Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/22ab1ca9316f1de8ed8568effa8f33a39659a2e7.roa
File:                     22ab1ca9316f1de8ed8568effa8f33a39659a2e7.roa (raw, json)
Hash identifier:          QJvZRl9R8aCK7NCKYxi+j2e3GeEuM1ubePWd96RsZw4=
Subject key identifier:   A7:F7:41:B3:F2:6D:B3:92:73:75:08:EC:27:3C:02:8F:57:DB:F9:ED
Certificate issuer:       /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial:       123DBE
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/22ab1ca9316f1de8ed8568effa8f33a39659a2e7.roa
Signing time:             Fri 08 Oct 2021 16:22:04 +0000
ROA not before:           Fri 08 Oct 2021 03:00:00 +0000
ROA not after:            Sun 08 Oct 2023 03:00:00 +0000
asID:                     263781
IP address blocks:        138.118.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1195454 (0x123dbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
        Validity
            Not Before: Oct  8 03:00:00 2021 GMT
            Not After : Oct  8 03:00:00 2023 GMT
        Subject: CN=22ab1ca9316f1de8ed8568effa8f33a39659a2e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:73:3d:4f:93:35:40:e4:e6:8c:48:97:eb:
                    3f:52:6c:ec:0f:d3:45:98:15:ee:3f:b7:51:d1:bd:
                    16:58:1d:97:c7:d3:b2:7c:2e:4d:49:ba:ac:e7:7a:
                    d0:a6:8e:29:06:07:0d:6b:df:fb:eb:b3:35:11:58:
                    88:a4:2b:b9:5b:04:21:34:ad:62:0c:3d:14:7d:8b:
                    55:66:59:24:36:48:23:2f:27:98:c4:51:ae:1b:40:
                    ce:06:fa:ba:89:30:87:cd:af:25:ad:87:d8:10:5f:
                    47:5d:8e:ee:51:06:ec:99:cd:81:0e:9b:b8:5a:c8:
                    07:a9:ea:b1:a6:ab:86:6a:52:b9:86:ea:8c:53:3a:
                    27:18:49:1b:ba:ba:f3:1e:ce:f9:d2:e4:cf:85:5c:
                    35:55:ae:56:cf:a2:a9:6c:ae:98:d1:90:6a:00:6e:
                    78:88:11:d2:0a:25:7d:0b:4d:0b:3e:97:c2:d2:55:
                    79:fd:c2:a5:14:16:aa:6a:7a:ff:0f:92:7f:ad:94:
                    89:30:b3:26:71:b6:01:ae:8e:47:dc:79:ee:be:d3:
                    ef:78:b0:a1:71:72:67:4b:7c:89:d0:9e:49:f4:5c:
                    5e:5f:eb:bb:5e:c5:46:99:69:b7:76:2f:bd:51:29:
                    e0:4d:c2:60:9e:f8:d7:70:24:a4:27:56:80:d2:97:
                    61:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F7:41:B3:F2:6D:B3:92:73:75:08:EC:27:3C:02:8F:57:DB:F9:ED
            X509v3 Authority Key Identifier:
                keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/22ab1ca9316f1de8ed8568effa8f33a39659a2e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:6f:ad:f3:87:09:7a:ba:97:15:9c:ca:d5:4d:0b:3c:c3:1a:
