Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/727539077ddf21a39987702eea40b05d8f46c882.roa
File:                     727539077ddf21a39987702eea40b05d8f46c882.roa (raw, json)
Hash identifier:          pweJ3Bg022A+Ih7gR5AwrVNmodq6LKSnuK8OmnUiDb4=
Subject key identifier:   E8:56:26:91:20:6D:9D:60:71:4F:51:DD:4B:95:EA:B6:D1:81:E9:50
Certificate issuer:       /CN=42b08b0342f4f7f7c4e44054026d23d7568373f6
Certificate serial:       139260
Authority key identifier: 1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b08b0342f4f7f7c4e44054026d23d7568373f6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/727539077ddf21a39987702eea40b05d8f46c882.roa
Signing time:             Wed 07 Jun 2023 16:13:53 +0000
ROA not before:           Tue 06 Jun 2023 16:13:53 +0000
ROA not after:            Sat 07 Jun 2025 16:13:53 +0000
asID:                     270110
IP address blocks:        189.85.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1282656 (0x139260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b08b0342f4f7f7c4e44054026d23d7568373f6
        Validity
            Not Before: Jun  6 16:13:53 2023 GMT
            Not After : Jun  7 16:13:53 2025 GMT
        Subject: CN=727539077ddf21a39987702eea40b05d8f46c882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f8:e6:e8:a3:64:55:b2:32:55:66:a1:25:fb:
                    75:fa:0f:6d:26:a2:fa:1d:b1:1d:c5:d5:fb:d5:1a:
                    69:7a:c1:60:62:58:21:1d:b9:44:eb:84:7c:d0:15:
                    6f:85:79:9d:c7:27:88:4f:08:2c:fa:88:8b:34:2a:
                    6e:7c:34:5e:67:d8:43:20:ee:00:ad:87:b2:d3:d4:
                    24:e0:8a:1d:d7:23:dc:0a:3f:5e:da:2f:3d:97:c2:
                    f4:b4:fa:5b:0a:b4:04:20:98:e3:ae:30:af:28:9c:
                    17:29:80:85:a1:e8:0d:de:68:20:79:56:5e:94:cb:
                    ce:d6:59:05:29:ed:2c:25:55:38:a7:c0:66:27:58:
                    66:ad:a8:77:4b:9f:30:10:08:c2:75:9a:af:5b:18:
                    58:6a:c3:ea:46:b1:f9:2e:60:f6:32:f7:c3:3d:45:
                    85:b4:3e:b2:be:47:51:40:c3:b1:8f:34:fb:df:f7:
                    52:82:ac:54:0c:1e:06:e8:be:71:1c:45:f9:b7:cd:
                    61:4c:50:f8:c6:f5:39:40:82:0c:75:fc:49:a9:79:
                    b9:74:e2:8f:77:12:08:5a:bc:de:08:59:35:46:db:
                    38:84:46:4e:b5:ca:1e:3a:4b:92:3a:2c:a6:7b:70:
                    59:07:8d:16:77:21:4d:8d:b2:a2:54:08:bb:49:dd:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:56:26:91:20:6D:9D:60:71:4F:51:DD:4B:95:EA:B6:D1:81:E9:50
            X509v3 Authority Key Identifier:
                keyid:1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b08b0342f4f7f7c4e44054026d23d7568373f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/727539077ddf21a39987702eea40b05d8f46c882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/42b08b0342f4f7f7c4e44054026d23d7568373f6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:9e:fd:1e:e3:43:63:b1:20:12:e2:94:0e:6f:94:bd:5d:53:
         b4:a1:ba:26:17:d8:da:a7:57:bb:50:3b:c5:5d:83:45:fb:b2:
         48:45:ce:98:04:27:79:6f:29:2a:e8:18:17:9f:eb:94:57:e7:
         e9:4b:82:81:4e:36:e5:7d:c4:b0:cc:b7:72:18:db:b2:9e:17:
         1c:bb:e1:47:ed:03:26:6d:3e:3d:56:80:6c:21:e5:41:9f:59:
         24:35:c4:c8:38:fc:35:9f:38:93:44:72:55:56:3b:50:18:7a:
         ae:4b:76:b7:e4:a7:1f:47:98:fd:7c:d1:06:a3:56:89:0b:c5:
         d8:c1:88:b8:0e:bd:26:81:d9:07:b8:d1:f2:41:7a:74:dd:e4:
         19:40:4a:ff:2a:ce:1c:b1:29:62:82:58:7e:f9:20:47:f3:f3:
         51:dd:e6:b8:3b:1e:cd:ae:6b:36:7f:72:30:65:7e:99:3d:01:
         69:2a:08:40:d8:40:44:c1:c2:a4:62:50:f5:85:d2:67:a7:ac:
         0c:87:42:96:de:32:57:62:18:77:71:90:85:a1:30:17:5a:b1:
         f0:14:0e:83:f9:4c:06:9b:98:16:c6:a0:85:76:c2:54:a1:ea:
         9c:d1:db:4b:7c:4e:ee:fd:3e:23:b0:11:3e:ca:50:7d:a1:fe:
         76:2d:3a:30
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDE5JgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQy
YjA4YjAzNDJmNGY3ZjdjNGU0NDA1NDAyNmQyM2Q3NTY4MzczZjYwHhcNMjMwNjA2
MTYxMzUzWhcNMjUwNjA3MTYxMzUzWjAzMTEwLwYDVQQDEyg3Mjc1MzkwNzdkZGYy
MWEzOTk4NzcwMmVlYTQwYjA1ZDhmNDZjODgyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmfjm6KNkVbIyVWahJft1+g9tJqL6HbEdxdX71RppesFgYlgh
HblE64R80BVvhXmdxyeITwgs+oiLNCpufDReZ9hDIO4ArYey09Qk4Iod1yPcCj9e
2i89l8L0tPpbCrQEIJjjrjCvKJwXKYCFoegN3mggeVZelMvO1lkFKe0sJVU4p8Bm
J1hmrah3S58wEAjCdZqvWxhYasPqRrH5LmD2MvfDPUWFtD6yvkdRQMOxjzT73/dS
gqxUDB4G6L5xHEX5t81hTFD4xvU5QIIMdfxJqXm5dOKPdxIIWrzeCFk1Rts4hEZO
tcoeOkuSOiyme3BZB40WdyFNjbKiVAi7Sd0u0wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOhWJpEgbZ1gcU9R3UuV6rbRgelQMB8GA1UdIwQYMBaAFB9HKdLDYv92W4rU
uPHZtxgkpPRfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDJiMDhi
MDM0MmY0ZjdmN2M0ZTQ0MDU0MDI2ZDIzZDc1NjgzNzNmNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDUyMDYxNTUtMDkyYy00NTkxLTg0ZTQtZjdlODZm
MWJkZmRjLzcyNzUzOTA3N2RkZjIxYTM5OTg3NzAyZWVhNDBiMDVkOGY0NmM4ODIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NTIwNjE1NS0wOTJjLTQ1OTEtODRlNC1mN2U4
NmYxYmRmZGMvNDJiMDhiMDM0MmY0ZjdmN2M0ZTQ0MDU0MDI2ZDIzZDc1NjgzNzNm
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr1VZDANBgkqhkiG9w0BAQsFAAOCAQEASp79HuNDY7EgEuKU
Dm+UvV1TtKG6JhfY2qdXu1A7xV2DRfuySEXOmAQneW8pKugYF5/rlFfn6UuCgU42
5X3EsMy3chjbsp4XHLvhR+0DJm0+PVaAbCHlQZ9ZJDXEyDj8NZ84k0RyVVY7UBh6
rkt2t+SnH0eY/XzRBqNWiQvF2MGIuA69JoHZB7jR8kF6dN3kGUBK/yrOHLEpYoJY
fvkgR/PzUd3muDseza5rNn9yMGV+mT0BaSoIQNhARMHCpGJQ9YXSZ6esDIdClt4y
V2IYd3GQhaEwF1qx8BQOg/lMBpuYFsaghXbCVKHqnNHbS3xO7v0+I7ARPspQfaH+
di06MA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org