Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/493ccaa3fb7c26211eca416607b6a37bbd48b451.roa
File:                     493ccaa3fb7c26211eca416607b6a37bbd48b451.roa (raw, json)
Hash identifier:          L94kf1S0xg8vPcmEjqZIbLyco30whqfr7u50kK/dgAY=
Subject key identifier:   DC:E3:C6:39:69:96:15:BD:DF:74:82:EF:47:23:BA:22:82:FA:45:B4
Certificate issuer:       /CN=27dd18c956e9fcc73465d89de8aa38f3385acb6e
Certificate serial:       246E01
Authority key identifier: D8:FE:8D:3B:A1:29:B1:1B:12:17:DA:72:C8:A1:F2:E5:C8:25:6A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27dd18c956e9fcc73465d89de8aa38f3385acb6e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/493ccaa3fb7c26211eca416607b6a37bbd48b451.roa
Signing time:             Tue 17 Oct 2023 19:54:27 +0000
ROA not before:           Mon 16 Oct 2023 19:54:27 +0000
ROA not after:            Fri 17 Oct 2025 19:54:27 +0000
asID:                     52468
IP address blocks:        164.163.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387457 (0x246e01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27dd18c956e9fcc73465d89de8aa38f3385acb6e
        Validity
            Not Before: Oct 16 19:54:27 2023 GMT
            Not After : Oct 17 19:54:27 2025 GMT
        Subject: CN=493ccaa3fb7c26211eca416607b6a37bbd48b451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7c:69:1c:50:cc:df:ac:e6:8a:02:d3:b1:f7:
                    0a:ef:0b:4f:2a:76:cc:5d:32:c8:27:8c:81:48:3e:
                    ec:e7:21:42:ff:f6:cb:5d:ed:b4:51:c9:f7:a4:5a:
                    07:d6:b8:fc:b5:14:54:66:3d:5f:67:7c:26:5c:49:
                    e7:33:37:74:0a:f8:6c:f3:cf:64:07:9d:2f:d8:72:
                    74:67:63:5e:b0:94:e8:4e:02:23:30:e2:f4:32:b4:
                    51:03:5c:40:46:64:12:c0:3d:6c:66:e6:95:b0:55:
                    86:dc:9e:3e:77:b0:74:1e:23:5c:36:36:97:fc:04:
                    fc:cb:77:5e:34:10:68:ef:3b:4c:e8:22:40:70:b4:
                    ba:df:92:7d:c8:2f:70:4e:15:09:7d:a9:8c:8d:84:
                    8e:5b:58:af:23:2b:5f:b5:e0:bc:42:67:5d:7c:af:
                    c0:d6:f3:7f:e0:83:0d:f8:41:9f:f1:77:c0:59:ee:
                    dd:39:0f:66:04:4f:50:31:a4:71:e6:1e:9b:6c:10:
                    e9:b2:8c:ee:a4:04:7e:42:cb:0f:72:ad:51:1b:fd:
                    18:3e:ae:19:9b:64:b3:62:81:ad:82:c9:b0:31:2f:
                    c8:d3:48:b0:e8:f7:a5:6c:fa:65:2d:4a:ad:13:b1:
                    98:4b:86:12:1d:31:14:57:65:01:52:7b:e7:6f:1a:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E3:C6:39:69:96:15:BD:DF:74:82:EF:47:23:BA:22:82:FA:45:B4
            X509v3 Authority Key Identifier:
                keyid:D8:FE:8D:3B:A1:29:B1:1B:12:17:DA:72:C8:A1:F2:E5:C8:25:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/27dd18c956e9fcc73465d89de8aa38f3385acb6e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/493ccaa3fb7c26211eca416607b6a37bbd48b451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94ca60a3-2055-40fd-94cc-09ad8748a4f8/27dd18c956e9fcc73465d89de8aa38f3385acb6e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:c9:f8:14:33:8a:96:84:5f:00:85:98:28:8d:b2:a0:88:fa:
         59:a6:48:eb:f3:b2:14:f6:62:83:24:f0:b0:cc:95:a8:8b:70:
         56:2a:f2:69:4a:e2:07:5b:d5:70:3e:0e:82:eb:38:08:22:d0:
         9d:40:fb:57:7e:6e:18:49:6c:7f:7a:f2:91:9b:8e:e1:6f:dd:
         64:51:96:7c:4f:4f:1f:9e:8d:1a:48:12:04:8d:d0:22:48:ed:
         14:59:79:88:b2:86:00:8d:69:28:3b:de:79:40:87:11:cb:cd:
         8e:96:67:51:55:e7:bf:d7:91:f3:d5:77:99:a1:44:1f:02:1b:
         35:17:17:a5:67:2d:c7:04:c1:de:cb:a9:75:64:47:af:e7:9e:
         81:88:ea:95:f1:b4:aa:35:fb:90:b5:ab:62:d8:6a:8e:0a:a9:
         87:a0:28:3e:eb:05:82:5d:47:96:ad:11:0c:bd:49:48:57:ba:
         61:0a:3e:d3:c7:22:75:60:f2:88:bf:69:f5:b3:8a:ee:e2:10:
         53:6d:97:25:75:f4:cb:97:d7:b5:ee:90:13:e8:2a:51:06:ea:
         f9:2b:79:53:82:2a:ff:bb:0d:88:2e:42:5c:79:84:89:a4:3e:
         cb:b4:e0:52:fe:d3:45:7e:ce:bd:65:14:86:df:38:10:af:80:
         c5:07:01:43
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJG4BMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI3
ZGQxOGM5NTZlOWZjYzczNDY1ZDg5ZGU4YWEzOGYzMzg1YWNiNmUwHhcNMjMxMDE2
MTk1NDI3WhcNMjUxMDE3MTk1NDI3WjAzMTEwLwYDVQQDEyg0OTNjY2FhM2ZiN2My
NjIxMWVjYTQxNjYwN2I2YTM3YmJkNDhiNDUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjHxpHFDM36zmigLTsfcK7wtPKnbMXTLIJ4yBSD7s5yFC//bL
Xe20Ucn3pFoH1rj8tRRUZj1fZ3wmXEnnMzd0Cvhs889kB50v2HJ0Z2NesJToTgIj
MOL0MrRRA1xARmQSwD1sZuaVsFWG3J4+d7B0HiNcNjaX/AT8y3deNBBo7ztM6CJA
cLS635J9yC9wThUJfamMjYSOW1ivIytfteC8QmddfK/A1vN/4IMN+EGf8XfAWe7d
OQ9mBE9QMaRx5h6bbBDpsozupAR+QssPcq1RG/0YPq4Zm2SzYoGtgsmwMS/I00iw
6PelbPplLUqtE7GYS4YSHTEUV2UBUnvnbxow7QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNzjxjlplhW933SC70cjuiKC+kW0MB8GA1UdIwQYMBaAFNj+jTuhKbEbEhfa
csih8uXIJWoeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjdkZDE4
Yzk1NmU5ZmNjNzM0NjVkODlkZThhYTM4ZjMzODVhY2I2ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTRjYTYwYTMtMjA1NS00MGZkLTk0Y2MtMDlhZDg3
NDhhNGY4LzQ5M2NjYWEzZmI3YzI2MjExZWNhNDE2NjA3YjZhMzdiYmQ0OGI0NTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NGNhNjBhMy0yMDU1LTQwZmQtOTRjYy0wOWFk
ODc0OGE0ZjgvMjdkZDE4Yzk1NmU5ZmNjNzM0NjVkODlkZThhYTM4ZjMzODVhY2I2
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqSjhDANBgkqhkiG9w0BAQsFAAOCAQEAWsn4FDOKloRfAIWY
KI2yoIj6WaZI6/OyFPZigyTwsMyVqItwViryaUriB1vVcD4Ogus4CCLQnUD7V35u
GElsf3rykZuO4W/dZFGWfE9PH56NGkgSBI3QIkjtFFl5iLKGAI1pKDveeUCHEcvN
jpZnUVXnv9eR89V3maFEHwIbNRcXpWctxwTB3supdWRHr+eegYjqlfG0qjX7kLWr
Ythqjgqph6AoPusFgl1Hlq0RDL1JSFe6YQo+08cidWDyiL9p9bOK7uIQU22XJXX0
y5fXte6QE+gqUQbq+St5U4Iq/7sNiC5CXHmEiaQ+y7TgUv7TRX7OvWUUht84EK+A
xQcBQw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org