Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/36b7d9c46ee394ff580f6d625d994478d1c72fcd.roa
File:                     36b7d9c46ee394ff580f6d625d994478d1c72fcd.roa (raw, json)
Hash identifier:          /YlZsi7VdCZGo5vuLB349K3CWENiB7eY5zqTPrKRAAA=
Subject key identifier:   66:3E:81:65:C6:0A:EF:41:41:D7:5C:78:C5:A4:67:36:C4:B5:0C:EE
Certificate issuer:       /CN=29598424cc9e5513086a121e39d9b7e3d625ecb7
Certificate serial:       11964E
Authority key identifier: E0:35:3B:2F:23:B2:77:B9:08:2E:80:73:9B:D7:9A:2F:DC:7A:2B:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29598424cc9e5513086a121e39d9b7e3d625ecb7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/36b7d9c46ee394ff580f6d625d994478d1c72fcd.roa
Signing time:             Sun 14 May 2023 03:34:42 +0000
ROA not before:           Sat 13 May 2023 03:34:42 +0000
ROA not after:            Wed 14 May 2025 03:34:42 +0000
asID:                     264758
IP address blocks:        168.196.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152590 (0x11964e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29598424cc9e5513086a121e39d9b7e3d625ecb7
        Validity
            Not Before: May 13 03:34:42 2023 GMT
            Not After : May 14 03:34:42 2025 GMT
        Subject: CN=36b7d9c46ee394ff580f6d625d994478d1c72fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:ff:eb:e7:10:d8:62:a5:d5:f6:3a:99:31:
                    e6:32:a7:a9:85:f1:c3:87:2c:61:fb:ee:79:0c:12:
                    11:d2:85:d8:7b:48:e6:57:0c:4b:59:1d:b1:3d:5b:
                    16:3f:8c:ea:f0:6a:10:cb:d3:5d:b2:ce:ad:89:0f:
                    2b:0b:a7:c2:8b:7b:2d:10:a9:06:9a:04:47:fa:89:
                    f2:e8:4e:74:8b:ae:a4:f0:47:ee:9a:5a:5c:f1:43:
                    d2:52:0c:8a:0c:41:37:e8:d6:2e:fd:48:e4:fb:86:
                    9e:a2:93:ef:0e:f5:68:e7:39:7a:13:99:d3:4b:56:
                    d8:9b:1e:d6:f5:43:30:23:71:ab:a3:9c:c1:94:e0:
                    59:cb:39:67:4e:58:f7:a2:65:4d:02:d2:13:14:46:
                    e4:e5:2a:7b:90:61:d5:14:6a:c1:6e:2d:f0:93:f6:
                    31:ce:b6:99:03:a5:58:14:e3:1d:95:39:4a:29:de:
                    f9:cd:59:5c:6f:48:7c:4b:33:b7:48:3c:82:ad:3d:
                    80:ee:c2:0b:41:4e:8d:29:bf:5a:7b:eb:bf:91:23:
                    84:69:e1:f1:72:67:19:b6:41:b7:0e:7d:ce:81:7f:
                    9d:2a:51:72:74:30:fa:5c:20:8a:ae:27:93:90:cb:
                    84:c3:00:75:de:be:0c:4d:6d:e0:cf:1d:fc:e5:66:
                    88:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3E:81:65:C6:0A:EF:41:41:D7:5C:78:C5:A4:67:36:C4:B5:0C:EE
            X509v3 Authority Key Identifier:
