Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/642a350c-60f7-457b-b436-0b176b05ab01/ea9ad1ab80786bd346688a0440c363c15d447ddd.roa
File:                     ea9ad1ab80786bd346688a0440c363c15d447ddd.roa (raw, json)
Hash identifier:          lEaxgqCRQBs7EDQQ0++qmE83BWAhohZJtE1H8ZSrnqw=
Subject key identifier:   9A:9B:32:EF:6D:F0:C6:04:74:90:32:54:B5:00:D3:13:CD:0D:FB:73
Certificate issuer:       /CN=2f1b97ea096d1f9c82e02b4b2462c0ce0d244058
Certificate serial:       05D51D
Authority key identifier: 7B:C4:F2:0D:80:38:D4:E5:A2:EE:C8:CE:0C:C6:B5:35:6A:7A:5D:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f1b97ea096d1f9c82e02b4b2462c0ce0d244058.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/642a350c-60f7-457b-b436-0b176b05ab01/ea9ad1ab80786bd346688a0440c363c15d447ddd.roa
Signing time:             Wed 24 Mar 2021 14:33:53 +0000
ROA not before:           Wed 24 Mar 2021 14:33:53 +0000
ROA not after:            Tue 24 Mar 2026 14:33:53 +0000
asID:                     270056
IP address blocks:        187.103.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382237 (0x5d51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f1b97ea096d1f9c82e02b4b2462c0ce0d244058
        Validity
            Not Before: Mar 24 14:33:53 2021 GMT
            Not After : Mar 24 14:33:53 2026 GMT
        Subject: CN=ea9ad1ab80786bd346688a0440c363c15d447ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:82:9b:b7:5d:2e:31:fc:39:55:e9:b0:2b:
                    22:ed:60:8e:cf:4a:9a:f8:91:6d:2a:52:6a:94:79:
                    e3:b1:16:10:c1:24:ff:b2:7d:2f:1d:d7:ef:47:dc:
                    ad:ec:78:88:47:23:4b:22:28:cd:19:68:24:c9:5e:
                    fe:34:96:3d:c7:a5:0d:23:2d:87:93:a4:cc:84:5d:
                    a6:81:b9:89:01:26:aa:98:40:90:00:73:59:f3:28:
                    25:fd:1c:c0:16:7d:43:ac:95:15:79:2c:9d:18:cd:
                    9a:aa:11:29:e7:9e:0a:43:8d:66:ea:e8:fd:41:f5:
                    0f:6f:9c:4b:cf:2a:4b:49:da:5b:0a:af:e1:05:84:
                    35:29:ef:8f:a7:80:59:79:f1:80:98:1c:58:b2:be:
                    f6:c0:46:50:e3:61:48:b4:f0:1e:7a:46:49:90:2f:
                    29:be:50:78:d5:cc:a1:5a:f3:6c:38:7e:e1:1b:f1:
                    f8:b7:bf:0a:b3:19:70:2d:60:d4:5e:d8:26:47:0f:
                    45:81:13:25:4e:ad:63:78:8c:a7:d5:3b:c8:f3:f6:
                    fa:fb:e2:bb:bc:9e:b7:8b:92:93:35:28:2a:a3:01:
                    63:c0:94:e5:6f:96:8e:af:9a:e9:98:91:27:22:77:
                    c8:4b:39:5f:a2:82:cc:8d:62:ca:ff:94:7b:5d:ec:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9B:32:EF:6D:F0:C6:04:74:90:32:54:B5:00:D3:13:CD:0D:FB:73
            X509v3 Authority Key Identifier:
                keyid:7B:C4:F2:0D:80:38:D4:E5:A2:EE:C8:CE:0C:C6:B5:35:6A:7A:5D:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f1b97ea096d1f9c82e02b4b2462c0ce0d244058.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/642a350c-60f7-457b-b436-0b176b05ab01/ea9ad1ab80786bd346688a0440c363c15d447ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/642a350c-60f7-457b-b436-0b176b05ab01/2f1b97ea096d1f9c82e02b4b2462c0ce0d244058.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:7b:b7:4d:ac:e8:86:81:c5:b4:6e:32:d6:67:21:18:69:81:
         04:b7:1c:e7:b5:95:1e:d2:15:fc:42:95:3e:73:14:15:06:8a:
         df:49:12:b2:75:58:9e:d0:30:ba:db:ea:5c:68:b0:10:3d:ae:
         7a:ac:2a:c9:6d:9d:04:b4:3a:2d:c9:a7:20:46:61:01:c0:10:
         7d:41:2e:8e:4f:b1:44:61:10:f3:7d:d4:b6:fb:f3:e5:0e:57:
         c5:73:d3:3b:95:84:6c:fe:48:7f:41:76:72:eb:5e:87:55:32:
         03:d9:1d:a3:df:64:73:7a:b0:e9:06:16:e3:83:a0:70:86:42:
         22:b8:b3:02:e6:a5:04:a5:fe:f5:0d:ef:e3:57:b1:c9:c0:77:
         8e:53:76:29:7c:40:64:1f:66:fd:35:5a:1e:3f:42:c4:f2:44:
         bd:b6:ee:51:71:70:da:5d:fc:95:62:8d:b0:0c:6b:24:15:be:
         dd:70:0b:a9:21:d6:1b:31:94:1a:a1:43:e9:86:62:df:a8:01:
         e4:09:71:9b:b7:da:86:35:2f:23:ec:55:b9:fd:1e:fd:0b:6d:
         0c:fa:61:77:72:28:02:79:89:cb:ec:ac:d0:c6:c4:fe:67:52:
         b2:77:83:25:03:a8:cd:fb:b9:a6:96:a3:45:0e:bb:e8:d7:04:
         4c:02:49:d5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBdUdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJm
MWI5N2VhMDk2ZDFmOWM4MmUwMmI0YjI0NjJjMGNlMGQyNDQwNTgwHhcNMjEwMzI0
MTQzMzUzWhcNMjYwMzI0MTQzMzUzWjAzMTEwLwYDVQQDEyhlYTlhZDFhYjgwNzg2
YmQzNDY2ODhhMDQ0MGMzNjNjMTVkNDQ3ZGRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAssGCm7ddLjH8OVXpsCsi7WCOz0qa+JFtKlJqlHnjsRYQwST/
sn0vHdfvR9yt7HiIRyNLIijNGWgkyV7+NJY9x6UNIy2Hk6TMhF2mgbmJASaqmECQ
AHNZ8ygl/RzAFn1DrJUVeSydGM2aqhEp554KQ41m6uj9QfUPb5xLzypLSdpbCq/h
BYQ1Ke+Pp4BZefGAmBxYsr72wEZQ42FItPAeekZJkC8pvlB41cyhWvNsOH7hG/H4
t78KsxlwLWDUXtgmRw9FgRMlTq1jeIyn1TvI8/b6++K7vJ63i5KTNSgqowFjwJTl
b5aOr5rpmJEnInfISzlfooLMjWLK/5R7XexE8wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJqbMu9t8MYEdJAyVLUA0xPNDftzMB8GA1UdIwQYMBaAFHvE8g2AONTlou7I
zgzGtTVqel0YMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmYxYjk3
ZWEwOTZkMWY5YzgyZTAyYjRiMjQ2MmMwY2UwZDI0NDA1OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjQyYTM1MGMtNjBmNy00NTdiLWI0MzYtMGIxNzZi
MDVhYjAxL2VhOWFkMWFiODA3ODZiZDM0NjY4OGEwNDQwYzM2M2MxNWQ0NDdkZGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NDJhMzUwYy02MGY3LTQ1N2ItYjQzNi0wYjE3
NmIwNWFiMDEvMmYxYjk3ZWEwOTZkMWY5YzgyZTAyYjRiMjQ2MmMwY2UwZDI0NDA1
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArtnFDANBgkqhkiG9w0BAQsFAAOCAQEAZ3u3TazohoHFtG4y
1mchGGmBBLcc57WVHtIV/EKVPnMUFQaK30kSsnVYntAwutvqXGiwED2ueqwqyW2d
BLQ6LcmnIEZhAcAQfUEujk+xRGEQ833Utvvz5Q5XxXPTO5WEbP5If0F2cuteh1Uy
A9kdo99kc3qw6QYW44OgcIZCIrizAualBKX+9Q3v41exycB3jlN2KXxAZB9m/TVa
Hj9CxPJEvbbuUXFw2l38lWKNsAxrJBW+3XALqSHWGzGUGqFD6YZi36gB5Alxm7fa
hjUvI+xVuf0e/QttDPphd3IoAnmJy+ys0MbE/mdSsneDJQOozfu5ppajRQ676NcE
TAJJ1Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org