Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/02234726070020fc5eebcda8dc0c6ecb2496d5e6.roa
File:                     02234726070020fc5eebcda8dc0c6ecb2496d5e6.roa (raw, json)
Hash identifier:          ZqNWfF8a/EZ16dnK5aSfWdUzzCXkNzBfzTi1GIAx0F8=
Subject key identifier:   3A:99:82:1A:76:54:2B:4F:37:EF:72:A6:DE:2A:B5:9B:BC:F0:B0:62
Certificate issuer:       /CN=00932e972389ea7205865b22c4909bed7cdcbf7e
Certificate serial:       0D61CC
Authority key identifier: D0:65:6F:B9:27:C5:3E:D8:97:D3:4E:DA:2D:06:18:0B:0C:C3:99:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00932e972389ea7205865b22c4909bed7cdcbf7e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/02234726070020fc5eebcda8dc0c6ecb2496d5e6.roa
Signing time:             Wed 24 Mar 2021 14:34:48 +0000
ROA not before:           Wed 24 Mar 2021 14:34:48 +0000
ROA not after:            Tue 24 Mar 2026 14:34:48 +0000
asID:                     61499
IP address blocks:        138.121.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877004 (0xd61cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00932e972389ea7205865b22c4909bed7cdcbf7e
        Validity
            Not Before: Mar 24 14:34:48 2021 GMT
            Not After : Mar 24 14:34:48 2026 GMT
        Subject: CN=02234726070020fc5eebcda8dc0c6ecb2496d5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:30:44:82:76:bd:98:82:28:ba:c3:b4:4f:ba:
                    22:9d:b4:74:df:6c:90:89:05:4e:2f:8c:57:15:60:
                    fd:18:c1:57:90:94:67:03:39:fc:20:00:cb:f0:6c:
                    ac:dd:d1:f8:1b:65:f0:30:a1:b0:ad:3a:ca:90:a9:
                    01:e5:ec:2f:2f:6e:8c:82:e1:bb:b6:c1:ab:20:03:
                    2e:3a:a5:5f:95:c6:2c:57:49:6d:9c:cc:ba:e4:cb:
                    df:e8:82:e3:41:8b:ef:93:18:c0:f8:1a:a5:74:97:
                    6b:93:a3:dc:34:45:c4:7d:55:50:22:e4:fc:82:f3:
                    d6:ef:d4:16:c0:75:f9:12:e5:0b:8b:3d:05:13:f0:
                    19:a5:c4:36:2a:ee:0e:0a:d8:6a:70:12:d9:0e:3d:
                    58:db:33:8e:cd:9c:10:fe:39:4a:b9:1c:10:db:32:
                    48:9c:49:96:74:44:63:38:d9:e7:bb:13:7b:1a:6a:
                    a7:9b:3a:36:b7:a5:96:1b:49:0a:3c:a9:4a:77:be:
                    fa:07:a3:64:f1:5f:97:87:ee:81:0c:47:ee:0e:5e:
                    0e:de:f8:be:27:c6:1b:56:63:76:43:5a:15:97:7d:
                    0e:37:7a:58:c9:6b:fc:51:34:00:6e:bc:b7:af:4f:
                    0f:9a:2b:5f:bf:21:73:6b:24:74:4a:01:b1:7e:bb:
                    1a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:99:82:1A:76:54:2B:4F:37:EF:72:A6:DE:2A:B5:9B:BC:F0:B0:62
            X509v3 Authority Key Identifier:
                keyid:D0:65:6F:B9:27:C5:3E:D8:97:D3:4E:DA:2D:06:18:0B:0C:C3:99:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00932e972389ea7205865b22c4909bed7cdcbf7e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/02234726070020fc5eebcda8dc0c6ecb2496d5e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/00932e972389ea7205865b22c4909bed7cdcbf7e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:be:53:41:dc:d7:14:44:ad:08:53:02:11:fa:7a:5a:bf:45:
         7a:8c:61:ed:8f:80:39:1c:3a:e4:81:5e:c8:6c:e1:bb:ee:64:
         33:a9:c4:94:99:12:09:27:e7:1e:ce:1d:46:70:20:9d:8f:f9:
         c4:d2:fb:e8:18:cb:df:ee:ef:ba:d2:ab:a4:09:f6:3e:ad:51:
         a0:21:e3:e4:d8:4f:af:bb:70:00:1c:b7:32:90:e5:71:e6:34:
         27:c4:54:a3:bc:d1:4b:d7:4c:85:c2:e7:d1:63:22:0f:13:a8:
         b3:21:67:2e:ee:5a:fe:4f:36:65:4e:85:9a:b8:1d:77:8a:b9:
         94:68:68:3c:82:9f:ff:88:a4:b6:87:1f:e5:6c:11:51:66:7f:
         b1:75:bc:f3:8d:51:f2:be:e0:10:3f:b7:94:34:d3:ae:17:41:
         6f:03:12:22:e1:90:06:ca:fc:71:36:26:02:1b:04:7f:32:82:
         13:a1:87:b8:dc:f0:dc:07:5d:d1:10:c2:67:a4:ba:c8:c2:5d:
         5a:bb:bc:4f:90:73:70:6a:64:80:9c:72:06:b4:b2:4e:b2:f7:
         66:84:31:0a:e3:a4:d2:2f:f6:79:07:37:55:76:32:b0:5b:13:
         1f:dc:41:27:6b:7f:bf:b3:54:84:bd:bf:dc:b1:4d:46:b5:7c:
         e2:3c:7a:b7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDWHMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDAw
OTMyZTk3MjM4OWVhNzIwNTg2NWIyMmM0OTA5YmVkN2NkY2JmN2UwHhcNMjEwMzI0
MTQzNDQ4WhcNMjYwMzI0MTQzNDQ4WjAzMTEwLwYDVQQDEygwMjIzNDcyNjA3MDAy
MGZjNWVlYmNkYThkYzBjNmVjYjI0OTZkNWU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgDBEgna9mIIousO0T7oinbR032yQiQVOL4xXFWD9GMFXkJRn
Azn8IADL8Gys3dH4G2XwMKGwrTrKkKkB5ewvL26MguG7tsGrIAMuOqVflcYsV0lt
nMy65Mvf6ILjQYvvkxjA+BqldJdrk6PcNEXEfVVQIuT8gvPW79QWwHX5EuULiz0F
E/AZpcQ2Ku4OCthqcBLZDj1Y2zOOzZwQ/jlKuRwQ2zJInEmWdERjONnnuxN7Gmqn
mzo2t6WWG0kKPKlKd776B6Nk8V+Xh+6BDEfuDl4O3vi+J8YbVmN2Q1oVl30ON3pY
yWv8UTQAbry3r08PmitfvyFzayR0SgGxfrsa3QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDqZghp2VCtPN+9ypt4qtZu88LBiMB8GA1UdIwQYMBaAFNBlb7knxT7Yl9NO
2i0GGAsMw5kwMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDA5MzJl
OTcyMzg5ZWE3MjA1ODY1YjIyYzQ5MDliZWQ3Y2RjYmY3ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGEwYjczYjYtZWFhMC00ODg0LWI0MjYtNzg5NDhl
MmU5MzVkLzAyMjM0NzI2MDcwMDIwZmM1ZWViY2RhOGRjMGM2ZWNiMjQ5NmQ1ZTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYTBiNzNiNi1lYWEwLTQ4ODQtYjQyNi03ODk0
OGUyZTkzNWQvMDA5MzJlOTcyMzg5ZWE3MjA1ODY1YjIyYzQ5MDliZWQ3Y2RjYmY3
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAop5BDANBgkqhkiG9w0BAQsFAAOCAQEABr5TQdzXFEStCFMC
Efp6Wr9Feoxh7Y+AORw65IFeyGzhu+5kM6nElJkSCSfnHs4dRnAgnY/5xNL76BjL
3+7vutKrpAn2Pq1RoCHj5NhPr7twABy3MpDlceY0J8RUo7zRS9dMhcLn0WMiDxOo
syFnLu5a/k82ZU6Fmrgdd4q5lGhoPIKf/4iktocf5WwRUWZ/sXW8841R8r7gED+3
lDTTrhdBbwMSIuGQBsr8cTYmAhsEfzKCE6GHuNzw3Add0RDCZ6S6yMJdWru8T5Bz
cGpkgJxyBrSyTrL3ZoQxCuOk0i/2eQc3VXYysFsTH9xBJ2t/v7NUhL2/3LFNRrV8
4jx6tw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:56 2024 by rpki-client on console-ams.rpki-client.org