Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/f35a3dab5a720a0b5d6fd706b2e348c04bab6c2a.roa
File:                     f35a3dab5a720a0b5d6fd706b2e348c04bab6c2a.roa (raw, json)
Hash identifier:          qwBSQoQqPvZL78883uCWkEm/GuE/wh6t6TfxuJZyQeY=
Subject key identifier:   DB:44:98:63:68:1B:3D:38:48:52:6B:91:68:2D:DA:8B:64:0C:AC:D7
Certificate issuer:       /CN=5fea161e2c66e493ae97ef08f4b440569dd42244
Certificate serial:       201C43
Authority key identifier: A9:AB:0C:D1:4A:1A:EE:A7:11:2A:E6:C1:29:3E:B3:33:DB:10:19:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fea161e2c66e493ae97ef08f4b440569dd42244.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/f35a3dab5a720a0b5d6fd706b2e348c04bab6c2a.roa
Signing time:             Mon 15 May 2023 16:37:20 +0000
ROA not before:           Sun 14 May 2023 16:37:19 +0000
ROA not after:            Thu 15 May 2025 16:37:19 +0000
asID:                     27
IP address blocks:        170.239.188.0/27 maxlen: 27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104387 (0x201c43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fea161e2c66e493ae97ef08f4b440569dd42244
        Validity
            Not Before: May 14 16:37:19 2023 GMT
            Not After : May 15 16:37:19 2025 GMT
        Subject: CN=f35a3dab5a720a0b5d6fd706b2e348c04bab6c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:24:d8:35:c2:4e:97:7b:80:a2:4a:4c:2c:b4:
                    ef:ef:95:c4:9e:62:a2:ac:c3:86:6c:54:4e:fb:90:
                    c8:b1:5c:b2:7f:64:4e:2d:43:b7:c5:2b:56:be:e6:
                    13:90:b7:77:fc:de:0a:53:8b:31:2d:20:be:b1:0f:
                    bc:b6:a8:38:df:3a:13:94:ac:4a:30:97:23:2f:37:
                    21:41:a8:ad:53:5b:1e:a2:b0:ac:d0:4e:6b:f9:7e:
                    29:5a:ed:05:72:f3:22:21:4e:1c:27:74:c1:1f:81:
                    e3:03:86:6f:2e:28:60:3c:84:e5:52:2f:0f:1b:c9:
                    da:62:43:c0:68:3f:7e:fa:06:86:43:a2:d0:76:bb:
                    c6:a1:8c:e4:df:4e:56:a3:0e:95:e1:ee:13:27:d6:
                    d0:d7:37:fa:dc:18:56:b9:b6:6e:9c:fe:cb:d3:1f:
                    43:d5:2f:cf:f9:b2:2f:8e:01:42:df:e5:81:52:5f:
                    9f:1c:23:5d:68:fa:a4:a1:11:4c:cd:bb:be:df:63:
                    de:cb:6d:db:01:d8:03:46:32:94:da:20:5d:11:5f:
                    bd:43:69:26:d3:41:94:ef:0d:76:01:6e:48:d0:e3:
                    c6:c1:82:71:61:80:50:5f:ef:ca:db:f2:8e:05:58:
                    5c:ca:71:57:3d:c1:16:99:56:5c:df:cf:07:03:2e:
                    01:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:44:98:63:68:1B:3D:38:48:52:6B:91:68:2D:DA:8B:64:0C:AC:D7
            X509v3 Authority Key Identifier:
                keyid:A9:AB:0C:D1:4A:1A:EE:A7:11:2A:E6:C1:29:3E:B3:33:DB:10:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fea161e2c66e493ae97ef08f4b440569dd42244.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/f35a3dab5a720a0b5d6fd706b2e348c04bab6c2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4797cd62-54fe-4e81-92e3-77229d4bf25e/5fea161e2c66e493ae97ef08f4b440569dd42244.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.188.0/27

