Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/15c27d910e02db059b4aa5b8cf4d696650c7f58a.roa
File:                     15c27d910e02db059b4aa5b8cf4d696650c7f58a.roa (raw, json)
Hash identifier:          jTe10xvvGrIhcpQRXwA77R3nLhIMffgJ3BPrb5lBZOI=
Subject key identifier:   BC:F8:5A:E8:65:C9:59:F4:D6:7B:E8:D0:E3:CF:D9:D6:87:99:F9:AB
Certificate issuer:       /CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
Certificate serial:       1FBE57
Authority key identifier: 44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/15c27d910e02db059b4aa5b8cf4d696650c7f58a.roa
Signing time:             Fri 24 Mar 2023 08:31:56 +0000
ROA not before:           Thu 23 Mar 2023 08:31:56 +0000
ROA not after:            Sat 22 Mar 2025 08:31:56 +0000
asID:                     265657
IP address blocks:        170.246.85.0/24 maxlen: 24
                          170.246.86.0/24 maxlen: 24
                          170.246.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2080343 (0x1fbe57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b
        Validity
            Not Before: Mar 23 08:31:56 2023 GMT
            Not After : Mar 22 08:31:56 2025 GMT
        Subject: CN=15c27d910e02db059b4aa5b8cf4d696650c7f58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f0:65:87:8a:ad:f7:2c:ee:da:60:28:33:f9:
                    30:a9:e1:a8:be:70:9b:74:94:10:14:32:94:a7:3f:
                    b9:ac:6d:ba:63:ea:6d:33:43:30:6a:db:32:de:4c:
                    73:c2:5a:47:e5:9f:53:13:64:74:ad:0e:7a:bc:ae:
                    be:87:84:93:28:92:b5:02:c0:d8:c9:e4:6d:84:63:
                    45:e5:54:c4:44:2d:58:34:0d:38:28:dc:f5:b3:c9:
                    00:02:18:43:3c:0c:a6:33:0c:88:39:b1:32:bf:fa:
                    f8:b2:4c:51:c4:47:9a:8c:ef:d2:08:34:ce:a3:bf:
                    e3:5d:1e:c1:55:45:06:ac:18:c2:11:21:75:e8:c4:
                    7e:60:a4:d8:80:ce:d5:b7:e1:dc:a8:87:72:4e:a4:
                    22:91:79:65:ef:4b:cf:bb:9a:c3:7b:5d:ae:df:1e:
                    fa:24:0c:a1:4f:76:e2:47:76:a1:f0:f8:dc:60:58:
                    b6:ce:12:89:e3:85:f4:cd:42:57:70:e9:07:c7:9d:
                    1b:a8:32:4d:50:66:4e:59:92:a5:72:c5:4e:49:8b:
                    88:ba:28:59:e0:6f:c6:62:99:1f:f1:27:d1:17:c6:
                    b9:53:67:99:bf:0a:5f:a8:5d:31:f2:b9:37:85:3b:
                    89:85:11:f4:ee:2a:33:fc:3e:bc:7e:fa:1d:bf:06:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F8:5A:E8:65:C9:59:F4:D6:7B:E8:D0:E3:CF:D9:D6:87:99:F9:AB
            X509v3 Authority Key Identifier:
                keyid:44:33:AF:4C:AC:32:C0:87:C7:18:0E:6D:CE:36:41:99:FB:41:31:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/15c27d910e02db059b4aa5b8cf4d696650c7f58a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50d37992-86b7-44e8-b097-477dd35d35f4/877ac409c15ab9afb23ea0e2d3f1c7c63b76c98b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.85.0-170.246.87.255

