Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/70a587cd9505f9a548109c4055e32181725e6abb.roa
File:                     70a587cd9505f9a548109c4055e32181725e6abb.roa (raw, json)
Hash identifier:          p8NpZ2I7Vc28Gf2UbqNwzt+PSwmU6p5n0AckaRzfZZc=
Subject key identifier:   E9:5B:5B:9D:4B:6D:70:4A:33:F8:75:3B:6B:F1:E5:EA:AE:A3:7B:33
Certificate issuer:       /CN=62384768198ac7dad2dedae543aedd0494c8f41c
Certificate serial:       0F1F02
Authority key identifier: A1:4E:B0:DE:AF:9B:2C:FD:DB:07:DB:C8:15:ED:88:6B:F6:8C:50:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62384768198ac7dad2dedae543aedd0494c8f41c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/70a587cd9505f9a548109c4055e32181725e6abb.roa
Signing time:             Tue 27 Feb 2024 12:59:38 +0000
ROA not before:           Tue 27 Feb 2024 12:59:34 +0000
ROA not after:            Tue 27 Feb 2029 12:59:34 +0000
asID:                     270149
IP address blocks:        148.208.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990978 (0xf1f02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62384768198ac7dad2dedae543aedd0494c8f41c
        Validity
            Not Before: Feb 27 12:59:34 2024 GMT
            Not After : Feb 27 12:59:34 2029 GMT
        Subject: CN=70a587cd9505f9a548109c4055e32181725e6abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:67:bb:48:39:75:3c:09:15:f6:0b:9b:2a:
                    50:74:a9:1b:2f:9b:a8:3a:09:b2:23:d9:f2:79:30:
                    3f:a6:e5:ae:7f:2d:6e:24:1f:f1:57:fc:20:ff:62:
                    fa:57:94:f6:b8:52:40:1b:21:13:8a:19:cc:16:93:
                    1e:5f:38:27:68:1b:5f:c0:30:0c:ed:36:88:f0:4a:
                    d3:c9:86:1f:ba:2d:14:1a:75:1b:ce:65:01:5d:a4:
                    db:45:b5:cc:52:f7:61:39:bf:fb:d5:5b:58:26:75:
                    db:89:38:c8:c0:9e:ad:92:78:0c:f5:3a:b0:bb:08:
                    02:ac:79:8d:84:5a:19:14:82:f5:da:65:46:cb:66:
                    40:06:38:e6:50:23:f4:97:e7:f9:34:53:ec:51:87:
                    08:18:8e:77:0e:bb:13:ed:76:13:cb:eb:52:6b:31:
                    64:17:03:55:79:ed:81:75:73:0d:a8:04:da:7e:68:
                    4f:c6:bd:ce:87:13:5e:8e:48:34:2b:dc:21:ba:bc:
                    c8:c9:6a:91:f1:f6:e3:bc:68:d2:ea:be:6c:89:72:
                    eb:61:28:06:8e:e7:de:ca:6a:6d:52:76:3b:53:0c:
                    29:a3:80:10:9d:ee:7e:9f:80:46:79:47:79:95:6e:
                    9f:38:7f:77:a0:f9:c7:62:1c:14:1a:be:05:7b:2f:
                    e2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5B:5B:9D:4B:6D:70:4A:33:F8:75:3B:6B:F1:E5:EA:AE:A3:7B:33
            X509v3 Authority Key Identifier:
                keyid:A1:4E:B0:DE:AF:9B:2C:FD:DB:07:DB:C8:15:ED:88:6B:F6:8C:50:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62384768198ac7dad2dedae543aedd0494c8f41c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/70a587cd9505f9a548109c4055e32181725e6abb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/62384768198ac7dad2dedae543aedd0494c8f41c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:aa:3c:ec:08:17:3a:d0:69:4f:79:eb:0a:70:61:0c:f1:
         38:af:e4:35:c2:6e:91:56:1a:68:b7:07:67:6d:ff:77:c5:c9:
         a2:f4:51:a7:6e:61:1f:2b:cb:97:69:75:a0:ec:b7:da:5b:20:
         52:e8:22:f2:a6:62:0e:57:b0:0e:53:8a:dc:56:77:76:34:78:
         d3:db:e2:79:e5:88:e9:12:83:62:3d:53:29:bb:ac:65:24:f4:
         49:47:86:83:2b:fb:d0:6e:47:f5:1d:43:1f:58:16:f6:43:a5:
         0b:3c:5f:27:db:28:4a:63:4c:44:5b:91:25:2c:74:94:2c:6d:
         9c:c4:bb:c5:8a:f3:be:62:c7:6c:fc:50:5f:ba:21:18:5e:48:
         f7:c4:dc:54:44:ee:42:50:b6:e3:40:0b:66:f8:75:37:89:0e:
         b2:bd:c3:cf:4e:f8:ef:fe:ce:0e:5f:10:01:37:6f:f6:8a:c0:
         e1:e1:a9:ff:f6:b0:78:6f:38:f9:ca:f8:52:b5:31:0b:06:6a:
         36:10:66:db:da:33:dd:83:00:b0:16:80:ae:3e:57:2b:45:05:
         44:87:ba:96:c8:9e:38:0e:87:82:79:6f:39:67:f2:64:0d:cf:
         51:f0:8a:77:92:14:15:82:43:26:3f:58:d6:5e:d3:14:fe:0f:
         55:63:ad:d0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDx8CMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYy
Mzg0NzY4MTk4YWM3ZGFkMmRlZGFlNTQzYWVkZDA0OTRjOGY0MWMwHhcNMjQwMjI3
MTI1OTM0WhcNMjkwMjI3MTI1OTM0WjAzMTEwLwYDVQQDEyg3MGE1ODdjZDk1MDVm
OWE1NDgxMDljNDA1NWUzMjE4MTcyNWU2YWJiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAup1nu0g5dTwJFfYLmypQdKkbL5uoOgmyI9nyeTA/puWufy1u
JB/xV/wg/2L6V5T2uFJAGyETihnMFpMeXzgnaBtfwDAM7TaI8ErTyYYfui0UGnUb
zmUBXaTbRbXMUvdhOb/71VtYJnXbiTjIwJ6tkngM9TqwuwgCrHmNhFoZFIL12mVG
y2ZABjjmUCP0l+f5NFPsUYcIGI53DrsT7XYTy+tSazFkFwNVee2BdXMNqATafmhP
xr3OhxNejkg0K9whurzIyWqR8fbjvGjS6r5siXLrYSgGjufeymptUnY7Uwwpo4AQ
ne5+n4BGeUd5lW6fOH93oPnHYhwUGr4Fey/iKwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOlbW51LbXBKM/h1O2vx5equo3szMB8GA1UdIwQYMBaAFKFOsN6vmyz92wfb
yBXtiGv2jFBrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjIzODQ3
NjgxOThhYzdkYWQyZGVkYWU1NDNhZWRkMDQ5NGM4ZjQxYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzcyMjJiZjctNzFiNy00MGJhLWJkYjEtZWE1MDMw
ZGI1Mjc1LzcwYTU4N2NkOTUwNWY5YTU0ODEwOWM0MDU1ZTMyMTgxNzI1ZTZhYmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NzIyMmJmNy03MWI3LTQwYmEtYmRiMS1lYTUw
MzBkYjUyNzUvNjIzODQ3NjgxOThhYzdkYWQyZGVkYWU1NDNhZWRkMDQ5NGM4ZjQx
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJTQnzANBgkqhkiG9w0BAQsFAAOCAQEAPaGqPOwIFzrQaU95
6wpwYQzxOK/kNcJukVYaaLcHZ23/d8XJovRRp25hHyvLl2l1oOy32lsgUugi8qZi
DlewDlOK3FZ3djR409vieeWI6RKDYj1TKbusZST0SUeGgyv70G5H9R1DH1gW9kOl
CzxfJ9soSmNMRFuRJSx0lCxtnMS7xYrzvmLHbPxQX7ohGF5I98TcVETuQlC240AL
Zvh1N4kOsr3Dz0747/7ODl8QATdv9orA4eGp//aweG84+cr4UrUxCwZqNhBm29oz
3YMAsBaArj5XK0UFRIe6lsieOA6HgnlvOWfyZA3PUfCKd5IUFYJDJj9Y1l7TFP4P
VWOt0A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org