Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/6eea7d5f104feed96b147ad80b6754ec73dc1d0a.roa
File:                     6eea7d5f104feed96b147ad80b6754ec73dc1d0a.roa (raw, json)
Hash identifier:          vdCdNLh17h55VC1CYwT4ZQMfw8DjEpPNPkjFKPP3vkc=
Subject key identifier:   63:B7:FE:65:A4:26:3A:C4:D0:CC:97:2D:76:38:A1:22:B4:01:A0:ED
Certificate issuer:       /CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
Certificate serial:       23805B
Authority key identifier: 81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/6eea7d5f104feed96b147ad80b6754ec73dc1d0a.roa
Signing time:             Fri 20 Oct 2023 04:31:42 +0000
ROA not before:           Fri 20 Oct 2023 04:31:40 +0000
ROA not after:            Mon 20 Oct 2025 04:31:40 +0000
asID:                     271842
IP address blocks:        168.194.169.0/24 maxlen: 24
                          168.194.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2326619 (0x23805b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcc8ded40bc24937a2ae4fb7a521bd388ee024b
        Validity
            Not Before: Oct 20 04:31:40 2023 GMT
            Not After : Oct 20 04:31:40 2025 GMT
        Subject: CN=6eea7d5f104feed96b147ad80b6754ec73dc1d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:67:35:3c:1a:56:33:ab:55:64:af:09:5f:72:
                    51:35:35:1e:90:a6:e9:1f:6b:8d:43:11:50:24:6d:
                    57:23:d7:e7:17:49:b8:f2:42:5a:d6:7f:01:15:bb:
                    41:27:3c:f3:6d:10:96:f2:6f:fe:95:58:d6:59:53:
                    01:32:bd:95:b6:8f:b8:e5:76:17:c5:86:f0:65:53:
                    2d:de:dd:4a:cc:ee:dd:5a:82:a6:bf:c7:85:11:a3:
                    8a:50:73:74:37:d7:b7:08:16:f8:06:b6:eb:7f:77:
                    59:0c:21:57:84:37:71:0b:eb:6d:ab:71:72:2f:82:
                    99:e3:dc:4c:4c:32:49:3a:b5:45:39:3f:de:9f:b8:
                    cb:08:e8:79:89:06:15:da:49:80:b8:67:d3:64:be:
                    a6:ef:a3:7c:7e:4d:0a:ad:d9:40:c6:ff:cc:0e:90:
                    5a:14:9e:96:da:5f:56:23:4f:09:d2:21:cd:82:aa:
                    d7:53:60:89:e1:eb:21:36:16:d6:3f:1f:d2:7e:7b:
                    e0:17:05:dd:9d:4a:fb:df:75:b0:95:b0:fa:0a:1b:
                    55:25:c2:50:35:20:45:8d:ae:72:e0:87:33:81:e6:
                    9a:f5:a7:c2:91:e5:55:ee:05:36:0f:e2:03:bf:fc:
                    da:f7:e0:37:d7:03:b1:a9:95:10:58:c1:44:fb:2c:
                    80:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B7:FE:65:A4:26:3A:C4:D0:CC:97:2D:76:38:A1:22:B4:01:A0:ED
            X509v3 Authority Key Identifier:
                keyid:81:44:D0:EE:20:41:EA:AA:3B:7A:D7:C3:4E:65:02:F9:6F:AB:F8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/6eea7d5f104feed96b147ad80b6754ec73dc1d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84c637c6-aa79-4141-891e-68dc0a906a14/fbcc8ded40bc24937a2ae4fb7a521bd388ee024b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.169.0-168.194.170.255