    Signature Algorithm: sha256WithRSAEncryption
         83:5f:63:fd:33:29:21:03:c9:38:4f:c0:2c:60:aa:b8:28:51:
         94:08:b7:b2:13:95:87:d8:91:fc:32:97:b8:97:04:fe:a5:3c:
         9a:24:bd:1d:05:c0:bd:47:b3:97:81:e4:e3:a3:03:ac:1a:bb:
         e2:66:60:26:2d:e5:b0:dc:5e:13:a2:1c:4f:e2:14:9e:45:6f:
         32:4c:27:4c:02:a0:35:1d:7e:ea:eb:2a:5b:be:b2:e0:29:68:
         8c:ad:8c:de:27:dc:78:24:ed:56:e4:03:c1:5f:30:12:70:10:
         4b:91:c4:51:1a:32:d6:9f:6a:b9:4e:22:ae:bd:1b:d2:9d:ff:
         46:89:a8:63:6c:d2:0c:08:c2:1c:d8:b1:df:51:14:c0:a4:b9:
         e9:e7:24:6f:56:b3:58:e8:45:d3:9a:ca:0c:6e:3a:e3:43:47:
         36:2b:94:40:93:c4:bf:c4:57:54:f2:ec:56:62:7b:62:4c:15:
         41:77:36:2f:d1:59:de:61:bc:3f:25:1d:06:fc:5f:87:20:c0:
         a9:2e:88:d6:a0:76:26:ab:12:b6:ef:8b:80:35:aa:1b:24:3f:
         31:34:cc:5f:cd:5b:67:2c:8c:d6:e2:12:d1:4a:fe:31:43:57:
         6f:54:d4:17:94:83:28:78:8c:0e:38:e8:39:dd:e1:b4:25:ba:
         a1:7e:a6:b7
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDH75XMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg3
N2FjNDA5YzE1YWI5YWZiMjNlYTBlMmQzZjFjN2M2M2I3NmM5OGIwHhcNMjMwMzIz
MDgzMTU2WhcNMjUwMzIyMDgzMTU2WjAzMTEwLwYDVQQDEygxNWMyN2Q5MTBlMDJk
YjA1OWI0YWE1YjhjZjRkNjk2NjUwYzdmNThhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqPBlh4qt9yzu2mAoM/kwqeGovnCbdJQQFDKUpz+5rG26Y+pt
M0Mwatsy3kxzwlpH5Z9TE2R0rQ56vK6+h4STKJK1AsDYyeRthGNF5VTERC1YNA04
KNz1s8kAAhhDPAymMwyIObEyv/r4skxRxEeajO/SCDTOo7/jXR7BVUUGrBjCESF1
6MR+YKTYgM7Vt+HcqIdyTqQikXll70vPu5rDe12u3x76JAyhT3biR3ah8PjcYFi2
zhKJ44X0zUJXcOkHx50bqDJNUGZOWZKlcsVOSYuIuihZ4G/GYpkf8SfRF8a5U2eZ
vwpfqF0x8rk3hTuJhRH07ioz/D68fvodvwb4PQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFLz4WuhlyVn01nvo0OPP2daHmfmrMB8GA1UdIwQYMBaAFEQzr0ysMsCHxxgO
bc42QZn7QTE5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODc3YWM0
MDljMTVhYjlhZmIyM2VhMGUyZDNmMWM3YzYzYjc2Yzk4Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTBkMzc5OTItODZiNy00NGU4LWIwOTctNDc3ZGQz
NWQzNWY0LzE1YzI3ZDkxMGUwMmRiMDU5YjRhYTViOGNmNGQ2OTY2NTBjN2Y1OGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MGQzNzk5Mi04NmI3LTQ0ZTgtYjA5Ny00Nzdk
ZDM1ZDM1ZjQvODc3YWM0MDljMTVhYjlhZmIyM2VhMGUyZDNmMWM3YzYzYjc2Yzk4
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAqvZVAwQDqvZQMA0GCSqGSIb3DQEBCwUAA4IBAQCDX2P9
MykhA8k4T8AsYKq4KFGUCLeyE5WH2JH8Mpe4lwT+pTyaJL0dBcC9R7OXgeTjowOs
GrviZmAmLeWw3F4TohxP4hSeRW8yTCdMAqA1HX7q6ypbvrLgKWiMrYzeJ9x4JO1W
5APBXzAScBBLkcRRGjLWn2q5TiKuvRvSnf9GiahjbNIMCMIc2LHfURTApLnp5yRv
VrNY6EXTmsoMbjrjQ0c2K5RAk8S/xFdU8uxWYntiTBVBdzYv0VneYbw/JR0G/F+H
IMCpLojWoHYmqxK274uANaobJD8xNMxfzVtnLIzW4hLRSv4xQ1dvVNQXlIMoeIwO
OOg53eG0Jbqhfqa3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org