Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/d75cd3369a743882acb9b53881073429649f61e1.roa
File:                     d75cd3369a743882acb9b53881073429649f61e1.roa (raw, json)
Hash identifier:          jD0fH4CS/iMs9g2+M87EiGPQDmj2coSuOkMyv4wjJkU=
Subject key identifier:   59:52:04:D6:2F:0F:5C:AE:33:1A:5B:8B:9A:78:C9:0F:7D:58:EE:9A
Certificate issuer:       /CN=a98f648b9bf5787afaa7dadb97d7c2064bb120c7
Certificate serial:       1F3EFE
Authority key identifier: 34:FE:8F:49:AA:CF:79:AC:9D:7B:A2:72:E3:05:5C:C8:CA:01:16:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/d75cd3369a743882acb9b53881073429649f61e1.roa
Signing time:             Thu 16 Mar 2023 12:19:04 +0000
ROA not before:           Tue 14 Mar 2023 12:17:27 +0000
ROA not after:            Sun 16 Mar 2025 12:17:27 +0000
asID:                     263799
IP address blocks:        168.195.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2047742 (0x1f3efe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a98f648b9bf5787afaa7dadb97d7c2064bb120c7
        Validity
            Not Before: Mar 14 12:17:27 2023 GMT
            Not After : Mar 16 12:17:27 2025 GMT
        Subject: CN=d75cd3369a743882acb9b53881073429649f61e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:63:d0:62:65:0b:3d:92:d9:cc:60:a5:36:
                    19:de:68:37:61:8c:84:7e:58:e5:16:03:1e:b9:f8:
                    f7:a9:07:ff:ff:64:07:7d:2f:3b:9e:02:90:14:69:
                    41:38:31:d9:ac:bf:a5:e2:a9:1c:5c:6a:17:52:b6:
                    39:93:d6:98:c0:af:39:78:3d:b6:00:c2:0c:1e:0f:
                    d8:ca:37:46:77:04:78:a5:e3:89:16:91:4f:44:9b:
                    71:2c:2e:23:6e:8f:40:1b:6e:5a:8b:4e:3a:d0:26:
                    6b:62:03:8b:96:d2:b1:12:b6:0b:bb:e8:4f:56:05:
                    d5:d7:47:61:6e:d0:f3:f3:e5:ea:80:81:34:8d:f4:
                    dc:52:4b:51:f1:2e:94:88:bd:d0:e6:d4:17:ef:a4:
                    eb:a8:30:19:9e:ea:b8:fe:a5:24:6c:4a:0a:ac:bb:
                    b7:2c:5c:11:2a:6c:c9:44:db:8a:3b:ad:27:d2:e6:
                    cf:7a:f4:9d:d4:05:5e:2b:f1:11:ab:51:9c:89:38:
                    8b:d7:e5:4f:3b:42:10:39:9a:52:ff:b8:86:b2:5b:
                    77:21:b0:54:e8:0e:24:51:b8:74:ae:55:b8:53:f8:
                    5e:e8:41:8c:9f:38:df:a7:67:1d:d8:07:ac:ab:9b:
                    d1:16:fd:21:a2:49:28:ca:c1:fc:09:62:dc:ca:c6:
                    04:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:52:04:D6:2F:0F:5C:AE:33:1A:5B:8B:9A:78:C9:0F:7D:58:EE:9A
            X509v3 Authority Key Identifier:
                keyid:34:FE:8F:49:AA:CF:79:AC:9D:7B:A2:72:E3:05:5C:C8:CA:01:16:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/d75cd3369a743882acb9b53881073429649f61e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/515f479e-d772-4ae4-af16-a4ae7a6cb527/a98f648b9bf5787afaa7dadb97d7c2064bb120c7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:c5:2a:5b:7f:25:2f:65:9c:88:82:29:8d:c8:ce:57:8c:60:
         9e:a4:1f:33:65:d5:8a:c6:ff:a8:7f:79:89:ab:a7:cf:c7:f2:
         a4:0c:ec:2e:21:67:d5:3f:5b:76:b6:1b:40:80:1e:43:eb:b7:
         9b:55:d2:02:6e:bd:74:67:c2:b4:0d:2c:03:07:92:4d:e5:78:
         b4:82:d6:84:79:c5:a6:00:01:30:56:5b:a0:28:b0:b9:ac:0d:
         c7:47:3a:47:0d:25:08:6c:40:b2:07:f1:d9:0c:62:1e:dc:91:
         77:25:d2:e5:e2:49:3d:04:32:c3:6d:20:de:a8:ad:34:b6:4b:
         e1:56:94:e7:1c:71:dd:36:62:27:44:87:d2:97:45:1a:20:38:
         d6:b7:f8:aa:74:26:44:96:77:82:09:7a:17:9a:9b:86:d7:26:
         9c:3c:be:81:d4:41:a0:f4:21:54:7c:ff:dc:16:5d:a6:3f:27:
         1c:ab:ca:4b:b6:05:fd:bd:7d:86:14:06:55:9e:10:52:61:2c:
         48:b2:f8:ff:1e:f5:ad:41:1a:48:f5:d4:d6:b1:dd:d1:22:b2:
         9f:88:49:bb:59:a7:11:ae:01:7b:ca:95:8a:dc:df:3b:10:79:
         d0:ea:95:39:e7:04:e2:b0:5d:ca:51:74:b9:32:29:21:e8:49:
         28:5a:71:a6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHz7+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
OGY2NDhiOWJmNTc4N2FmYWE3ZGFkYjk3ZDdjMjA2NGJiMTIwYzcwHhcNMjMwMzE0
MTIxNzI3WhcNMjUwMzE2MTIxNzI3WjAzMTEwLwYDVQQDEyhkNzVjZDMzNjlhNzQz
ODgyYWNiOWI1Mzg4MTA3MzQyOTY0OWY2MWUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApmJj0GJlCz2S2cxgpTYZ3mg3YYyEfljlFgMeufj3qQf//2QH
fS87ngKQFGlBODHZrL+l4qkcXGoXUrY5k9aYwK85eD22AMIMHg/YyjdGdwR4peOJ
FpFPRJtxLC4jbo9AG25ai0460CZrYgOLltKxErYLu+hPVgXV10dhbtDz8+XqgIE0
jfTcUktR8S6UiL3Q5tQX76TrqDAZnuq4/qUkbEoKrLu3LFwRKmzJRNuKO60n0ubP
evSd1AVeK/ERq1GciTiL1+VPO0IQOZpS/7iGslt3IbBU6A4kUbh0rlW4U/he6EGM
nzjfp2cd2Aesq5vRFv0hokkoysH8CWLcysYEywIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFlSBNYvD1yuMxpbi5p4yQ99WO6aMB8GA1UdIwQYMBaAFDT+j0mqz3msnXui
cuMFXMjKARawMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTk4ZjY0
OGI5YmY1Nzg3YWZhYTdkYWRiOTdkN2MyMDY0YmIxMjBjNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTE1ZjQ3OWUtZDc3Mi00YWU0LWFmMTYtYTRhZTdh
NmNiNTI3L2Q3NWNkMzM2OWE3NDM4ODJhY2I5YjUzODgxMDczNDI5NjQ5ZjYxZTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MTVmNDc5ZS1kNzcyLTRhZTQtYWYxNi1hNGFl
N2E2Y2I1MjcvYTk4ZjY0OGI5YmY1Nzg3YWZhYTdkYWRiOTdkN2MyMDY0YmIxMjBj
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjD2DANBgkqhkiG9w0BAQsFAAOCAQEAjcUqW38lL2WciIIp
jcjOV4xgnqQfM2XVisb/qH95iaunz8fypAzsLiFn1T9bdrYbQIAeQ+u3m1XSAm69
dGfCtA0sAweSTeV4tILWhHnFpgABMFZboCiwuawNx0c6Rw0lCGxAsgfx2QxiHtyR
dyXS5eJJPQQyw20g3qitNLZL4VaU5xxx3TZiJ0SH0pdFGiA41rf4qnQmRJZ3ggl6
F5qbhtcmnDy+gdRBoPQhVHz/3BZdpj8nHKvKS7YF/b19hhQGVZ4QUmEsSLL4/x71
rUEaSPXU1rHd0SKyn4hJu1mnEa4Be8qVitzfOxB50OqVOecE4rBdylF0uTIpIehJ
KFpxpg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org