Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/43bef25859c8da0992e6455a6278635a01994562.roa
File:                     43bef25859c8da0992e6455a6278635a01994562.roa (raw, json)
Hash identifier:          mmyt3KOStmBEAzjsM0HCkzbuZpEz/3SWQ3CMahMEICY=
Subject key identifier:   9E:9E:19:4F:8C:A9:77:2B:D7:68:4B:19:07:F0:A9:E0:2A:92:BD:F2
Certificate issuer:       /CN=30415e525ae2a6911d8229a69de6df7b5716b468
Certificate serial:       0DF6D1
Authority key identifier: AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/43bef25859c8da0992e6455a6278635a01994562.roa
Signing time:             Wed 24 Mar 2021 14:39:13 +0000
ROA not before:           Wed 24 Mar 2021 14:39:12 +0000
ROA not after:            Tue 24 Mar 2026 14:39:12 +0000
asID:                     264668
IP address blocks:        128.201.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915153 (0xdf6d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30415e525ae2a6911d8229a69de6df7b5716b468
        Validity
            Not Before: Mar 24 14:39:12 2021 GMT
            Not After : Mar 24 14:39:12 2026 GMT
        Subject: CN=43bef25859c8da0992e6455a6278635a01994562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7f:71:6e:e6:57:59:fa:79:fe:2d:d0:72:69:
                    57:cd:a4:f5:2d:35:3f:94:c9:e3:47:48:e6:22:0c:
                    fa:1e:15:4a:30:f3:8e:ff:4b:84:d8:bb:64:a6:4d:
                    4a:fc:38:d9:b1:bf:21:c4:1e:ad:25:1c:b6:c8:65:
                    d9:44:bd:71:07:de:e7:30:36:69:42:40:99:da:66:
                    95:64:d2:08:56:c5:43:50:02:9c:e4:0b:37:e5:90:
                    4a:d9:44:40:38:c0:a6:19:99:f1:cc:24:ca:b0:0f:
                    e9:e7:77:8f:d2:8f:9f:3b:94:b4:2c:05:92:0a:32:
                    25:e8:aa:87:9d:c7:bc:37:e1:13:bc:95:53:83:e1:
                    60:54:91:1b:98:28:7d:bc:11:d2:1e:5f:14:18:4e:
                    1b:e1:4a:16:a0:87:70:ae:b1:c1:2f:2a:02:1c:5c:
                    54:de:49:9c:33:bf:33:0f:1c:27:05:84:92:b4:45:
                    d3:ff:8b:78:23:47:77:53:81:29:a4:22:82:11:fb:
                    1c:86:49:c4:a1:95:e3:f0:70:ec:8a:02:1d:85:c2:
                    42:c8:45:37:76:0a:f1:2d:f0:22:e8:87:39:50:22:
                    62:c2:f5:47:fa:d8:82:6d:ad:b3:31:48:d1:bc:7e:
                    34:39:fd:12:d9:54:00:44:86:57:b8:7a:4d:00:b7:
                    c6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9E:19:4F:8C:A9:77:2B:D7:68:4B:19:07:F0:A9:E0:2A:92:BD:F2
            X509v3 Authority Key Identifier:
                keyid:AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/43bef25859c8da0992e6455a6278635a01994562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:0b:9e:e9:c8:9c:6f:0b:dc:e1:50:97:99:2e:f1:10:58:3e:
         be:43:ad:e7:b3:0e:ea:30:a4:34:f8:44:8e:90:6e:8f:82:0b:
         d8:5a:9a:74:bc:57:ce:fb:d7:4d:cd:6a:da:aa:ff:04:3e:19:
         d4:ca:a7:38:7c:75:14:6d:ee:29:e9:cb:99:6e:61:91:a6:62:
         83:c8:b9:76:20:c6:cb:79:9b:9e:1b:a4:8c:5a:3e:6d:06:5e:
         d7:bb:73:a8:14:06:3a:c6:9e:86:f3:20:92:23:27:3c:ef:48:
         8f:2c:c4:35:7a:1a:14:46:e8:7c:13:8a:b1:9b:91:fe:4b:5e:
         86:94:2e:a6:c8:bc:5e:42:d8:20:ef:3a:c8:5c:d3:c7:89:b9:
         55:0f:62:c8:29:2c:dd:79:23:af:e5:fb:dd:07:40:cd:ac:1e:
         e7:a7:d0:eb:df:a7:d2:e4:45:1b:2f:69:45:b9:57:c2:fd:02:
         c5:17:05:04:ef:80:48:76:bf:1a:ee:ac:e9:f8:df:47:db:9b:
         eb:f9:94:ae:fa:bd:d9:98:74:e6:9c:7f:2c:5e:67:c9:4b:ef:
         59:5d:fd:1c:30:31:e0:be:8e:34:c9:2e:96:58:8b:54:0c:4d:
         65:1f:dd:72:07:22:6c:65:c6:5a:b2:5f:f9:d2:64:93:ab:15:
         ba:45:50:76
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDfbRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMw
NDE1ZTUyNWFlMmE2OTExZDgyMjlhNjlkZTZkZjdiNTcxNmI0NjgwHhcNMjEwMzI0
MTQzOTEyWhcNMjYwMzI0MTQzOTEyWjAzMTEwLwYDVQQDEyg0M2JlZjI1ODU5Yzhk
YTA5OTJlNjQ1NWE2Mjc4NjM1YTAxOTk0NTYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAl39xbuZXWfp5/i3QcmlXzaT1LTU/lMnjR0jmIgz6HhVKMPOO
/0uE2Ltkpk1K/DjZsb8hxB6tJRy2yGXZRL1xB97nMDZpQkCZ2maVZNIIVsVDUAKc
5As35ZBK2URAOMCmGZnxzCTKsA/p53eP0o+fO5S0LAWSCjIl6KqHnce8N+ETvJVT
g+FgVJEbmCh9vBHSHl8UGE4b4UoWoIdwrrHBLyoCHFxU3kmcM78zDxwnBYSStEXT
/4t4I0d3U4EppCKCEfschknEoZXj8HDsigIdhcJCyEU3dgrxLfAi6Ic5UCJiwvVH
+tiCba2zMUjRvH40Of0S2VQARIZXuHpNALfGuQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ6eGU+MqXcr12hLGQfwqeAqkr3yMB8GA1UdIwQYMBaAFK9gvUmjqME+4/is
PN730/SHcbGqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzA0MTVl
NTI1YWUyYTY5MTFkODIyOWE2OWRlNmRmN2I1NzE2YjQ2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzM4M2ViZDYtZmQzZS00ZDYzLWE4MjItZThjZDlm
YTJjMjllLzQzYmVmMjU4NTljOGRhMDk5MmU2NDU1YTYyNzg2MzVhMDE5OTQ1NjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83MzgzZWJkNi1mZDNlLTRkNjMtYTgyMi1lOGNk
OWZhMmMyOWUvMzA0MTVlNTI1YWUyYTY5MTFkODIyOWE2OWRlNmRmN2I1NzE2YjQ2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIDJozANBgkqhkiG9w0BAQsFAAOCAQEAEgue6cicbwvc4VCX
mS7xEFg+vkOt57MO6jCkNPhEjpBuj4IL2FqadLxXzvvXTc1q2qr/BD4Z1MqnOHx1
FG3uKenLmW5hkaZig8i5diDGy3mbnhukjFo+bQZe17tzqBQGOsaehvMgkiMnPO9I
jyzENXoaFEbofBOKsZuR/ktehpQupsi8XkLYIO86yFzTx4m5VQ9iyCks3Xkjr+X7
3QdAzawe56fQ69+n0uRFGy9pRblXwv0CxRcFBO+ASHa/Gu6s6fjfR9ub6/mUrvq9
2Zh05px/LF5nyUvvWV39HDAx4L6ONMkulliLVAxNZR/dcgcibGXGWrJf+dJkk6sV
ukVQdg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org