Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/53a96d7b4b9cfc3134522c70eebfc12a90a9f15b.roa
File:                     53a96d7b4b9cfc3134522c70eebfc12a90a9f15b.roa (raw, json)
Hash identifier:          5HIooku039f17ra/rECsx6tmWF67/T1ArnbHK9Ak+0E=
Subject key identifier:   C7:01:1F:C0:90:49:D9:9D:B7:E8:6C:86:D4:8F:7F:A6:57:CA:E6:C1
Certificate issuer:       /CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
Certificate serial:       26AA36
Authority key identifier: 57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/53a96d7b4b9cfc3134522c70eebfc12a90a9f15b.roa
Signing time:             Fri 05 Jan 2024 19:00:12 +0000
ROA not before:           Fri 05 Jan 2024 19:00:12 +0000
ROA not after:            Mon 05 Jan 2026 19:00:12 +0000
asID:                     272056
IP address blocks:        192.141.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2533942 (0x26aa36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
        Validity
            Not Before: Jan  5 19:00:12 2024 GMT
            Not After : Jan  5 19:00:12 2026 GMT
        Subject: CN=53a96d7b4b9cfc3134522c70eebfc12a90a9f15b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:8f:a3:e6:a5:9f:b2:dd:0a:35:d7:a0:e6:
                    40:f8:52:27:b4:41:d2:f3:dd:f4:86:03:11:8e:0c:
                    44:58:d2:b7:c0:ca:65:21:2a:1a:5f:fb:91:8b:69:
                    0b:10:23:e3:95:3a:77:0f:ce:74:80:b2:c8:bb:54:
                    d4:d6:d5:47:4f:d8:9b:8d:69:cc:92:52:9c:78:48:
                    f8:60:1f:dc:26:f5:5f:da:07:c6:24:b5:fe:74:9c:
                    b0:d3:e2:af:94:45:0b:c4:58:2b:1d:c5:72:5b:c1:
                    ac:be:52:f3:6c:37:c9:c0:3a:aa:45:21:ce:b6:4f:
                    0d:7c:49:2b:19:83:28:ef:20:df:8b:58:d5:99:bb:
                    6b:8a:61:39:18:2e:29:49:03:c0:c5:34:d2:6d:c4:
                    15:86:5e:d8:4f:3e:67:0f:de:7a:a0:4d:31:e7:14:
                    1b:7d:71:24:ea:ac:d8:88:28:4e:21:e7:a5:af:b1:
                    0a:e2:c4:55:a8:4a:44:da:83:86:98:94:bc:94:5b:
                    7e:7e:35:7d:12:8d:f0:f0:0f:97:30:9f:f2:6d:25:
                    d2:d7:8f:f0:94:55:0e:20:ef:e0:68:c2:53:37:56:
                    52:e5:d4:b4:c9:8d:ce:5a:82:0a:a2:87:48:f3:76:
                    f8:32:36:f9:03:28:d2:52:23:fe:9d:2e:9a:71:2a:
                    f7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:01:1F:C0:90:49:D9:9D:B7:E8:6C:86:D4:8F:7F:A6:57:CA:E6:C1
            X509v3 Authority Key Identifier:
                keyid:57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/53a96d7b4b9cfc3134522c70eebfc12a90a9f15b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/9e7510573b4e2f6f118e04dc9188c5f3ef257302.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:58:86:9d:07:ac:fb:f8:bc:c5:9c:fa:8d:62:3a:b6:94:47:
