Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/497fee4b4670b2b5ec74cfdece2a09b5e0169a08.roa
File:                     497fee4b4670b2b5ec74cfdece2a09b5e0169a08.roa (raw, json)
Hash identifier:          e4dFrRk3GwFY151uLr4gTnTCYkn3W/t9Nw6MUV9Sr/8=
Subject key identifier:   41:76:F7:CD:B5:5B:E4:28:ED:2F:FE:FF:25:45:5A:FF:03:31:FA:94
Certificate issuer:       /CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
Certificate serial:       0E6239
Authority key identifier: 88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/497fee4b4670b2b5ec74cfdece2a09b5e0169a08.roa
Signing time:             Mon 19 Jun 2023 17:22:29 +0000
ROA not before:           Sun 18 Jun 2023 17:22:28 +0000
ROA not after:            Thu 19 Jun 2025 17:22:28 +0000
asID:                     263824
IP address blocks:        131.255.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 942649 (0xe6239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4
        Validity
            Not Before: Jun 18 17:22:28 2023 GMT
            Not After : Jun 19 17:22:28 2025 GMT
        Subject: CN=497fee4b4670b2b5ec74cfdece2a09b5e0169a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1f:85:9c:ec:de:c8:65:67:52:fe:97:42:8e:
                    32:dc:87:26:cb:d5:d4:78:53:60:82:06:da:a3:30:
                    f2:1e:25:d6:cf:21:3c:8b:20:3b:46:c8:6d:ae:c9:
                    fe:8f:00:6d:2c:be:c2:11:83:8b:15:f2:3b:b7:78:
                    7a:28:eb:5d:a4:90:8f:60:66:3a:16:e3:07:1a:c1:
                    ad:84:ab:28:35:1c:f5:2a:3e:97:1e:86:1a:a7:d1:
                    bb:7f:80:19:95:92:c7:a9:e4:64:2d:41:18:3b:5e:
                    83:90:39:bc:48:73:6b:15:08:10:bc:46:47:03:30:
                    1d:58:77:4a:26:0b:96:b4:84:de:b7:fc:f8:f8:3e:
                    2f:02:45:89:b5:4f:b4:d1:a9:9a:68:44:76:19:bb:
                    de:16:b0:35:d2:e6:c7:e5:fe:08:78:5b:f9:95:75:
                    6b:74:ab:26:1f:71:23:c4:08:fd:4b:6a:ec:e0:f0:
                    cd:0d:f3:2d:aa:21:f9:50:42:bb:cc:fd:79:64:c8:
                    f5:14:60:38:41:3f:8f:75:03:c5:af:a1:d6:4a:98:
                    d7:18:53:3f:89:a3:f9:b3:ec:58:bd:63:75:43:d6:
                    9c:fa:1c:41:59:53:d4:9d:5a:6a:17:60:11:f4:9e:
                    3e:12:3b:95:b8:d2:73:a9:e2:7e:06:6f:b6:5e:0d:
                    ce:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:76:F7:CD:B5:5B:E4:28:ED:2F:FE:FF:25:45:5A:FF:03:31:FA:94
            X509v3 Authority Key Identifier:
                keyid:88:B4:BB:31:C9:8C:34:E2:6A:D4:B8:91:AD:BA:B8:0E:22:6E:2C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/497fee4b4670b2b5ec74cfdece2a09b5e0169a08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ac9b099-8877-4caf-ba00-3929c455136a/f02b6a8047d293b2f522dac4fba1b9c7cd80d8b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:d8:79:c0:c9:1d:52:c5:e7:da:a1:63:9e:23:27:9a:70:96:
         5f:cc:7c:57:d2:1a:a0:ed:dc:ea:34:18:d8:4c:1f:92:64:c1:
         d6:1a:05:ef:36:2f:9a:76:cf:80:24:9a:4d:9a:78:0a:0b:09:
         f4:d7:d8:bc:52:e4:a1:fa:1d:0b:9f:76:8f:f1:5a:d2:41:04:
         1b:d2:a0:e2:b3:d2:0a:d7:4d:ed:af:c5:1d:39:9b:7f:78:0e:
         6a:a2:cc:61:7c:73:3b:08:80:f1:6f:5a:1a:30:69:33:f9:22:
         ca:a7:59:8e:1b:c2:f1:19:0e:8f:2d:dc:a5:cc:a9:f6:df:1a:
         2d:d4:9a:de:83:b0:3a:b4:be:0b:22:9e:f4:f1:87:dc:f8:dc:
         82:cc:4f:b1:3d:bd:a5:44:65:4b:73:ab:30:de:20:47:5e:15:
         3c:85:41:42:ba:f3:a7:28:c7:ba:fb:be:2a:28:d4:14:81:bf:
         2a:31:e0:f6:37:18:ef:de:90:90:c7:92:87:a7:db:b0:9f:09:
         e4:f0:d3:10:18:e4:9d:4e:3a:3b:a3:76:6a:0c:57:20:93:64:
         f5:7c:05:e1:4d:c2:3b:0f:da:69:f2:d7:cc:9a:82:72:5c:c1:
         a3:f4:73:e1:d3:0b:7b:ac:93:8d:b5:83:0a:26:d6:a1:49:a6:
         2e:b8:5e:58
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDmI5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYw
MmI2YTgwNDdkMjkzYjJmNTIyZGFjNGZiYTFiOWM3Y2Q4MGQ4YjQwHhcNMjMwNjE4
MTcyMjI4WhcNMjUwNjE5MTcyMjI4WjAzMTEwLwYDVQQDEyg0OTdmZWU0YjQ2NzBi
MmI1ZWM3NGNmZGVjZTJhMDliNWUwMTY5YTA4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjR+FnOzeyGVnUv6XQo4y3Icmy9XUeFNgggbaozDyHiXWzyE8
iyA7Rshtrsn+jwBtLL7CEYOLFfI7t3h6KOtdpJCPYGY6FuMHGsGthKsoNRz1Kj6X
HoYap9G7f4AZlZLHqeRkLUEYO16DkDm8SHNrFQgQvEZHAzAdWHdKJguWtITet/z4
+D4vAkWJtU+00amaaER2GbveFrA10ubH5f4IeFv5lXVrdKsmH3EjxAj9S2rs4PDN
DfMtqiH5UEK7zP15ZMj1FGA4QT+PdQPFr6HWSpjXGFM/iaP5s+xYvWN1Q9ac+hxB
WVPUnVpqF2AR9J4+EjuVuNJzqeJ+Bm+2Xg3O8wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEF29821W+Qo7S/+/yVFWv8DMfqUMB8GA1UdIwQYMBaAFIi0uzHJjDTiatS4
ka26uA4ibiwBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjAyYjZh
ODA0N2QyOTNiMmY1MjJkYWM0ZmJhMWI5YzdjZDgwZDhiNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGFjOWIwOTktODg3Ny00Y2FmLWJhMDAtMzkyOWM0
NTUxMzZhLzQ5N2ZlZTRiNDY3MGIyYjVlYzc0Y2ZkZWNlMmEwOWI1ZTAxNjlhMDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYWM5YjA5OS04ODc3LTRjYWYtYmEwMC0zOTI5
YzQ1NTEzNmEvZjAyYjZhODA0N2QyOTNiMmY1MjJkYWM0ZmJhMWI5YzdjZDgwZDhi
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIP/KTANBgkqhkiG9w0BAQsFAAOCAQEAF9h5wMkdUsXn2qFj
niMnmnCWX8x8V9IaoO3c6jQY2EwfkmTB1hoF7zYvmnbPgCSaTZp4CgsJ9NfYvFLk
ofodC592j/Fa0kEEG9Kg4rPSCtdN7a/FHTmbf3gOaqLMYXxzOwiA8W9aGjBpM/ki
yqdZjhvC8RkOjy3cpcyp9t8aLdSa3oOwOrS+CyKe9PGH3PjcgsxPsT29pURlS3Or
MN4gR14VPIVBQrrzpyjHuvu+KijUFIG/KjHg9jcY796QkMeSh6fbsJ8J5PDTEBjk
nU46O6N2agxXIJNk9XwF4U3COw/aafLXzJqCclzBo/Rz4dMLe6yTjbWDCibWoUmm
LrheWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:56 2024 by rpki-client on console-ams.rpki-client.org