Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/736011d19ede9db4792b03dec1f6572de7227a02.roa
File:                     736011d19ede9db4792b03dec1f6572de7227a02.roa (raw, json)
Hash identifier:          nObMOjZFQSucFq3M27R2NV6I+wW7p0ZooQOtyGwFxPo=
Subject key identifier:   9D:35:33:C2:90:86:D6:A5:43:20:AD:69:A9:9D:48:9A:9A:51:3B:00
Certificate issuer:       /CN=4b0ff3b0bb36514a29ceced3a440524fd7f636dc
Certificate serial:       1DB782
Authority key identifier: 33:53:3D:1D:1F:5A:F1:D7:5C:44:A5:38:F4:4F:00:64:DC:F8:DC:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/736011d19ede9db4792b03dec1f6572de7227a02.roa
Signing time:             Wed 04 Oct 2023 08:30:00 +0000
ROA not before:           Tue 03 Oct 2023 08:30:00 +0000
ROA not after:            Thu 02 Oct 2025 08:30:00 +0000
asID:                     3597
IP address blocks:        168.96.240.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1947522 (0x1db782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0ff3b0bb36514a29ceced3a440524fd7f636dc
        Validity
            Not Before: Oct  3 08:30:00 2023 GMT
            Not After : Oct  2 08:30:00 2025 GMT
        Subject: CN=736011d19ede9db4792b03dec1f6572de7227a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f6:14:d2:5b:0d:d0:dd:38:d9:09:56:77:4e:
                    89:fb:05:8b:c4:73:e7:f5:eb:5e:ce:99:f9:6f:e4:
                    1b:0a:8b:07:77:f0:54:f9:12:5f:32:0c:51:6b:ea:
                    d8:1f:1d:c8:28:c8:11:97:48:08:af:ef:5c:64:bf:
                    f5:2e:69:fa:2d:6e:f2:07:02:eb:91:b1:10:4f:f6:
                    c9:fc:ea:f8:10:66:ea:ce:a3:17:9d:63:e5:43:26:
                    07:a9:bb:01:1f:18:78:f9:2d:99:01:a4:d0:4d:91:
                    da:b9:2a:24:ca:8e:2d:94:6f:ea:b0:21:a5:36:8e:
                    58:a3:77:d1:b7:ee:b3:f4:bb:88:a6:cc:3b:ee:13:
                    19:97:d8:94:27:e5:70:1c:ba:99:57:71:84:98:a3:
                    21:e9:bd:03:35:15:7e:4b:1a:6d:1f:48:d4:e3:f8:
                    15:59:36:4a:b9:f7:a6:98:47:96:10:0b:94:64:f3:
                    84:da:14:9f:86:1f:2d:f3:f9:30:cd:bf:c5:7a:44:
                    9b:1e:7e:24:bf:69:1e:0e:df:da:df:a4:4f:f2:62:
                    3a:9e:d0:a5:b5:b6:27:c7:1f:99:83:2b:52:02:fc:
                    b0:a8:5d:73:de:b1:1b:c9:5b:14:b7:4f:1f:32:dd:
                    2c:8c:02:04:ed:65:2e:32:2c:25:bd:0e:e8:95:eb:
                    bf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:35:33:C2:90:86:D6:A5:43:20:AD:69:A9:9D:48:9A:9A:51:3B:00
            X509v3 Authority Key Identifier:
                keyid:33:53:3D:1D:1F:5A:F1:D7:5C:44:A5:38:F4:4F:00:64:DC:F8:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/736011d19ede9db4792b03dec1f6572de7227a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.96.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:3c:b2:e3:ab:5c:bb:98:76:8e:4d:fc:ce:9a:f0:57:72:8e:
         b5:ab:6c:0a:3a:58:9e:c7:b3:af:01:6a:8a:91:43:4c:4d:c8:
         d9:6d:7c:46:18:16:9b:48:14:8d:98:dd:cf:32:32:c0:d4:e4:
         3d:60:78:f6:8f:13:dd:af:28:86:7b:fa:43:ef:85:61:6d:9f:
         dd:35:01:4f:cb:b8:7f:19:46:a0:4f:d1:84:3a:f6:93:aa:ea:
         b0:2b:f7:cb:7c:b8:f4:2c:f8:56:e2:99:8f:f5:76:39:f5:e6:
         1f:b8:84:95:01:1b:cc:a7:24:10:a5:52:fb:29:df:84:6c:6e:
         86:4c:ec:99:0d:d6:4c:b3:62:f3:21:ae:d0:96:54:f6:3a:a8:
         0a:b3:06:02:e7:bd:11:71:d4:6f:4a:72:42:b3:58:a5:1b:83:
         df:3c:43:15:e3:ce:30:f2:47:5c:d5:f2:ed:e8:4d:5a:06:62:
         f5:6d:97:17:1f:9d:02:e1:d2:de:99:86:73:69:6c:ea:32:3b:
         29:60:67:55:79:5d:0f:96:37:d5:3c:f8:51:6b:73:18:01:56:
         a4:5c:26:df:17:a7:03:a6:0a:d8:f7:dd:95:61:25:d3:0e:67:
         83:54:82:48:17:7b:d5:98:5e:ba:f5:6a:a6:c6:52:d5:34:d2:
         a7:85:45:f9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHbeCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRi
MGZmM2IwYmIzNjUxNGEyOWNlY2VkM2E0NDA1MjRmZDdmNjM2ZGMwHhcNMjMxMDAz
MDgzMDAwWhcNMjUxMDAyMDgzMDAwWjAzMTEwLwYDVQQDEyg3MzYwMTFkMTllZGU5
ZGI0NzkyYjAzZGVjMWY2NTcyZGU3MjI3YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjvYU0lsN0N042QlWd06J+wWLxHPn9etezpn5b+QbCosHd/BU
+RJfMgxRa+rYHx3IKMgRl0gIr+9cZL/1Lmn6LW7yBwLrkbEQT/bJ/Or4EGbqzqMX
nWPlQyYHqbsBHxh4+S2ZAaTQTZHauSokyo4tlG/qsCGlNo5Yo3fRt+6z9LuIpsw7
7hMZl9iUJ+VwHLqZV3GEmKMh6b0DNRV+SxptH0jU4/gVWTZKufemmEeWEAuUZPOE
2hSfhh8t8/kwzb/FekSbHn4kv2keDt/a36RP8mI6ntCltbYnxx+ZgytSAvywqF1z
3rEbyVsUt08fMt0sjAIE7WUuMiwlvQ7oleu/FQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ01M8KQhtalQyCtaamdSJqaUTsAMB8GA1UdIwQYMBaAFDNTPR0fWvHXXESl
OPRPAGTc+NxbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGIwZmYz
YjBiYjM2NTE0YTI5Y2VjZWQzYTQ0MDUyNGZkN2Y2MzZkYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWJhNDU3NzgtYWY4NC00NWNmLWJjMjktM2U0MGQ3
MmJlOTRkLzczNjAxMWQxOWVkZTlkYjQ3OTJiMDNkZWMxZjY1NzJkZTcyMjdhMDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81YmE0NTc3OC1hZjg0LTQ1Y2YtYmMyOS0zZTQw
ZDcyYmU5NGQvNGIwZmYzYjBiYjM2NTE0YTI5Y2VjZWQzYTQ0MDUyNGZkN2Y2MzZk
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAahg8DANBgkqhkiG9w0BAQsFAAOCAQEAUzyy46tcu5h2jk38
zprwV3KOtatsCjpYnsezrwFqipFDTE3I2W18RhgWm0gUjZjdzzIywNTkPWB49o8T
3a8ohnv6Q++FYW2f3TUBT8u4fxlGoE/RhDr2k6rqsCv3y3y49Cz4VuKZj/V2OfXm
H7iElQEbzKckEKVS+ynfhGxuhkzsmQ3WTLNi8yGu0JZU9jqoCrMGAue9EXHUb0py
QrNYpRuD3zxDFePOMPJHXNXy7ehNWgZi9W2XFx+dAuHS3pmGc2ls6jI7KWBnVXld
D5Y31Tz4UWtzGAFWpFwm3xenA6YK2PfdlWEl0w5ng1SCSBd71ZheuvVqpsZS1TTS
p4VF+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org