Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/fc52473bf5b11b9216e4da85956786e542745e18.roa
File:                     fc52473bf5b11b9216e4da85956786e542745e18.roa (raw, json)
Hash identifier:          7htMAQfNdh1frOb4UYcSo/JhimQQmO6LUjqDcmelQa0=
Subject key identifier:   10:C5:6A:8C:EE:33:83:0F:28:A7:1E:4F:CA:31:02:42:A1:DE:E4:C9
Certificate issuer:       /CN=24b9a83a84ed651b0b613359fbb1a875e436316a
Certificate serial:       0D116E
Authority key identifier: 9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/fc52473bf5b11b9216e4da85956786e542745e18.roa
Signing time:             Wed 06 Dec 2023 00:58:25 +0000
ROA not before:           Wed 06 Dec 2023 00:58:25 +0000
ROA not after:            Sat 06 Dec 2025 00:58:25 +0000
asID:                     270149
IP address blocks:        148.208.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856430 (0xd116e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24b9a83a84ed651b0b613359fbb1a875e436316a
        Validity
            Not Before: Dec  6 00:58:25 2023 GMT
            Not After : Dec  6 00:58:25 2025 GMT
        Subject: CN=fc52473bf5b11b9216e4da85956786e542745e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:42:92:4a:68:26:7f:a8:60:13:d5:35:b1:13:
                    2b:a3:20:21:88:54:9d:ee:0d:44:95:20:dc:e4:8a:
                    f9:7c:36:ba:f3:69:8e:73:1b:41:ce:4e:42:83:bd:
                    5e:27:26:0b:7b:d2:31:43:bf:b7:6c:d3:0d:18:25:
                    91:16:41:d1:e5:69:d1:85:0d:d6:3a:c5:01:7c:98:
                    ce:ad:a7:14:a2:66:9e:19:4c:2d:63:c7:a2:a6:2d:
                    cd:56:0e:bf:b9:27:06:20:b9:c4:20:03:3a:01:c2:
                    da:1c:8c:bf:96:91:70:77:c0:27:0a:68:83:35:74:
                    d2:28:ce:ab:83:f9:f4:f9:4a:f3:c4:7e:59:88:58:
                    37:31:b7:af:e1:2d:a4:8b:cb:25:df:4d:7d:1e:7e:
                    43:8d:43:21:94:1f:a3:0e:b8:23:47:35:9b:7d:16:
                    6e:77:e7:7e:dc:5b:b6:ca:33:2e:06:af:11:ec:81:
                    c6:34:a4:6b:af:68:c6:5a:9b:e9:28:4a:58:b9:7d:
                    da:1d:eb:e8:19:07:cb:b1:f0:42:c1:2f:3e:9d:ab:
                    cf:29:ad:f1:5b:97:8e:bf:b2:cd:41:b8:9c:2b:8b:
                    72:ac:89:c2:c5:45:99:c7:78:f5:00:69:cf:71:c4:
                    74:17:57:4a:5f:ec:a7:d3:26:f6:83:d0:fc:c0:2b:
                    db:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C5:6A:8C:EE:33:83:0F:28:A7:1E:4F:CA:31:02:42:A1:DE:E4:C9
            X509v3 Authority Key Identifier:
                keyid:9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/fc52473bf5b11b9216e4da85956786e542745e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/24b9a83a84ed651b0b613359fbb1a875e436316a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:75:19:95:1e:64:1c:d4:69:71:46:c6:a4:5f:2b:c8:de:4c:
         f5:2b:18:24:48:38:8c:08:9e:e5:e8:f9:33:54:80:58:79:94:
         a1:70:4a:7f:db:01:ce:e1:8b:b1:8e:db:2e:bc:32:85:8c:9a:
         c4:74:ff:f6:49:42:3b:4e:5e:e7:12:6d:3b:fc:2e:43:fc:c7:
         94:df:4c:d1:ad:d5:50:6e:c6:b3:55:d9:f5:0b:93:87:62:b7:
         cc:64:78:d1:b2:b3:84:b5:82:8e:e6:f8:54:4f:0d:3a:8d:a3:
         37:0b:48:c1:3e:2e:cd:9a:80:c4:4a:7a:19:0e:59:99:74:e4:
         9d:be:96:93:d8:82:91:2d:4f:e2:3f:9c:ac:5c:ee:4c:49:14:
         8f:68:44:b4:ff:31:3b:be:fa:5d:b3:d5:59:47:6a:b2:3e:02:
         63:a3:99:10:a0:e8:03:1c:76:34:63:70:d6:da:94:05:9b:b9:
         0c:17:ae:2d:7f:32:92:26:c3:3e:dc:43:4c:a6:10:cd:4f:db:
         dc:d6:50:81:22:8a:ef:16:4c:19:50:29:6a:ce:5b:e0:bb:0e:
         ba:65:5b:1f:65:77:20:35:9a:4c:57:26:24:ff:ac:26:9b:60:
         52:4d:f5:a6:f8:1e:4b:a7:cb:91:e0:9f:16:bd:0b:43:ff:e0:
         4e:44:47:ea
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDRFuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI0
YjlhODNhODRlZDY1MWIwYjYxMzM1OWZiYjFhODc1ZTQzNjMxNmEwHhcNMjMxMjA2
MDA1ODI1WhcNMjUxMjA2MDA1ODI1WjAzMTEwLwYDVQQDEyhmYzUyNDczYmY1YjEx
YjkyMTZlNGRhODU5NTY3ODZlNTQyNzQ1ZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApkKSSmgmf6hgE9U1sRMroyAhiFSd7g1ElSDc5Ir5fDa682mO
cxtBzk5Cg71eJyYLe9IxQ7+3bNMNGCWRFkHR5WnRhQ3WOsUBfJjOracUomaeGUwt
Y8eipi3NVg6/uScGILnEIAM6AcLaHIy/lpFwd8AnCmiDNXTSKM6rg/n0+UrzxH5Z
iFg3Mbev4S2ki8sl3019Hn5DjUMhlB+jDrgjRzWbfRZud+d+3Fu2yjMuBq8R7IHG
NKRrr2jGWpvpKEpYuX3aHevoGQfLsfBCwS8+navPKa3xW5eOv7LNQbicK4tyrInC
xUWZx3j1AGnPccR0F1dKX+yn0yb2g9D8wCvbewIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBDFaozuM4MPKKceT8oxAkKh3uTJMB8GA1UdIwQYMBaAFJ0fHbjfi+Lu5+Le
TXfli/ONLMypMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjRiOWE4
M2E4NGVkNjUxYjBiNjEzMzU5ZmJiMWE4NzVlNDM2MzE2YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzcyMjJiZjctNzFiNy00MGJhLWJkYjEtZWE1MDMw
ZGI1Mjc1L2ZjNTI0NzNiZjViMTFiOTIxNmU0ZGE4NTk1Njc4NmU1NDI3NDVlMTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NzIyMmJmNy03MWI3LTQwYmEtYmRiMS1lYTUw
MzBkYjUyNzUvMjRiOWE4M2E4NGVkNjUxYjBiNjEzMzU5ZmJiMWE4NzVlNDM2MzE2
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJTQoDANBgkqhkiG9w0BAQsFAAOCAQEAA3UZlR5kHNRpcUbG
pF8ryN5M9SsYJEg4jAie5ej5M1SAWHmUoXBKf9sBzuGLsY7bLrwyhYyaxHT/9klC
O05e5xJtO/wuQ/zHlN9M0a3VUG7Gs1XZ9QuTh2K3zGR40bKzhLWCjub4VE8NOo2j
NwtIwT4uzZqAxEp6GQ5ZmXTknb6Wk9iCkS1P4j+crFzuTEkUj2hEtP8xO776XbPV
WUdqsj4CY6OZEKDoAxx2NGNw1tqUBZu5DBeuLX8ykibDPtxDTKYQzU/b3NZQgSKK
7xZMGVApas5b4LsOumVbH2V3IDWaTFcmJP+sJptgUk31pvgeS6fLkeCfFr0LQ//g
TkRH6g==
-----END CERTIFICATE-----
Generated at Tue Feb 27 16:20:16 2024 by rpki-client on console-ams.rpki-client.org