Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f7880b03651f1f736a1dc16fddeeb3fdf922042e.roa
File:                     f7880b03651f1f736a1dc16fddeeb3fdf922042e.roa (raw, json)
Hash identifier:          qwve2hYFY+zBV1mkbiGicFCuGl5NB+usbZgVaCLPDx0=
Subject key identifier:   B0:D2:D6:DB:45:5E:2E:86:6A:9C:D0:57:F0:4A:1E:BA:F5:64:E2:98
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       0FFAE7
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f7880b03651f1f736a1dc16fddeeb3fdf922042e.roa
Signing time:             Wed 24 Mar 2021 14:44:10 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047271 (0xffae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=f7880b03651f1f736a1dc16fddeeb3fdf922042e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:67:33:e2:80:ef:ab:8f:54:6c:25:60:92:dd:
                    7c:54:ec:7a:8c:4a:1a:e5:94:ee:9a:db:2f:a9:44:
                    76:bf:d1:52:d5:68:dc:ab:92:d9:a6:80:1d:1b:84:
                    d9:86:f0:59:51:7b:fd:61:8b:56:02:ac:bb:ac:15:
                    19:d1:28:92:86:05:1d:b6:18:9b:96:d3:0d:5e:80:
                    f5:e2:cd:64:c5:76:17:9a:d9:c7:61:89:07:a0:6c:
                    0e:c1:83:59:1a:45:9d:42:fe:83:ae:e8:4a:4e:b4:
                    9b:04:f8:e6:4e:fe:8e:52:2d:3c:21:d7:64:24:e1:
                    1c:b5:4f:92:02:1e:37:15:b5:9c:b7:a2:9f:12:85:
                    35:3d:f4:72:48:eb:e7:75:24:93:cb:60:72:97:cf:
                    b2:d3:f1:fd:2f:83:60:6d:d7:59:36:e6:5e:75:4d:
                    d4:0a:72:e9:41:2d:37:b8:16:c7:f8:f0:7e:a4:f0:
                    03:f4:10:83:e7:41:af:6c:ed:2f:fc:d8:fc:35:5b:
                    e8:e5:a7:5f:e1:f2:d8:de:82:c3:24:21:10:84:92:
                    77:17:10:2b:8b:04:77:44:1e:29:36:0f:9c:d2:85:
                    b0:c7:fa:09:a9:a7:c1:2a:9d:e5:fd:2d:48:de:0f:
                    92:69:5f:0d:ef:b9:b3:de:ca:c8:91:58:38:31:07:
                    9b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D2:D6:DB:45:5E:2E:86:6A:9C:D0:57:F0:4A:1E:BA:F5:64:E2:98
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/f7880b03651f1f736a1dc16fddeeb3fdf922042e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:8e:4a:14:b0:89:cd:d2:3e:ca:6f:45:60:c3:ad:56:cb:15:
         e1:72:aa:3b:ba:42:38:82:cc:2d:04:ce:31:2d:9f:97:e5:21:
         f9:78:4c:bb:6b:16:5c:9d:37:9a:f2:fe:0b:05:4f:f4:6b:63:
         25:c5:00:75:a3:7c:51:99:e2:39:1b:c1:9d:7d:45:94:7a:03:
         d4:e0:36:47:73:2f:91:20:f4:f8:a9:3c:07:78:07:88:06:c0:
         52:a9:88:9b:91:cb:94:61:6c:fa:15:29:1f:7c:9b:51:2f:ce:
         2c:b7:e6:5d:15:bd:44:db:32:50:70:70:36:f4:06:e0:c7:40:
         b3:00:27:20:6a:b4:fe:aa:65:d7:ca:2a:8a:07:0c:35:78:0f:
         8a:34:8c:c3:0a:d7:ab:9a:52:41:0a:73:42:92:bc:ca:c9:95:
         fd:c7:fa:01:df:3a:17:04:37:4b:fa:e6:d1:8a:1c:b4:1c:4a:
         86:0d:29:a7:f0:8b:b0:0f:3d:ca:2f:0f:ed:58:06:7a:1e:93:
         a1:ab:18:4f:07:20:77:65:2f:dd:bd:9b:1a:0b:fd:1d:e6:a0:
         d3:f1:e1:63:31:01:d0:42:e1:37:45:8f:1c:46:1d:38:a4:6b:
         f5:30:ca:27:87:27:5e:46:5e:dc:9e:61:8e:2e:4d:24:7d:05:
         f3:54:e6:7b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDD/rnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ5
MGE0ZmE0Y2FmNDgwY2I3NmMwYmM0YWVmYmY2MzNmOGNlM2IxZjkwHhcNMjEwMzI0
MTQ0MzQ0WhcNMjYwMzI0MTQ0MzQ0WjAzMTEwLwYDVQQDEyhmNzg4MGIwMzY1MWYx
ZjczNmExZGMxNmZkZGVlYjNmZGY5MjIwNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgGcz4oDvq49UbCVgkt18VOx6jEoa5ZTumtsvqUR2v9FS1Wjc
q5LZpoAdG4TZhvBZUXv9YYtWAqy7rBUZ0SiShgUdthibltMNXoD14s1kxXYXmtnH
YYkHoGwOwYNZGkWdQv6DruhKTrSbBPjmTv6OUi08IddkJOEctU+SAh43FbWct6Kf
EoU1PfRySOvndSSTy2Byl8+y0/H9L4NgbddZNuZedU3UCnLpQS03uBbH+PB+pPAD
9BCD50GvbO0v/Nj8NVvo5adf4fLY3oLDJCEQhJJ3FxAriwR3RB4pNg+c0oWwx/oJ
qafBKp3l/S1I3g+SaV8N77mz3srIkVg4MQebRwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLDS1ttFXi6GapzQV/BKHrr1ZOKYMB8GA1UdIwQYMBaAFEixvQ/Kc7iuYUnO
JUbMDxXgfnaDMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDkwYTRm
YTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODQyYjYzM2YtODBiOC00ZjRjLWJlOTgtNjU2ZDZm
OWE3ZjM4L2Y3ODgwYjAzNjUxZjFmNzM2YTFkYzE2ZmRkZWViM2ZkZjkyMjA0MmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NDJiNjMzZi04MGI4LTRmNGMtYmU5OC02NTZk
NmY5YTdmMzgvNDkwYTRmYTRjYWY0ODBjYjc2YzBiYzRhZWZiZjYzM2Y4Y2UzYjFm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIT4YzANBgkqhkiG9w0BAQsFAAOCAQEAJY5KFLCJzdI+ym9F
YMOtVssV4XKqO7pCOILMLQTOMS2fl+Uh+XhMu2sWXJ03mvL+CwVP9GtjJcUAdaN8
UZniORvBnX1FlHoD1OA2R3MvkSD0+Kk8B3gHiAbAUqmIm5HLlGFs+hUpH3ybUS/O
LLfmXRW9RNsyUHBwNvQG4MdAswAnIGq0/qpl18oqigcMNXgPijSMwwrXq5pSQQpz
QpK8ysmV/cf6Ad86FwQ3S/rm0YoctBxKhg0pp/CLsA89yi8P7VgGeh6ToasYTwcg
d2Uv3b2bGgv9Heag0/HhYzEB0ELhN0WPHEYdOKRr9TDKJ4cnXkZe3J5hji5NJH0F
81Tmew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org