         76:f2:bb:e2:93:21:ce:30:04:a1:2e:bf:8d:b0:1c:60:6d:d6:
         76:a9:a6:4c:81:d0:0e:46:1f:d8:ad:c5:7c:c7:d5:67:66:77:
         a6:13:45:87:d2:17:fe:c8:1d:ce:cb:c6:e7:89:bd:7c:4f:83:
         12:ae:38:a8:18:04:f6:a4:b8:18:6b:14:13:80:e8:03:d8:42:
         1a:ed:45:10:5d:df:3f:98:af:3a:51:72:cd:33:b7:e6:bc:7d:
         22:d7:f6:2f:04:09:c4:9c:0b:67:d6:b7:2b:9a:40:06:33:ec:
         6f:7f:f3:ad:03:4f:5b:39:28:74:1a:54:f7:6e:65:7c:8d:88:
         1d:f6:13:9f:63:0d:d6:9e:51:e1:48:70:9c:dd:5a:b3:36:1b:
         6d:8c:87:4f:8b:98:12:ec:02:40:82:90:52:b9:b0:5c:c6:87:
         0e:0b:b7:25:bd:c8:e6:20:17:f6:9f:44:4b:3c:20:f0:30:a0:
         af:fc:c7:1b:e6:f0:af:0a:22:86:d4:ba:db:a9:d0:89:92:67:
         43:f6:54:cb:8f:92:b3:26:55:64:fb:09:00:70:08:d4:c7:b2:
         ec:cd:c5:c4:b4:d8:be:5b:fc:08:36:e3:84:3b:a9:bd:8a:e3:
         e8:d4:cb:b0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEj2+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEy
NDg4ODJlYjFjOGU2NmFiNWMyM2Y2NjczNjI1NjdlNmQ3ZGI2NzEwHhcNMjExMDA4
MDMwMDAwWhcNMjMxMDA4MDMwMDAwWjAzMTEwLwYDVQQDEygyMmFiMWNhOTMxNmYx
ZGU4ZWQ4NTY4ZWZmYThmMzNhMzk2NTlhMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkRdzPU+TNUDk5oxIl+s/UmzsD9NFmBXuP7dR0b0WWB2Xx9Oy
fC5NSbqs53rQpo4pBgcNa9/767M1EViIpCu5WwQhNK1iDD0UfYtVZlkkNkgjLyeY
xFGuG0DOBvq6iTCHza8lrYfYEF9HXY7uUQbsmc2BDpu4WsgHqeqxpquGalK5huqM
UzonGEkburrzHs750uTPhVw1Va5Wz6KpbK6Y0ZBqAG54iBHSCiV9C00LPpfC0lV5
/cKlFBaqanr/D5J/rZSJMLMmcbYBro5H3HnuvtPveLChcXJnS3yJ0J5J9FxeX+u7
XsVGmWm3di+9USngTcJgnvjXcCSkJ1aA0pdhfwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKf3QbPybbOSc3UI7Cc8Ao9X2/ntMB8GA1UdIwQYMBaAFF697Iy1u+wGFl6M
Od28euJhkYp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTI0ODg4
MmViMWM4ZTY2YWI1YzIzZjY2NzM2MjU2N2U2ZDdkYjY3MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGNlZTI5OWQtZjgyMi00ZjlkLThmMTktNTY4N2My
MDAyN2JkLzIyYWIxY2E5MzE2ZjFkZThlZDg1NjhlZmZhOGYzM2EzOTY1OWEyZTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wY2VlMjk5ZC1mODIyLTRmOWQtOGYxOS01Njg3
YzIwMDI3YmQvMTI0ODg4MmViMWM4ZTY2YWI1YzIzZjY2NzM2MjU2N2U2ZDdkYjY3
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIp2ajANBgkqhkiG9w0BAQsFAAOCAQEAW2+t84cJerqXFZzK
1U0LPMMadvK74pMhzjAEoS6/jbAcYG3WdqmmTIHQDkYf2K3FfMfVZ2Z3phNFh9IX
/sgdzsvG54m9fE+DEq44qBgE9qS4GGsUE4DoA9hCGu1FEF3fP5ivOlFyzTO35rx9
Itf2LwQJxJwLZ9a3K5pABjPsb3/zrQNPWzkodBpU925lfI2IHfYTn2MN1p5R4Uhw
nN1aszYbbYyHT4uYEuwCQIKQUrmwXMaHDgu3Jb3I5iAX9p9ESzwg8DCgr/zHG+bw
rwoihtS626nQiZJnQ/ZUy4+SsyZVZPsJAHAI1Mey7M3FxLTYvlv8CDbjhDupvYrj
6NTLsA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org