Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/946a2ce7e82062482a6503bb3d5db3afea61865a.roa
File:                     946a2ce7e82062482a6503bb3d5db3afea61865a.roa (raw, json)
Hash identifier:          6pJBgYHTFS9phzZx4wTgnYWAt9E8U0i3+nQUPfsTbMQ=
Subject key identifier:   2A:41:71:20:28:88:A6:4C:AA:85:E0:8A:34:54:56:DD:62:C0:DB:8B
Certificate issuer:       /CN=13ad0e0bffa139566366b7eb0bc778c996d8fc38
Certificate serial:       2452CC
Authority key identifier: 44:24:91:D9:6F:EB:85:2F:B0:2D:2E:7A:E1:3B:09:66:CD:51:C5:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13ad0e0bffa139566366b7eb0bc778c996d8fc38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/946a2ce7e82062482a6503bb3d5db3afea61865a.roa
Signing time:             Tue 17 Oct 2023 20:23:41 +0000
ROA not before:           Mon 16 Oct 2023 20:23:38 +0000
ROA not after:            Tue 17 Oct 2028 20:23:38 +0000
asID:                     52468
IP address blocks:        201.182.150.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2380492 (0x2452cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ad0e0bffa139566366b7eb0bc778c996d8fc38
        Validity
            Not Before: Oct 16 20:23:38 2023 GMT
            Not After : Oct 17 20:23:38 2028 GMT
        Subject: CN=946a2ce7e82062482a6503bb3d5db3afea61865a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:8a:99:20:6d:17:a0:b3:1b:0a:88:b0:1d:
                    5e:44:51:68:45:0f:49:e4:09:cf:c7:53:ac:23:87:
                    c1:1c:9f:8e:b5:c2:4e:94:3e:b9:0b:e9:37:16:66:
                    80:1c:6d:50:b9:1b:cb:41:05:0b:24:35:0e:49:8a:
                    6f:70:01:6a:06:98:c5:32:84:02:cd:2f:bb:01:84:
                    a7:53:d7:a3:83:00:33:27:00:5e:ae:1e:3f:95:ad:
                    22:73:12:60:3d:f8:c5:87:1f:48:6e:c2:81:7c:5e:
                    76:0c:30:29:cf:ff:ef:ff:71:7c:02:85:21:82:ee:
                    8f:1f:e4:12:58:2e:64:62:19:78:f1:4f:f7:c5:f6:
                    b9:44:60:28:09:7b:47:b1:75:48:6f:77:3e:45:af:
                    d8:ff:a3:1d:9a:d9:2e:da:d5:96:17:56:53:49:b2:
                    a7:da:b3:ac:e8:4a:59:d7:45:79:22:ee:7f:f6:49:
                    a9:6e:5e:7d:15:1c:48:ec:59:ca:e6:d2:c7:85:bd:
                    da:18:b4:30:03:46:9b:e3:4f:e4:f2:6e:6f:79:b7:
                    41:81:8b:12:2a:c8:be:20:f9:05:cc:29:00:93:1b:
                    3c:e2:d3:a4:56:f3:c1:fd:7e:e0:1b:4d:08:f8:6b:
                    78:5c:92:5c:89:01:e0:b4:c1:54:f5:41:3a:08:15:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:41:71:20:28:88:A6:4C:AA:85:E0:8A:34:54:56:DD:62:C0:DB:8B
            X509v3 Authority Key Identifier:
                keyid:44:24:91:D9:6F:EB:85:2F:B0:2D:2E:7A:E1:3B:09:66:CD:51:C5:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13ad0e0bffa139566366b7eb0bc778c996d8fc38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/946a2ce7e82062482a6503bb3d5db3afea61865a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/13ad0e0bffa139566366b7eb0bc778c996d8fc38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:08:a8:01:ae:d1:31:4c:d9:2c:9c:f6:87:c7:06:44:b8:09:
         5e:cb:52:2f:f5:13:a7:fd:34:51:95:cf:6b:19:3e:37:75:fb:
         b4:74:ae:9a:f2:99:a3:29:0c:81:78:d3:9a:16:5d:34:7b:eb:
         85:03:5f:ab:58:67:91:0b:0e:0d:88:2a:d4:2d:bb:8a:6a:d0:
         89:e6:fc:c8:8f:93:e0:53:66:1c:64:c7:dc:27:ea:dd:9e:85:
         b5:a0:b7:19:e7:7b:8a:7f:c6:19:8a:02:72:ee:7f:ab:a4:4e:
         f5:ab:6a:17:d9:83:ac:dc:aa:ec:f0:9e:9a:5f:0e:ec:61:07:
         8b:0d:cc:dd:e8:8e:b7:81:7d:7b:a8:3f:bc:d3:54:14:26:87:
         35:d1:31:5d:66:71:80:d3:f6:e5:f3:d1:19:f8:25:45:9d:7d:
         f0:38:75:dc:d7:68:b2:a4:01:15:c3:34:78:4b:a8:f3:76:76:
         ee:2b:ed:34:f6:51:2b:53:08:48:69:c9:3f:43:9c:95:41:2f:
         8f:11:38:7e:ce:23:a9:47:01:52:57:d1:13:29:71:b8:8f:4a:
         a1:44:b2:3b:44:6e:f7:a5:37:f8:73:44:4d:39:b0:ad:d1:31:
         13:08:a4:34:23:12:d5:20:6f:6f:e9:53:a0:40:d8:b9:03:21:
         32:9e:86:9a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJFLMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEz
YWQwZTBiZmZhMTM5NTY2MzY2YjdlYjBiYzc3OGM5OTZkOGZjMzgwHhcNMjMxMDE2
MjAyMzM4WhcNMjgxMDE3MjAyMzM4WjAzMTEwLwYDVQQDEyg5NDZhMmNlN2U4MjA2
MjQ4MmE2NTAzYmIzZDVkYjNhZmVhNjE4NjVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApO2KmSBtF6CzGwqIsB1eRFFoRQ9J5AnPx1OsI4fBHJ+OtcJO
lD65C+k3FmaAHG1QuRvLQQULJDUOSYpvcAFqBpjFMoQCzS+7AYSnU9ejgwAzJwBe
rh4/la0icxJgPfjFhx9IbsKBfF52DDApz//v/3F8AoUhgu6PH+QSWC5kYhl48U/3
xfa5RGAoCXtHsXVIb3c+Ra/Y/6Mdmtku2tWWF1ZTSbKn2rOs6EpZ10V5Iu5/9kmp
bl59FRxI7FnK5tLHhb3aGLQwA0ab40/k8m5vebdBgYsSKsi+IPkFzCkAkxs84tOk
VvPB/X7gG00I+Gt4XJJciQHgtMFU9UE6CBXNdQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCpBcSAoiKZMqoXgijRUVt1iwNuLMB8GA1UdIwQYMBaAFEQkkdlv64UvsC0u
euE7CWbNUcWgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTNhZDBl
MGJmZmExMzk1NjYzNjZiN2ViMGJjNzc4Yzk5NmQ4ZmMzOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTk1MmQyN2MtYzkxMC00NTY5LWFmMjAtOTAxZGQ2
NjU5NWFjLzk0NmEyY2U3ZTgyMDYyNDgyYTY1MDNiYjNkNWRiM2FmZWE2MTg2NWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OTUyZDI3Yy1jOTEwLTQ1NjktYWYyMC05MDFk
ZDY2NTk1YWMvMTNhZDBlMGJmZmExMzk1NjYzNjZiN2ViMGJjNzc4Yzk5NmQ4ZmMz
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcm2ljANBgkqhkiG9w0BAQsFAAOCAQEAMQioAa7RMUzZLJz2
h8cGRLgJXstSL/UTp/00UZXPaxk+N3X7tHSumvKZoykMgXjTmhZdNHvrhQNfq1hn
kQsODYgq1C27imrQieb8yI+T4FNmHGTH3Cfq3Z6FtaC3Ged7in/GGYoCcu5/q6RO
9atqF9mDrNyq7PCeml8O7GEHiw3M3eiOt4F9e6g/vNNUFCaHNdExXWZxgNP25fPR
GfglRZ198Dh13NdosqQBFcM0eEuo83Z27ivtNPZRK1MISGnJP0OclUEvjxE4fs4j
qUcBUlfREylxuI9KoUSyO0Ru96U3+HNETTmwrdExEwikNCMS1SBvb+lToEDYuQMh
Mp6Gmg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org