Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22cf3f0d-3b3b-4acc-857b-1b48f291371d/eedcfc606d397035dc4124311709a636968dc5a8.roa
File:                     eedcfc606d397035dc4124311709a636968dc5a8.roa (raw, json)
Hash identifier:          jaW8t9Q+telDSeBvwy5v6z/H2rK4CEfBaBUUPF3oX1o=
Subject key identifier:   89:7B:E6:46:6F:AF:36:EF:A1:D2:BF:15:90:61:9A:B2:50:FE:D9:7A
Certificate issuer:       /CN=0a0e8f2b61f015e7398be757bbbe082aa88a9ab4
Certificate serial:       0D6827
Authority key identifier: D1:DB:F7:B2:0D:D2:56:AA:07:8B:33:0A:33:95:99:31:7B:D3:29:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a0e8f2b61f015e7398be757bbbe082aa88a9ab4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22cf3f0d-3b3b-4acc-857b-1b48f291371d/eedcfc606d397035dc4124311709a636968dc5a8.roa
Signing time:             Wed 24 Mar 2021 14:28:52 +0000
ROA not before:           Wed 24 Mar 2021 14:28:52 +0000
ROA not after:            Tue 24 Mar 2026 14:28:52 +0000
asID:                     20207
IP address blocks:        168.232.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878631 (0xd6827)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a0e8f2b61f015e7398be757bbbe082aa88a9ab4
        Validity
            Not Before: Mar 24 14:28:52 2021 GMT
            Not After : Mar 24 14:28:52 2026 GMT
        Subject: CN=eedcfc606d397035dc4124311709a636968dc5a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cb:67:aa:19:df:08:cd:13:e1:ad:96:a8:33:
                    15:4b:15:8b:70:22:fc:a3:bc:64:c8:7c:bb:e5:77:
                    ce:38:15:90:fb:e8:4f:63:8b:41:96:db:4e:77:b1:
                    fb:84:24:e9:e9:29:41:de:df:14:d2:46:ea:b8:69:
                    7b:63:88:b8:8f:4d:cb:ae:92:ba:6b:b2:49:11:a7:
                    03:6f:93:db:98:85:26:44:12:89:c0:7e:80:ef:85:
                    2b:43:8a:66:46:d1:8c:de:9b:7b:30:af:8f:65:23:
                    9d:d8:0b:d7:bc:ee:69:3f:8b:d3:d0:2f:aa:0c:0b:
                    81:df:a9:8a:8c:b4:86:cd:08:bd:3d:d9:f3:0d:b1:
                    84:d2:a1:59:fe:9c:49:fe:05:d1:83:a8:09:d7:2b:
                    24:56:9f:b0:be:88:34:12:da:3e:5c:ec:53:f8:d4:
                    86:ff:c8:ee:0f:40:f0:03:6a:4f:b5:a1:25:36:a2:
                    ef:f9:94:fc:07:e0:92:cc:d3:f3:c8:2c:4f:55:76:
                    e5:d4:0d:78:b5:37:f1:81:82:bb:31:4a:ff:cd:ca:
                    87:75:06:f8:c5:eb:e5:c9:84:6d:15:51:fb:1c:40:
                    d4:3a:6a:cc:b8:ac:f8:9c:bc:a8:c1:c9:5a:a3:f8:
                    3d:3f:65:7f:a5:0c:fa:3d:a1:56:ef:79:96:a3:e7:
                    03:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7B:E6:46:6F:AF:36:EF:A1:D2:BF:15:90:61:9A:B2:50:FE:D9:7A
            X509v3 Authority Key Identifier:
