Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/059497ca4a81151fc57889134804468d797058de.roa
File:                     059497ca4a81151fc57889134804468d797058de.roa (raw, json)
Hash identifier:          74L0r3TX6zz9bjU9egcBQ+7VMd3LCY8GOU453ZMlM1s=
Subject key identifier:   87:71:93:8A:1F:CF:33:3D:96:97:AC:4D:9A:84:8F:0C:0D:E4:17:FA
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       044854
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/059497ca4a81151fc57889134804468d797058de.roa
Signing time:             Wed 12 Jul 2023 15:14:07 +0000
ROA not before:           Tue 11 Jul 2023 15:14:07 +0000
ROA not after:            Sat 12 Jul 2025 15:14:07 +0000
asID:                     16629
IP address blocks:        201.246.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280660 (0x44854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 11 15:14:07 2023 GMT
            Not After : Jul 12 15:14:07 2025 GMT
        Subject: CN=059497ca4a81151fc57889134804468d797058de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0f:13:5e:aa:28:ae:00:d8:64:a4:99:db:10:
                    e8:2c:c5:a5:c4:15:fa:58:3c:52:80:90:0f:67:5d:
                    7d:05:40:01:53:ce:e6:c2:7f:0e:b5:b9:86:97:d2:
                    de:6b:20:64:05:c9:04:0e:16:58:f1:cc:8b:25:21:
                    33:9d:f2:8b:50:a5:17:d2:e4:ef:32:19:7e:74:24:
                    d9:38:35:24:b5:40:48:0e:a4:c4:5e:50:cc:47:70:
                    df:66:83:97:9d:fa:ac:ef:81:af:df:01:a0:66:af:
                    0d:c5:a6:b1:db:ce:1f:54:ef:75:d6:b8:9e:8d:63:
                    c0:d2:46:d9:45:00:ce:7e:dc:41:f7:15:de:39:b5:
                    df:21:3a:2f:23:ec:62:29:fd:bc:b0:2d:e9:32:be:
                    29:ad:01:b5:09:d3:a9:4e:74:19:40:3e:e5:58:c2:
                    67:1d:4f:00:68:eb:57:1d:30:17:d5:39:6a:89:ed:
                    52:ce:af:0c:bb:54:2b:e1:ad:dd:9a:fc:13:89:1e:
                    76:e4:eb:be:6e:2f:86:82:bd:af:f6:48:ec:a1:ee:
                    14:fc:bb:45:89:68:11:c9:1f:52:d9:01:50:9b:b0:
                    7a:33:75:76:b6:bc:36:0f:4b:8f:75:0a:4d:ee:f3:
                    61:69:96:00:0e:05:f5:29:b5:11:97:58:2f:e5:37:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:71:93:8A:1F:CF:33:3D:96:97:AC:4D:9A:84:8F:0C:0D:E4:17:FA
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/059497ca4a81151fc57889134804468d797058de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.246.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6e:7a:fa:c5:bb:ec:d2:fe:c7:77:7a:d6:6f:33:69:21:60:b8:
         d5:ab:6a:0f:3d:25:80:55:8d:ff:0c:78:a2:21:bc:45:78:10:
         b5:52:13:da:3b:94:a4:83:f3:6e:16:55:0f:77:7a:29:80:23:
         9f:c7:84:49:5e:cd:6e:ca:71:e9:22:7a:76:cc:54:ef:e8:19:
         3e:ee:ae:41:58:ad:fb:0c:54:cb:83:84:f7:3a:e8:79:a1:50:
         e7:c5:de:5f:97:8c:4d:2f:88:a9:cc:9b:23:36:95:f3:64:75:
         48:82:cc:bf:0e:6b:79:9f:c5:29:bf:8d:8c:09:4e:58:20:50:
         54:ff:6b:25:ef:b0:27:8c:a2:2f:f1:ea:5b:05:9a:a8:9a:7b:
         66:5e:be:cc:1a:d1:39:ae:bf:3e:1c:67:3b:56:e6:11:9e:98:
         75:12:62:a4:01:95:a4:88:ad:b1:3f:c1:ab:a2:71:6d:b7:2b:
         5b:05:91:db:3f:1b:fb:da:45:58:d4:eb:17:1a:22:25:2d:e8:
         98:58:8b:4f:2c:d3:1c:f1:f0:98:a3:93:77:73:7e:30:94:c2:
         cd:42:21:8d:2a:1a:d6:d6:51:9b:4b:26:35:65:45:29:fe:55:
         9a:65:b9:c9:8b:23:22:65:f2:34:8a:51:88:af:78:40:72:a2:
         9f:65:83:d3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBEhUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzEx
MTUxNDA3WhcNMjUwNzEyMTUxNDA3WjAzMTEwLwYDVQQDEygwNTk0OTdjYTRhODEx
NTFmYzU3ODg5MTM0ODA0NDY4ZDc5NzA1OGRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgA8TXqoorgDYZKSZ2xDoLMWlxBX6WDxSgJAPZ119BUABU87m
wn8OtbmGl9LeayBkBckEDhZY8cyLJSEznfKLUKUX0uTvMhl+dCTZODUktUBIDqTE
XlDMR3DfZoOXnfqs74Gv3wGgZq8Nxaax284fVO911riejWPA0kbZRQDOftxB9xXe
ObXfITovI+xiKf28sC3pMr4prQG1CdOpTnQZQD7lWMJnHU8AaOtXHTAX1Tlqie1S
zq8Mu1Qr4a3dmvwTiR525Ou+bi+Ggr2v9kjsoe4U/LtFiWgRyR9S2QFQm7B6M3V2
trw2D0uPdQpN7vNhaZYADgX1KbURl1gv5Tf7wwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIdxk4ofzzM9lpesTZqEjwwN5Bf6MB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5LzA1OTQ5N2NhNGE4MTE1MWZjNTc4ODkxMzQ4MDQ0NjhkNzk3MDU4ZGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBsn2wDANBgkqhkiG9w0BAQsFAAOCAQEAbnr6xbvs0v7Hd3rW
bzNpIWC41atqDz0lgFWN/wx4oiG8RXgQtVIT2juUpIPzbhZVD3d6KYAjn8eESV7N
bspx6SJ6dsxU7+gZPu6uQVit+wxUy4OE9zroeaFQ58XeX5eMTS+IqcybIzaV82R1
SILMvw5reZ/FKb+NjAlOWCBQVP9rJe+wJ4yiL/HqWwWaqJp7Zl6+zBrROa6/Phxn
O1bmEZ6YdRJipAGVpIitsT/Bq6JxbbcrWwWR2z8b+9pFWNTrFxoiJS3omFiLTyzT
HPHwmKOTd3N+MJTCzUIhjSoa1tZRm0smNWVFKf5VmmW5yYsjImXyNIpRiK94QHKi
n2WD0w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org