Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/290675b26f476c08079a244af8f633d8afa20575.roa
File:                     290675b26f476c08079a244af8f633d8afa20575.roa (raw, json)
Hash identifier:          X7j/WmAuhoEogXjoKo9QMRcgxQZ3PQpEPpjPwFiKIDA=
Subject key identifier:   D0:27:98:A7:A9:52:C4:BC:FB:06:87:7D:D5:80:21:BF:99:73:A7:B3
Certificate issuer:       /CN=89b05c9212d6b33b390c81f3fc8958af7050b896
Certificate serial:       168735
Authority key identifier: C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/290675b26f476c08079a244af8f633d8afa20575.roa
Signing time:             Mon 28 Mar 2022 21:39:54 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264763
IP address blocks:        168.197.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1476405 (0x168735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b05c9212d6b33b390c81f3fc8958af7050b896
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=290675b26f476c08079a244af8f633d8afa20575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:11:43:33:f5:ee:b5:61:97:8e:a2:1a:3c:4a:
                    77:ea:48:62:94:26:0e:b3:d4:90:a8:a4:75:2c:38:
                    9c:41:af:95:20:6c:3f:b3:0c:04:23:77:aa:bd:64:
                    3f:db:6a:aa:f7:97:b9:fe:26:ab:27:fa:c6:2b:4f:
                    2b:cd:ac:04:85:3c:bd:bc:02:74:b6:54:07:25:b2:
                    75:e7:4f:26:d2:fd:74:e4:58:79:f2:be:33:39:fa:
                    dd:e8:0d:58:2f:4f:7b:6d:58:3f:51:32:9e:ce:b3:
                    5e:e3:9e:e1:84:80:6c:36:60:f4:fa:57:cf:c8:c7:
                    92:35:7f:93:74:18:47:55:09:08:ac:80:fd:50:4b:
                    be:a8:a4:f8:44:ae:6a:b2:07:87:ab:b3:e7:dd:28:
                    8d:6f:ac:95:77:35:3d:83:95:1a:55:2f:f7:97:f2:
                    94:fe:8d:09:24:bb:85:92:87:9b:4e:bc:06:eb:87:
                    75:70:70:8e:3d:be:26:bd:ed:1f:21:19:b8:c6:34:
                    fd:b4:2f:75:a7:7a:0a:64:89:e0:a0:b4:fa:b9:19:
                    5b:53:6b:2d:38:d0:e7:b1:4e:d9:68:d2:6a:55:91:
                    00:f2:d8:4a:c4:39:d9:73:c1:0e:fc:5e:0d:2f:07:
                    10:70:6a:9f:6b:b1:c8:79:38:04:85:e7:43:71:5a:
                    de:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:27:98:A7:A9:52:C4:BC:FB:06:87:7D:D5:80:21:BF:99:73:A7:B3
            X509v3 Authority Key Identifier:
                keyid:C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/290675b26f476c08079a244af8f633d8afa20575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/89b05c9212d6b33b390c81f3fc8958af7050b896.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:a2:32:ab:65:ba:22:bd:ac:63:f2:16:de:3d:f6:27:28:66:
         26:c0:22:08:f5:88:a9:b9:e2:ed:76:f2:93:5f:25:dd:e5:d8:
         2f:5b:de:6e:de:e2:c3:6f:10:98:6a:69:b3:95:f3:7c:7e:26:
         ce:4e:90:72:31:3c:94:91:40:24:29:5f:ef:17:e5:b4:38:0a:
         55:c0:e0:cb:c9:a9:6c:46:c9:92:f4:19:17:ee:a7:c6:6a:79:
         c5:22:0c:3e:14:e5:77:c0:54:9b:fb:69:77:b3:ee:fe:a8:9e:
         09:6c:5e:f0:c8:f9:93:2b:40:e4:71:6b:32:8a:85:ea:d8:f2:
         f2:af:3b:72:2e:45:f6:14:7d:27:0b:85:e0:79:d8:c6:53:39:
         b1:86:7d:51:ab:db:57:93:d1:7a:17:bb:37:b3:71:a9:bf:e4:
         bc:73:51:b9:bf:8a:63:5d:c2:f4:4f:a3:37:db:f5:74:b9:b2:
         e1:e3:2f:a7:9b:64:b7:24:fb:0d:05:6a:7e:2c:25:35:04:a7:
         06:1c:22:2b:59:b3:d8:5d:86:20:26:ef:76:76:23:1f:1e:f3:
         6b:8e:1c:aa:0d:2a:9d:a2:86:a4:3e:e8:17:4c:6a:e8:2e:eb:
         cf:18:e8:e9:c6:d8:f0:f7:07:be:cd:22:5b:a6:80:39:21:c5:
         ed:21:83:eb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFoc1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg5
YjA1YzkyMTJkNmIzM2IzOTBjODFmM2ZjODk1OGFmNzA1MGI4OTYwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygyOTA2NzViMjZmNDc2
YzA4MDc5YTI0NGFmOGY2MzNkOGFmYTIwNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmRFDM/XutWGXjqIaPEp36khilCYOs9SQqKR1LDicQa+VIGw/
swwEI3eqvWQ/22qq95e5/iarJ/rGK08rzawEhTy9vAJ0tlQHJbJ1508m0v105Fh5
8r4zOfrd6A1YL097bVg/UTKezrNe457hhIBsNmD0+lfPyMeSNX+TdBhHVQkIrID9
UEu+qKT4RK5qsgeHq7Pn3SiNb6yVdzU9g5UaVS/3l/KU/o0JJLuFkoebTrwG64d1
cHCOPb4mve0fIRm4xjT9tC91p3oKZIngoLT6uRlbU2stONDnsU7ZaNJqVZEA8thK
xDnZc8EO/F4NLwcQcGqfa7HIeTgEhedDcVreGQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNAnmKepUsS8+waHfdWAIb+Zc6ezMB8GA1UdIwQYMBaAFMVhOS6xbdlt+xS/
wyaCOKjpgYMeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODliMDVj
OTIxMmQ2YjMzYjM5MGM4MWYzZmM4OTU4YWY3MDUwYjg5Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2RkMmMxMDAtZGMzMC00MGFjLTg1ZDItNTE4MjU3
MGFjMmJlLzI5MDY3NWIyNmY0NzZjMDgwNzlhMjQ0YWY4ZjYzM2Q4YWZhMjA1NzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZGQyYzEwMC1kYzMwLTQwYWMtODVkMi01MTgy
NTcwYWMyYmUvODliMDVjOTIxMmQ2YjMzYjM5MGM4MWYzZmM4OTU4YWY3MDUwYjg5
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKjFYTANBgkqhkiG9w0BAQsFAAOCAQEAFKIyq2W6Ir2sY/IW
3j32JyhmJsAiCPWIqbni7Xbyk18l3eXYL1vebt7iw28QmGpps5XzfH4mzk6QcjE8
lJFAJClf7xfltDgKVcDgy8mpbEbJkvQZF+6nxmp5xSIMPhTld8BUm/tpd7Pu/qie
CWxe8Mj5kytA5HFrMoqF6tjy8q87ci5F9hR9JwuF4HnYxlM5sYZ9UavbV5PRehe7
N7Nxqb/kvHNRub+KY13C9E+jN9v1dLmy4eMvp5tktyT7DQVqfiwlNQSnBhwiK1mz
2F2GICbvdnYjHx7za44cqg0qnaKGpD7oF0xq6C7rzxjo6cbY8PcHvs0iW6aAOSHF
7SGD6w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org