                keyid:D1:DB:F7:B2:0D:D2:56:AA:07:8B:33:0A:33:95:99:31:7B:D3:29:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a0e8f2b61f015e7398be757bbbe082aa88a9ab4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22cf3f0d-3b3b-4acc-857b-1b48f291371d/eedcfc606d397035dc4124311709a636968dc5a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22cf3f0d-3b3b-4acc-857b-1b48f291371d/0a0e8f2b61f015e7398be757bbbe082aa88a9ab4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:39:d1:6f:c2:dc:8e:2f:14:08:66:22:eb:3c:ef:0d:93:23:
         9f:7d:4e:78:6d:68:7a:2d:b1:6a:30:6e:4b:e3:46:59:f7:e1:
         67:aa:03:db:34:d4:98:c2:77:f0:c0:eb:dc:32:3f:06:13:96:
         07:2a:1f:f4:78:c9:32:bf:0e:84:72:32:9e:95:c3:69:15:e7:
         5c:42:bf:f8:8f:3b:10:d2:03:35:88:6f:17:e8:8c:cf:19:64:
         05:47:ca:fe:63:c3:c3:54:f9:20:9e:dc:fe:5e:f2:79:e8:34:
         59:8a:93:bb:02:bf:ba:eb:5e:fe:ef:e2:8a:c1:ff:76:95:25:
         01:9f:8c:a6:ad:d5:e8:8b:19:bb:26:bd:43:b3:80:fc:49:9c:
         a0:f2:49:b9:ad:38:a9:66:5b:b0:c1:25:d6:00:99:5f:9c:99:
         9b:ec:d9:9b:1c:72:99:23:67:4c:5d:38:b9:65:d3:23:e2:48:
         22:6a:78:15:ef:e8:e0:64:69:c5:f3:55:16:1a:c7:46:b5:67:
         24:07:87:48:1f:3d:1f:70:05:54:5c:d0:e0:78:21:a4:ff:89:
         30:33:15:bc:c5:8c:a4:cf:85:5f:70:75:46:83:18:1e:72:0b:
         ec:a0:fe:93:fd:0b:0c:62:8f:04:8f:5c:6d:8b:35:eb:12:73:
         dc:6d:3f:f6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDWgnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBh
MGU4ZjJiNjFmMDE1ZTczOThiZTc1N2JiYmUwODJhYTg4YTlhYjQwHhcNMjEwMzI0
MTQyODUyWhcNMjYwMzI0MTQyODUyWjAzMTEwLwYDVQQDEyhlZWRjZmM2MDZkMzk3
MDM1ZGM0MTI0MzExNzA5YTYzNjk2OGRjNWE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjctnqhnfCM0T4a2WqDMVSxWLcCL8o7xkyHy75XfOOBWQ++hP
Y4tBlttOd7H7hCTp6SlB3t8U0kbquGl7Y4i4j03LrpK6a7JJEacDb5PbmIUmRBKJ
wH6A74UrQ4pmRtGM3pt7MK+PZSOd2AvXvO5pP4vT0C+qDAuB36mKjLSGzQi9Pdnz
DbGE0qFZ/pxJ/gXRg6gJ1yskVp+wvog0Eto+XOxT+NSG/8juD0DwA2pPtaElNqLv
+ZT8B+CSzNPzyCxPVXbl1A14tTfxgYK7MUr/zcqHdQb4xevlyYRtFVH7HEDUOmrM
uKz4nLyowclao/g9P2V/pQz6PaFW73mWo+cD5QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIl75kZvrzbvodK/FZBhmrJQ/tl6MB8GA1UdIwQYMBaAFNHb97IN0laqB4sz
CjOVmTF70ykOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGEwZThm
MmI2MWYwMTVlNzM5OGJlNzU3YmJiZTA4MmFhODhhOWFiNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjJjZjNmMGQtM2IzYi00YWNjLTg1N2ItMWI0OGYy
OTEzNzFkL2VlZGNmYzYwNmQzOTcwMzVkYzQxMjQzMTE3MDlhNjM2OTY4ZGM1YTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMmNmM2YwZC0zYjNiLTRhY2MtODU3Yi0xYjQ4
ZjI5MTM3MWQvMGEwZThmMmI2MWYwMTVlNzM5OGJlNzU3YmJiZTA4MmFhODhhOWFi
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjoZDANBgkqhkiG9w0BAQsFAAOCAQEAQznRb8Lcji8UCGYi
6zzvDZMjn31OeG1oei2xajBuS+NGWffhZ6oD2zTUmMJ38MDr3DI/BhOWByof9HjJ
Mr8OhHIynpXDaRXnXEK/+I87ENIDNYhvF+iMzxlkBUfK/mPDw1T5IJ7c/l7yeeg0
WYqTuwK/uute/u/iisH/dpUlAZ+Mpq3V6IsZuya9Q7OA/EmcoPJJua04qWZbsMEl
1gCZX5yZm+zZmxxymSNnTF04uWXTI+JIImp4Fe/o4GRpxfNVFhrHRrVnJAeHSB89
H3AFVFzQ4HghpP+JMDMVvMWMpM+FX3B1RoMYHnIL7KD+k/0LDGKPBI9cbYs16xJz
3G0/9g==
-----END CERTIFICATE-----
Generated at Thu Feb 1 19:04:35 2024 by rpki-client on console-fra.rpki-client.org