Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/a1bef517e2dccc6a2f9032a2ae4ce9224a9caf66.roa
File:                     a1bef517e2dccc6a2f9032a2ae4ce9224a9caf66.roa (raw, json)
Hash identifier:          zwZFvRgunhzM5CakQ+G1RvBlHppuxICNfxQ1SQQ3FKY=
Subject key identifier:   BD:AA:0C:F1:B2:21:8F:DB:73:1F:46:4D:9B:D0:74:07:A2:AF:C5:86
Certificate issuer:       /CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
Certificate serial:       1DC225
Authority key identifier: E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/a1bef517e2dccc6a2f9032a2ae4ce9224a9caf66.roa
Signing time:             Sun 08 Jan 2023 01:40:48 +0000
ROA not before:           Fri 06 Jan 2023 01:39:40 +0000
ROA not after:            Sat 08 Jan 2028 01:39:40 +0000
asID:                     7049
IP address blocks:        170.150.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1950245 (0x1dc225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9
        Validity
            Not Before: Jan  6 01:39:40 2023 GMT
            Not After : Jan  8 01:39:40 2028 GMT
        Subject: CN=a1bef517e2dccc6a2f9032a2ae4ce9224a9caf66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:0d:4f:ae:ec:f1:b6:3f:c4:a3:17:8d:4e:
                    d3:ee:d5:86:bf:25:34:24:7d:96:37:40:9a:8d:c3:
                    a9:e2:4c:c4:77:66:25:5a:c0:33:85:07:43:f7:27:
                    fd:75:25:af:0e:92:4e:7c:a5:32:1a:8d:59:ae:23:
                    15:17:4d:80:3f:a0:ef:43:3d:98:9e:ca:5b:f2:bb:
                    71:b3:8d:91:93:68:60:a7:f7:b4:e3:80:20:e3:29:
                    a3:d6:78:c7:76:8a:fc:93:49:72:b1:d4:74:dd:81:
                    6a:c3:3e:2b:42:4a:7f:63:55:91:a9:51:0c:9a:f0:
                    51:5b:f1:68:e9:61:58:22:57:92:ac:4d:70:c7:08:
                    98:57:b8:29:78:28:a3:0e:86:b0:f3:1a:79:1b:85:
                    af:da:26:47:d3:8f:dc:ad:b8:59:ed:be:73:ae:18:
                    96:b2:88:e5:24:1a:6b:9b:9a:7e:d2:5f:ca:67:26:
                    cb:69:ef:e2:c7:5f:50:f4:6d:4f:bd:d3:fd:49:22:
                    4f:cc:b8:6e:ba:ff:d5:18:72:88:54:0b:29:53:24:
                    41:ed:36:db:15:c7:59:73:d1:bc:51:fe:1b:c6:8c:
                    a0:b1:74:a3:17:29:0b:e1:d4:be:43:1e:12:a9:97:
                    d0:ee:79:e8:c0:22:52:05:12:b0:1f:5c:51:71:3c:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AA:0C:F1:B2:21:8F:DB:73:1F:46:4D:9B:D0:74:07:A2:AF:C5:86
            X509v3 Authority Key Identifier:
                keyid:E9:20:97:1B:3A:40:85:02:0A:2A:1E:C3:BC:FE:97:4E:1D:AF:34:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/a1bef517e2dccc6a2f9032a2ae4ce9224a9caf66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1fcfc705-39d6-4d2a-ab93-c90096c31428/f5c9ef8b3e36215bb356f1cf3228b9d79b6859f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:31:9a:25:04:52:e1:b3:d9:34:0d:c3:15:da:eb:91:02:12:
         67:7f:0d:2d:b8:63:45:b4:75:6a:5b:6f:5a:6c:49:a1:7d:01:
         57:fb:1c:bd:93:ed:15:66:3d:87:34:aa:eb:ce:33:b3:95:77:
         4f:e0:b8:37:14:be:dd:72:97:41:4e:31:99:b5:eb:08:7c:09:
         be:88:a2:fd:45:9d:02:dc:48:c1:08:a5:1f:5f:8c:3d:04:95:
         a7:e8:0b:ef:af:5a:c2:ca:57:87:1c:39:72:fe:6f:ff:ae:85:
         a4:d0:d6:f9:d7:f5:c5:9b:09:5c:1b:e7:1c:06:13:4c:86:3a:
         b0:f9:74:82:b6:0e:dc:f9:53:c3:ca:2c:97:d5:b8:7c:c1:aa:
         f6:ff:5a:8c:c5:ee:f2:6b:54:7b:ec:20:16:97:7c:f7:d4:b5:
         58:a6:f3:9f:7e:9b:94:1d:51:ef:6f:2d:c9:05:84:e1:0d:34:
         7d:c0:ef:52:19:b6:c0:69:3e:78:ea:52:8f:39:1a:cc:9e:96:
         6e:af:e1:0a:ee:62:ef:89:63:ff:65:3e:17:60:78:f8:0c:71:
         6c:50:60:df:6a:5f:1f:39:15:7d:8d:2e:9a:9e:7a:79:2c:9b:
         ba:1d:81:c2:cf:12:5c:0f:da:7f:02:01:c8:5b:08:65:f6:68:
         0e:56:71:63
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHcIlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
YzllZjhiM2UzNjIxNWJiMzU2ZjFjZjMyMjhiOWQ3OWI2ODU5ZjkwHhcNMjMwMTA2
MDEzOTQwWhcNMjgwMTA4MDEzOTQwWjAzMTEwLwYDVQQDEyhhMWJlZjUxN2UyZGNj
YzZhMmY5MDMyYTJhZTRjZTkyMjRhOWNhZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm/UNT67s8bY/xKMXjU7T7tWGvyU0JH2WN0CajcOp4kzEd2Yl
WsAzhQdD9yf9dSWvDpJOfKUyGo1ZriMVF02AP6DvQz2Ynspb8rtxs42Rk2hgp/e0
44Ag4ymj1njHdor8k0lysdR03YFqwz4rQkp/Y1WRqVEMmvBRW/Fo6WFYIleSrE1w
xwiYV7gpeCijDoaw8xp5G4Wv2iZH04/crbhZ7b5zrhiWsojlJBprm5p+0l/KZybL
ae/ix19Q9G1PvdP9SSJPzLhuuv/VGHKIVAspUyRB7TbbFcdZc9G8Uf4bxoygsXSj
FykL4dS+Qx4SqZfQ7nnowCJSBRKwH1xRcTx0vwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFL2qDPGyIY/bcx9GTZvQdAeir8WGMB8GA1UdIwQYMBaAFOkglxs6QIUCCioe
w7z+l04drzSIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjVjOWVm
OGIzZTM2MjE1YmIzNTZmMWNmMzIyOGI5ZDc5YjY4NTlmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWZjZmM3MDUtMzlkNi00ZDJhLWFiOTMtYzkwMDk2
YzMxNDI4L2ExYmVmNTE3ZTJkY2NjNmEyZjkwMzJhMmFlNGNlOTIyNGE5Y2FmNjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZmNmYzcwNS0zOWQ2LTRkMmEtYWI5My1jOTAw
OTZjMzE0MjgvZjVjOWVmOGIzZTM2MjE1YmIzNTZmMWNmMzIyOGI5ZDc5YjY4NTlm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKqWPzANBgkqhkiG9w0BAQsFAAOCAQEAgTGaJQRS4bPZNA3D
FdrrkQISZ38NLbhjRbR1altvWmxJoX0BV/scvZPtFWY9hzSq684zs5V3T+C4NxS+
3XKXQU4xmbXrCHwJvoii/UWdAtxIwQilH1+MPQSVp+gL769awspXhxw5cv5v/66F
pNDW+df1xZsJXBvnHAYTTIY6sPl0grYO3PlTw8osl9W4fMGq9v9ajMXu8mtUe+wg
Fpd899S1WKbzn36blB1R728tyQWE4Q00fcDvUhm2wGk+eOpSjzkazJ6Wbq/hCu5i
74lj/2U+F2B4+AxxbFBg32pfHzkVfY0ump56eSybuh2Bws8SXA/afwIByFsIZfZo
DlZxYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org