Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/1726595e150d317de7e647dfef008dfb33a900de.roa
File:                     1726595e150d317de7e647dfef008dfb33a900de.roa (raw, json)
Hash identifier:          W4XTyZ0wh1bR7YIgDC6ZlWAbtGrsZabdwWuD8rQChQs=
Subject key identifier:   48:47:5C:61:39:FD:9F:98:83:66:A1:4B:F6:7F:32:EE:0C:36:04:19
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       059B7D
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/1726595e150d317de7e647dfef008dfb33a900de.roa
Signing time:             Tue 07 Jun 2022 21:13:19 +0000
ROA not before:           Tue 07 Jun 2022 03:00:00 +0000
ROA not after:            Fri 07 Jun 2024 03:00:00 +0000
asID:                     3640
IP address blocks:        158.97.112.0/21 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367485 (0x59b7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Jun  7 03:00:00 2022 GMT
            Not After : Jun  7 03:00:00 2024 GMT
        Subject: CN=1726595e150d317de7e647dfef008dfb33a900de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:be:cb:79:39:95:db:f6:a8:d3:ac:1c:03:0e:
                    2a:10:a8:9b:af:47:b7:c5:de:6a:ee:f8:62:94:cd:
                    55:7e:17:8e:02:49:da:74:56:f9:de:69:9f:29:99:
                    0c:06:81:6c:51:ca:bb:ca:73:05:1b:d4:d8:27:c8:
                    d8:3f:28:6d:2b:fb:73:b6:3a:d1:b1:1e:2c:eb:f2:
                    42:71:64:3b:16:28:10:b9:9c:cd:b1:af:67:87:bc:
                    d5:88:16:2e:f5:52:4a:70:cb:35:5e:1b:84:03:ac:
                    28:46:68:5e:82:6d:a1:aa:10:90:ab:bb:61:c0:fe:
                    4b:14:3d:93:f8:01:be:1b:64:de:a6:16:4f:8c:58:
                    48:d5:8b:e1:e4:10:c1:1b:6c:04:97:d2:ae:94:48:
                    8c:2b:45:d7:d8:91:85:1a:38:d3:19:5b:0a:41:57:
                    c7:ae:97:a6:07:8a:7a:bc:d0:c8:3f:02:54:f2:7e:
                    98:c3:3f:28:39:13:17:37:84:0a:09:7e:4f:2e:bf:
                    03:d2:c7:29:57:a1:fe:9b:5b:b0:36:8b:f5:e5:20:
                    78:9f:15:b8:42:3e:c5:34:1d:5e:a7:a5:92:83:c7:
                    f7:d7:de:b8:62:78:68:40:e7:e1:86:36:09:66:ed:
                    e8:82:52:05:df:f6:2b:43:e2:0f:c1:69:44:09:5e:
                    7e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:47:5C:61:39:FD:9F:98:83:66:A1:4B:F6:7F:32:EE:0C:36:04:19
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/1726595e150d317de7e647dfef008dfb33a900de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.97.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:ff:2e:bb:22:87:df:2e:f7:49:8d:cc:91:ca:62:de:e1:b6:
         48:af:5b:13:f1:42:22:64:3b:fe:ae:1b:ed:da:e7:07:f5:20:
         e9:ca:14:8d:d3:a7:33:b6:d1:8f:9e:22:8c:d9:4d:61:61:b2:
         11:67:6f:78:71:50:a1:06:45:f2:d2:19:36:4a:2d:9e:9f:46:
         9f:3d:7f:0e:f5:45:45:d7:e0:7d:f6:6d:96:eb:3a:f6:97:e3:
         76:f4:1a:7f:25:34:da:6a:a9:12:c8:59:72:c4:83:3c:ce:3b:
         3a:0d:a9:e4:d8:9d:25:e8:00:ab:bf:b0:ff:b1:25:02:17:14:
         f0:61:0d:c0:f7:75:38:f8:71:aa:9b:6b:e9:e3:91:ad:84:02:
         4c:92:04:9c:db:f2:88:42:a0:c6:68:93:48:b6:40:ce:03:b3:
         34:c8:0d:49:4b:dd:8c:02:03:d7:21:c2:0b:5f:19:7c:6b:c2:
         dc:61:a5:26:6d:7f:2a:72:9c:d8:57:0b:30:b8:4a:5e:bd:e6:
         cd:98:fc:16:54:98:d0:8f:56:06:16:a0:9f:25:13:87:f2:95:
         73:48:1a:78:5c:1e:5c:54:df:c7:73:65:3a:6a:bf:38:f7:0d:
         f0:bd:e4:d0:ea:fc:9a:c4:44:02:cf:ed:21:d4:25:7d:99:0b:
         17:3b:87:55
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBZt9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMw
MmMwMGQ5Y2QwMDY0YTA0MGYzOWUxNDA5NzRhOTg3NTg1ZmYxMmUwHhcNMjIwNjA3
MDMwMDAwWhcNMjQwNjA3MDMwMDAwWjAzMTEwLwYDVQQDEygxNzI2NTk1ZTE1MGQz
MTdkZTdlNjQ3ZGZlZjAwOGRmYjMzYTkwMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxb7LeTmV2/ao06wcAw4qEKibr0e3xd5q7vhilM1VfheOAkna
dFb53mmfKZkMBoFsUcq7ynMFG9TYJ8jYPyhtK/tztjrRsR4s6/JCcWQ7FigQuZzN
sa9nh7zViBYu9VJKcMs1XhuEA6woRmhegm2hqhCQq7thwP5LFD2T+AG+G2TephZP
jFhI1Yvh5BDBG2wEl9KulEiMK0XX2JGFGjjTGVsKQVfHrpemB4p6vNDIPwJU8n6Y
wz8oORMXN4QKCX5PLr8D0scpV6H+m1uwNov15SB4nxW4Qj7FNB1ep6WSg8f31964
YnhoQOfhhjYJZu3oglIF3/YrQ+IPwWlECV5+SwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEhHXGE5/Z+Yg2ahS/Z/Mu4MNgQZMB8GA1UdIwQYMBaAFG/3nAXGKw9xHL8f
BDDjoVVtrZ2DMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzAyYzAw
ZDljZDAwNjRhMDQwZjM5ZTE0MDk3NGE5ODc1ODVmZjEyZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDJhNWYyMTgtZjdiMS00N2FmLTk1ZjQtYjFhMjE4
YTliOTZjLzE3MjY1OTVlMTUwZDMxN2RlN2U2NDdkZmVmMDA4ZGZiMzNhOTAwZGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMmE1ZjIxOC1mN2IxLTQ3YWYtOTVmNC1iMWEy
MThhOWI5NmMvYzAyYzAwZDljZDAwNjRhMDQwZjM5ZTE0MDk3NGE5ODc1ODVmZjEy
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA55hcDANBgkqhkiG9w0BAQsFAAOCAQEAKv8uuyKH3y73SY3M
kcpi3uG2SK9bE/FCImQ7/q4b7drnB/Ug6coUjdOnM7bRj54ijNlNYWGyEWdveHFQ
oQZF8tIZNkotnp9Gnz1/DvVFRdfgffZtlus69pfjdvQafyU02mqpEshZcsSDPM47
Og2p5NidJegAq7+w/7ElAhcU8GENwPd1OPhxqptr6eORrYQCTJIEnNvyiEKgxmiT
SLZAzgOzNMgNSUvdjAID1yHCC18ZfGvC3GGlJm1/KnKc2FcLMLhKXr3mzZj8FlSY
0I9WBhagnyUTh/KVc0gaeFweXFTfx3NlOmq/OPcN8L3k0Or8msREAs/tIdQlfZkL
FzuHVQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org