         26:87:0b:99:83:7a:23:88:d0:62:47:25:8e:a8:50:d4:a2:b4:
         39:9b:fc:86:e7:81:9a:e4:1e:07:7c:20:70:4a:cd:e3:eb:1f:
         47:32:b1:b9:3c:8c:d6:fc:f8:c4:77:c5:05:f5:0e:a3:6a:d3:
         6b:e4:e2:d3:2c:42:bd:a5:1e:09:ae:ba:c3:d7:27:23:f1:10:
         6b:6d:28:61:2b:fe:76:2a:10:94:ec:c0:79:27:eb:87:db:bb:
         4f:25:2b:68:c6:93:70:e8:37:a8:97:e0:36:08:48:0a:a0:97:
         bb:f2:6f:e5:97:66:1e:19:4c:61:1e:02:ae:3a:3a:71:2c:94:
         91:67:1d:18:b1:81:a5:cc:ff:ce:60:9b:b2:f6:a5:05:bc:dd:
         72:e0:cd:6d:62:a8:af:02:a7:62:0b:3e:67:0d:37:d1:e0:37:
         57:89:5d:57:a2:23:6d:e4:dd:08:32:e5:31:41:bf:4c:0c:59:
         f6:09:d3:38:54:72:87:c8:e1:6c:0b:dd:b2:44:31:fc:a4:b6:
         3f:43:89:13:ba:54:ce:36:a2:80:c1:89:df:89:e4:1f:88:1c:
         15:cc:bb:d6:a1:ad:b5:05:4e:cd:05:44:07:c6:f8:e0:0d:42:
         8a:e6:49:cb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJqo2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDll
NzUxMDU3M2I0ZTJmNmYxMThlMDRkYzkxODhjNWYzZWYyNTczMDIwHhcNMjQwMTA1
MTkwMDEyWhcNMjYwMTA1MTkwMDEyWjAzMTEwLwYDVQQDEyg1M2E5NmQ3YjRiOWNm
YzMxMzQ1MjJjNzBlZWJmYzEyYTkwYTlmMTViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnXGPo+aln7LdCjXXoOZA+FIntEHS8930hgMRjgxEWNK3wMpl
ISoaX/uRi2kLECPjlTp3D850gLLIu1TU1tVHT9ibjWnMklKceEj4YB/cJvVf2gfG
JLX+dJyw0+KvlEULxFgrHcVyW8GsvlLzbDfJwDqqRSHOtk8NfEkrGYMo7yDfi1jV
mbtrimE5GC4pSQPAxTTSbcQVhl7YTz5nD956oE0x5xQbfXEk6qzYiChOIeelr7EK
4sRVqEpE2oOGmJS8lFt+fjV9Eo3w8A+XMJ/ybSXS14/wlFUOIO/gaMJTN1ZS5dS0
yY3OWoIKoodI83b4Mjb5AyjSUiP+nS6acSr3vQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMcBH8CQSdmdt+hshtSPf6ZXyubBMB8GA1UdIwQYMBaAFFdiBFvA8E05r+25
zMLm3owREAAPMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWU3NTEw
NTczYjRlMmY2ZjExOGUwNGRjOTE4OGM1ZjNlZjI1NzMwMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjc1ZjA0ZGItNmIxYi00OTA2LWI4NGQtMmExZDVh
M2Q2NjU4LzUzYTk2ZDdiNGI5Y2ZjMzEzNDUyMmM3MGVlYmZjMTJhOTBhOWYxNWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NzVmMDRkYi02YjFiLTQ5MDYtYjg0ZC0yYTFk
NWEzZDY2NTgvOWU3NTEwNTczYjRlMmY2ZjExOGUwNGRjOTE4OGM1ZjNlZjI1NzMw
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMCNpjANBgkqhkiG9w0BAQsFAAOCAQEAA1iGnQes+/i8xZz6
jWI6tpRHJocLmYN6I4jQYkcljqhQ1KK0OZv8hueBmuQeB3wgcErN4+sfRzKxuTyM
1vz4xHfFBfUOo2rTa+Ti0yxCvaUeCa66w9cnI/EQa20oYSv+dioQlOzAeSfrh9u7
TyUraMaTcOg3qJfgNghICqCXu/Jv5ZdmHhlMYR4Crjo6cSyUkWcdGLGBpcz/zmCb
svalBbzdcuDNbWKorwKnYgs+Zw030eA3V4ldV6IjbeTdCDLlMUG/TAxZ9gnTOFRy
h8jhbAvdskQx/KS2P0OJE7pUzjaigMGJ34nkH4gcFcy71qGttQVOzQVEB8b44A1C
iuZJyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org