Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/9d87db8e75c879446d11c44d771bbe13bc6a636b.roa
File:                     9d87db8e75c879446d11c44d771bbe13bc6a636b.roa (raw, json)
Hash identifier:          /xQtt4VKwTe8vbP+hm3hYRyMLhfrh4XDt+kqnIpOgxA=
Subject key identifier:   CB:33:9C:2D:71:C9:E8:61:BC:A3:91:95:A1:83:7F:44:DC:30:1F:68
Certificate issuer:       /CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
Certificate serial:       20FCFE
Authority key identifier: E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/9d87db8e75c879446d11c44d771bbe13bc6a636b.roa
Signing time:             Mon 22 May 2023 16:38:25 +0000
ROA not before:           Sun 21 May 2023 16:38:25 +0000
ROA not after:            Thu 22 May 2025 16:38:25 +0000
asID:                     265750
IP address blocks:        170.150.60.0/23 maxlen: 23
                          170.150.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161918 (0x20fcfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
        Validity
            Not Before: May 21 16:38:25 2023 GMT
            Not After : May 22 16:38:25 2025 GMT
        Subject: CN=9d87db8e75c879446d11c44d771bbe13bc6a636b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:63:dc:15:d7:c3:c2:8b:56:cb:ba:e0:59:
                    e5:7f:00:e7:d7:b4:6e:70:ea:21:a9:24:2b:ba:66:
                    43:41:d7:8d:00:2c:76:0e:fd:3c:6a:f4:c9:ba:22:
                    57:56:39:6a:cf:02:6e:d5:d1:bb:15:9b:0b:64:21:
                    40:6c:72:2e:08:64:db:e4:de:13:5c:f5:54:b6:25:
                    25:75:e6:8c:fa:13:f5:e5:e0:dd:d6:e6:ec:f9:5e:
                    02:f6:df:00:fb:43:1d:bf:7e:a5:51:1b:eb:e9:49:
                    a3:93:d0:1b:48:47:eb:52:2f:a0:7e:32:df:a5:bc:
                    46:a7:c0:eb:50:b6:d4:3d:32:fe:1e:5d:d5:1c:2f:
                    ca:3b:43:ed:ff:6e:09:a9:11:66:20:c1:fd:2a:cc:
                    73:5e:fb:e1:15:4f:03:a9:f9:22:1d:e6:ea:e4:d3:
                    6b:2b:89:f3:38:ce:a6:88:2a:67:70:05:52:ba:61:
                    42:2b:cb:77:ea:02:c2:9b:76:1b:41:8f:9b:40:98:
                    81:7c:d8:1f:42:59:8b:da:66:e3:92:32:43:d5:e5:
                    a0:37:94:e5:d0:18:f2:fd:3c:ca:6a:17:02:4c:61:
                    78:98:95:cd:4d:e7:77:8b:dc:46:59:0d:55:43:8d:
                    43:9f:40:f5:b5:51:35:78:df:2d:e7:0b:bc:fb:64:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:33:9C:2D:71:C9:E8:61:BC:A3:91:95:A1:83:7F:44:DC:30:1F:68
            X509v3 Authority Key Identifier:
                keyid:E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/9d87db8e75c879446d11c44d771bbe13bc6a636b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.60.0-170.150.62.255