                keyid:E0:35:3B:2F:23:B2:77:B9:08:2E:80:73:9B:D7:9A:2F:DC:7A:2B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29598424cc9e5513086a121e39d9b7e3d625ecb7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/36b7d9c46ee394ff580f6d625d994478d1c72fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/29598424cc9e5513086a121e39d9b7e3d625ecb7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:34:8b:ad:83:66:7f:25:51:80:ad:03:88:95:82:5c:93:a7:
         a7:41:ce:0c:f3:88:fe:e4:cc:0d:0e:a3:d2:4e:5e:b9:be:81:
         ed:a5:c7:c8:e7:cc:75:9a:5a:a4:e8:cc:b8:20:30:3e:a9:51:
         81:d7:36:40:20:28:a6:77:46:cc:90:3f:b3:e3:11:77:59:2a:
         fe:c4:f5:b6:4f:dd:00:9c:7c:a0:6d:ec:38:da:89:2d:9f:e2:
         2a:0a:00:a7:ae:87:25:e4:b6:fd:e0:20:7f:4d:3a:cf:23:05:
         00:32:99:88:c5:3a:11:98:81:4c:ed:c4:9a:2f:a6:f3:38:ef:
         7c:15:92:c3:3b:88:ba:57:17:88:bc:ce:b1:01:40:fb:92:fc:
         1b:84:85:02:a0:3f:e4:65:1a:34:d7:1c:4d:85:9e:79:50:88:
         81:9c:39:5d:31:20:62:6e:25:be:08:20:1a:db:92:68:eb:b2:
         09:a8:d1:9e:19:fb:8d:41:51:4b:bb:f1:e0:c6:e0:3f:57:92:
         44:ac:6f:7c:d7:48:12:42:41:c4:7e:61:89:a6:3b:93:04:94:
         44:f9:7b:c8:2f:ab:21:57:b5:95:c1:4d:3c:0e:4d:43:28:90:
         26:b0:1c:be:e5:00:74:b8:e9:7e:68:60:db:b8:94:5d:8d:78:
         0c:b3:2c:ed
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEZZOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
NTk4NDI0Y2M5ZTU1MTMwODZhMTIxZTM5ZDliN2UzZDYyNWVjYjcwHhcNMjMwNTEz
MDMzNDQyWhcNMjUwNTE0MDMzNDQyWjAzMTEwLwYDVQQDEygzNmI3ZDljNDZlZTM5
NGZmNTgwZjZkNjI1ZDk5NDQ3OGQxYzcyZmNkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmDv/6+cQ2GKl1fY6mTHmMqephfHDhyxh++55DBIR0oXYe0jm
VwxLWR2xPVsWP4zq8GoQy9Ndss6tiQ8rC6fCi3stEKkGmgRH+ony6E50i66k8Efu
mlpc8UPSUgyKDEE36NYu/Ujk+4aeopPvDvVo5zl6E5nTS1bYmx7W9UMwI3Gro5zB
lOBZyzlnTlj3omVNAtITFEbk5Sp7kGHVFGrBbi3wk/YxzraZA6VYFOMdlTlKKd75
zVlcb0h8SzO3SDyCrT2A7sILQU6NKb9ae+u/kSOEaeHxcmcZtkG3Dn3OgX+dKlFy
dDD6XCCKrieTkMuEwwB13r4MTW3gzx385WaIJQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGY+gWXGCu9BQddceMWkZzbEtQzuMB8GA1UdIwQYMBaAFOA1Oy8jsne5CC6A
c5vXmi/ceiuIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjk1OTg0
MjRjYzllNTUxMzA4NmExMjFlMzlkOWI3ZTNkNjI1ZWNiNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDBjMDE2OGItY2Q4Ni00OTY1LWFjZTItODgxMmQ3
MTUzZmE1LzM2YjdkOWM0NmVlMzk0ZmY1ODBmNmQ2MjVkOTk0NDc4ZDFjNzJmY2Qu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMGMwMTY4Yi1jZDg2LTQ5NjUtYWNlMi04ODEy
ZDcxNTNmYTUvMjk1OTg0MjRjYzllNTUxMzA4NmExMjFlMzlkOWI3ZTNkNjI1ZWNi
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKjEGTANBgkqhkiG9w0BAQsFAAOCAQEAhjSLrYNmfyVRgK0D
iJWCXJOnp0HODPOI/uTMDQ6j0k5eub6B7aXHyOfMdZpapOjMuCAwPqlRgdc2QCAo
pndGzJA/s+MRd1kq/sT1tk/dAJx8oG3sONqJLZ/iKgoAp66HJeS2/eAgf006zyMF
ADKZiMU6EZiBTO3Emi+m8zjvfBWSwzuIulcXiLzOsQFA+5L8G4SFAqA/5GUaNNcc
TYWeeVCIgZw5XTEgYm4lvgggGtuSaOuyCajRnhn7jUFRS7vx4MbgP1eSRKxvfNdI
EkJBxH5hiaY7kwSURPl7yC+rIVe1lcFNPA5NQyiQJrAcvuUAdLjpfmhg27iUXY14
DLMs7Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org