Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/7ef39f77c4bad0a39925ada209fed7b1e9d3e262.roa
File:                     7ef39f77c4bad0a39925ada209fed7b1e9d3e262.roa (raw, json)
Hash identifier:          Y7J9kOBniigRqiGO9y2MaAZn+WmxYOe0mNtCMeoZKrM=
Subject key identifier:   AC:08:41:CC:62:03:0F:A3:13:9D:72:6C:B8:5F:F3:F7:D7:F1:02:3C
Certificate issuer:       /CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
Certificate serial:       2106C0
Authority key identifier: E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/7ef39f77c4bad0a39925ada209fed7b1e9d3e262.roa
Signing time:             Mon 22 May 2023 16:51:31 +0000
ROA not before:           Sun 21 May 2023 16:51:31 +0000
ROA not after:            Thu 22 May 2025 16:51:31 +0000
asID:                     265750
IP address blocks:        170.150.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164416 (0x2106c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
        Validity
            Not Before: May 21 16:51:31 2023 GMT
            Not After : May 22 16:51:31 2025 GMT
        Subject: CN=7ef39f77c4bad0a39925ada209fed7b1e9d3e262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:0e:b6:f5:3a:32:f5:32:29:69:ac:04:e3:
                    ad:51:9a:72:c4:4b:cc:fe:8b:0e:7e:2c:1d:27:73:
                    a5:74:1a:fa:25:2c:5b:d8:b4:aa:2a:7f:b4:37:2a:
                    0b:90:9f:a0:40:7b:5f:4a:8a:e1:26:57:5b:53:9d:
                    bd:32:84:cb:10:4f:f0:32:d8:4c:5a:a0:62:18:0a:
                    b8:09:a9:35:ac:16:13:f4:65:6c:41:9d:d7:aa:7c:
                    30:72:f4:0e:55:02:91:ae:97:54:5f:da:91:28:0e:
                    72:33:5c:81:8c:be:90:7d:80:26:52:cc:ae:d9:19:
                    58:df:30:5e:25:03:60:8c:38:ed:03:35:0f:6d:ac:
                    49:bb:eb:31:35:36:6c:81:b2:4d:39:74:47:ea:2e:
                    24:5b:03:27:58:29:98:ac:13:20:e6:14:c3:b4:ea:
                    80:bf:fd:0e:2c:ad:77:0a:77:40:0e:d9:e2:02:12:
                    d5:2d:03:1e:43:c3:cc:81:bf:8a:d9:fe:08:52:b3:
                    c4:a9:e3:d3:15:31:76:5d:ae:30:b0:bd:9f:45:15:
                    42:bd:5a:0c:25:8a:df:7a:ff:da:3b:57:ba:f6:6b:
                    fd:fd:08:38:ba:e2:61:69:86:b7:65:0f:7f:05:d5:
                    ed:02:2d:6d:3d:82:c4:85:0a:b2:7e:2f:9f:d6:47:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:08:41:CC:62:03:0F:A3:13:9D:72:6C:B8:5F:F3:F7:D7:F1:02:3C
            X509v3 Authority Key Identifier:
                keyid:E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/7ef39f77c4bad0a39925ada209fed7b1e9d3e262.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:09:a9:ac:70:dc:14:3e:d2:fd:4d:ac:eb:08:8f:8c:fd:87:
         41:f3:6b:52:15:ee:84:39:5d:f4:5e:82:c8:48:ef:b8:d9:2e:
         80:40:8f:3a:5c:b3:31:6a:6e:11:b0:c3:8f:2d:83:9a:96:bf:
         b3:84:e5:54:2b:81:e5:6e:74:18:c3:de:3a:bf:a5:c8:30:fe:
         e8:cf:dc:16:8d:97:ec:c2:6f:91:56:3a:c1:7b:ca:07:d3:58:
         0f:b9:8b:29:8b:ac:5a:e5:b0:82:c1:df:a2:f1:56:21:50:cf:
         1e:1d:46:66:e3:26:c0:ca:92:54:3d:4b:30:61:10:f0:f6:dd:
         a3:66:fa:cf:62:4f:c9:ad:b9:76:fd:f0:ba:3b:3d:0d:fe:80:
         63:94:90:a5:fc:e6:d8:e0:7e:3d:3e:3d:d9:15:f1:04:3a:42:
         bb:7a:dd:5f:74:04:4e:a7:59:89:4c:5c:88:bd:ed:c1:cf:2a:
         16:02:f3:a6:d8:96:64:5f:3d:c9:86:29:e6:ee:f0:60:0f:2e:
         98:69:8e:4b:4c:91:35:30:85:94:9b:6d:fa:54:82:fc:63:b7:
         b2:66:33:23:2e:3a:96:8b:ce:3f:0f:e6:7e:27:b9:27:22:d6:
         d0:4d:0a:13:6a:af:0c:c5:ff:c9:52:ee:01:a6:85:5f:30:b4:
         a7:d1:78:6f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIQbAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
YzllZjhiM2UzNjIxNWJiMzU2ZjFjZjMyMjhiOWQ3OWI2ODU5ZjkwHhcNMjMwNTIx
MTY1MTMxWhcNMjUwNTIyMTY1MTMxWjAzMTEwLwYDVQQDEyg3ZWYzOWY3N2M0YmFk
MGEzOTkyNWFkYTIwOWZlZDdiMWU5ZDNlMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxYoOtvU6MvUyKWmsBOOtUZpyxEvM/osOfiwdJ3OldBr6JSxb
2LSqKn+0NyoLkJ+gQHtfSorhJldbU529MoTLEE/wMthMWqBiGAq4Cak1rBYT9GVs
QZ3XqnwwcvQOVQKRrpdUX9qRKA5yM1yBjL6QfYAmUsyu2RlY3zBeJQNgjDjtAzUP
baxJu+sxNTZsgbJNOXRH6i4kWwMnWCmYrBMg5hTDtOqAv/0OLK13CndADtniAhLV
LQMeQ8PMgb+K2f4IUrPEqePTFTF2Xa4wsL2fRRVCvVoMJYrfev/aO1e69mv9/Qg4
uuJhaYa3ZQ9/BdXtAi1tPYLEhQqyfi+f1kdR/wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKwIQcxiAw+jE51ybLhf8/fX8QI8MB8GA1UdIwQYMBaAFOkglxs6QIUCCioe
w7z+l04drzSIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjVjOWVm
OGIzZTM2MjE1YmIzNTZmMWNmMzIyOGI5ZDc5YjY4NTlmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWZjZmM3MDUtMzlkNi00ZDJhLWFiOTMtYzkwMDk2
YzMxNDI4LzdlZjM5Zjc3YzRiYWQwYTM5OTI1YWRhMjA5ZmVkN2IxZTlkM2UyNjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZmNmYzcwNS0zOWQ2LTRkMmEtYWI5My1jOTAw
OTZjMzE0MjgvZjVjOWVmOGIzZTM2MjE1YmIzNTZmMWNmMzIyOGI5ZDc5YjY4NTlm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKqWPzANBgkqhkiG9w0BAQsFAAOCAQEAKQmprHDcFD7S/U2s
6wiPjP2HQfNrUhXuhDld9F6CyEjvuNkugECPOlyzMWpuEbDDjy2Dmpa/s4TlVCuB
5W50GMPeOr+lyDD+6M/cFo2X7MJvkVY6wXvKB9NYD7mLKYusWuWwgsHfovFWIVDP
Hh1GZuMmwMqSVD1LMGEQ8Pbdo2b6z2JPya25dv3wujs9Df6AY5SQpfzm2OB+PT49
2RXxBDpCu3rdX3QETqdZiUxciL3twc8qFgLzptiWZF89yYYp5u7wYA8umGmOS0yR
NTCFlJtt+lSC/GO3smYzIy46lovOPw/mfie5JyLW0E0KE2qvDMX/yVLuAaaFXzC0
p9F4bw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org