Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/aa4c3199aaa77c6dc205c4624a66d2fc16a4a2ec.roa
File:                     aa4c3199aaa77c6dc205c4624a66d2fc16a4a2ec.roa (raw, json)
Hash identifier:          eZqf26pj93qksBAOZK3gn8d7QWv4OyQP4gSb0uVIW1M=
Subject key identifier:   D9:D0:B8:46:69:28:12:1F:76:7D:A6:AF:B5:86:7E:F4:39:B1:08:C0
Certificate issuer:       /CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
Certificate serial:       02FD61
Authority key identifier: FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/aa4c3199aaa77c6dc205c4624a66d2fc16a4a2ec.roa
Signing time:             Mon 07 Mar 2022 22:05:46 +0000
ROA not before:           Mon 07 Mar 2022 03:00:00 +0000
ROA not after:            Thu 07 Mar 2024 03:00:00 +0000
asID:                     7004
IP address blocks:        164.77.27.0/24 maxlen: 24
                          164.77.28.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195937 (0x2fd61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acba41ca66eb0e77192d2d22221e4fb662988a5d
        Validity
            Not Before: Mar  7 03:00:00 2022 GMT
            Not After : Mar  7 03:00:00 2024 GMT
        Subject: CN=aa4c3199aaa77c6dc205c4624a66d2fc16a4a2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4e:0e:28:81:a3:8b:68:7c:41:81:be:ff:e0:
                    4a:b5:6c:9e:3f:0d:16:81:e5:92:1b:7b:48:2b:c7:
                    37:99:63:73:63:c7:21:28:09:10:1a:6a:97:31:58:
                    9d:6b:9b:4e:57:8b:a1:14:c2:e4:1b:53:a9:e7:63:
                    d6:90:88:70:39:fc:2e:a0:2a:03:b0:ff:5e:87:82:
                    09:45:b1:7b:fe:e8:34:a1:e2:fe:9b:6b:00:10:c8:
                    71:ad:8e:48:0a:4a:4c:66:32:41:db:87:86:6e:c7:
                    b6:76:c1:e1:b6:a4:97:f4:52:71:46:4d:91:7b:64:
                    11:eb:4b:f2:30:f8:c7:78:4b:e9:6e:ed:52:07:ff:
                    15:b6:a5:5b:db:c0:d4:7c:83:f3:84:3a:ca:79:0d:
                    64:ee:2d:e6:7e:35:7e:c6:4b:ba:99:28:57:7d:84:
                    68:53:9e:5d:d7:68:1f:97:c2:46:3d:5b:7b:46:36:
                    a8:ed:7d:7a:ee:e4:ce:dd:76:e7:f3:e5:91:dc:07:
                    f8:36:7c:11:6c:d8:f1:6a:32:a5:6b:38:33:3b:13:
                    24:fa:45:64:f9:6e:64:5f:c4:e4:ba:2d:ef:2e:de:
                    08:1e:6e:53:1e:85:64:bf:9f:c1:5a:2d:02:0d:14:
                    53:1c:80:55:46:d7:57:4c:f1:8e:5c:51:d9:35:bc:
                    25:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D0:B8:46:69:28:12:1F:76:7D:A6:AF:B5:86:7E:F4:39:B1:08:C0
            X509v3 Authority Key Identifier:
                keyid:FB:8E:62:CE:DE:35:6D:C8:F4:D6:5D:57:65:1A:A2:F7:7C:D1:31:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acba41ca66eb0e77192d2d22221e4fb662988a5d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/aa4c3199aaa77c6dc205c4624a66d2fc16a4a2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48576231-47ca-4b5e-8707-f93a6226b32f/acba41ca66eb0e77192d2d22221e4fb662988a5d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.27.0-164.77.29.255

