Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/85858a238d79150a3baea9899511105b308277de.roa
File:                     85858a238d79150a3baea9899511105b308277de.roa (raw, json)
Hash identifier:          W2l4Lk7aR/96jl7nkJZ+a6+tUh65uRjepVcFtv8cYQg=
Subject key identifier:   64:64:AA:05:BA:CD:26:BC:EE:89:64:D1:7D:C2:60:85:C8:13:3E:BA
Certificate issuer:       /CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Certificate serial:       017E49
Authority key identifier: 17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/85858a238d79150a3baea9899511105b308277de.roa
Signing time:             Mon 12 Jun 2023 23:50:18 +0000
ROA not before:           Sun 11 Jun 2023 23:50:17 +0000
ROA not after:            Thu 12 Jun 2025 23:50:17 +0000
asID:                     27773
IP address blocks:        168.243.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97865 (0x17e49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
        Validity
            Not Before: Jun 11 23:50:17 2023 GMT
            Not After : Jun 12 23:50:17 2025 GMT
        Subject: CN=85858a238d79150a3baea9899511105b308277de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d0:4a:4e:94:b5:21:50:9c:2e:ba:a1:60:64:
                    1b:f1:76:62:b4:e4:7c:0b:ad:72:f8:c8:3f:cd:49:
                    ce:06:91:92:41:55:1a:41:8d:f0:76:a8:89:38:73:
                    56:6d:e8:fb:b8:45:32:cb:f5:35:2a:58:ee:36:5f:
                    b4:ee:f9:c1:45:97:f3:b7:67:06:f5:9f:b7:1b:20:
                    83:cc:4f:a2:28:16:0a:e7:b5:8e:46:ba:e5:09:99:
                    1b:01:44:6f:2a:c0:bd:69:ee:01:70:e1:9b:2b:5f:
                    8a:68:3b:05:d9:ff:64:d9:1e:f8:01:3e:8b:43:5a:
                    e7:17:38:76:7c:35:63:64:9a:0d:aa:5d:9d:d3:e1:
                    e0:61:37:ca:c0:14:b0:8b:61:68:fd:d7:f2:8f:5f:
                    74:e5:fe:8d:1b:19:2b:be:86:fc:7a:8a:f1:76:28:
                    01:2c:62:d6:da:a9:35:86:43:32:f9:03:ff:a1:ec:
                    fb:e3:b5:eb:fd:ca:83:b9:34:b6:e7:a0:1d:86:26:
                    7a:5d:1a:c4:3c:60:3c:3b:8d:eb:7d:6d:d9:0a:6b:
                    cb:6f:41:0e:c6:a1:80:c7:46:c1:56:3a:ef:cf:27:
                    e7:59:4f:c6:40:d8:5d:4b:6d:d2:8e:97:d1:b7:e8:
                    45:03:ed:62:c0:6f:f0:db:c6:58:58:a8:aa:a3:35:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:64:AA:05:BA:CD:26:BC:EE:89:64:D1:7D:C2:60:85:C8:13:3E:BA
            X509v3 Authority Key Identifier:
                keyid:17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/85858a238d79150a3baea9899511105b308277de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:85:08:ec:6a:08:48:d8:38:b5:20:98:08:76:57:eb:fd:55:
         2f:ab:fd:bf:da:b3:09:42:04:e2:89:97:36:73:ed:15:05:9c:
         09:59:d4:4b:77:4c:40:62:75:f0:c3:78:ca:41:51:50:4c:7c:
         95:0a:be:0a:d5:6a:c4:9b:a1:16:eb:b9:45:9e:e9:ad:c6:e7:
         67:73:51:e1:ff:7a:ba:2f:81:9f:4b:f2:d2:fb:a4:65:51:32:
         41:9c:1d:79:a8:f6:27:67:07:30:6b:3f:e3:68:aa:46:f0:d5:
         a0:ea:3b:c6:9d:d3:45:64:c2:62:a2:fe:ba:5c:6d:41:24:0e:
         42:69:fc:48:f0:94:eb:44:c5:8b:8e:56:6b:68:fd:36:59:a4:
         53:69:a3:3f:b9:a1:ef:bf:fe:68:44:45:fa:2a:f6:6b:8c:4a:
         e4:00:d0:52:33:5e:85:b1:94:1b:7b:f4:4e:b0:d0:7f:b9:4b:
         30:71:91:45:6e:6d:8b:57:3f:2d:9b:93:c6:c9:ac:5b:4b:ff:
         08:69:cd:fe:58:4b:e9:35:8f:c1:42:79:bb:16:eb:ba:24:81:
         b0:57:1a:81:63:91:cc:75:5e:67:a1:17:ab:06:98:c1:45:0a:
         c6:43:a2:b2:da:ca:cc:03:6b:e9:11:e0:f2:b0:27:a9:a3:d6:
         cc:57:48:7c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAX5JMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
OGY5MzA2ZjVhOGVkZDg3MjFkMmM0YTI5M2UzNDUwNzgzY2RkNTYwHhcNMjMwNjEx
MjM1MDE3WhcNMjUwNjEyMjM1MDE3WjAzMTEwLwYDVQQDEyg4NTg1OGEyMzhkNzkx
NTBhM2JhZWE5ODk5NTExMTA1YjMwODI3N2RlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA8dBKTpS1IVCcLrqhYGQb8XZitOR8C61y+Mg/zUnOBpGSQVUa
QY3wdqiJOHNWbej7uEUyy/U1KljuNl+07vnBRZfzt2cG9Z+3GyCDzE+iKBYK57WO
RrrlCZkbAURvKsC9ae4BcOGbK1+KaDsF2f9k2R74AT6LQ1rnFzh2fDVjZJoNql2d
0+HgYTfKwBSwi2Fo/dfyj1905f6NGxkrvob8eorxdigBLGLW2qk1hkMy+QP/oez7
47Xr/cqDuTS256AdhiZ6XRrEPGA8O43rfW3ZCmvLb0EOxqGAx0bBVjrvzyfnWU/G
QNhdS23SjpfRt+hFA+1iwG/w28ZYWKiqozXqKwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGRkqgW6zSa87olk0X3CYIXIEz66MB8GA1UdIwQYMBaAFBeCxAvPM0z9wWpX
yFd3MBdj0B8FMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzg4Zjkz
MDZmNWE4ZWRkODcyMWQyYzRhMjkzZTM0NTA3ODNjZGQ1Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTcwNmQ1ZTctMDliYi00MjQ4LWJlMDEtMmQ5ZWVi
ZTQzNmIyLzg1ODU4YTIzOGQ3OTE1MGEzYmFlYTk4OTk1MTExMDViMzA4Mjc3ZGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NzA2ZDVlNy0wOWJiLTQyNDgtYmUwMS0yZDll
ZWJlNDM2YjIvNzg4ZjkzMDZmNWE4ZWRkODcyMWQyYzRhMjkzZTM0NTA3ODNjZGQ1
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKjzcDANBgkqhkiG9w0BAQsFAAOCAQEAYYUI7GoISNg4tSCY
CHZX6/1VL6v9v9qzCUIE4omXNnPtFQWcCVnUS3dMQGJ18MN4ykFRUEx8lQq+CtVq
xJuhFuu5RZ7prcbnZ3NR4f96ui+Bn0vy0vukZVEyQZwdeaj2J2cHMGs/42iqRvDV
oOo7xp3TRWTCYqL+ulxtQSQOQmn8SPCU60TFi45Wa2j9NlmkU2mjP7mh77/+aERF
+ir2a4xK5ADQUjNehbGUG3v0TrDQf7lLMHGRRW5ti1c/LZuTxsmsW0v/CGnN/lhL
6TWPwUJ5uxbruiSBsFcagWORzHVeZ6EXqwaYwUUKxkOistrKzANr6RHg8rAnqaPW
zFdIfA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org