Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/1d49662de4de604ab96be39aef3ca1e387b194de.roa
File:                     1d49662de4de604ab96be39aef3ca1e387b194de.roa (raw, json)
Hash identifier:          TrP4Ku/SxDIem9G+35HEm5PT3iY1pK1KXr5YuY2hE7A=
Subject key identifier:   6D:33:2A:01:86:FC:6F:8B:94:8E:29:4F:F5:14:B0:86:41:52:B3:E3
Certificate issuer:       /CN=f4d58c84621ad64623cd4679aa4e983e69c0c959
Certificate serial:       0EF162
Authority key identifier: 45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4d58c84621ad64623cd4679aa4e983e69c0c959.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/1d49662de4de604ab96be39aef3ca1e387b194de.roa
Signing time:             Fri 15 Dec 2023 03:31:59 +0000
ROA not before:           Fri 15 Dec 2023 03:31:59 +0000
ROA not after:            Mon 15 Dec 2025 03:31:59 +0000
asID:                     14080
IP address blocks:        168.228.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979298 (0xef162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d58c84621ad64623cd4679aa4e983e69c0c959
        Validity
            Not Before: Dec 15 03:31:59 2023 GMT
            Not After : Dec 15 03:31:59 2025 GMT
        Subject: CN=1d49662de4de604ab96be39aef3ca1e387b194de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:b6:b1:5d:eb:81:5b:90:87:3a:b1:3c:94:
                    32:e3:9f:11:d9:8a:8c:dd:52:3b:57:96:3c:60:81:
                    82:29:33:a8:75:b2:cc:12:78:4a:f5:bd:57:c7:4c:
                    3d:bf:d7:a0:e2:ca:f2:44:f6:13:16:b8:30:c3:68:
                    a1:07:2a:72:97:52:78:d4:28:2a:4b:46:5a:d9:85:
                    f2:3d:46:be:d4:2e:41:f9:3c:b3:09:54:e6:42:c6:
                    47:a6:79:25:78:70:53:e4:09:e2:a2:08:69:f4:3d:
                    29:cd:f9:c2:ea:9c:c4:a5:5d:a5:ba:db:d7:ec:8d:
                    dc:08:15:af:b1:a0:e4:23:b7:ae:91:30:6d:50:1a:
                    c6:27:20:4f:28:ad:85:3d:af:4b:14:b4:43:ba:ad:
                    6e:b8:36:14:18:c9:4e:72:83:90:84:78:d1:d0:e3:
                    11:56:16:1e:3c:49:0b:9c:95:9b:e0:a4:e7:e3:dd:
                    c0:4b:eb:f6:de:51:56:60:7e:b6:63:d2:a1:65:19:
                    f1:8b:86:a4:e3:96:31:55:69:49:5b:3e:fa:38:aa:
                    44:e5:3c:04:c2:80:40:67:07:0f:f4:37:e1:9c:96:
                    b9:61:27:2f:fd:f9:e2:10:1a:8e:de:53:a6:8e:3f:
                    92:00:5c:31:59:15:07:53:6e:e7:54:a2:61:4d:6a:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:33:2A:01:86:FC:6F:8B:94:8E:29:4F:F5:14:B0:86:41:52:B3:E3
            X509v3 Authority Key Identifier:
                keyid:45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4d58c84621ad64623cd4679aa4e983e69c0c959.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/1d49662de4de604ab96be39aef3ca1e387b194de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/f4d58c84621ad64623cd4679aa4e983e69c0c959.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:85:90:62:ae:83:cc:5b:ab:7b:34:6e:b5:af:ee:10:cb:99:
         c9:95:35:1f:39:c9:4f:1a:9b:d8:bb:c1:ab:38:8d:df:48:aa:
         56:ed:c7:0f:ae:94:be:ce:50:6f:1e:63:d1:47:4f:84:53:3e:
         4b:4c:7a:c4:b9:a6:17:9c:73:13:bc:dc:7e:81:3b:a9:de:4e:
         44:6b:f0:ad:ea:a4:2c:1a:08:9c:7a:c4:48:47:77:22:0b:b1:
         9e:d4:54:d6:d1:9f:ab:a3:92:81:72:af:51:45:f2:d2:ca:9b:
         8f:16:4a:64:50:25:bf:fc:e2:08:ea:7c:80:52:ed:54:f7:5c:
         e5:d6:8e:06:df:63:da:e6:ca:35:c9:c1:74:6c:49:20:41:8a:
         6a:f2:99:c7:ce:df:4a:78:8a:96:65:87:24:20:fc:96:9d:36:
         e5:9e:96:c0:ef:eb:4f:dd:5d:20:01:a4:3a:f8:a7:76:16:9f:
         5c:48:e3:a6:07:6b:f9:47:ff:54:8a:1f:12:67:d7:ab:8e:7b:
         47:b9:66:e3:48:6f:da:75:16:23:d6:43:16:95:d4:36:38:49:
         a4:5a:6c:85:9f:bf:a8:ce:f2:ea:0f:48:9a:ca:0e:7d:4c:e9:
         b8:37:f8:e0:80:45:ba:4f:a7:3e:a1:69:73:d4:27:78:70:a0:
         b4:dc:4c:65
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDvFiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY0
ZDU4Yzg0NjIxYWQ2NDYyM2NkNDY3OWFhNGU5ODNlNjljMGM5NTkwHhcNMjMxMjE1
MDMzMTU5WhcNMjUxMjE1MDMzMTU5WjAzMTEwLwYDVQQDEygxZDQ5NjYyZGU0ZGU2
MDRhYjk2YmUzOWFlZjNjYTFlMzg3YjE5NGRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuJK2sV3rgVuQhzqxPJQy458R2YqM3VI7V5Y8YIGCKTOodbLM
EnhK9b1Xx0w9v9eg4sryRPYTFrgww2ihBypyl1J41CgqS0Za2YXyPUa+1C5B+Tyz
CVTmQsZHpnkleHBT5Anioghp9D0pzfnC6pzEpV2lutvX7I3cCBWvsaDkI7eukTBt
UBrGJyBPKK2FPa9LFLRDuq1uuDYUGMlOcoOQhHjR0OMRVhYePEkLnJWb4KTn493A
S+v23lFWYH62Y9KhZRnxi4ak45YxVWlJWz76OKpE5TwEwoBAZwcP9DfhnJa5YScv
/fniEBqO3lOmjj+SAFwxWRUHU27nVKJhTWrhyQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG0zKgGG/G+LlI4pT/UUsIZBUrPjMB8GA1UdIwQYMBaAFEVCEg/Qq+F51sno
5Pk11TeJl8+6MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjRkNThj
ODQ2MjFhZDY0NjIzY2Q0Njc5YWE0ZTk4M2U2OWMwYzk1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTIxNjRkZmUtMDU4OC00ZTlkLTk1N2MtZjUxODcw
N2E1ZTM1LzFkNDk2NjJkZTRkZTYwNGFiOTZiZTM5YWVmM2NhMWUzODdiMTk0ZGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MjE2NGRmZS0wNTg4LTRlOWQtOTU3Yy1mNTE4
NzA3YTVlMzUvZjRkNThjODQ2MjFhZDY0NjIzY2Q0Njc5YWE0ZTk4M2U2OWMwYzk1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjkbDANBgkqhkiG9w0BAQsFAAOCAQEAXIWQYq6DzFurezRu
ta/uEMuZyZU1HznJTxqb2LvBqziN30iqVu3HD66Uvs5Qbx5j0UdPhFM+S0x6xLmm
F5xzE7zcfoE7qd5ORGvwreqkLBoInHrESEd3IguxntRU1tGfq6OSgXKvUUXy0sqb
jxZKZFAlv/ziCOp8gFLtVPdc5daOBt9j2ubKNcnBdGxJIEGKavKZx87fSniKlmWH
JCD8lp025Z6WwO/rT91dIAGkOvindhafXEjjpgdr+Uf/VIofEmfXq457R7lm40hv
2nUWI9ZDFpXUNjhJpFpshZ+/qM7y6g9ImsoOfUzpuDf44IBFuk+nPqFpc9QneHCg
tNxMZQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org