Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/d610e74a8105920a9f20aa3f7f2cc18f897f4d4a.roa
File:                     d610e74a8105920a9f20aa3f7f2cc18f897f4d4a.roa (raw, json)
Hash identifier:          M/7i+WFu+9N4GepIriRudRnLHajAPUTjGH2zuWVG3hQ=
Subject key identifier:   D0:A4:BD:22:04:ED:40:1C:2D:BA:E7:2C:35:8A:BE:20:CD:5D:40:88
Certificate issuer:       /CN=466e9c553c1e6136fda5fe5189aa28c81ce61dec
Certificate serial:       0D571A
Authority key identifier: 44:97:A8:BD:7C:6E:64:1D:7D:8F:BD:1C:40:97:78:38:5B:7E:9D:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e9c553c1e6136fda5fe5189aa28c81ce61dec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/d610e74a8105920a9f20aa3f7f2cc18f897f4d4a.roa
Signing time:             Wed 24 Mar 2021 14:47:28 +0000
ROA not before:           Wed 24 Mar 2021 14:47:26 +0000
ROA not after:            Tue 24 Mar 2026 14:47:26 +0000
asID:                     264837
IP address blocks:        170.81.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874266 (0xd571a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466e9c553c1e6136fda5fe5189aa28c81ce61dec
        Validity
            Not Before: Mar 24 14:47:26 2021 GMT
            Not After : Mar 24 14:47:26 2026 GMT
        Subject: CN=d610e74a8105920a9f20aa3f7f2cc18f897f4d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:a7:c4:e3:20:99:5c:65:d5:36:09:78:ad:
                    36:71:dc:20:fc:52:58:98:94:8b:78:91:39:61:d1:
                    c4:0c:d3:aa:c3:9d:83:7a:52:06:3c:fe:f2:5a:05:
                    49:fb:1f:70:9d:ce:f9:09:ff:d7:a1:52:d5:74:35:
                    7a:7f:3c:0d:16:bf:bb:74:46:c5:95:49:b4:e0:be:
                    22:ad:4b:0e:4b:53:eb:d2:90:89:46:32:01:c0:f9:
                    e9:0d:4c:2e:38:da:99:1d:7b:e0:55:9d:9d:a6:27:
                    22:d6:28:b6:ef:69:b4:bc:ea:ca:2d:79:e9:d5:5c:
                    0a:0b:d0:9f:4e:bd:b9:85:f9:40:ca:6c:31:9b:f1:
                    7f:41:5a:34:79:4f:34:f7:bd:b6:bd:82:ba:23:c9:
                    25:87:c8:8b:95:66:38:03:4f:91:e2:7f:74:f6:7a:
                    12:1f:f3:8b:b2:17:03:cf:1a:e2:35:24:51:55:a0:
                    61:b4:ce:f4:06:35:81:f4:8e:12:c3:72:52:ce:39:
                    d6:a7:40:f6:40:db:9b:bb:1b:4c:4a:fa:49:b2:42:
                    e8:77:62:7e:89:e5:e1:a5:c7:4d:76:ff:bb:fc:e7:
                    3e:c8:f3:4d:ed:84:78:2f:68:40:28:ed:1d:cf:0c:
                    97:ea:f4:26:ba:d1:f3:e4:e2:5e:68:dd:00:db:a8:
                    da:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A4:BD:22:04:ED:40:1C:2D:BA:E7:2C:35:8A:BE:20:CD:5D:40:88
            X509v3 Authority Key Identifier:
                keyid:44:97:A8:BD:7C:6E:64:1D:7D:8F:BD:1C:40:97:78:38:5B:7E:9D:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e9c553c1e6136fda5fe5189aa28c81ce61dec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/d610e74a8105920a9f20aa3f7f2cc18f897f4d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/466e9c553c1e6136fda5fe5189aa28c81ce61dec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:44:b8:ae:c8:11:97:68:85:a4:cf:52:f9:c4:da:2f:4a:b0:
         8e:09:6d:d5:20:a3:68:8c:bd:1b:7e:f0:f9:54:1c:52:bf:5e:
         4b:79:a6:ab:47:0b:84:a7:03:9b:bc:f1:7f:3d:da:25:dc:89:
         47:e9:95:a6:cd:d9:60:1c:e9:d7:ff:a4:c8:e8:b7:2f:b3:16:
         cb:6a:7c:55:30:43:12:6c:9b:68:fd:e1:2c:13:40:57:14:b9:
         d6:fa:d0:a9:3c:af:ef:40:e2:02:22:59:2b:8b:93:62:e0:7e:
         f6:19:b7:a6:aa:31:e1:16:8a:9f:82:81:77:5e:ad:68:19:6f:
         5d:7e:cb:3d:1c:85:1f:fc:98:47:3d:86:f9:da:67:c0:ea:05:
         4f:4d:69:61:fe:c2:f0:b3:8b:0a:50:18:bf:fd:f1:24:ca:61:
         07:3d:19:92:88:7c:66:e5:a1:ed:a9:4d:fb:de:0d:c8:e0:ae:
         9d:30:ed:2e:df:5e:ab:2a:42:c0:ef:2d:a7:33:b7:c2:74:06:
         da:db:57:c2:8a:ac:69:d4:9d:c2:70:4f:72:1a:13:bb:d9:a6:
         d3:cc:c5:b9:25:ad:73:e8:b5:56:99:5d:77:db:2f:ba:b6:ae:
         84:8a:4b:b4:5b:5f:e7:c7:38:79:19:d5:0e:be:23:a6:c9:5f:
         b5:44:cc:e9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDVcaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
NmU5YzU1M2MxZTYxMzZmZGE1ZmU1MTg5YWEyOGM4MWNlNjFkZWMwHhcNMjEwMzI0
MTQ0NzI2WhcNMjYwMzI0MTQ0NzI2WjAzMTEwLwYDVQQDEyhkNjEwZTc0YTgxMDU5
MjBhOWYyMGFhM2Y3ZjJjYzE4Zjg5N2Y0ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApuCnxOMgmVxl1TYJeK02cdwg/FJYmJSLeJE5YdHEDNOqw52D
elIGPP7yWgVJ+x9wnc75Cf/XoVLVdDV6fzwNFr+7dEbFlUm04L4irUsOS1Pr0pCJ
RjIBwPnpDUwuONqZHXvgVZ2dpici1ii272m0vOrKLXnp1VwKC9CfTr25hflAymwx
m/F/QVo0eU809722vYK6I8klh8iLlWY4A0+R4n909noSH/OLshcDzxriNSRRVaBh
tM70BjWB9I4Sw3JSzjnWp0D2QNubuxtMSvpJskLod2J+ieXhpcdNdv+7/Oc+yPNN
7YR4L2hAKO0dzwyX6vQmutHz5OJeaN0A26jaeQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNCkvSIE7UAcLbrnLDWKviDNXUCIMB8GA1UdIwQYMBaAFESXqL18bmQdfY+9
HECXeDhbfp2kMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDY2ZTlj
NTUzYzFlNjEzNmZkYTVmZTUxODlhYTI4YzgxY2U2MWRlYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzZlMjllODgtMGExNS00YmZkLThmN2UtM2QxZmM5
N2I4YzUwL2Q2MTBlNzRhODEwNTkyMGE5ZjIwYWEzZjdmMmNjMThmODk3ZjRkNGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zNmUyOWU4OC0wYTE1LTRiZmQtOGY3ZS0zZDFm
Yzk3YjhjNTAvNDY2ZTljNTUzYzFlNjEzNmZkYTVmZTUxODlhYTI4YzgxY2U2MWRl
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqpRkDANBgkqhkiG9w0BAQsFAAOCAQEAq0S4rsgRl2iFpM9S
+cTaL0qwjglt1SCjaIy9G37w+VQcUr9eS3mmq0cLhKcDm7zxfz3aJdyJR+mVps3Z
YBzp1/+kyOi3L7MWy2p8VTBDEmybaP3hLBNAVxS51vrQqTyv70DiAiJZK4uTYuB+
9hm3pqox4RaKn4KBd16taBlvXX7LPRyFH/yYRz2G+dpnwOoFT01pYf7C8LOLClAY
v/3xJMphBz0Zkoh8ZuWh7alN+94NyOCunTDtLt9eqypCwO8tpzO3wnQG2ttXwoqs
adSdwnBPchoTu9mm08zFuSWtc+i1Vpldd9svurauhIpLtFtf58c4eRnVDr4jpslf
tUTM6Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org