Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/837747be377b1e749317e905b46eb8b7fa85c69e.roa
File:                     837747be377b1e749317e905b46eb8b7fa85c69e.roa (raw, json)
Hash identifier:          9Ng3LiPeddfh5tZTFtklihSzYUltbvX0Bu4SogjZzIQ=
Subject key identifier:   18:92:3B:42:0B:9D:BD:B3:91:DA:78:B4:AA:C9:DC:EA:DF:00:20:A7
Certificate issuer:       /CN=5e60935bdbaf84edd159cb54bb8fad0298ca5126
Certificate serial:       0D253D
Authority key identifier: 60:76:86:83:41:24:9B:61:C5:B5:42:87:21:D1:76:DF:30:24:90:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e60935bdbaf84edd159cb54bb8fad0298ca5126.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/837747be377b1e749317e905b46eb8b7fa85c69e.roa
Signing time:             Wed 24 Mar 2021 14:28:50 +0000
ROA not before:           Wed 24 Mar 2021 14:28:49 +0000
ROA not after:            Tue 24 Mar 2026 14:28:49 +0000
asID:                     264768
IP address blocks:        168.196.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861501 (0xd253d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e60935bdbaf84edd159cb54bb8fad0298ca5126
        Validity
            Not Before: Mar 24 14:28:49 2021 GMT
            Not After : Mar 24 14:28:49 2026 GMT
        Subject: CN=837747be377b1e749317e905b46eb8b7fa85c69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e5:1f:5b:40:84:51:17:03:a8:92:fe:00:b5:
                    8f:23:6b:a7:3c:37:fb:dc:26:38:03:31:3c:9a:9c:
                    01:cc:55:20:20:6e:95:08:c6:64:af:10:dc:0e:18:
                    1f:22:52:7f:85:0b:e2:d5:df:4a:8a:d5:17:66:c4:
                    eb:5b:ae:e6:d7:0b:e8:31:06:69:6d:db:95:d4:fb:
                    47:87:5d:dd:af:fc:c1:02:a3:a6:4e:da:5f:a8:43:
                    9b:7c:88:10:73:82:88:9f:2c:3f:b7:89:74:3e:2b:
                    58:77:b5:82:70:73:85:7a:83:24:9c:7d:62:a5:fc:
                    96:c9:7c:85:09:71:8d:cb:c9:c3:0c:41:ec:5d:f6:
                    fb:c1:1f:01:d1:6b:ae:6a:d7:a1:93:3b:76:b7:ee:
                    2b:f6:b0:8c:a4:11:dc:94:3a:70:56:3b:72:0c:e3:
                    40:18:46:db:37:aa:62:cd:b7:0b:27:0c:41:72:0c:
                    3d:b9:33:e7:ab:46:0c:8b:c7:f8:35:ad:db:05:f0:
                    d3:d7:62:a3:f8:95:dd:65:20:4c:54:60:36:d7:50:
                    50:c7:90:2d:a1:bd:f4:52:0f:21:af:c2:98:f5:c3:
                    0d:66:56:ab:c2:77:bb:b5:8f:93:3a:a5:d3:fc:6e:
                    fb:0f:59:14:61:f4:eb:3b:86:08:6f:10:18:03:a2:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:92:3B:42:0B:9D:BD:B3:91:DA:78:B4:AA:C9:DC:EA:DF:00:20:A7
            X509v3 Authority Key Identifier:
