWWrGpJlYAAIpMMiPYHXU4q
arS/yROjsr11AQoTCKalnBZCZg1LBOLULIzDhsmTFj7RNlwrepJ3SE+79peN9eUh
Aspt5Gje2i1E7bOy8wIjgbFWgz22dTFblkLWrzJaK7QS3MYJ2qKvjiuaB9PqtPSI
Mn+/iQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org