Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/88cef9555b5b2b089e20bdd9a0e136e1bd0eba67.roa
File:                     88cef9555b5b2b089e20bdd9a0e136e1bd0eba67.roa (raw, json)
Hash identifier:          qIPutkKGh2FSBecyt81dbV/yGL5cKjsDPz1HQ0wXqyQ=
Subject key identifier:   04:AC:D0:F6:39:BA:2C:9A:61:B1:4F:B8:23:D1:18:69:54:A0:C4:AD
Certificate issuer:       /CN=d136d4512330eb81fb319acf25ade2d4a9466d72
Certificate serial:       014A
Authority key identifier: BB:8D:9F:A9:CC:25:8A:AB:EB:6D:FA:EA:ED:E9:17:58:AE:16:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d136d4512330eb81fb319acf25ade2d4a9466d72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/88cef9555b5b2b089e20bdd9a0e136e1bd0eba67.roa
Signing time:             Fri 01 Apr 2022 14:38:21 +0000
ROA not before:           Fri 01 Apr 2022 03:00:00 +0000
ROA not after:            Mon 01 Apr 2024 03:00:00 +0000
asID:                     272026
IP address blocks:        167.250.236.0/23 maxlen: 23
                          177.11.254.0/23 maxlen: 23
                          2803:6510::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d136d4512330eb81fb319acf25ade2d4a9466d72
        Validity
            Not Before: Apr  1 03:00:00 2022 GMT
            Not After : Apr  1 03:00:00 2024 GMT
        Subject: CN=88cef9555b5b2b089e20bdd9a0e136e1bd0eba67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:dc:d4:1e:92:fe:0a:62:ad:89:8c:b7:0f:
                    60:41:d6:f7:ce:b7:94:fe:3d:de:3c:87:c9:a3:bd:
                    c7:d0:26:3e:69:30:6b:08:56:b8:d4:d7:bc:3e:fc:
                    33:35:2f:57:92:0e:64:5a:3a:d5:36:8e:d2:35:1a:
                    45:06:3d:ac:c0:73:78:07:3d:31:c7:cd:da:39:e4:
                    19:f6:11:96:81:62:60:38:e7:87:84:e7:05:9b:46:
                    b9:da:e5:9f:10:ba:bb:8f:75:cf:16:09:ae:88:85:
                    69:06:b0:4a:c8:eb:c2:57:c5:ef:c0:bd:5a:aa:f4:
                    af:1d:86:52:8e:3a:f9:4c:05:b4:6a:55:bd:52:48:
                    c1:da:13:ec:ff:db:56:9c:9a:2e:17:02:e5:03:29:
                    14:a0:84:51:3e:3f:36:54:e9:f7:94:89:f4:fd:86:
                    b6:72:eb:93:11:64:49:cd:1c:54:ab:1c:b6:cd:03:
                    70:2b:d9:14:fd:aa:9b:c1:64:8b:75:a1:29:6f:2c:
                    8e:7c:ed:86:8e:a9:61:16:1f:47:a9:72:f3:af:47:
                    64:68:dc:dc:8e:ad:1d:b0:1f:3d:e7:6b:ce:f7:33:
                    d4:8b:97:95:e1:0b:fb:81:85:27:8a:e9:48:12:ca:
                    e1:23:76:61:69:16:ad:88:75:7c:43:d1:e9:bd:5d:
                    c0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AC:D0:F6:39:BA:2C:9A:61:B1:4F:B8:23:D1:18:69:54:A0:C4:AD
            X509v3 Authority Key Identifier:
                keyid:BB:8D:9F:A9:CC:25:8A:AB:EB:6D:FA:EA:ED:E9:17:58:AE:16:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d136d4512330eb81fb319acf25ade2d4a9466d72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/88cef9555b5b2b089e20bdd9a0e136e1bd0eba67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f858f820-1b2d-49fa-b6fc-e344467f5f06/d136d4512330eb81fb319acf25ade2d4a9466d72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.236.0/23
