Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/dc19359e12a4f95d0280c9848b54783f13a404e3.roa
File:                     dc19359e12a4f95d0280c9848b54783f13a404e3.roa (raw, json)
Hash identifier:          qDAIoOlyv6i3i8L48eT1MIjVBoQ5kBqPsXCn9VQK53Y=
Subject key identifier:   04:DB:6B:16:10:E0:27:12:74:F0:F8:8B:B3:85:96:42:24:72:93:B7
Certificate issuer:       /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial:       11D0
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/dc19359e12a4f95d0280c9848b54783f13a404e3.roa
Signing time:             Wed 21 Sep 2022 20:43:18 +0000
ROA not before:           Wed 21 Sep 2022 20:41:06 +0000
ROA not after:            Sat 21 Sep 2024 20:41:06 +0000
asID:                     8163
IP address blocks:        186.121.126.0/24 maxlen: 24
                          186.121.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4560 (0x11d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
        Validity
            Not Before: Sep 21 20:41:06 2022 GMT
            Not After : Sep 21 20:41:06 2024 GMT
        Subject: CN=dc19359e12a4f95d0280c9848b54783f13a404e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:8c:23:76:bd:a5:db:6f:3f:bd:42:52:fc:
                    c0:0d:f4:08:be:34:db:6e:a9:38:32:ff:18:7a:5b:
                    69:fa:36:3b:6c:01:ea:31:f1:1c:df:53:ff:b1:73:
                    b6:77:23:2d:78:a6:b7:0b:42:16:77:59:f8:35:d1:
                    2a:96:86:b4:24:f7:90:a9:09:b3:b1:07:58:e3:d0:
                    a9:33:29:01:57:58:e7:8a:4d:36:1f:7e:49:9d:cc:
                    11:2b:a5:0c:68:7a:df:b1:f3:ad:8c:fb:8f:32:a2:
                    d9:ab:29:ef:7f:13:f3:47:df:9a:41:0d:b7:2e:27:
                    0e:2d:02:f4:d0:88:b9:ac:a2:38:0c:9f:ee:c7:1a:
                    bf:52:21:43:87:57:a7:63:ca:d4:29:e3:47:e6:c1:
                    48:a8:f9:71:50:54:a3:82:73:73:a9:33:5f:18:67:
                    a5:35:e7:ec:e3:a6:62:a6:8f:9e:ce:9f:1e:7f:54:
                    31:ee:11:7b:e0:b7:c0:65:68:6b:54:57:16:f8:09:
                    f0:e9:99:8b:ff:50:3a:a1:9e:96:1e:6b:e6:f2:ee:
                    21:3d:d9:18:97:a4:b5:47:f8:6a:98:a0:39:f3:47:
                    9a:b4:5d:1c:32:dd:6e:d9:61:0b:f9:e4:36:1b:34:
                    00:0b:17:bf:67:f2:aa:bf:96:51:8c:c2:31:54:12:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DB:6B:16:10:E0:27:12:74:F0:F8:8B:B3:85:96:42:24:72:93:B7
            X509v3 Authority Key Identifier:
                keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/dc19359e12a4f95d0280c9848b54783f13a404e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:42:2a:34:22:47:e9:1d:ca:9f:16:44:e0:44:c7:01:90:46:
         d8:83:b9:2f:67:59:1d:61:64:0e:d9:24:ad:3f:64:f5:df:d1:
         0a:ab:e3:9e:10:b9:af:01:76:4f:59:86:be:ae:cd:13:65:ab:
         6c:80:36:d7:2d:e7:d8:84:2f:21:10:29:fe:74:d7:de:16:eb:
         14:6f:2e:ba:28:6d:a5:0c:61:c6:6a:fa:a9:30:05:5c:b2:f9:
         4f:0f:15:8c:9e:08:38:2f:1c:6b:39:69:72:06:0d:1a:7d:4e:
         9f:98:89:3a:b8:7a:88:dc:f3:ca:f4:00:29:e5:23:90:10:39:
         80:dc:62:42:bd:b6:48:68:44:6d:f4:6b:0d:03:76:17:30:e3:
         11:eb:68:9b:66:9c:f5:81:40:51:9a:5a:6c:3e:94:2f:2d:2c:
         0e:11:d2:e3:14:ff:00:06:64:23:8d:7e:62:eb:30:cd:94:74:
         d9:45:a6:fb:ce:67:f9:bd:8f:ab:f8:ba:ef:03:2b:50:10:d4:
         32:6f:7c:8f:b0:33:0e:bd:e8:2b:d9:06:f9:10:31:9d:15:b1:
         35:ff:8b:cb:d3:5b:4b:5f:6a:3c:ac:80:49:2d:5e:b9:9e:24:
         2a:09:06:06:80:4f:81:5e:c3:21:d6:df:b2:7a:73:76:f8:1e:
         32:f9:14:a3
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjBj
ZmQzNmE1NTZlMWE0NmMxOGRlNTNkM2ZhODFiMGUxZTk3MGYyMzAeFw0yMjA5MjEy
MDQxMDZaFw0yNDA5MjEyMDQxMDZaMDMxMTAvBgNVBAMTKGRjMTkzNTllMTJhNGY5
NWQwMjgwYzk4NDhiNTQ3ODNmMTNhNDA0ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbhowjdr2l228/vUJS/MAN9Ai+NNtuqTgy/xh6W2n6NjtsAeox
8RzfU/+xc7Z3Iy14prcLQhZ3Wfg10SqWhrQk95CpCbOxB1jj0KkzKQFXWOeKTTYf
fkmdzBErpQxoet+x862M+48yotmrKe9/E/NH35pBDbcuJw4tAvTQiLmsojgMn+7H
Gr9SIUOHV6djytQp40fmwUio+XFQVKOCc3OpM18YZ6U15+zjpmKmj57Onx5/VDHu
EXvgt8BlaGtUVxb4CfDpmYv/UDqhnpYea+by7iE92RiXpLVH+GqYoDnzR5q0XRwy
3W7ZYQv55DYbNAALF79n8qq/llGMwjFUEvM5AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUBNtrFhDgJxJ08PiLs4WWQiRyk7cwHwYDVR0jBBgwFoAU1nZUeFHpbz2H+u+k
BerUpLcNiQAwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8yMGNmZDM2
YTU1NmUxYTQ2YzE4ZGU1M2QzZmE4MWIwZTFlOTcwZjIzLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy85NThiMzFlYy0zMTMzLTQyM2QtOGFkYi0zODEzNmIz
YzlmNTEvZGMxOTM1OWUxMmE0Zjk1ZDAyODBjOTg0OGI1NDc4M2YxM2E0MDRlMy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzk1OGIzMWVjLTMxMzMtNDIzZC04YWRiLTM4MTM2
YjNjOWY1MS8yMGNmZDM2YTU1NmUxYTQ2YzE4ZGU1M2QzZmE4MWIwZTFlOTcwZjIz
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQBunl+MA0GCSqGSIb3DQEBCwUAA4IBAQCVQio0IkfpHcqfFkTg
RMcBkEbYg7kvZ1kdYWQO2SStP2T139EKq+OeELmvAXZPWYa+rs0TZatsgDbXLefY
hC8hECn+dNfeFusUby66KG2lDGHGavqpMAVcsvlPDxWMngg4LxxrOWlyBg0afU6f
mIk6uHqI3PPK9AAp5SOQEDmA3GJCvbZIaERt9GsNA3YXMOMR62ibZpz1gUBRmlps
PpQvLSwOEdLjFP8ABmQjjX5i6zDNlHTZRab7zmf5vY+r+LrvAytQENQyb3yPsDMO
vegr2Qb5EDGdFbE1/4vL01tLX2o8rIBJLV65niQqCQYGgE+BXsMh1t+yenN2+B4y
+RSj
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org