    Signature Algorithm: sha256WithRSAEncryption
         09:5f:80:b0:52:84:41:95:c8:cc:ba:bb:22:7f:5d:17:6f:5a:
         bc:43:b7:32:04:bb:cf:d6:a7:f3:37:2c:18:c7:ed:48:03:b5:
         e5:1e:9f:5e:64:6e:6e:73:e5:a8:65:97:61:8c:97:f4:fd:8e:
         8a:94:9a:78:a0:91:08:42:4f:cb:d9:84:4d:e9:dc:46:22:64:
         ad:82:9b:f9:d0:b2:d8:3d:16:dc:4a:65:5c:33:36:f1:be:90:
         e4:d8:5c:84:b8:e0:8f:1c:cf:75:81:27:57:64:3c:ec:7b:a2:
         29:f4:5c:3f:1d:d6:12:cd:da:5e:8d:60:d8:06:fa:cf:d4:65:
         a7:04:55:e7:2a:f7:78:e2:c3:82:ec:f2:80:98:79:1f:72:fe:
         17:6a:6a:fa:53:65:0a:1f:b8:b1:9b:72:a2:d4:bb:7e:86:f3:
         0c:f1:38:91:db:ca:d4:48:ff:38:83:30:a3:31:b5:a7:f0:a2:
         85:af:c5:de:2c:b6:70:4e:ba:ba:1b:5c:06:78:62:7c:aa:5e:
         66:a0:39:2c:89:2e:3c:7d:1c:92:de:32:0d:9f:9f:c7:1f:97:
         e0:e1:5b:2d:7d:41:e5:40:12:f4:c9:25:39:8a:cd:d7:7e:18:
         7e:39:c8:81:5b:d2:a1:95:93:c9:19:21:ce:2c:81:de:0c:5e:
         3a:a0:ee:71
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDIPz+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
YzllZjhiM2UzNjIxNWJiMzU2ZjFjZjMyMjhiOWQ3OWI2ODU5ZjkwHhcNMjMwNTIx
MTYzODI1WhcNMjUwNTIyMTYzODI1WjAzMTEwLwYDVQQDEyg5ZDg3ZGI4ZTc1Yzg3
OTQ0NmQxMWM0NGQ3NzFiYmUxM2JjNmE2MzZiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArc9j3BXXw8KLVsu64FnlfwDn17RucOohqSQrumZDQdeNACx2
Dv08avTJuiJXVjlqzwJu1dG7FZsLZCFAbHIuCGTb5N4TXPVUtiUldeaM+hP15eDd
1ubs+V4C9t8A+0Mdv36lURvr6Umjk9AbSEfrUi+gfjLfpbxGp8DrULbUPTL+Hl3V
HC/KO0Pt/24JqRFmIMH9KsxzXvvhFU8DqfkiHebq5NNrK4nzOM6miCpncAVSumFC
K8t36gLCm3YbQY+bQJiBfNgfQlmL2mbjkjJD1eWgN5Tl0Bjy/TzKahcCTGF4mJXN
Ted3i9xGWQ1VQ41Dn0D1tVE1eN8t5wu8+2S1MwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFMsznC1xyehhvKORlaGDf0TcMB9oMB8GA1UdIwQYMBaAFOkglxs6QIUCCioe
w7z+l04drzSIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjVjOWVm
OGIzZTM2MjE1YmIzNTZmMWNmMzIyOGI5ZDc5YjY4NTlmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWZjZmM3MDUtMzlkNi00ZDJhLWFiOTMtYzkwMDk2
YzMxNDI4LzlkODdkYjhlNzVjODc5NDQ2ZDExYzQ0ZDc3MWJiZTEzYmM2YTYzNmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZmNmYzcwNS0zOWQ2LTRkMmEtYWI5My1jOTAw
OTZjMzE0MjgvZjVjOWVmOGIzZTM2MjE1YmIzNTZmMWNmMzIyOGI5ZDc5YjY4NTlm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQCqpY8AwQAqpY+MA0GCSqGSIb3DQEBCwUAA4IBAQAJX4Cw
UoRBlcjMursif10Xb1q8Q7cyBLvP1qfzNywYx+1IA7XlHp9eZG5uc+WoZZdhjJf0
/Y6KlJp4oJEIQk/L2YRN6dxGImStgpv50LLYPRbcSmVcMzbxvpDk2FyEuOCPHM91
gSdXZDzse6Ip9Fw/HdYSzdpejWDYBvrP1GWnBFXnKvd44sOC7PKAmHkfcv4Xamr6
U2UKH7ixm3Ki1Lt+hvMM8TiR28rUSP84gzCjMbWn8KKFr8XeLLZwTrq6G1wGeGJ8
ql5moDksiS48fRyS3jINn5/HH5fg4VstfUHlQBL0ySU5is3Xfhh+OciBW9KhlZPJ
GSHOLIHeDF46oO5x
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org