Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/f4314c66c4c27f85c35bb0b787238505d93bdfb6.roa
File:                     f4314c66c4c27f85c35bb0b787238505d93bdfb6.roa (raw, json)
Hash identifier:          rI/1p0RvFs+B0hTOLAwQ0Ynqkx2NmB8Fu1srv8vcgJY=
Subject key identifier:   D6:BB:77:E2:16:D7:0F:34:71:52:4B:94:83:8E:1E:BB:26:A2:29:5C
Certificate issuer:       /CN=14cccbd44c277091b395ba21d80e9bd47281ef92
Certificate serial:       08AE4E
Authority key identifier: 51:B2:F5:93:38:6A:58:8F:34:71:D5:BC:2A:BF:AF:54:76:11:13:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14cccbd44c277091b395ba21d80e9bd47281ef92.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/f4314c66c4c27f85c35bb0b787238505d93bdfb6.roa
Signing time:             Thu 18 May 2023 07:59:33 +0000
ROA not before:           Wed 17 May 2023 07:59:33 +0000
ROA not after:            Sun 18 May 2025 07:59:33 +0000
asID:                     61317
IP address blocks:        138.99.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568910 (0x8ae4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14cccbd44c277091b395ba21d80e9bd47281ef92
        Validity
            Not Before: May 17 07:59:33 2023 GMT
            Not After : May 18 07:59:33 2025 GMT
        Subject: CN=f4314c66c4c27f85c35bb0b787238505d93bdfb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:ae:0a:69:e7:44:5d:7a:29:c7:6c:64:40:
                    6c:3f:89:12:4d:1f:49:6d:f5:6f:55:c3:a5:1a:43:
                    ab:69:c4:44:63:ae:0e:99:8c:de:5a:55:e9:b5:a1:
                    c7:ad:82:13:d4:60:a4:f1:31:34:09:ae:ce:c2:29:
                    bb:06:b0:cb:04:b1:57:36:bb:33:c0:84:64:76:e7:
                    28:ba:70:e3:74:9e:be:d0:a7:fc:1a:4e:a4:99:07:
                    9d:df:5b:f0:6d:b1:71:09:f9:8f:09:09:5c:66:26:
                    8c:95:32:10:96:93:07:88:da:ef:4f:a7:6e:a0:0f:
                    96:d6:fc:b0:dc:0e:16:04:dc:2a:89:96:38:ec:89:
                    38:2d:a2:b7:fb:b9:1a:64:3a:59:dd:29:10:ae:8b:
                    eb:8c:4e:b5:b1:9b:4a:cc:5f:ba:8c:ba:fc:a1:7d:
                    06:a0:83:05:69:af:df:06:1c:55:43:45:45:07:2b:
                    fb:15:54:ec:79:eb:ae:49:be:c9:ee:d8:72:8f:22:
                    06:1f:40:57:cf:52:3e:65:04:11:79:27:d3:6c:6f:
                    6e:6d:62:9b:50:7b:6a:21:78:23:58:73:7f:4b:9e:
                    e0:c7:78:b4:4b:5b:3c:80:ba:b6:23:0c:8b:17:e6:
                    31:74:91:ea:b7:98:ef:b8:04:8f:80:e6:b9:01:05:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BB:77:E2:16:D7:0F:34:71:52:4B:94:83:8E:1E:BB:26:A2:29:5C
            X509v3 Authority Key Identifier:
                keyid:51:B2:F5:93:38:6A:58:8F:34:71:D5:BC:2A:BF:AF:54:76:11:13:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14cccbd44c277091b395ba21d80e9bd47281ef92.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/f4314c66c4c27f85c35bb0b787238505d93bdfb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/14cccbd44c277091b395ba21d80e9bd47281ef92.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:dc:98:1d:4b:14:6e:4e:57:e3:00:4f:9b:1a:ca:f3:4c:9c:
         37:3d:a1:c1:c3:34:32:68:25:e1:d0:65:15:14:63:2d:27:a2:
         95:46:5f:3e:82:cc:db:51:16:0c:44:b8:6a:78:2c:ff:12:e6:
         ca:42:42:27:55:f0:ae:3d:7a:76:ae:30:34:93:79:02:f1:48:
         93:57:9d:41:76:35:93:0f:9b:19:19:d8:4d:f3:12:b2:30:a8:
         b5:63:88:41:83:72:32:c0:3c:fd:0d:55:4c:bb:76:ba:46:6f:
         23:a3:e8:97:2f:1f:ca:ba:30:61:f8:be:a0:84:25:43:0c:1b:
         c7:b2:bb:cb:cd:cd:93:34:6c:c7:cb:61:10:f1:ad:9d:d7:15:
         95:99:69:fa:f8:a8:13:5f:c2:6e:da:bb:89:99:55:f2:04:c8:
         26:39:9f:fa:e2:92:cd:e2:e5:a3:96:c7:78:06:d7:62:44:0f:
         be:18:87:1a:9c:aa:aa:37:0f:63:95:79:7f:4b:07:b5:19:f9:
         9b:39:59:43:66:a6:ed:0c:df:5e:1d:e5:a2:7c:7c:fa:93:1f:
         ae:09:ad:14:a5:52:16:cd:07:00:b4:f6:f4:ba:95:c5:5a:82:
         7c:48:16:11:ec:4c:49:91:85:2e:b1:2f:84:55:61:df:44:fe:
         51:3c:5a:26
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCK5OMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE0
Y2NjYmQ0NGMyNzcwOTFiMzk1YmEyMWQ4MGU5YmQ0NzI4MWVmOTIwHhcNMjMwNTE3
MDc1OTMzWhcNMjUwNTE4MDc1OTMzWjAzMTEwLwYDVQQDEyhmNDMxNGM2NmM0YzI3
Zjg1YzM1YmIwYjc4NzIzODUwNWQ5M2JkZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApUuuCmnnRF16KcdsZEBsP4kSTR9JbfVvVcOlGkOracREY64O
mYzeWlXptaHHrYIT1GCk8TE0Ca7Owim7BrDLBLFXNrszwIRkducounDjdJ6+0Kf8
Gk6kmQed31vwbbFxCfmPCQlcZiaMlTIQlpMHiNrvT6duoA+W1vyw3A4WBNwqiZY4
7Ik4LaK3+7kaZDpZ3SkQrovrjE61sZtKzF+6jLr8oX0GoIMFaa/fBhxVQ0VFByv7
FVTseeuuSb7J7thyjyIGH0BXz1I+ZQQReSfTbG9ubWKbUHtqIXgjWHN/S57gx3i0
S1s8gLq2IwyLF+YxdJHqt5jvuASPgOa5AQWBnwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNa7d+IW1w80cVJLlIOOHrsmoilcMB8GA1UdIwQYMBaAFFGy9ZM4aliPNHHV
vCq/r1R2ERMHMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTRjY2Ni
ZDQ0YzI3NzA5MWIzOTViYTIxZDgwZTliZDQ3MjgxZWY5Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTFiOTZhNWUtZmRiMi00MWFlLThiNTctNzM0MzQ2
NjY0ZmUxL2Y0MzE0YzY2YzRjMjdmODVjMzViYjBiNzg3MjM4NTA1ZDkzYmRmYjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MWI5NmE1ZS1mZGIyLTQxYWUtOGI1Ny03MzQz
NDY2NjRmZTEvMTRjY2NiZDQ0YzI3NzA5MWIzOTViYTIxZDgwZTliZDQ3MjgxZWY5
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAopjeDANBgkqhkiG9w0BAQsFAAOCAQEAYtyYHUsUbk5X4wBP
mxrK80ycNz2hwcM0Mmgl4dBlFRRjLSeilUZfPoLM21EWDES4angs/xLmykJCJ1Xw
rj16dq4wNJN5AvFIk1edQXY1kw+bGRnYTfMSsjCotWOIQYNyMsA8/Q1VTLt2ukZv
I6Poly8fyrowYfi+oIQlQwwbx7K7y83NkzRsx8thEPGtndcVlZlp+vioE1/Cbtq7
iZlV8gTIJjmf+uKSzeLlo5bHeAbXYkQPvhiHGpyqqjcPY5V5f0sHtRn5mzlZQ2am
7QzfXh3lonx8+pMfrgmtFKVSFs0HALT29LqVxVqCfEgWEexMSZGFLrEvhFVh30T+
UTxaJg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org