Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/455012735e166d7a1fd6c673e6ccfc94ed74d11c.roa
File:                     455012735e166d7a1fd6c673e6ccfc94ed74d11c.roa (raw, json)
Hash identifier:          A58rGb+OdZWnPCLktPvq/H2FdbWrXpI5azGVM1IKexQ=
Subject key identifier:   B4:E2:CB:12:D0:6E:AA:A0:C7:85:40:E5:C7:E6:03:B7:E1:6F:FD:E5
Certificate issuer:       /CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf
Certificate serial:       090473
Authority key identifier: 3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/455012735e166d7a1fd6c673e6ccfc94ed74d11c.roa
Signing time:             Tue 19 Oct 2021 17:23:59 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     7049
IP address blocks:        128.201.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590963 (0x90473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=455012735e166d7a1fd6c673e6ccfc94ed74d11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:46:9f:53:a4:69:a1:ef:78:c6:70:ab:87:6f:
                    89:58:3f:d9:44:82:2f:af:21:af:34:7b:40:df:5d:
                    72:f1:15:db:b9:5d:cd:ae:92:06:3e:24:5c:34:c4:
                    80:4e:2d:25:b5:ea:63:89:d4:6f:f8:77:3c:9f:5e:
                    8a:de:48:75:32:d2:f5:59:1e:cb:24:fa:bc:cc:b2:
                    8f:f2:9a:48:b8:75:5d:9b:02:e0:ae:e2:b3:71:4d:
                    04:29:8f:9d:59:e8:c3:91:cd:e1:73:7e:a1:8d:64:
                    6e:e2:58:86:58:52:7d:75:52:6c:04:8e:97:2b:86:
                    53:8c:73:28:f7:2c:e5:6c:9e:f7:3c:d4:55:e8:0b:
                    79:0e:1f:cc:12:f0:01:dd:78:a9:aa:17:4b:48:12:
                    f1:2d:2b:f8:c8:75:a4:a5:72:de:7c:39:b1:a7:66:
                    6d:ab:aa:e5:6e:dd:b7:38:08:ed:d1:dd:ae:1a:84:
                    fa:e4:46:c4:16:12:aa:93:80:f5:5e:36:e8:ec:31:
                    b7:15:d4:97:df:99:0c:fa:88:1f:88:fe:93:55:77:
                    30:d0:e8:16:78:81:13:53:1d:03:5a:bb:0c:6b:e7:
                    8f:83:f1:5d:b8:f4:ad:db:07:e9:dc:4a:c9:e6:55:
                    5a:49:60:33:72:4f:11:cd:cf:c7:83:4c:e0:95:1c:
                    4d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E2:CB:12:D0:6E:AA:A0:C7:85:40:E5:C7:E6:03:B7:E1:6F:FD:E5
            X509v3 Authority Key Identifier:
                keyid:3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/455012735e166d7a1fd6c673e6ccfc94ed74d11c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:cc:3d:3b:24:4b:ee:b5:55:fd:a7:10:93:be:61:36:e8:f1:
         3c:21:8d:ad:fc:02:e4:2d:46:69:d5:2b:8b:01:58:2b:89:6d:
         a8:51:8a:60:dc:94:2b:c9:9e:4d:a8:91:d1:da:d5:19:c3:19:
         e1:da:09:08:83:8a:19:8d:75:d5:78:c3:ce:1e:3c:c6:0d:44:
         1e:e9:a4:9a:d8:3f:58:95:64:ee:31:ed:e5:b5:0c:c8:a5:7b:
         cb:c3:8a:cc:22:fb:c6:2d:be:e0:fc:da:1e:d0:ff:1c:ba:cf:
         58:a7:25:d5:2b:80:fa:1e:42:96:15:71:30:f5:fe:13:6a:73:
         6e:21:98:3a:37:31:88:77:ff:38:f4:58:0f:03:92:06:3c:3c:
         53:69:0c:59:68:db:db:32:ae:18:ea:ce:64:20:40:3d:82:bc:
         83:eb:15:f8:18:ce:1f:10:6c:3b:f7:e8:59:7f:ba:62:c5:55:
         5c:05:2f:f7:c9:1a:68:1d:81:87:eb:72:a6:3a:e6:09:4f:8b:
         a1:30:b8:5b:1f:e5:fb:7b:f7:fc:50:a7:24:35:59:91:28:2e:
         a9:0d:93:34:da:06:2e:7d:15:fe:c8:a7:dd:d3:72:85:14:f2:
         72:7a:1f:69:02:c1:28:5f:19:9e:85:90:d2:27:fc:78:93:39:
         19:bb:e4:b1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCQRzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2
NDRkYzRmMDNlNGVkYjFjNDc4MDBhN2YyMmJhMTJmY2I1YmU5YmYwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg0NTUwMTI3MzVlMTY2
ZDdhMWZkNmM2NzNlNmNjZmM5NGVkNzRkMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAikafU6Rpoe94xnCrh2+JWD/ZRIIvryGvNHtA311y8RXbuV3N
rpIGPiRcNMSATi0ltepjidRv+Hc8n16K3kh1MtL1WR7LJPq8zLKP8ppIuHVdmwLg
ruKzcU0EKY+dWejDkc3hc36hjWRu4liGWFJ9dVJsBI6XK4ZTjHMo9yzlbJ73PNRV
6At5Dh/MEvAB3XipqhdLSBLxLSv4yHWkpXLefDmxp2Ztq6rlbt23OAjt0d2uGoT6
5EbEFhKqk4D1Xjbo7DG3FdSX35kM+ogfiP6TVXcw0OgWeIETUx0DWrsMa+ePg/Fd
uPSt2wfp3ErJ5lVaSWAzck8Rzc/Hg0zglRxNawIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLTiyxLQbqqgx4VA5cfmA7fhb/3lMB8GA1UdIwQYMBaAFD0Vmhv4RTAlyfmv
HGwbgEW1VVKuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDY0NGRj
NGYwM2U0ZWRiMWM0NzgwMGE3ZjIyYmExMmZjYjViZTliZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2FlMjNlMTgtZDA2NC00MzIzLWJiYzUtODc4YWUx
NmUxOGQzLzQ1NTAxMjczNWUxNjZkN2ExZmQ2YzY3M2U2Y2NmYzk0ZWQ3NGQxMWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YWUyM2UxOC1kMDY0LTQzMjMtYmJjNS04Nzhh
ZTE2ZTE4ZDMvZDY0NGRjNGYwM2U0ZWRiMWM0NzgwMGE3ZjIyYmExMmZjYjViZTli
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIDJFzANBgkqhkiG9w0BAQsFAAOCAQEAOsw9OyRL7rVV/acQ
k75hNujxPCGNrfwC5C1GadUriwFYK4ltqFGKYNyUK8meTaiR0drVGcMZ4doJCIOK
GY111XjDzh48xg1EHumkmtg/WJVk7jHt5bUMyKV7y8OKzCL7xi2+4PzaHtD/HLrP
WKcl1SuA+h5ClhVxMPX+E2pzbiGYOjcxiHf/OPRYDwOSBjw8U2kMWWjb2zKuGOrO
ZCBAPYK8g+sV+BjOHxBsO/foWX+6YsVVXAUv98kaaB2Bh+typjrmCU+LoTC4Wx/l
+3v3/FCnJDVZkSguqQ2TNNoGLn0V/sin3dNyhRTycnofaQLBKF8ZnoWQ0if8eJM5
GbvksQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org