Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94a9f702-1d4c-4965-9a6f-dde57648a10d/34242743d3e7914eac40c5575714c6695d29370f.roa
File:                     34242743d3e7914eac40c5575714c6695d29370f.roa (raw, json)
Hash identifier:          8NihIiJZMkOJUlCC+yUjqMuoyVmVfxygK+MhHodeqaw=
Subject key identifier:   85:3F:08:CE:BB:9C:A4:FD:BA:6D:82:71:E9:83:9E:31:8C:CD:F6:49
Certificate issuer:       /CN=f3a498b1ce51fc7398249c05c0fecbb9ea278411
Certificate serial:       15C8
Authority key identifier: 03:6E:51:2D:A7:CF:48:B2:4A:6B:F6:68:00:37:29:FC:C9:8E:7B:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3a498b1ce51fc7398249c05c0fecbb9ea278411.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94a9f702-1d4c-4965-9a6f-dde57648a10d/34242743d3e7914eac40c5575714c6695d29370f.roa
Signing time:             Thu 03 Aug 2023 23:18:07 +0000
ROA not before:           Wed 02 Aug 2023 23:18:07 +0000
ROA not after:            Sun 03 Aug 2025 23:18:07 +0000
asID:                     22884
IP address blocks:        148.230.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5576 (0x15c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a498b1ce51fc7398249c05c0fecbb9ea278411
        Validity
            Not Before: Aug  2 23:18:07 2023 GMT
            Not After : Aug  3 23:18:07 2025 GMT
        Subject: CN=34242743d3e7914eac40c5575714c6695d29370f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:da:f4:6f:8c:9f:af:1f:10:09:53:f5:78:e9:
                    30:77:39:29:fc:65:86:8e:08:6b:83:5d:03:63:8f:
                    3f:f2:60:86:7e:ef:0b:93:c0:79:d8:4a:c0:6d:e5:
                    b0:68:88:de:e2:98:44:6e:87:45:b8:49:40:f2:53:
                    b3:0c:a1:0d:86:aa:d7:2d:03:18:97:0b:c4:41:8c:
                    d1:d9:c5:ba:7c:40:57:45:38:47:db:79:14:4b:c9:
                    12:c4:0b:ac:5b:01:60:c2:34:75:00:87:48:9d:7a:
                    70:9c:0e:23:1d:1a:1f:00:78:4e:22:86:40:ae:d3:
                    cc:b7:0a:2c:be:13:19:dc:af:bb:50:62:e0:2a:4e:
                    0a:80:a9:14:5a:3a:5d:68:a6:8b:06:57:a5:43:56:
                    08:91:7e:e0:86:6c:4a:5c:16:ed:23:e8:bb:2a:89:
                    c8:f5:82:77:45:ab:60:c6:be:5f:32:bc:f0:95:6b:
                    71:c6:d2:b3:99:bb:1f:54:0e:48:f6:7c:e5:2b:5c:
                    08:47:d4:7e:7c:2d:fe:17:98:a1:cd:fc:23:51:22:
                    ab:52:dd:1d:48:2b:03:31:65:87:05:5d:f8:8e:55:
                    fa:25:57:99:09:a2:43:e6:81:41:0b:21:6f:9c:ed:
                    2a:d8:8e:74:37:aa:be:46:41:5b:9d:0b:59:21:d7:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3F:08:CE:BB:9C:A4:FD:BA:6D:82:71:E9:83:9E:31:8C:CD:F6:49
            X509v3 Authority Key Identifier:
                keyid:03:6E:51:2D:A7:CF:48:B2:4A:6B:F6:68:00:37:29:FC:C9:8E:7B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3a498b1ce51fc7398249c05c0fecbb9ea278411.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94a9f702-1d4c-4965-9a6f-dde57648a10d/34242743d3e7914eac40c5575714c6695d29370f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94a9f702-1d4c-4965-9a6f-dde57648a10d/f3a498b1ce51fc7398249c05c0fecbb9ea278411.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.230.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         22:4d:59:be:c3:3f:f0:83:1e:6b:c3:1b:7b:03:4d:74:5d:ae:
         b4:30:38:21:e2:15:84:9f:a0:a4:03:32:ca:ff:cc:c8:96:6a:
         17:44:88:b3:9d:62:23:57:b7:78:c4:77:e6:f0:bf:95:a6:b5:
         f7:ef:39:da:73:44:b1:d3:59:56:ac:57:d9:e5:c4:94:d7:41:
         96:64:c9:21:a3:76:e7:95:99:cd:9e:1f:2b:ee:7e:2a:72:76:
         5c:d0:d7:bf:07:3d:92:13:5f:0f:4f:18:c9:32:1e:19:db:3b:
         ef:fa:cf:b5:e2:0b:90:70:79:35:45:2c:c0:aa:47:9a:f4:21:
         24:28:db:1a:bd:0a:cf:a5:9f:38:67:89:5f:12:56:05:f3:3d:
         b5:d7:3b:aa:25:8d:e2:d0:e2:53:90:95:0c:44:d4:92:ae:4a:
         aa:96:bb:dc:fb:82:ae:c5:85:2c:dd:59:e4:d2:47:aa:1c:00:
         05:7d:8f:fb:a3:07:f2:a1:44:89:39:17:f4:80:c7:c0:4e:b2:
         63:88:ad:fd:64:d7:81:bf:3e:b6:3d:1b:6a:8f:fa:d2:f8:a8:
         93:b9:2d:8f:b0:a4:39:e1:4a:69:ab:ea:24:55:a0:a8:68:f6:
         ed:be:32:a6:16:01:65:ab:53:fd:94:5e:02:a2:a4:9c:cd:4e:
         59:0b:41:88
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICFcgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZjNh
NDk4YjFjZTUxZmM3Mzk4MjQ5YzA1YzBmZWNiYjllYTI3ODQxMTAeFw0yMzA4MDIy
MzE4MDdaFw0yNTA4MDMyMzE4MDdaMDMxMTAvBgNVBAMTKDM0MjQyNzQzZDNlNzkx
NGVhYzQwYzU1NzU3MTRjNjY5NWQyOTM3MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCK2vRvjJ+vHxAJU/V46TB3OSn8ZYaOCGuDXQNjjz/yYIZ+7wuT
wHnYSsBt5bBoiN7imERuh0W4SUDyU7MMoQ2GqtctAxiXC8RBjNHZxbp8QFdFOEfb
eRRLyRLEC6xbAWDCNHUAh0idenCcDiMdGh8AeE4ihkCu08y3Ciy+Exncr7tQYuAq
TgqAqRRaOl1oposGV6VDVgiRfuCGbEpcFu0j6Lsqicj1gndFq2DGvl8yvPCVa3HG
0rOZux9UDkj2fOUrXAhH1H58Lf4XmKHN/CNRIqtS3R1IKwMxZYcFXfiOVfolV5kJ
okPmgUELIW+c7SrYjnQ3qr5GQVudC1kh1+3HAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUhT8IzrucpP26bYJx6YOeMYzN9kkwHwYDVR0jBBgwFoAUA25RLafPSLJKa/Zo
ADcp/MmOe0cwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9mM2E0OThi
MWNlNTFmYzczOTgyNDljMDVjMGZlY2JiOWVhMjc4NDExLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85NGE5ZjcwMi0xZDRjLTQ5NjUtOWE2Zi1kZGU1NzY0
OGExMGQvMzQyNDI3NDNkM2U3OTE0ZWFjNDBjNTU3NTcxNGM2Njk1ZDI5MzcwZi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzk0YTlmNzAyLTFkNGMtNDk2NS05YTZmLWRkZTU3
NjQ4YTEwZC9mM2E0OThiMWNlNTFmYzczOTgyNDljMDVjMGZlY2JiOWVhMjc4NDEx
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQHlOaAMA0GCSqGSIb3DQEBCwUAA4IBAQAiTVm+wz/wgx5rwxt7
A010Xa60MDgh4hWEn6CkAzLK/8zIlmoXRIiznWIjV7d4xHfm8L+VprX37znac0Sx
01lWrFfZ5cSU10GWZMkho3bnlZnNnh8r7n4qcnZc0Ne/Bz2SE18PTxjJMh4Z2zvv
+s+14guQcHk1RSzAqkea9CEkKNsavQrPpZ84Z4lfElYF8z211zuqJY3i0OJTkJUM
RNSSrkqqlrvc+4KuxYUs3Vnk0keqHAAFfY/7owfyoUSJORf0gMfATrJjiK39ZNeB
vz62PRtqj/rS+KiTuS2PsKQ54Uppq+okVaCoaPbtvjKmFgFlq1P9lF4CoqSczU5Z
C0GI
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org