    Signature Algorithm: sha256WithRSAEncryption
         8e:70:e0:e9:7c:9a:bb:28:69:28:7b:77:c7:86:0b:8e:9c:f7:
         87:9e:04:c2:a4:80:93:fb:f2:9e:60:7f:18:4c:72:eb:49:66:
         7a:c3:46:7a:0b:bf:76:a7:e2:5b:99:32:13:06:61:ee:89:da:
         dd:40:4d:6f:ce:d8:b0:f0:81:90:1a:30:e7:53:bf:46:ba:92:
         ca:b0:d3:99:23:84:79:f5:fe:5f:ba:6e:28:1c:1b:59:ad:a2:
         3e:f9:1c:c1:05:ea:71:b6:4c:1a:51:12:ea:bd:4a:06:a5:06:
         eb:58:48:66:82:15:43:e0:6f:29:ed:b8:da:ce:d4:96:c2:61:
         8b:b3:03:0d:d5:2a:91:a2:6a:da:00:50:e9:37:02:3f:48:96:
         15:05:cd:6f:64:41:75:41:28:eb:05:29:1a:92:b0:e9:ab:84:
         86:94:0c:28:2f:1a:00:af:98:b0:f8:72:d6:72:c1:65:81:4e:
         cc:55:bc:4d:44:d9:0f:f2:d4:6c:99:4f:15:6b:69:87:a6:84:
         01:44:4b:75:1a:20:3a:db:ea:35:b3:3c:e6:7e:c9:1a:72:ec:
         72:e3:6b:b3:06:43:4d:01:a8:c6:9a:5a:22:27:bc:74:d4:ce:
         92:14:76:26:51:29:2c:e4:1c:f7:17:af:f3:42:31:ec:0b:88:
         2f:e1:04:e0
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDI4BbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZi
Y2M4ZGVkNDBiYzI0OTM3YTJhZTRmYjdhNTIxYmQzODhlZTAyNGIwHhcNMjMxMDIw
MDQzMTQwWhcNMjUxMDIwMDQzMTQwWjAzMTEwLwYDVQQDEyg2ZWVhN2Q1ZjEwNGZl
ZWQ5NmIxNDdhZDgwYjY3NTRlYzczZGMxZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgmc1PBpWM6tVZK8JX3JRNTUekKbpH2uNQxFQJG1XI9fnF0m4
8kJa1n8BFbtBJzzzbRCW8m/+lVjWWVMBMr2Vto+45XYXxYbwZVMt3t1KzO7dWoKm
v8eFEaOKUHN0N9e3CBb4Brbrf3dZDCFXhDdxC+ttq3FyL4KZ49xMTDJJOrVFOT/e
n7jLCOh5iQYV2kmAuGfTZL6m76N8fk0KrdlAxv/MDpBaFJ6W2l9WI08J0iHNgqrX
U2CJ4eshNhbWPx/SfnvgFwXdnUr733WwlbD6ChtVJcJQNSBFja5y4Iczgeaa9afC
keVV7gU2D+IDv/za9+A31wOxqZUQWMFE+yyAaQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFGO3/mWkJjrE0MyXLXY4oSK0AaDtMB8GA1UdIwQYMBaAFIFE0O4gQeqqO3rX
w05lAvlvq/hcMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmJjYzhk
ZWQ0MGJjMjQ5MzdhMmFlNGZiN2E1MjFiZDM4OGVlMDI0Yi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODRjNjM3YzYtYWE3OS00MTQxLTg5MWUtNjhkYzBh
OTA2YTE0LzZlZWE3ZDVmMTA0ZmVlZDk2YjE0N2FkODBiNjc1NGVjNzNkYzFkMGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84NGM2MzdjNi1hYTc5LTQxNDEtODkxZS02OGRj
MGE5MDZhMTQvZmJjYzhkZWQ0MGJjMjQ5MzdhMmFlNGZiN2E1MjFiZDM4OGVlMDI0
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAqMKpAwQAqMKqMA0GCSqGSIb3DQEBCwUAA4IBAQCOcODp
fJq7KGkoe3fHhguOnPeHngTCpICT+/KeYH8YTHLrSWZ6w0Z6C792p+JbmTITBmHu
idrdQE1vztiw8IGQGjDnU79GupLKsNOZI4R59f5fum4oHBtZraI++RzBBepxtkwa
URLqvUoGpQbrWEhmghVD4G8p7bjaztSWwmGLswMN1SqRomraAFDpNwI/SJYVBc1v
ZEF1QSjrBSkakrDpq4SGlAwoLxoAr5iw+HLWcsFlgU7MVbxNRNkP8tRsmU8Va2mH
poQBREt1GiA62+o1szzmfskacuxy42uzBkNNAajGmloiJ7x01M6SFHYmUSks5Bz3
F6/zQjHsC4gv4QTg
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org