Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/50aa6c3419e864991d087a357724a15319b88576.roa
File:                     50aa6c3419e864991d087a357724a15319b88576.roa (raw, json)
Hash identifier:          2e3eZwKChnHdZkjva4B5FIMhD0FSTxD0Ie5gO/muuYw=
Subject key identifier:   70:1F:46:4F:D0:2B:36:18:1F:0B:B8:AE:A0:51:DE:32:BB:9B:C4:F9
Certificate issuer:       /CN=a9639b1f3b25de6401926fd200d3e7a73a364740
Certificate serial:       18971F
Authority key identifier: B4:E7:A9:FC:24:99:08:D1:27:14:5D:7C:0B:1D:E4:1A:FB:B2:7C:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9639b1f3b25de6401926fd200d3e7a73a364740.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/50aa6c3419e864991d087a357724a15319b88576.roa
Signing time:             Fri 10 Jun 2022 01:17:48 +0000
ROA not before:           Thu 09 Jun 2022 03:00:00 +0000
ROA not after:            Sun 09 Jun 2024 03:00:00 +0000
asID:                     52468
IP address blocks:        167.250.222.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611551 (0x18971f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9639b1f3b25de6401926fd200d3e7a73a364740
        Validity
            Not Before: Jun  9 03:00:00 2022 GMT
            Not After : Jun  9 03:00:00 2024 GMT
        Subject: CN=50aa6c3419e864991d087a357724a15319b88576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:18:95:9a:34:17:7c:df:81:a6:1b:30:1c:
                    87:de:e2:d6:63:41:30:6b:60:7a:44:4e:c1:60:c8:
                    07:84:95:89:92:63:03:1d:ff:32:a1:3f:77:a6:d1:
                    c9:85:5e:05:46:8f:d4:6a:ce:71:29:6b:a0:fc:de:
                    b5:6d:7d:45:0a:2b:c7:e3:10:85:e2:db:cb:07:11:
                    d6:eb:28:e1:d1:90:50:df:bf:a8:70:4b:18:a6:a5:
                    79:59:c8:36:cd:0a:ac:3d:12:3a:e4:cd:72:e3:b5:
                    c0:26:37:f1:c7:2c:48:d5:74:ea:0d:6e:56:5b:45:
                    4b:77:22:5a:c8:62:f8:60:10:3b:ec:fb:df:76:a5:
                    29:b5:15:7f:10:91:99:49:5d:6c:df:7f:a4:b2:da:
                    82:e0:4d:1f:45:ae:c3:aa:55:11:bf:46:7b:fb:c6:
                    81:aa:e0:42:fa:8a:19:85:53:0a:b1:fe:0e:41:34:
                    f4:ea:6f:80:5c:79:85:7c:5f:95:cb:4f:f5:11:32:
                    cb:98:a2:32:cc:04:14:08:28:18:f1:9c:48:26:e3:
                    d0:0d:a9:0b:0b:3a:7a:cb:c6:43:94:bb:13:fd:ff:
                    aa:df:02:24:11:10:78:a4:5f:de:86:58:73:f6:1e:
                    ef:da:3a:15:43:af:75:7f:12:6f:5c:fa:08:ae:a3:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1F:46:4F:D0:2B:36:18:1F:0B:B8:AE:A0:51:DE:32:BB:9B:C4:F9
            X509v3 Authority Key Identifier:
                keyid:B4:E7:A9:FC:24:99:08:D1:27:14:5D:7C:0B:1D:E4:1A:FB:B2:7C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9639b1f3b25de6401926fd200d3e7a73a364740.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/50aa6c3419e864991d087a357724a15319b88576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c7d332f-afb2-4848-9aed-a5da09f66ccf/a9639b1f3b25de6401926fd200d3e7a73a364740.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:6a:6b:cb:68:b7:0c:5a:64:9c:4f:b7:9d:e5:b3:e9:d5:43:
         a8:b7:e0:56:63:5b:a2:c4:e8:e5:92:d1:c4:be:0c:3c:c0:25:
         4f:f9:74:3e:0f:94:7c:28:ca:dc:f8:50:37:b3:86:b1:87:f9:
         4c:15:65:dc:b6:5a:75:75:d1:3d:c2:42:a0:94:80:cf:ad:13:
         5f:69:5b:75:07:b7:73:29:07:8e:2f:ec:71:36:b5:2f:78:d9:
         33:1f:39:8d:f0:93:4e:ec:eb:40:88:de:f5:f9:f6:2b:e5:d5:
         f3:d2:23:cf:f9:e5:4e:f0:2b:c8:7d:2f:06:06:e3:36:92:5d:
         2f:16:b9:4b:f8:7f:5d:e6:bd:2d:30:4d:6f:f9:3d:f2:4b:2c:
         fb:a1:c6:6f:d3:47:4c:50:0d:0c:58:3e:a8:4a:99:f1:98:6a:
         3e:bd:48:ad:99:b3:ba:52:11:9c:7a:be:b1:c0:fe:a6:4d:76:
         65:4c:95:40:8f:40:0e:1f:b8:f5:84:cf:ef:a6:74:64:fd:ca:
         17:42:9c:ca:ec:19:83:3a:35:6b:53:2a:06:a3:4f:74:97:21:
         31:f7:4c:a7:02:6f:65:94:0e:03:29:d9:5d:12:8a:54:cd:bd:
         44:ce:96:24:53:f6:5f:94:46:c1:53:3b:62:70:18:3a:96:93:
         0f:97:6a:f2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGJcfMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
NjM5YjFmM2IyNWRlNjQwMTkyNmZkMjAwZDNlN2E3M2EzNjQ3NDAwHhcNMjIwNjA5
MDMwMDAwWhcNMjQwNjA5MDMwMDAwWjAzMTEwLwYDVQQDEyg1MGFhNmMzNDE5ZTg2
NDk5MWQwODdhMzU3NzI0YTE1MzE5Yjg4NTc2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAynQYlZo0F3zfgaYbMByH3uLWY0Ewa2B6RE7BYMgHhJWJkmMD
Hf8yoT93ptHJhV4FRo/Uas5xKWug/N61bX1FCivH4xCF4tvLBxHW6yjh0ZBQ37+o
cEsYpqV5Wcg2zQqsPRI65M1y47XAJjfxxyxI1XTqDW5WW0VLdyJayGL4YBA77Pvf
dqUptRV/EJGZSV1s33+kstqC4E0fRa7DqlURv0Z7+8aBquBC+ooZhVMKsf4OQTT0
6m+AXHmFfF+Vy0/1ETLLmKIyzAQUCCgY8ZxIJuPQDakLCzp6y8ZDlLsT/f+q3wIk
ERB4pF/ehlhz9h7v2joVQ691fxJvXPoIrqNMAwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHAfRk/QKzYYHwu4rqBR3jK7m8T5MB8GA1UdIwQYMBaAFLTnqfwkmQjRJxRd
fAsd5Br7snzaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTk2Mzli
MWYzYjI1ZGU2NDAxOTI2ZmQyMDBkM2U3YTczYTM2NDc0MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2M3ZDMzMmYtYWZiMi00ODQ4LTlhZWQtYTVkYTA5
ZjY2Y2NmLzUwYWE2YzM0MTllODY0OTkxZDA4N2EzNTc3MjRhMTUzMTliODg1NzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83YzdkMzMyZi1hZmIyLTQ4NDgtOWFlZC1hNWRh
MDlmNjZjY2YvYTk2MzliMWYzYjI1ZGU2NDAxOTI2ZmQyMDBkM2U3YTczYTM2NDc0
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaf63jANBgkqhkiG9w0BAQsFAAOCAQEALWpry2i3DFpknE+3
neWz6dVDqLfgVmNbosTo5ZLRxL4MPMAlT/l0Pg+UfCjK3PhQN7OGsYf5TBVl3LZa
dXXRPcJCoJSAz60TX2lbdQe3cykHji/scTa1L3jZMx85jfCTTuzrQIje9fn2K+XV
89Ijz/nlTvAryH0vBgbjNpJdLxa5S/h/Xea9LTBNb/k98kss+6HGb9NHTFANDFg+
qEqZ8ZhqPr1IrZmzulIRnHq+scD+pk12ZUyVQI9ADh+49YTP76Z0ZP3KF0KcyuwZ
gzo1a1MqBqNPdJchMfdMpwJvZZQOAynZXRKKVM29RM6WJFP2X5RGwVM7YnAYOpaT
D5dq8g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org