                keyid:60:76:86:83:41:24:9B:61:C5:B5:42:87:21:D1:76:DF:30:24:90:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e60935bdbaf84edd159cb54bb8fad0298ca5126.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/837747be377b1e749317e905b46eb8b7fa85c69e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/634140a7-d7a1-4984-842a-89da493b06a9/5e60935bdbaf84edd159cb54bb8fad0298ca5126.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:e8:db:e6:31:a0:92:8f:83:7f:28:a2:23:f3:ca:b2:2a:0a:
         ce:bb:d6:3d:b1:d8:ec:9f:08:87:4c:27:cb:b3:44:fa:c8:dd:
         a5:ec:d0:a6:ad:5a:49:55:63:57:24:cf:70:73:49:35:22:1c:
         fa:81:ee:49:e7:af:b5:5f:26:90:28:b6:46:a7:8d:4e:4b:54:
         a9:79:18:4d:ac:6e:3a:af:a7:c5:6a:84:bd:ca:bc:a9:35:5a:
         de:74:27:00:3e:43:f1:59:11:62:25:2b:dc:71:85:5d:f0:67:
         a6:37:88:75:e8:61:75:d8:4b:1f:5a:1b:ba:f8:b4:d2:bd:2e:
         6f:b4:26:b7:da:e8:a9:bd:a3:3b:71:92:7b:99:35:39:75:2b:
         79:a2:a3:bc:ab:1b:13:ab:91:e9:19:f4:e5:06:4b:cb:9f:fb:
         cb:a5:2e:6c:c4:e5:22:76:25:c4:26:24:b4:06:01:f5:7e:09:
         a3:fc:fc:66:1c:6b:de:29:1d:64:ce:08:8b:5b:c1:b8:49:70:
         4e:2b:3e:63:15:8a:4f:0f:e4:f4:9c:9c:9f:59:40:de:b6:d8:
         e6:70:6f:74:c6:ce:59:90:56:d9:41:03:6e:29:5f:08:b1:b3:
         d6:1c:ec:0d:19:bd:75:29:5b:a0:48:1c:49:b1:f5:7f:1e:7b:
         fc:d1:76:c3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDSU9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVl
NjA5MzViZGJhZjg0ZWRkMTU5Y2I1NGJiOGZhZDAyOThjYTUxMjYwHhcNMjEwMzI0
MTQyODQ5WhcNMjYwMzI0MTQyODQ5WjAzMTEwLwYDVQQDEyg4Mzc3NDdiZTM3N2Ix
ZTc0OTMxN2U5MDViNDZlYjhiN2ZhODVjNjllMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlOUfW0CEURcDqJL+ALWPI2unPDf73CY4AzE8mpwBzFUgIG6V
CMZkrxDcDhgfIlJ/hQvi1d9KitUXZsTrW67m1wvoMQZpbduV1PtHh13dr/zBAqOm
TtpfqEObfIgQc4KInyw/t4l0PitYd7WCcHOFeoMknH1ipfyWyXyFCXGNy8nDDEHs
Xfb7wR8B0Wuuatehkzt2t+4r9rCMpBHclDpwVjtyDONAGEbbN6pizbcLJwxBcgw9
uTPnq0YMi8f4Na3bBfDT12Kj+JXdZSBMVGA211BQx5Atob30Ug8hr8KY9cMNZlar
wne7tY+TOqXT/G77D1kUYfTrO4YIbxAYA6Ky8QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBiSO0ILnb2zkdp4tKrJ3OrfACCnMB8GA1UdIwQYMBaAFGB2hoNBJJthxbVC
hyHRdt8wJJDoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWU2MDkz
NWJkYmFmODRlZGQxNTljYjU0YmI4ZmFkMDI5OGNhNTEyNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjM0MTQwYTctZDdhMS00OTg0LTg0MmEtODlkYTQ5
M2IwNmE5LzgzNzc0N2JlMzc3YjFlNzQ5MzE3ZTkwNWI0NmViOGI3ZmE4NWM2OWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MzQxNDBhNy1kN2ExLTQ5ODQtODQyYS04OWRh
NDkzYjA2YTkvNWU2MDkzNWJkYmFmODRlZGQxNTljYjU0YmI4ZmFkMDI5OGNhNTEy
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjEjDANBgkqhkiG9w0BAQsFAAOCAQEAJejb5jGgko+Dfyii
I/PKsioKzrvWPbHY7J8Ih0wny7NE+sjdpezQpq1aSVVjVyTPcHNJNSIc+oHuSeev
tV8mkCi2RqeNTktUqXkYTaxuOq+nxWqEvcq8qTVa3nQnAD5D8VkRYiUr3HGFXfBn
pjeIdehhddhLH1obuvi00r0ub7Qmt9roqb2jO3GSe5k1OXUreaKjvKsbE6uR6Rn0
5QZLy5/7y6UubMTlInYlxCYktAYB9X4Jo/z8Zhxr3ikdZM4Ii1vBuElwTis+YxWK
Tw/k9Jycn1lA3rbY5nBvdMbOWZBW2UEDbilfCLGz1hzsDRm9dSlboEgcSbH1fx57
/NF2ww==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org