    Signature Algorithm: sha256WithRSAEncryption
         06:79:7c:24:f5:a0:01:97:fd:2c:a5:bb:f6:cd:89:1a:26:56:
         8d:17:12:48:a5:75:87:ec:f8:08:1d:03:39:3d:43:2f:4f:67:
         cc:09:02:a6:ff:e4:48:da:b1:93:88:7e:4c:21:1c:25:f2:30:
         6b:3d:ff:fa:81:b8:b0:6d:73:9b:72:6a:1d:81:f9:cb:b5:1d:
         e0:fc:d5:0e:c5:79:db:da:67:a1:aa:af:ec:b0:8d:32:14:44:
         e4:ff:02:af:bd:0d:b9:60:05:76:fb:4c:98:3b:6b:1c:c3:6a:
         5f:77:de:ce:d5:c1:ed:97:d7:53:60:49:9e:b0:9f:32:d6:6f:
         cb:45:f9:0f:91:d4:5e:6d:e9:a1:e5:8d:68:08:72:07:d5:82:
         cd:6e:2c:2e:0b:f4:68:7b:dd:97:3a:b8:66:b5:f3:36:de:48:
         fd:05:b9:92:89:d5:3d:e5:49:72:01:ac:b9:90:5f:63:ab:f6:
         48:59:0f:04:2a:a3:58:b7:e8:a3:d2:76:26:82:bf:43:8b:16:
         9b:f5:0e:4c:95:2a:2e:a9:e7:01:5d:de:10:ea:e1:75:9d:83:
         43:fe:90:28:2d:dd:19:f2:d8:12:57:56:b7:2c:88:79:e1:0e:
         6f:fd:1a:29:76:90:07:6b:9f:4c:20:0e:c6:d9:4e:69:d6:a9:
         3f:1e:72:7e
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDAv1hMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFj
YmE0MWNhNjZlYjBlNzcxOTJkMmQyMjIyMWU0ZmI2NjI5ODhhNWQwHhcNMjIwMzA3
MDMwMDAwWhcNMjQwMzA3MDMwMDAwWjAzMTEwLwYDVQQDEyhhYTRjMzE5OWFhYTc3
YzZkYzIwNWM0NjI0YTY2ZDJmYzE2YTRhMmVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjU4OKIGji2h8QYG+/+BKtWyePw0WgeWSG3tIK8c3mWNzY8ch
KAkQGmqXMVida5tOV4uhFMLkG1Op52PWkIhwOfwuoCoDsP9eh4IJRbF7/ug0oeL+
m2sAEMhxrY5ICkpMZjJB24eGbse2dsHhtqSX9FJxRk2Re2QR60vyMPjHeEvpbu1S
B/8VtqVb28DUfIPzhDrKeQ1k7i3mfjV+xku6mShXfYRoU55d12gfl8JGPVt7Rjao
7X167uTO3Xbn8+WR3Af4NnwRbNjxajKlazgzOxMk+kVk+W5kX8Tkui3vLt4IHm5T
HoVkv5/BWi0CDRRTHIBVRtdXTPGOXFHZNbwlpwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFNnQuEZpKBIfdn2mr7WGfvQ5sQjAMB8GA1UdIwQYMBaAFPuOYs7eNW3I9NZd
V2Uaovd80TFgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWNiYTQx
Y2E2NmViMGU3NzE5MmQyZDIyMjIxZTRmYjY2Mjk4OGE1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDg1NzYyMzEtNDdjYS00YjVlLTg3MDctZjkzYTYy
MjZiMzJmL2FhNGMzMTk5YWFhNzdjNmRjMjA1YzQ2MjRhNjZkMmZjMTZhNGEyZWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ODU3NjIzMS00N2NhLTRiNWUtODcwNy1mOTNh
NjIyNmIzMmYvYWNiYTQxY2E2NmViMGU3NzE5MmQyZDIyMjIxZTRmYjY2Mjk4OGE1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQApE0bAwQBpE0cMA0GCSqGSIb3DQEBCwUAA4IBAQAGeXwk
9aABl/0spbv2zYkaJlaNFxJIpXWH7PgIHQM5PUMvT2fMCQKm/+RI2rGTiH5MIRwl
8jBrPf/6gbiwbXObcmodgfnLtR3g/NUOxXnb2mehqq/ssI0yFETk/wKvvQ25YAV2
+0yYO2scw2pfd97O1cHtl9dTYEmesJ8y1m/LRfkPkdRebemh5Y1oCHIH1YLNbiwu
C/Roe92XOrhmtfM23kj9BbmSidU95UlyAay5kF9jq/ZIWQ8EKqNYt+ij0nYmgr9D
ixab9Q5MlSouqecBXd4Q6uF1nYND/pAoLd0Z8tgSV1a3LIh54Q5v/RopdpAHa59M
IA7G2U5p1qk/HnJ+
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org