Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/1f7392e41a657ca1b1228440f312a92c49d2540b.roa
File:                     1f7392e41a657ca1b1228440f312a92c49d2540b.roa (raw, json)
Hash identifier:          ekXjrTPNYeAp674vScN2oCk+8EvqJ62el3RXEeJKeOQ=
Subject key identifier:   66:0D:4F:85:A8:C4:2A:29:68:28:FC:F6:A6:9F:92:92:93:DD:5D:8D
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       0E9361
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/1f7392e41a657ca1b1228440f312a92c49d2540b.roa
Signing time:             Sat 03 Jul 2021 00:16:57 +0000
ROA not before:           Fri 02 Jul 2021 03:00:00 +0000
ROA not after:            Sat 02 Jul 2022 03:00:00 +0000
asID:                     271842
IP address blocks:        168.194.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955233 (0xe9361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Jul  2 03:00:00 2021 GMT
            Not After : Jul  2 03:00:00 2022 GMT
        Subject: CN=1f7392e41a657ca1b1228440f312a92c49d2540b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d7:c8:8f:c2:ea:f0:e5:a6:0e:62:1c:e5:16:
                    0a:c0:73:1f:d4:3b:2f:5d:d1:a4:3f:bc:75:fd:da:
                    13:e2:da:03:53:e9:6d:ac:28:b0:ee:e4:3f:ef:82:
                    d3:fc:a3:3d:05:6d:49:5e:f8:9b:01:c5:3a:f1:9c:
                    42:50:da:1f:aa:c3:fc:9b:77:1b:3f:e5:45:78:12:
                    14:1a:24:c5:f5:d2:3f:7e:f0:a0:58:df:66:35:49:
                    04:98:8c:6d:1e:82:3c:78:6b:ab:c8:cd:51:cb:9b:
                    f6:26:fc:8a:89:67:f7:81:4b:6c:94:2d:52:ab:71:
                    27:42:d3:92:c7:02:39:66:ec:68:82:16:81:b4:f8:
                    d9:73:95:7d:21:56:b3:60:12:47:39:15:20:91:cb:
                    44:f3:a7:74:f8:9c:35:b9:86:57:76:16:25:92:bf:
                    78:09:e1:1d:ca:ab:3f:d6:8b:9d:3e:82:1b:fd:b9:
                    0e:9d:c2:4e:df:84:5b:6f:da:ce:f5:1c:4d:52:0c:
                    7a:92:3a:3b:ce:13:56:03:20:f2:98:91:dd:0f:f6:
                    dd:85:e0:b0:60:de:19:f4:de:84:11:52:56:1d:93:
                    07:1a:3c:17:dc:c8:a4:87:c6:49:34:e6:02:5c:c2:
                    cf:f0:8b:02:29:92:3e:4a:d5:c7:3f:74:4b:bc:cd:
                    4c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0D:4F:85:A8:C4:2A:29:68:28:FC:F6:A6:9F:92:92:93:DD:5D:8D
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/1f7392e41a657ca1b1228440f312a92c49d2540b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:4f:96:8a:72:bb:75:fe:b4:49:b7:7d:12:d6:b8:4e:c0:b3:
         08:d6:07:46:51:6d:3d:f4:12:57:64:62:6f:1e:d2:05:be:5e:
         4e:28:ad:be:5c:0c:b2:43:e5:54:45:51:35:f2:b2:8c:07:11:
         19:f0:03:7f:1c:c1:75:df:75:d1:2d:e3:6b:25:00:4e:9e:7a:
         ed:9a:10:03:de:d1:f1:a8:ce:26:5e:4d:b5:2e:7b:fb:3a:75:
         87:2e:5f:5e:cc:46:9b:a3:7f:fc:8c:0d:19:2d:dc:71:94:46:
         9e:32:09:60:6b:0f:a2:2c:de:67:7a:fb:9b:28:d6:82:f9:08:
         88:b9:3f:b5:a4:62:35:7a:64:ea:a4:ed:13:c2:50:c9:8b:34:
         fc:5f:78:3e:44:7b:cb:b7:9a:25:d7:29:25:71:63:40:c8:ca:
         da:34:48:fd:51:70:9c:b3:ed:c3:e8:7d:48:19:2a:35:22:26:
         9e:2e:3d:55:f9:fa:dd:0b:73:ab:f9:8a:bf:a3:32:c7:84:92:
         ee:e1:3a:02:69:a5:a3:e2:97:97:ad:c1:1d:57:4c:d0:5e:a6:
         c5:a0:bb:52:31:01:31:13:94:05:19:73:fc:ef:32:b7:a0:51:
         ed:36:da:71:ce:ec:7c:98:38:b3:a8:83:d7:fa:50:48:f1:aa:
         35:36:3a:40
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDpNhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZi
Y2M4ZGVkNDBiYzI0OTM3YTJhZTRmYjdhNTIxYmQzODhlZTAyNGIwHhcNMjEwNzAy
MDMwMDAwWhcNMjIwNzAyMDMwMDAwWjAzMTEwLwYDVQQDEygxZjczOTJlNDFhNjU3
Y2ExYjEyMjg0NDBmMzEyYTkyYzQ5ZDI1NDBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj9fIj8Lq8OWmDmIc5RYKwHMf1DsvXdGkP7x1/doT4toDU+lt
rCiw7uQ/74LT/KM9BW1JXvibAcU68ZxCUNofqsP8m3cbP+VFeBIUGiTF9dI/fvCg
WN9mNUkEmIxtHoI8eGuryM1Ry5v2JvyKiWf3gUtslC1Sq3EnQtOSxwI5ZuxoghaB
tPjZc5V9IVazYBJHORUgkctE86d0+Jw1uYZXdhYlkr94CeEdyqs/1oudPoIb/bkO
ncJO34Rbb9rO9RxNUgx6kjo7zhNWAyDymJHdD/bdheCwYN4Z9N6EEVJWHZMHGjwX
3Mikh8ZJNOYCXMLP8IsCKZI+StXHP3RLvM1MdwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGYNT4WoxCopaCj89qafkpKT3V2NMB8GA1UdIwQYMBaAFIFE0O4gQeqqO3rX
w05lAvlvq/hcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmJjYzhk
ZWQ0MGJjMjQ5MzdhMmFlNGZiN2E1MjFiZDM4OGVlMDI0Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODRjNjM3YzYtYWE3OS00MTQxLTg5MWUtNjhkYzBh
OTA2YTE0LzFmNzM5MmU0MWE2NTdjYTFiMTIyODQ0MGYzMTJhOTJjNDlkMjU0MGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NGM2MzdjNi1hYTc5LTQxNDEtODkxZS02OGRj
MGE5MDZhMTQvZmJjYzhkZWQ0MGJjMjQ5MzdhMmFlNGZiN2E1MjFiZDM4OGVlMDI0
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKjCqTANBgkqhkiG9w0BAQsFAAOCAQEAZE+WinK7df60Sbd9
Eta4TsCzCNYHRlFtPfQSV2Ribx7SBb5eTiitvlwMskPlVEVRNfKyjAcRGfADfxzB
dd910S3jayUATp567ZoQA97R8ajOJl5NtS57+zp1hy5fXsxGm6N//IwNGS3ccZRG
njIJYGsPoizeZ3r7myjWgvkIiLk/taRiNXpk6qTtE8JQyYs0/F94PkR7y7eaJdcp
JXFjQMjK2jRI/VFwnLPtw+h9SBkqNSImni49Vfn63Qtzq/mKv6Myx4SS7uE6Amml
o+KXl63BHVdM0F6mxaC7UjEBMROUBRlz/O8yt6BR7Tbacc7sfJg4s6iD1/pQSPGq
NTY6QA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org