Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/22c504034613f2ee5d3d6c61f939d0f2c97c814f.roa
File:                     22c504034613f2ee5d3d6c61f939d0f2c97c814f.roa (raw, json)
Hash identifier:          D9JpbRfyvTFvjNqNpumhKZkMlOcbLicMCGo/qqAUMzM=
Subject key identifier:   B7:85:13:01:A7:16:88:6D:11:D4:78:05:9F:0A:8B:E7:90:FD:30:0D
Certificate issuer:       /CN=665130a1c940d46872c6be287d312bbd14fb8bd7
Certificate serial:       0DFA30
Authority key identifier: 46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/22c504034613f2ee5d3d6c61f939d0f2c97c814f.roa
Signing time:             Wed 24 Mar 2021 14:30:16 +0000
ROA not before:           Wed 24 Mar 2021 14:30:16 +0000
ROA not after:            Tue 24 Mar 2026 14:30:16 +0000
asID:                     52419
IP address blocks:        181.192.64.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916016 (0xdfa30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665130a1c940d46872c6be287d312bbd14fb8bd7
        Validity
            Not Before: Mar 24 14:30:16 2021 GMT
            Not After : Mar 24 14:30:16 2026 GMT
        Subject: CN=22c504034613f2ee5d3d6c61f939d0f2c97c814f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:38:11:1b:06:ff:6b:99:09:07:73:66:4e:
                    ae:57:14:0c:94:b6:4d:9f:a0:28:18:94:de:eb:83:
                    c1:1a:c2:5b:3c:1d:f4:07:21:d6:e1:33:5d:ff:be:
                    cc:d1:b4:9f:da:a8:a1:10:ed:0c:4b:3a:d3:39:40:
                    74:33:b2:6e:82:e3:d9:b3:ae:3f:cb:8a:fe:20:88:
                    59:ed:92:37:fa:5d:42:aa:4c:11:02:59:9c:52:1b:
                    d1:1d:db:d7:c2:ca:d6:db:89:db:56:84:20:54:72:
                    11:6f:c1:4b:e3:55:4d:76:e4:ab:5a:f6:6a:1d:e5:
                    3c:53:37:97:bb:ce:2c:e9:69:9e:d4:8e:76:73:3a:
                    d3:2a:92:de:05:54:b9:1c:06:46:66:25:21:d4:d0:
                    e9:cc:eb:aa:71:81:7b:db:22:d6:e9:90:e7:d8:c1:
                    46:c6:1a:af:20:9e:bc:5a:15:68:57:24:eb:dd:2c:
                    44:af:4c:fd:31:5e:79:52:3d:dd:71:8c:af:a1:43:
                    5c:e6:7d:6a:08:e8:4f:25:1c:83:53:03:64:e3:aa:
                    36:39:a1:37:54:bf:af:8b:9c:d1:cc:6b:ac:49:cc:
                    58:11:ea:1f:5d:f5:cf:31:d3:e3:7b:56:49:88:ad:
                    eb:c5:2e:20:c5:c4:e6:fd:0f:20:ef:ca:88:a0:d2:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:85:13:01:A7:16:88:6D:11:D4:78:05:9F:0A:8B:E7:90:FD:30:0D
            X509v3 Authority Key Identifier:
                keyid:46:0E:34:67:31:F8:0B:24:98:6C:DE:01:D4:60:13:3A:B0:2D:60:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/665130a1c940d46872c6be287d312bbd14fb8bd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/22c504034613f2ee5d3d6c61f939d0f2c97c814f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74286720-c127-4250-bfed-b9d770e065c3/665130a1c940d46872c6be287d312bbd14fb8bd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:25:b6:7f:a6:e0:30:85:35:d5:c1:09:d2:a3:96:a3:ae:99:
         c4:11:03:21:47:12:14:d0:6a:e2:6b:5f:e2:3f:0a:7d:ac:12:
         5d:a5:47:15:5f:02:a5:f2:70:11:78:30:1a:63:d0:02:99:e5:
         83:82:77:b8:4a:49:51:eb:fa:74:cd:55:36:d2:f1:c9:7b:37:
         5c:9a:36:3a:99:34:96:20:57:07:8f:3f:29:22:38:01:27:50:
         8a:48:9b:28:34:dd:03:37:3a:50:92:1d:82:7a:96:ef:35:df:
         26:92:4f:53:a2:03:93:1a:a9:de:4a:68:cd:29:aa:d7:96:e8:
         8e:d5:67:fa:e3:c9:92:38:4f:a6:cc:cc:66:50:7f:19:bd:2a:
         3d:1e:88:0f:d3:b8:8a:97:a2:b6:87:05:4d:b1:40:13:16:10:
         e4:30:17:42:da:ea:3e:5a:40:af:fd:5c:0e:f8:3a:3e:2e:a6:
         7b:5c:84:ce:fb:68:e0:47:d6:05:9d:54:7a:39:39:8a:46:15:
         1c:f3:bb:1b:21:18:1f:cc:a1:08:42:fa:a2:af:a0:0c:c0:6c:
         1a:90:76:55:f7:2d:19:dc:c5:9e:f5:82:6a:11:04:4d:61:e4:
         1a:26:ea:ca:e4:bd:e9:8f:c4:97:a9:65:65:44:56:34:2e:d2:
         37:99:15:24
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDfowMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY2
NTEzMGExYzk0MGQ0Njg3MmM2YmUyODdkMzEyYmJkMTRmYjhiZDcwHhcNMjEwMzI0
MTQzMDE2WhcNMjYwMzI0MTQzMDE2WjAzMTEwLwYDVQQDEygyMmM1MDQwMzQ2MTNm
MmVlNWQzZDZjNjFmOTM5ZDBmMmM5N2M4MTRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyMc4ERsG/2uZCQdzZk6uVxQMlLZNn6AoGJTe64PBGsJbPB30
ByHW4TNd/77M0bSf2qihEO0MSzrTOUB0M7JuguPZs64/y4r+IIhZ7ZI3+l1CqkwR
AlmcUhvRHdvXwsrW24nbVoQgVHIRb8FL41VNduSrWvZqHeU8UzeXu84s6Wme1I52
czrTKpLeBVS5HAZGZiUh1NDpzOuqcYF72yLW6ZDn2MFGxhqvIJ68WhVoVyTr3SxE
r0z9MV55Uj3dcYyvoUNc5n1qCOhPJRyDUwNk46o2OaE3VL+vi5zRzGusScxYEeof
XfXPMdPje1ZJiK3rxS4gxcTm/Q8g78qIoNIAmwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLeFEwGnFohtEdR4BZ8Ki+eQ/TANMB8GA1UdIwQYMBaAFEYONGcx+AskmGze
AdRgEzqwLWBlMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjY1MTMw
YTFjOTQwZDQ2ODcyYzZiZTI4N2QzMTJiYmQxNGZiOGJkNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzQyODY3MjAtYzEyNy00MjUwLWJmZWQtYjlkNzcw
ZTA2NWMzLzIyYzUwNDAzNDYxM2YyZWU1ZDNkNmM2MWY5MzlkMGYyYzk3YzgxNGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NDI4NjcyMC1jMTI3LTQyNTAtYmZlZC1iOWQ3
NzBlMDY1YzMvNjY1MTMwYTFjOTQwZDQ2ODcyYzZiZTI4N2QzMTJiYmQxNGZiOGJk
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBLXAQDANBgkqhkiG9w0BAQsFAAOCAQEAVCW2f6bgMIU11cEJ
0qOWo66ZxBEDIUcSFNBq4mtf4j8KfawSXaVHFV8CpfJwEXgwGmPQApnlg4J3uEpJ
Uev6dM1VNtLxyXs3XJo2Opk0liBXB48/KSI4ASdQikibKDTdAzc6UJIdgnqW7zXf
JpJPU6IDkxqp3kpozSmq15bojtVn+uPJkjhPpszMZlB/Gb0qPR6ID9O4ipeitocF
TbFAExYQ5DAXQtrqPlpAr/1cDvg6Pi6me1yEzvto4EfWBZ1Uejk5ikYVHPO7GyEY
H8yhCEL6oq+gDMBsGpB2VfctGdzFnvWCahEETWHkGibqyuS96Y/El6llZURWNC7S
N5kVJA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org