Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13ec1d4e-ed93-4f1e-829f-6d8b05ef73e0/bed78c05d5ecf8f471ccff8b9775f783727e56d8.roa
File:                     bed78c05d5ecf8f471ccff8b9775f783727e56d8.roa (raw, json)
Hash identifier:          C+dnZEd4s3oVAYrgyzbXoBJsPtL3Uu87fyMEL79U+nM=
Subject key identifier:   27:E7:44:4E:BF:4B:F1:35:FA:FB:64:7D:E7:E1:DF:A9:63:8C:DC:C6
Certificate issuer:       /CN=28f76b879a1459ce86a185362e868785c2ae6a54
Certificate serial:       0D52C2
Authority key identifier: 59:D8:03:6D:43:9B:80:3C:93:34:7B:27:8D:0E:6F:77:6B:A2:5B:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28f76b879a1459ce86a185362e868785c2ae6a54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13ec1d4e-ed93-4f1e-829f-6d8b05ef73e0/bed78c05d5ecf8f471ccff8b9775f783727e56d8.roa
Signing time:             Wed 24 Mar 2021 14:29:32 +0000
ROA not before:           Wed 24 Mar 2021 14:29:32 +0000
ROA not after:            Tue 24 Mar 2026 14:29:32 +0000
asID:                     264810
IP address blocks:        170.238.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873154 (0xd52c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28f76b879a1459ce86a185362e868785c2ae6a54
        Validity
            Not Before: Mar 24 14:29:32 2021 GMT
            Not After : Mar 24 14:29:32 2026 GMT
        Subject: CN=bed78c05d5ecf8f471ccff8b9775f783727e56d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f6:86:9b:4c:07:66:f4:d9:04:c3:5a:dd:47:
                    13:91:42:15:ed:cb:f1:68:48:99:39:ea:9d:c2:99:
                    b3:3a:33:bd:67:2e:aa:45:d0:6d:78:3e:f4:66:fa:
                    9a:93:8c:8e:15:fb:6f:69:8e:11:d0:37:f2:33:b1:
                    13:03:6b:41:47:dc:50:fa:8d:d4:af:72:69:a4:68:
                    1e:5b:2f:3f:c2:cd:6e:a3:7d:97:e8:65:ae:71:fe:
                    30:9e:09:b9:1a:b1:6e:ac:ce:7d:e2:f7:36:5a:2e:
                    74:76:35:da:8b:85:ae:7a:f6:91:12:d5:1a:10:a7:
                    6a:98:d8:38:24:8d:92:7b:06:df:da:12:99:ff:ad:
                    70:6d:dc:ec:6d:eb:ad:33:3e:30:c9:59:28:f0:0c:
                    fa:05:b3:88:cf:4a:30:e0:76:0a:e2:95:c0:4b:b8:
                    a6:fc:14:e2:8d:aa:69:9c:40:c0:37:84:88:14:0b:
                    b1:fa:f7:1a:e7:b0:7a:79:be:f3:ce:3e:18:14:f0:
                    aa:82:4e:5a:4a:90:40:e2:7b:6e:a4:da:76:2b:8a:
                    31:9e:f7:5f:12:5f:65:ef:d2:4e:83:4e:ac:c1:7b:
                    4b:d8:1c:eb:be:b6:bf:a6:5b:26:31:52:0e:28:a4:
                    32:2b:5f:88:54:e5:f5:e1:36:4a:d7:8e:05:ac:45:
                    b5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E7:44:4E:BF:4B:F1:35:FA:FB:64:7D:E7:E1:DF:A9:63:8C:DC:C6
            X509v3 Authority Key Identifier:
                keyid:59:D8:03:6D:43:9B:80:3C:93:34:7B:27:8D:0E:6F:77:6B:A2:5B:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28f76b879a1459ce86a185362e868785c2ae6a54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13ec1d4e-ed93-4f1e-829f-6d8b05ef73e0/bed78c05d5ecf8f471ccff8b9775f783727e56d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13ec1d4e-ed93-4f1e-829f-6d8b05ef73e0/28f76b879a1459ce86a185362e868785c2ae6a54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:36:d8:e6:16:1e:19:24:b4:f1:c1:e7:1b:c9:5e:29:d4:f6:
         4d:bf:6b:eb:a9:d1:ed:a7:f6:88:a4:0a:44:61:46:9e:a9:35:
         a6:a9:89:c6:0b:37:46:bf:e1:cc:36:bc:b8:02:2c:a9:a0:1c:
         d8:3d:6b:c7:22:13:09:43:1b:58:6a:2e:bf:2e:e9:83:dd:51:
         cd:37:46:cf:9e:c8:ae:a7:05:1a:74:d9:68:90:98:9b:69:ca:
         59:a6:ea:82:b1:05:79:2b:86:e7:6e:ff:ce:d5:e6:a7:f4:69:
         97:17:0a:c6:e9:88:31:56:54:a2:56:91:9a:70:b4:47:90:99:
         e0:32:b6:25:a0:52:4d:44:9c:9b:12:81:12:59:71:a1:29:03:
         24:ac:8c:64:f2:d9:2a:af:27:39:28:e3:8a:87:5f:45:e2:82:
         d4:10:e8:f3:5f:11:d3:d3:37:2b:de:70:80:dc:1a:c1:ed:71:
         0d:01:8a:d2:dd:a4:4c:57:e5:08:3f:9c:f2:88:9d:8c:22:38:
         7f:ab:6f:56:8b:11:2c:ae:3e:6f:78:52:84:ae:54:4f:97:91:
         bd:7c:aa:70:82:e2:14:a4:00:84:28:6e:6f:4d:b6:40:9c:6e:
         05:b2:a6:90:ed:72:36:95:34:af:9e:8a:9b:51:2a:cf:6c:92:
         69:ae:30:3c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDVLCMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI4
Zjc2Yjg3OWExNDU5Y2U4NmExODUzNjJlODY4Nzg1YzJhZTZhNTQwHhcNMjEwMzI0
MTQyOTMyWhcNMjYwMzI0MTQyOTMyWjAzMTEwLwYDVQQDEyhiZWQ3OGMwNWQ1ZWNm
OGY0NzFjY2ZmOGI5Nzc1Zjc4MzcyN2U1NmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlvaGm0wHZvTZBMNa3UcTkUIV7cvxaEiZOeqdwpmzOjO9Zy6q
RdBteD70Zvqak4yOFftvaY4R0DfyM7ETA2tBR9xQ+o3Ur3JppGgeWy8/ws1uo32X
6GWucf4wngm5GrFurM594vc2Wi50djXai4WuevaREtUaEKdqmNg4JI2Sewbf2hKZ
/61wbdzsbeutMz4wyVko8Az6BbOIz0ow4HYK4pXAS7im/BTijappnEDAN4SIFAux
+vca57B6eb7zzj4YFPCqgk5aSpBA4ntupNp2K4oxnvdfEl9l79JOg06swXtL2Bzr
vra/plsmMVIOKKQyK1+IVOX14TZK144FrEW1IwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCfnRE6/S/E1+vtkfefh36ljjNzGMB8GA1UdIwQYMBaAFFnYA21Dm4A8kzR7
J40Ob3drolvQMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjhmNzZi
ODc5YTE0NTljZTg2YTE4NTM2MmU4Njg3ODVjMmFlNmE1NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTNlYzFkNGUtZWQ5My00ZjFlLTgyOWYtNmQ4YjA1
ZWY3M2UwL2JlZDc4YzA1ZDVlY2Y4ZjQ3MWNjZmY4Yjk3NzVmNzgzNzI3ZTU2ZDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xM2VjMWQ0ZS1lZDkzLTRmMWUtODI5Zi02ZDhi
MDVlZjczZTAvMjhmNzZiODc5YTE0NTljZTg2YTE4NTM2MmU4Njg3ODVjMmFlNmE1
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqruzDANBgkqhkiG9w0BAQsFAAOCAQEABDbY5hYeGSS08cHn
G8leKdT2Tb9r66nR7af2iKQKRGFGnqk1pqmJxgs3Rr/hzDa8uAIsqaAc2D1rxyIT
CUMbWGouvy7pg91RzTdGz57IrqcFGnTZaJCYm2nKWabqgrEFeSuG527/ztXmp/Rp
lxcKxumIMVZUolaRmnC0R5CZ4DK2JaBSTUScmxKBEllxoSkDJKyMZPLZKq8nOSjj
iodfReKC1BDo818R09M3K95wgNwawe1xDQGK0t2kTFflCD+c8oidjCI4f6tvVosR
LK4+b3hShK5UT5eRvXyqcILiFKQAhChub022QJxuBbKmkO1yNpU0r56Km1Eqz2yS
aa4wPA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org