                  177.11.254.0/23
                IPv6:
                  2803:6510::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:38:79:71:98:e8:78:49:14:12:bd:c5:ba:3e:07:23:24:a8:
         e4:0b:6d:b3:5c:03:72:c4:bf:a3:41:fb:71:73:2a:06:51:f1:
         12:9c:31:b2:e1:f5:83:3e:21:09:dc:10:17:15:a5:82:44:3a:
         a5:cb:39:91:f7:20:d3:a5:7c:7d:6a:19:e1:71:a6:19:66:e6:
         17:66:61:43:be:7b:88:2a:fd:22:36:4c:81:7e:34:50:7e:14:
         30:85:aa:b8:e3:17:c7:e4:3c:40:53:c1:c2:83:51:62:2a:11:
         e5:35:35:eb:13:27:1c:91:60:39:63:2c:21:f0:bd:d7:44:44:
         75:9b:cc:bb:10:ff:ba:fc:52:d2:c2:25:e2:36:71:a7:e4:c5:
         8b:a8:c4:c0:14:4d:bc:ec:3b:4f:b7:55:1d:cc:44:54:10:0f:
         61:36:c9:69:bb:7f:bd:f8:ba:15:de:9e:d1:95:ed:f3:24:56:
         fe:59:b0:4d:82:59:4b:ba:31:d2:99:78:47:b4:ff:b4:1d:88:
         de:32:f4:ca:a2:34:74:0f:c6:21:ec:28:aa:1f:eb:69:09:61:
         d5:f4:10:82:a3:e6:96:08:6a:5e:e7:e7:8f:71:6b:31:e0:49:
         ae:5f:a0:40:03:9e:32:7d:dc:1b:2b:72:98:c8:21:85:ed:5c:
         c0:bf:d8:f0
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZDEz
NmQ0NTEyMzMwZWI4MWZiMzE5YWNmMjVhZGUyZDRhOTQ2NmQ3MjAeFw0yMjA0MDEw
MzAwMDBaFw0yNDA0MDEwMzAwMDBaMDMxMTAvBgNVBAMTKDg4Y2VmOTU1NWI1YjJi
MDg5ZTIwYmRkOWEwZTEzNmUxYmQwZWJhNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwH9zUHpL+CmKtiYy3D2BB1vfOt5T+Pd48h8mjvcfQJj5pMGsI
VrjU17w+/DM1L1eSDmRaOtU2jtI1GkUGPazAc3gHPTHHzdo55Bn2EZaBYmA454eE
5wWbRrna5Z8QuruPdc8WCa6IhWkGsErI68JXxe/AvVqq9K8dhlKOOvlMBbRqVb1S
SMHaE+z/21acmi4XAuUDKRSghFE+PzZU6feUifT9hrZy65MRZEnNHFSrHLbNA3Ar
2RT9qpvBZIt1oSlvLI587YaOqWEWH0epcvOvR2Ro3NyOrR2wHz3na873M9SLl5Xh
C/uBhSeK6UgSyuEjdmFpFq2IdXxD0em9XcB5AgMBAAGjggJwMIICbDAdBgNVHQ4E
FgQUBKzQ9jm6LJphsU+4I9EYaVSgxK0wHwYDVR0jBBgwFoAUu42fqcwliqvrbfrq
7ekXWK4WCC4wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9kMTM2ZDQ1
MTIzMzBlYjgxZmIzMTlhY2YyNWFkZTJkNGE5NDY2ZDcyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mODU4ZjgyMC0xYjJkLTQ5ZmEtYjZmYy1lMzQ0NDY3
ZjVmMDYvODhjZWY5NTU1YjViMmIwODllMjBiZGQ5YTBlMTM2ZTFiZDBlYmE2Ny5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2Y4NThmODIwLTFiMmQtNDlmYS1iNmZjLWUzNDQ0
NjdmNWYwNi9kMTM2ZDQ1MTIzMzBlYjgxZmIzMTlhY2YyNWFkZTJkNGE5NDY2ZDcy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUw
IzASBAIAATAMAwQBp/rsAwQBsQv+MA0EAgACMAcDBQAoA2UQMA0GCSqGSIb3DQEB
CwUAA4IBAQBiOHlxmOh4SRQSvcW6PgcjJKjkC22zXANyxL+jQftxcyoGUfESnDGy
4fWDPiEJ3BAXFaWCRDqlyzmR9yDTpXx9ahnhcaYZZuYXZmFDvnuIKv0iNkyBfjRQ
fhQwhaq44xfH5DxAU8HCg1FiKhHlNTXrEycckWA5Yywh8L3XRER1m8y7EP+6/FLS
wiXiNnGn5MWLqMTAFE287DtPt1UdzERUEA9hNslpu3+9+LoV3p7Rle3zJFb+WbBN
gllLujHSmXhHtP+0HYjeMvTKojR0D8Yh7CiqH+tpCWHV9BCCo+aWCGpe5+ePcWsx
4EmuX6BAA54yfdwbK3KYyCGF7VzAv9jw
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org