Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/755fa9a9c5de7da1d503c8e5da839b661355c507.roa
File:                     755fa9a9c5de7da1d503c8e5da839b661355c507.roa (raw, json)
Hash identifier:          O1Hbwd1kjQjYSAUS7H2DPLiB+emtkC3mL/lPR14UjRo=
Subject key identifier:   AA:17:E5:AF:DB:22:26:CA:09:D7:FB:20:30:06:A1:EE:BA:38:B6:47
Certificate issuer:       /CN=dbd36e815108aff3b7b3a80ea6302316bea35e09
Certificate serial:       20F6F0
Authority key identifier: 77:88:5B:39:00:EE:9E:4E:18:31:E5:B3:56:5A:B0:E7:AA:12:1C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbd36e815108aff3b7b3a80ea6302316bea35e09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/755fa9a9c5de7da1d503c8e5da839b661355c507.roa
Signing time:             Sat 10 Jun 2023 18:43:23 +0000
ROA not before:           Fri 09 Jun 2023 18:43:22 +0000
ROA not after:            Tue 10 Jun 2025 18:43:22 +0000
asID:                     271970
IP address blocks:        131.196.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2160368 (0x20f6f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd36e815108aff3b7b3a80ea6302316bea35e09
        Validity
            Not Before: Jun  9 18:43:22 2023 GMT
            Not After : Jun 10 18:43:22 2025 GMT
        Subject: CN=755fa9a9c5de7da1d503c8e5da839b661355c507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4a:3c:6b:dc:92:3d:b5:af:b6:af:74:e7:2a:
                    8b:99:5d:48:b5:e4:93:a7:32:22:fe:11:6c:e1:d2:
                    c8:8a:93:88:4c:b4:b3:38:b4:e2:85:30:40:30:cb:
                    08:38:39:43:fd:14:1c:58:b5:fd:ac:8a:0a:dc:bb:
                    12:6e:f6:a4:99:a7:8b:85:cd:b0:29:0f:b0:c0:e5:
                    e1:eb:10:7e:c6:8c:96:f4:7a:61:dd:6a:58:2d:a8:
                    a3:51:c3:9b:09:8f:50:19:ef:ad:33:c2:44:7f:ba:
                    c4:e7:cb:f1:cb:fa:77:01:58:00:95:12:6b:c9:1b:
                    55:ea:8d:98:49:8d:92:ec:74:9a:69:bb:a7:98:21:
                    3c:20:67:f3:fd:6a:41:5f:28:1c:f7:71:3e:09:97:
                    69:a7:a5:33:49:c0:8b:2b:f4:71:74:1e:cd:6b:75:
                    2b:5c:d2:7c:87:10:84:71:f2:43:d0:4a:f5:02:11:
                    58:21:4f:ec:63:60:a0:89:b5:b5:20:48:8a:32:cf:
                    98:ec:eb:d3:7b:62:36:e7:9d:1c:b7:68:50:9e:f4:
                    85:77:54:4d:75:81:dd:f6:07:72:6f:91:0d:c8:2e:
                    a1:b6:7a:f4:d0:f3:ed:9c:67:b3:cc:6c:a6:e8:86:
                    ef:46:bf:56:fd:db:67:13:ad:f2:54:0c:f6:16:9a:
                    e7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:17:E5:AF:DB:22:26:CA:09:D7:FB:20:30:06:A1:EE:BA:38:B6:47
            X509v3 Authority Key Identifier:
                keyid:77:88:5B:39:00:EE:9E:4E:18:31:E5:B3:56:5A:B0:E7:AA:12:1C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbd36e815108aff3b7b3a80ea6302316bea35e09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/755fa9a9c5de7da1d503c8e5da839b661355c507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09dddf08-cc92-435e-a660-65781da3c94e/dbd36e815108aff3b7b3a80ea6302316bea35e09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:d4:93:3d:af:d7:e8:52:e4:fd:1b:50:41:ad:72:a2:4c:05:
         3a:a7:f1:46:80:2f:69:0b:7c:25:bb:23:5e:dd:71:eb:80:1b:
         d0:1f:d0:05:ef:03:5d:8a:2e:0b:3f:c4:c8:a5:87:77:26:43:
         5a:fe:21:e4:6a:36:48:70:1d:86:68:1e:7e:61:5c:52:7b:db:
         9f:63:a1:d9:01:f4:c1:71:a9:19:9d:0f:db:29:8f:11:f1:b4:
         4a:64:55:b3:5c:f1:2e:99:00:07:79:93:71:78:89:a3:55:43:
         46:c8:9c:4e:cc:76:14:48:e6:ae:bc:be:f4:8a:a6:2b:5d:46:
         b2:39:f9:5d:6d:4e:e7:65:b7:f5:a6:fe:66:d0:71:5c:14:29:
         6f:fe:3b:52:87:4c:c0:da:3b:f7:48:99:41:b5:61:15:53:3f:
         5a:9f:63:99:98:e2:98:08:38:26:db:cf:42:15:d8:00:a0:b5:
         c3:e3:7c:bd:f3:7c:35:6c:65:b0:d6:a4:b2:fb:d9:10:15:31:
         a0:d1:a6:55:a3:39:8c:d3:db:a9:8f:e7:2e:a7:72:91:d0:7e:
         07:b5:bc:f9:f5:46:ad:d0:c9:3f:6a:28:f3:e7:b7:2d:b3:59:
         82:a8:4b:3d:b7:30:f3:b6:21:fb:14:c1:08:19:e0:e1:2f:f6:
         65:3f:e4:19
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIPbwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRi
ZDM2ZTgxNTEwOGFmZjNiN2IzYTgwZWE2MzAyMzE2YmVhMzVlMDkwHhcNMjMwNjA5
MTg0MzIyWhcNMjUwNjEwMTg0MzIyWjAzMTEwLwYDVQQDEyg3NTVmYTlhOWM1ZGU3
ZGExZDUwM2M4ZTVkYTgzOWI2NjEzNTVjNTA3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiko8a9ySPbWvtq905yqLmV1IteSTpzIi/hFs4dLIipOITLSz
OLTihTBAMMsIODlD/RQcWLX9rIoK3LsSbvakmaeLhc2wKQ+wwOXh6xB+xoyW9Hph
3WpYLaijUcObCY9QGe+tM8JEf7rE58vxy/p3AVgAlRJryRtV6o2YSY2S7HSaabun
mCE8IGfz/WpBXygc93E+CZdpp6UzScCLK/RxdB7Na3UrXNJ8hxCEcfJD0Er1AhFY
IU/sY2CgibW1IEiKMs+Y7OvTe2I2550ct2hQnvSFd1RNdYHd9gdyb5ENyC6htnr0
0PPtnGezzGym6IbvRr9W/dtnE63yVAz2FprnRQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKoX5a/bIibKCdf7IDAGoe66OLZHMB8GA1UdIwQYMBaAFHeIWzkA7p5OGDHl
s1ZasOeqEhzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGJkMzZl
ODE1MTA4YWZmM2I3YjNhODBlYTYzMDIzMTZiZWEzNWUwOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDlkZGRmMDgtY2M5Mi00MzVlLWE2NjAtNjU3ODFk
YTNjOTRlLzc1NWZhOWE5YzVkZTdkYTFkNTAzYzhlNWRhODM5YjY2MTM1NWM1MDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wOWRkZGYwOC1jYzkyLTQzNWUtYTY2MC02NTc4
MWRhM2M5NGUvZGJkMzZlODE1MTA4YWZmM2I3YjNhODBlYTYzMDIzMTZiZWEzNWUw
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoPEvDANBgkqhkiG9w0BAQsFAAOCAQEAq9STPa/X6FLk/RtQ
Qa1yokwFOqfxRoAvaQt8JbsjXt1x64Ab0B/QBe8DXYouCz/EyKWHdyZDWv4h5Go2
SHAdhmgefmFcUnvbn2Oh2QH0wXGpGZ0P2ymPEfG0SmRVs1zxLpkAB3mTcXiJo1VD
RsicTsx2FEjmrry+9IqmK11Gsjn5XW1O52W39ab+ZtBxXBQpb/47UodMwNo790iZ
QbVhFVM/Wp9jmZjimAg4JtvPQhXYAKC1w+N8vfN8NWxlsNaksvvZEBUxoNGmVaM5
jNPbqY/nLqdykdB+B7W8+fVGrdDJP2oo8+e3LbNZgqhLPbcw87Yh+xTBCBng4S/2
ZT/kGQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org