    Signature Algorithm: sha256WithRSAEncryption
         41:1c:a6:0d:3f:10:4e:4a:86:0a:b1:66:71:80:d8:f6:e2:8f:
         78:e7:7f:7a:f0:12:12:a4:99:38:52:1e:46:68:12:56:f5:59:
         a7:30:8b:40:d8:7b:d2:86:e0:f2:82:57:0c:4d:a7:c9:fc:49:
         ad:44:26:b8:5f:8f:ba:e8:f9:4a:76:a7:cc:f5:13:c4:fc:84:
         ec:52:b6:53:bb:ef:f6:c4:cb:b8:a4:46:93:9f:66:c1:b0:43:
         cb:6c:95:4a:f4:f7:80:25:43:17:a5:fe:eb:45:ef:64:e6:b3:
         f3:e2:ca:e9:db:03:5d:a6:3e:f7:43:6f:cc:1a:3c:f2:55:b9:
         6e:52:d1:2b:e9:4c:a9:73:e0:9e:96:73:01:1d:36:f9:ed:29:
         17:6c:6c:4a:83:10:87:f8:63:c8:62:09:9f:a7:e3:88:fb:9d:
         d7:a2:a9:90:83:c4:db:a6:af:e3:49:7c:6f:d8:c0:15:5a:9e:
         d5:0d:83:70:20:db:b0:40:20:fc:75:12:58:8b:aa:02:4f:53:
         70:64:df:25:3a:ec:37:ba:01:cd:fc:81:27:e1:2b:9c:70:c7:
         b0:7d:f7:66:f9:1a:49:5f:8c:69:31:3f:9b:b0:5a:f8:1f:80:
         e8:05:ff:f1:fc:65:75:8c:12:6f:84:5f:6d:3d:6b:5f:98:22:
         fd:9e:59:31
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDIBxDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVm
ZWExNjFlMmM2NmU0OTNhZTk3ZWYwOGY0YjQ0MDU2OWRkNDIyNDQwHhcNMjMwNTE0
MTYzNzE5WhcNMjUwNTE1MTYzNzE5WjAzMTEwLwYDVQQDEyhmMzVhM2RhYjVhNzIw
YTBiNWQ2ZmQ3MDZiMmUzNDhjMDRiYWI2YzJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiCTYNcJOl3uAokpMLLTv75XEnmKirMOGbFRO+5DIsVyyf2RO
LUO3xStWvuYTkLd3/N4KU4sxLSC+sQ+8tqg43zoTlKxKMJcjLzchQaitU1seorCs
0E5r+X4pWu0FcvMiIU4cJ3TBH4HjA4ZvLihgPITlUi8PG8naYkPAaD9++gaGQ6LQ
drvGoYzk305Wow6V4e4TJ9bQ1zf63BhWubZunP7L0x9D1S/P+bIvjgFC3+WBUl+f
HCNdaPqkoRFMzbu+32Pey23bAdgDRjKU2iBdEV+9Q2km00GU7w12AW5I0OPGwYJx
YYBQX+/K2/KOBVhcynFXPcEWmVZc388HAy4BnwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFNtEmGNoGz04SFJrkWgt2otkDKzXMB8GA1UdIwQYMBaAFKmrDNFKGu6nESrm
wSk+szPbEBn9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWZlYTE2
MWUyYzY2ZTQ5M2FlOTdlZjA4ZjRiNDQwNTY5ZGQ0MjI0NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDc5N2NkNjItNTRmZS00ZTgxLTkyZTMtNzcyMjlk
NGJmMjVlL2YzNWEzZGFiNWE3MjBhMGI1ZDZmZDcwNmIyZTM0OGMwNGJhYjZjMmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80Nzk3Y2Q2Mi01NGZlLTRlODEtOTJlMy03NzIy
OWQ0YmYyNWUvNWZlYTE2MWUyYzY2ZTQ5M2FlOTdlZjA4ZjRiNDQwNTY5ZGQ0MjI0
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAEwBwMFBarvvAAwDQYJKoZIhvcNAQELBQADggEBAEEcpg0/EE5Khgqx
ZnGA2Pbij3jnf3rwEhKkmThSHkZoElb1Wacwi0DYe9KG4PKCVwxNp8n8Sa1EJrhf
j7ro+Up2p8z1E8T8hOxStlO77/bEy7ikRpOfZsGwQ8tslUr094AlQxel/utF72Tm
s/PiyunbA12mPvdDb8waPPJVuW5S0SvpTKlz4J6WcwEdNvntKRdsbEqDEIf4Y8hi
CZ+n44j7ndeiqZCDxNumr+NJfG/YwBVantUNg3Ag27BAIPx1EliLqgJPU3Bk3yU6
7De6Ac38gSfhK5xwx7B992b5GklfjGkxP5uwWvgfgOgF//H8ZXWMEm+EX209a1+Y
Iv2eWTE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org