Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/71c5f71ed083509ec0c3825c1a0ad0d76354582a.roa
File:                     71c5f71ed083509ec0c3825c1a0ad0d76354582a.roa (raw, json)
Hash identifier:          cSjUVaFToYIWHsOrZS0pSOe7H2p/0mQAXHRM1wlhOzU=
Subject key identifier:   47:81:CC:F8:5B:E7:72:D8:5F:3F:ED:A8:8A:67:62:EA:1B:3B:31:8D
Certificate issuer:       /CN=5e60935bdbaf84edd159cb54bb8fad0298ca5126
Certificate serial:       0D2598
Authority key identifier: 60:76:86:83:41:24:9B:61:C5:B5:42:87:21:D1:76:DF:30:24:90:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e60935bdbaf84edd159cb54bb8fad0298ca5126.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/71c5f71ed083509ec0c3825c1a0ad0d76354582a.roa
Signing time:             Wed 24 Mar 2021 14:28:50 +0000
ROA not before:           Wed 24 Mar 2021 14:28:49 +0000
ROA not after:            Tue 24 Mar 2026 14:28:49 +0000
asID:                     264768
IP address blocks:        168.196.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861592 (0xd2598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e60935bdbaf84edd159cb54bb8fad0298ca5126
        Validity
            Not Before: Mar 24 14:28:49 2021 GMT
            Not After : Mar 24 14:28:49 2026 GMT
        Subject: CN=71c5f71ed083509ec0c3825c1a0ad0d76354582a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:12:c0:1c:46:7c:56:2f:4a:06:58:6a:3a:cd:
                    0f:52:56:20:1f:18:54:12:d0:d9:df:0b:c1:5a:45:
                    14:ea:64:3d:f3:6a:8e:b2:d2:a4:40:9e:5f:f8:7f:
                    1d:d8:f0:05:37:aa:40:0b:d6:7d:12:86:a4:4f:79:
                    2f:03:b7:63:24:8b:7a:47:e8:33:80:c7:8f:6c:7a:
                    fd:7e:fa:33:6d:f3:3d:bd:ad:aa:09:81:f0:c1:f5:
                    97:e1:2d:4c:26:31:ab:77:7e:e7:39:2f:6f:1c:90:
                    58:fa:27:38:88:de:f0:bb:8b:c8:43:ab:9e:b2:25:
                    c6:98:46:0b:a2:dc:af:0d:e2:67:0b:cd:cd:df:fb:
                    41:d7:69:42:bc:65:1d:92:bc:6b:4b:26:f1:35:ea:
                    01:64:da:0b:9f:5c:ff:13:2e:f9:96:8b:9c:74:52:
                    fc:7f:9d:25:f2:9a:2b:fe:2f:d2:46:3b:ef:55:c3:
                    92:32:f2:4f:e7:30:31:ff:5a:af:77:d2:95:b8:df:
                    82:c7:38:63:38:f1:ae:d3:2a:7c:7a:6b:18:43:28:
                    5f:66:5a:0a:1c:94:fb:41:30:c6:95:66:40:79:d5:
                    49:8f:9e:a0:44:0d:8f:0b:97:ac:0d:e9:a9:19:c7:
                    40:f9:e6:ee:83:5d:f3:b3:73:ef:b5:ee:16:13:1d:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:81:CC:F8:5B:E7:72:D8:5F:3F:ED:A8:8A:67:62:EA:1B:3B:31:8D
            X509v3 Authority Key Identifier:
                keyid:60:76:86:83:41:24:9B:61:C5:B5:42:87:21:D1:76:DF:30:24:90:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e60935bdbaf84edd159cb54bb8fad0298ca5126.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/71c5f71ed083509ec0c3825c1a0ad0d76354582a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/5e60935bdbaf84edd159cb54bb8fad0298ca5126.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:53:c5:e6:1b:9b:9c:3a:c3:5f:c7:c8:58:0a:9d:d1:01:4e:
         da:b0:fa:a6:6a:b3:aa:02:58:e5:5a:3e:6b:8a:ae:59:75:f8:
         67:30:9a:5e:d1:6e:3c:d4:cc:a7:fe:8b:59:36:60:78:61:d0:
         ac:2d:67:2c:7a:7c:3c:83:3b:b0:10:e5:c7:90:67:fc:b7:54:
         d5:ee:ba:9b:1e:23:4d:3b:d7:be:50:b8:8a:57:6e:60:27:00:
         7a:22:ea:72:4f:8d:30:17:2f:e4:c6:41:85:ca:00:17:fc:95:
         86:ac:5e:f3:ac:f3:31:83:38:ba:ee:38:5f:18:20:fb:6d:3e:
         54:80:cc:f2:86:c2:c5:77:c1:d7:2f:d0:f0:0a:23:9d:98:de:
         22:7d:07:77:14:83:8c:7b:f8:0a:a0:a2:76:de:f8:bc:c8:6b:
         10:7a:04:ce:b3:86:b0:44:26:63:86:12:f4:18:d4:27:81:24:
         e4:46:b5:dd:a7:85:f7:7f:db:55:2d:db:72:f4:19:16:2e:f1:
         8d:22:b2:38:99:19:f0:fe:4c:48:b9:58:54:6f:9f:60:1a:3e:
         91:f6:3b:4b:a3:63:a8:be:2f:0d:65:fb:23:65:ea:7d:39:63:
         66:66:56:f9:c3:0a:1e:ad:64:cc:1c:cb:47:91:84:dc:96:a6:
         82:4e:a7:fb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDSWYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVl
NjA5MzViZGJhZjg0ZWRkMTU5Y2I1NGJiOGZhZDAyOThjYTUxMjYwHhcNMjEwMzI0
MTQyODQ5WhcNMjYwMzI0MTQyODQ5WjAzMTEwLwYDVQQDEyg3MWM1ZjcxZWQwODM1
MDllYzBjMzgyNWMxYTBhZDBkNzYzNTQ1ODJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlRLAHEZ8Vi9KBlhqOs0PUlYgHxhUEtDZ3wvBWkUU6mQ982qO
stKkQJ5f+H8d2PAFN6pAC9Z9EoakT3kvA7djJIt6R+gzgMePbHr9fvozbfM9va2q
CYHwwfWX4S1MJjGrd37nOS9vHJBY+ic4iN7wu4vIQ6uesiXGmEYLotyvDeJnC83N
3/tB12lCvGUdkrxrSybxNeoBZNoLn1z/Ey75loucdFL8f50l8por/i/SRjvvVcOS
MvJP5zAx/1qvd9KVuN+CxzhjOPGu0yp8emsYQyhfZloKHJT7QTDGlWZAedVJj56g
RA2PC5esDempGcdA+ebug13zs3Pvte4WEx1siQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEeBzPhb53LYXz/tqIpnYuobOzGNMB8GA1UdIwQYMBaAFGB2hoNBJJthxbVC
hyHRdt8wJJDoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWU2MDkz
NWJkYmFmODRlZGQxNTljYjU0YmI4ZmFkMDI5OGNhNTEyNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjM0MTQwYTctZDdhMS00OTg0LTg0MmEtODlkYTQ5
M2IwNmE5LzcxYzVmNzFlZDA4MzUwOWVjMGMzODI1YzFhMGFkMGQ3NjM1NDU4MmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MzQxNDBhNy1kN2ExLTQ5ODQtODQyYS04OWRh
NDkzYjA2YTkvNWU2MDkzNWJkYmFmODRlZGQxNTljYjU0YmI4ZmFkMDI5OGNhNTEy
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjEjDANBgkqhkiG9w0BAQsFAAOCAQEAiFPF5hubnDrDX8fI
WAqd0QFO2rD6pmqzqgJY5Vo+a4quWXX4ZzCaXtFuPNTMp/6LWTZgeGHQrC1nLHp8
PIM7sBDlx5Bn/LdU1e66mx4jTTvXvlC4ilduYCcAeiLqck+NMBcv5MZBhcoAF/yV
hqxe86zzMYM4uu44Xxgg+20+VIDM8obCxXfB1y/Q8AojnZjeIn0HdxSDjHv4CqCi
dt74vMhrEHoEzrOGsEQmY4YS9BjUJ4Ek5Ea13aeF93/bVS3bcvQZFi7xjSKyOJkZ
8P5MSLlYVG+fYBo+kfY7S6NjqL4vDWX7I2XqfTljZmZW+cMKHq1kzBzLR5GE3Jam
gk6n+w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org