Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/47aa3b7e8523396b70eddd1bea384bbe50cab4c3.roa
File:                     47aa3b7e8523396b70eddd1bea384bbe50cab4c3.roa (raw, json)
Hash identifier:          ReFIKWWAzvTxMW1zbkCKaD8fDIrdQKZyQekJdQr07Xg=
Subject key identifier:   90:D2:BF:BA:2A:96:AC:D6:82:9E:42:86:D8:EC:6E:07:1F:BA:D3:9D
Certificate issuer:       /CN=e66fbaafbfa93934b71ee8599cbe9373aa212c99
Certificate serial:       0A1BAF
Authority key identifier: 3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/47aa3b7e8523396b70eddd1bea384bbe50cab4c3.roa
Signing time:             Fri 07 Jan 2022 00:50:25 +0000
ROA not before:           Thu 06 Jan 2022 03:00:00 +0000
ROA not after:            Sat 06 Jan 2024 03:00:00 +0000
asID:                     400040
IP address blocks:        138.99.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662447 (0xa1baf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66fbaafbfa93934b71ee8599cbe9373aa212c99
        Validity
            Not Before: Jan  6 03:00:00 2022 GMT
            Not After : Jan  6 03:00:00 2024 GMT
        Subject: CN=47aa3b7e8523396b70eddd1bea384bbe50cab4c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7c:09:3b:0b:f0:35:99:b6:c7:7d:e2:50:d0:
                    bf:d6:8a:07:48:f0:08:02:03:67:5d:8e:52:f4:f9:
                    6d:f6:2a:e3:22:ec:f9:bd:05:0d:18:c7:ba:d3:d5:
                    ff:05:17:9c:91:0c:5a:eb:a9:dd:78:a0:77:7d:7b:
                    5e:a3:62:37:01:3a:05:6e:35:69:f0:09:5c:1e:fd:
                    13:23:89:d7:3e:ee:37:fe:d4:46:ba:5d:76:f1:d7:
                    a1:06:69:1e:e7:5b:ae:96:b3:2d:43:7d:cf:9e:72:
                    51:c9:f0:b8:66:b3:f5:7c:cb:47:86:4d:46:c5:75:
                    fb:42:b2:36:ad:7b:17:36:08:b7:fe:4f:01:47:af:
                    4d:86:58:b7:99:2e:af:52:9e:81:b8:00:ae:7e:d1:
                    7c:30:3c:cd:8e:23:96:f6:de:55:7c:7f:e3:77:d4:
                    b8:a8:02:22:a1:c3:6b:b5:43:d5:42:b7:09:b7:7d:
                    fc:71:9a:db:2f:5f:69:3d:2f:1c:c0:09:cb:38:a2:
                    21:44:43:f6:23:46:ee:ad:01:f9:44:d5:c2:34:94:
                    74:73:9a:fe:92:d5:fa:b6:fe:1d:da:ff:48:a8:98:
                    df:60:e4:64:ae:59:b9:ba:25:c6:9d:e5:ec:ff:57:
                    8f:b0:30:c4:04:f9:95:12:49:2d:e2:71:f2:f2:62:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D2:BF:BA:2A:96:AC:D6:82:9E:42:86:D8:EC:6E:07:1F:BA:D3:9D
            X509v3 Authority Key Identifier:
                keyid:3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/47aa3b7e8523396b70eddd1bea384bbe50cab4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/e66fbaafbfa93934b71ee8599cbe9373aa212c99.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:c9:71:a7:f4:ad:63:56:fc:5e:5a:cc:04:02:b1:c8:21:eb:
         69:a9:92:7b:04:9c:9f:db:2d:d7:56:50:14:21:a0:0c:e9:35:
         81:9f:9c:e6:e8:e3:fc:57:41:ac:8a:b4:0e:6d:ef:dc:ec:b4:
         42:bb:d7:a8:0c:d9:68:43:c3:c8:12:7e:3a:77:ce:36:0e:a6:
         d4:f8:25:71:b3:f5:fd:d7:81:d0:f8:1b:42:75:db:3f:31:12:
         9a:23:74:7e:19:c4:33:aa:33:a5:45:bb:46:8e:4c:a9:c9:68:
         52:27:0d:e8:76:24:4a:b5:9b:5f:47:1e:6c:4f:40:e3:f6:fc:
         b6:11:7f:8d:92:81:c0:26:8c:e6:c5:81:23:71:dd:91:37:d1:
         38:b9:0c:cc:50:24:41:15:94:74:ea:b5:9b:6d:1e:db:63:b0:
         07:e8:06:50:2c:2d:5d:21:3a:e8:4d:53:0d:80:e0:33:70:87:
         9f:3b:30:d5:8e:3c:0c:82:eb:67:dd:8c:13:11:fe:d4:b0:4c:
         31:c9:08:e2:85:cc:81:88:e5:4d:20:f7:f6:48:6c:48:8d:f8:
         87:c0:c0:75:8e:ac:75:33:98:67:64:da:1c:ba:58:a5:16:f9:
         a4:1b:40:ab:3f:eb:f4:27:ea:74:32:85:61:7f:a7:c8:00:c8:
         b1:53:70:9b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDChuvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU2
NmZiYWFmYmZhOTM5MzRiNzFlZTg1OTljYmU5MzczYWEyMTJjOTkwHhcNMjIwMTA2
MDMwMDAwWhcNMjQwMTA2MDMwMDAwWjAzMTEwLwYDVQQDEyg0N2FhM2I3ZTg1MjMz
OTZiNzBlZGRkMWJlYTM4NGJiZTUwY2FiNGMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh3wJOwvwNZm2x33iUNC/1ooHSPAIAgNnXY5S9Plt9irjIuz5
vQUNGMe609X/BReckQxa66ndeKB3fXteo2I3AToFbjVp8AlcHv0TI4nXPu43/tRG
ul128dehBmke51uulrMtQ33PnnJRyfC4ZrP1fMtHhk1GxXX7QrI2rXsXNgi3/k8B
R69Nhli3mS6vUp6BuACuftF8MDzNjiOW9t5VfH/jd9S4qAIiocNrtUPVQrcJt338
cZrbL19pPS8cwAnLOKIhREP2I0burQH5RNXCNJR0c5r+ktX6tv4d2v9IqJjfYORk
rlm5uiXGneXs/1ePsDDEBPmVEkkt4nHy8mKuewIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJDSv7oqlqzWgp5ChtjsbgcfutOdMB8GA1UdIwQYMBaAFD8cruC70q2W6orn
BGHOdYaw3H1ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTY2ZmJh
YWZiZmE5MzkzNGI3MWVlODU5OWNiZTkzNzNhYTIxMmM5OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTBjMmI5OTEtMzhmNi00YTI4LWI4YzAtYTQwZmU5
OWE5OGZmLzQ3YWEzYjdlODUyMzM5NmI3MGVkZGQxYmVhMzg0YmJlNTBjYWI0YzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MGMyYjk5MS0zOGY2LTRhMjgtYjhjMC1hNDBm
ZTk5YTk4ZmYvZTY2ZmJhYWZiZmE5MzkzNGI3MWVlODU5OWNiZTkzNzNhYTIxMmM5
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIpjkDANBgkqhkiG9w0BAQsFAAOCAQEADslxp/StY1b8XlrM
BAKxyCHraamSewScn9st11ZQFCGgDOk1gZ+c5ujj/FdBrIq0Dm3v3Oy0QrvXqAzZ
aEPDyBJ+OnfONg6m1PglcbP1/deB0PgbQnXbPzESmiN0fhnEM6ozpUW7Ro5Mqclo
UicN6HYkSrWbX0cebE9A4/b8thF/jZKBwCaM5sWBI3HdkTfROLkMzFAkQRWUdOq1
m20e22OwB+gGUCwtXSE66E1TDYDgM3CHnzsw1Y48DILrZ92MExH+1LBMMckI4oXM
gYjlTSD39khsSI34h8DAdY6sdTOYZ2TaHLpYpRb5pBtAqz/r9CfqdDKFYX+nyADI
sVNwmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org