Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68abd497-09af-44b0-b739-16244531a8b3/b4a37639d926aa1ff0e75bf567194f9b8fe21eef.roa
File:                     b4a37639d926aa1ff0e75bf567194f9b8fe21eef.roa (raw, json)
Hash identifier:          GTovvuWNEhpgKA/4ii4JbFKRI6mxMCH9YMEP7Qm2Jc8=
Subject key identifier:   64:01:08:FA:52:CE:77:0A:17:4A:68:90:17:85:38:C9:3F:B1:07:23
Certificate issuer:       /CN=892845505406a0adeb76ac77b3983cad7a4c0e02
Certificate serial:       0597
Authority key identifier: F2:47:5B:98:24:1D:43:20:23:28:1C:9A:84:3A:D9:27:4A:5B:C6:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/892845505406a0adeb76ac77b3983cad7a4c0e02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68abd497-09af-44b0-b739-16244531a8b3/b4a37639d926aa1ff0e75bf567194f9b8fe21eef.roa
Signing time:             Sat 04 Mar 2023 17:27:47 +0000
ROA not before:           Fri 03 Mar 2023 17:20:33 +0000
ROA not after:            Tue 04 Mar 2025 17:20:33 +0000
asID:                     263758
IP address blocks:        161.238.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892845505406a0adeb76ac77b3983cad7a4c0e02
        Validity
            Not Before: Mar  3 17:20:33 2023 GMT
            Not After : Mar  4 17:20:33 2025 GMT
        Subject: CN=b4a37639d926aa1ff0e75bf567194f9b8fe21eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e7:1f:99:0f:4f:c5:d3:04:35:21:7f:2e:1a:
                    83:6a:02:53:44:48:47:79:16:c0:e5:f4:10:69:92:
                    42:b4:fa:93:09:65:c5:9d:0e:9c:49:ad:08:6b:b0:
                    6e:55:f0:48:55:0d:bb:f7:4e:d9:1c:3e:b7:b2:78:
                    53:5e:f4:55:14:38:ba:46:02:9b:00:5c:2d:62:e0:
                    d5:a1:e7:f6:14:74:63:55:24:1c:16:c9:55:70:94:
                    63:2e:a9:ca:96:cd:1a:55:86:2b:11:dc:d5:fd:e1:
                    8e:5c:b8:b0:06:44:c9:9d:4a:3c:bf:92:fd:c4:52:
                    43:dd:1b:ab:50:25:08:61:d5:2d:24:f9:a0:b4:56:
                    51:a2:e0:b3:c9:97:0a:04:e7:76:c6:5e:43:27:55:
                    d9:04:db:e2:04:59:b4:a9:6c:34:d4:0f:42:70:38:
                    d5:cc:3a:31:61:b4:e6:c4:25:27:e2:9e:fe:61:65:
                    51:a8:ab:7c:9c:2b:5b:0f:db:80:0f:1c:a4:b2:d2:
                    9d:a4:ed:08:72:59:64:a4:ef:6b:84:d2:d4:ee:09:
                    6e:17:40:0c:1a:de:f5:1f:ec:2f:f2:d5:7f:1d:93:
                    bb:b2:fb:2a:fa:1e:ca:be:2f:52:e1:af:16:c3:2d:
                    2b:36:b6:65:23:3f:2a:e4:27:8f:4d:84:71:de:e1:
                    22:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:01:08:FA:52:CE:77:0A:17:4A:68:90:17:85:38:C9:3F:B1:07:23
            X509v3 Authority Key Identifier:
                keyid:F2:47:5B:98:24:1D:43:20:23:28:1C:9A:84:3A:D9:27:4A:5B:C6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/892845505406a0adeb76ac77b3983cad7a4c0e02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68abd497-09af-44b0-b739-16244531a8b3/b4a37639d926aa1ff0e75bf567194f9b8fe21eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68abd497-09af-44b0-b739-16244531a8b3/892845505406a0adeb76ac77b3983cad7a4c0e02.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.238.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:cc:23:a3:5c:6b:9e:f8:02:20:4f:aa:eb:03:02:79:27:29:
         aa:df:53:95:60:05:0f:28:5d:a9:31:57:ad:47:b4:f2:92:d6:
         ea:fa:38:cc:37:53:69:47:25:17:ec:b8:aa:43:07:61:fc:cc:
         dc:cb:a9:a8:09:5e:ac:d7:6b:39:85:87:cc:62:ea:fa:a6:96:
         9a:28:15:6d:80:b4:f5:d7:37:4e:63:24:a9:74:b5:8b:15:9a:
         e3:22:a7:c0:df:40:43:00:a1:d1:b6:37:aa:ca:71:d4:c9:05:
         64:f8:f5:52:16:e4:a0:ba:d6:d2:a9:33:4f:2a:0c:98:31:5b:
         30:4d:a3:24:18:c3:79:64:6f:9a:52:1e:f2:3e:5d:9f:e4:e7:
         ec:fc:50:74:32:15:01:95:22:01:70:24:0d:77:19:33:c2:81:
         92:e2:20:b1:ed:d8:8f:51:d1:7c:75:85:d0:de:e6:44:5c:2c:
         d3:4f:5c:40:0a:34:4c:12:28:4b:2d:73:f1:8a:55:85:e6:31:
         6d:36:60:22:7f:95:eb:a4:61:9e:41:b8:7a:92:5d:20:ce:88:
         46:1c:4e:71:8a:7e:00:5a:36:2c:0c:f7:0e:90:37:29:e9:23:
         ab:f0:2c:e5:e5:17:df:5f:37:9a:4a:98:b0:77:16:36:94:d9:
         4e:b6:38:19
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBZcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODky
ODQ1NTA1NDA2YTBhZGViNzZhYzc3YjM5ODNjYWQ3YTRjMGUwMjAeFw0yMzAzMDMx
NzIwMzNaFw0yNTAzMDQxNzIwMzNaMDMxMTAvBgNVBAMTKGI0YTM3NjM5ZDkyNmFh
MWZmMGU3NWJmNTY3MTk0ZjliOGZlMjFlZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH5x+ZD0/F0wQ1IX8uGoNqAlNESEd5FsDl9BBpkkK0+pMJZcWd
DpxJrQhrsG5V8EhVDbv3TtkcPreyeFNe9FUUOLpGApsAXC1i4NWh5/YUdGNVJBwW
yVVwlGMuqcqWzRpVhisR3NX94Y5cuLAGRMmdSjy/kv3EUkPdG6tQJQhh1S0k+aC0
VlGi4LPJlwoE53bGXkMnVdkE2+IEWbSpbDTUD0JwONXMOjFhtObEJSfinv5hZVGo
q3ycK1sP24APHKSy0p2k7QhyWWSk72uE0tTuCW4XQAwa3vUf7C/y1X8dk7uy+yr6
Hsq+L1LhrxbDLSs2tmUjPyrkJ49NhHHe4SLlAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUZAEI+lLOdwoXSmiQF4U4yT+xByMwHwYDVR0jBBgwFoAU8kdbmCQdQyAjKBya
hDrZJ0pbxnMwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84OTI4NDU1
MDU0MDZhMGFkZWI3NmFjNzdiMzk4M2NhZDdhNGMwZTAyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy82OGFiZDQ5Ny0wOWFmLTQ0YjAtYjczOS0xNjI0NDUz
MWE4YjMvYjRhMzc2MzlkOTI2YWExZmYwZTc1YmY1NjcxOTRmOWI4ZmUyMWVlZi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzY4YWJkNDk3LTA5YWYtNDRiMC1iNzM5LTE2MjQ0
NTMxYThiMy84OTI4NDU1MDU0MDZhMGFkZWI3NmFjNzdiMzk4M2NhZDdhNGMwZTAy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCoe78MA0GCSqGSIb3DQEBCwUAA4IBAQB3zCOjXGue+AIgT6rr
AwJ5Jymq31OVYAUPKF2pMVetR7Tyktbq+jjMN1NpRyUX7LiqQwdh/Mzcy6moCV6s
12s5hYfMYur6ppaaKBVtgLT11zdOYySpdLWLFZrjIqfA30BDAKHRtjeqynHUyQVk
+PVSFuSgutbSqTNPKgyYMVswTaMkGMN5ZG+aUh7yPl2f5Ofs/FB0MhUBlSIBcCQN
dxkzwoGS4iCx7diPUdF8dYXQ3uZEXCzTT1xACjRMEihLLXPxilWF5jFtNmAif5Xr
pGGeQbh6kl0gzohGHE5xin4AWjYsDPcOkDcp6SOr8Czl5RffXzeaSpiwdxY2lNlO
tjgZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org