Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/60edd9ce0883abf5ea58f81495a6dd1d0da8e517.roa
File:                     60edd9ce0883abf5ea58f81495a6dd1d0da8e517.roa (raw, json)
Hash identifier:          5b4+3lvn//WuL7pXj28k7DTwkC6s3tslGU5mw5sLdsc=
Subject key identifier:   7C:B3:69:4F:C5:B4:08:B2:0D:1A:72:D9:A6:AB:84:8D:14:7E:FF:47
Certificate issuer:       /CN=83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed
Certificate serial:       0DC017
Authority key identifier: 3D:39:A9:39:8B:5A:62:15:8B:BC:A2:DF:02:AA:22:8B:D5:9F:48:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/60edd9ce0883abf5ea58f81495a6dd1d0da8e517.roa
Signing time:             Wed 24 Mar 2021 14:32:02 +0000
ROA not before:           Wed 24 Mar 2021 14:32:02 +0000
ROA not after:            Tue 24 Mar 2026 14:32:02 +0000
asID:                     265646
IP address blocks:        170.247.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901143 (0xdc017)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed
        Validity
            Not Before: Mar 24 14:32:02 2021 GMT
            Not After : Mar 24 14:32:02 2026 GMT
        Subject: CN=60edd9ce0883abf5ea58f81495a6dd1d0da8e517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:69:9f:11:91:66:d9:70:42:c4:f7:0d:68:
                    eb:eb:78:9c:75:9a:44:dd:65:0c:a9:8c:b8:08:95:
                    1b:a1:31:36:da:19:ba:78:b8:0e:4d:52:8b:42:45:
                    5c:7b:e5:cb:17:3d:c5:31:b1:30:2f:7a:f3:fa:d3:
                    b1:56:01:f7:0e:8c:c0:9f:3d:35:df:2d:52:91:40:
                    a2:dc:45:a6:09:35:f8:56:d4:a1:bb:9e:b0:81:be:
                    2a:f4:2c:ed:c5:81:5c:27:b8:85:22:38:0b:1c:5e:
                    5c:8d:37:34:43:3f:26:8f:c9:d8:5e:60:13:d7:8d:
                    47:e6:58:1f:b1:89:18:b5:cf:7b:bd:9e:3f:9b:dd:
                    04:73:22:64:75:83:18:6e:e6:fd:4f:fe:02:7c:3e:
                    1d:e5:44:b7:8d:43:97:a3:59:a3:4d:f2:2c:90:8c:
                    63:ac:c3:d1:da:b4:8e:fd:c6:9d:cc:32:a5:7d:9b:
                    d3:d2:fb:34:f2:17:53:45:17:e2:36:ff:69:d4:00:
                    9a:e6:d5:cc:bb:3f:04:de:08:18:c5:d2:43:d7:35:
                    4d:6a:85:96:ae:e6:d0:4b:b7:6e:2b:0f:3d:6a:94:
                    20:16:77:b2:4f:c8:e9:8b:2e:ff:b1:d6:f5:2d:d0:
                    a6:de:e6:cf:4f:08:14:97:b5:57:5a:c0:f9:75:58:
                    d1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B3:69:4F:C5:B4:08:B2:0D:1A:72:D9:A6:AB:84:8D:14:7E:FF:47
            X509v3 Authority Key Identifier:
                keyid:3D:39:A9:39:8B:5A:62:15:8B:BC:A2:DF:02:AA:22:8B:D5:9F:48:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/60edd9ce0883abf5ea58f81495a6dd1d0da8e517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99fe757e-900d-4ad9-a8e5-33a6bf86faab/83aec5ba47e37e4ff1b1155c4191ea5bbe7eb9ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:3a:14:7a:d9:72:f0:d8:54:fb:bc:49:6a:52:52:62:fc:9b:
         bf:e6:31:9d:94:8f:80:51:5a:01:d9:41:4f:5b:1f:6d:fa:b9:
         fc:08:8f:f8:43:15:dd:d3:25:42:1d:0e:d0:ba:ad:41:b6:66:
         f7:d0:4e:f2:79:26:34:16:7f:fa:d1:d6:32:d6:76:78:56:91:
         42:91:0d:f1:a6:fa:d7:c3:4d:fa:4e:cc:67:41:00:0c:b5:70:
         12:4b:dd:b5:95:f9:72:20:6a:5a:e4:f7:df:62:58:ef:83:b9:
         d4:fd:5e:65:c5:7a:90:ab:0e:d3:8a:2a:4a:3a:f2:47:2d:f0:
         e6:a0:46:7c:65:e9:65:fe:c5:aa:1f:10:c8:14:de:fb:1f:56:
         94:4f:ab:fd:ef:64:23:bc:e4:44:bb:12:df:3b:bc:78:15:d0:
         c0:3b:11:21:5a:2a:6a:22:c5:0b:31:14:db:6c:c5:9d:05:14:
         99:a0:86:ee:1f:99:00:9b:6f:c3:13:d5:d8:e4:2d:08:07:85:
         fc:60:8f:57:1b:bd:4e:27:4d:6c:23:06:b8:b4:66:ed:31:3a:
         f4:e6:88:69:c3:b8:25:df:39:7d:80:0a:39:ec:68:c2:3a:bb:
         57:b1:8d:3d:4e:25:c2:d6:40:25:ef:0c:9a:3a:d1:fd:66:fc:
         eb:5a:6b:d1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDcAXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgz
YWVjNWJhNDdlMzdlNGZmMWIxMTU1YzQxOTFlYTViYmU3ZWI5ZWQwHhcNMjEwMzI0
MTQzMjAyWhcNMjYwMzI0MTQzMjAyWjAzMTEwLwYDVQQDEyg2MGVkZDljZTA4ODNh
YmY1ZWE1OGY4MTQ5NWE2ZGQxZDBkYThlNTE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtf1pnxGRZtlwQsT3DWjr63icdZpE3WUMqYy4CJUboTE22hm6
eLgOTVKLQkVce+XLFz3FMbEwL3rz+tOxVgH3DozAnz013y1SkUCi3EWmCTX4VtSh
u56wgb4q9CztxYFcJ7iFIjgLHF5cjTc0Qz8mj8nYXmAT141H5lgfsYkYtc97vZ4/
m90EcyJkdYMYbub9T/4CfD4d5US3jUOXo1mjTfIskIxjrMPR2rSO/cadzDKlfZvT
0vs08hdTRRfiNv9p1ACa5tXMuz8E3ggYxdJD1zVNaoWWrubQS7duKw89apQgFney
T8jpiy7/sdb1LdCm3ubPTwgUl7VXWsD5dVjRYwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHyzaU/FtAiyDRpy2aarhI0Ufv9HMB8GA1UdIwQYMBaAFD05qTmLWmIVi7yi
3wKqIovVn0gGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODNhZWM1
YmE0N2UzN2U0ZmYxYjExNTVjNDE5MWVhNWJiZTdlYjllZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTlmZTc1N2UtOTAwZC00YWQ5LWE4ZTUtMzNhNmJm
ODZmYWFiLzYwZWRkOWNlMDg4M2FiZjVlYTU4ZjgxNDk1YTZkZDFkMGRhOGU1MTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OWZlNzU3ZS05MDBkLTRhZDktYThlNS0zM2E2
YmY4NmZhYWIvODNhZWM1YmE0N2UzN2U0ZmYxYjExNTVjNDE5MWVhNWJiZTdlYjll
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqr3ODANBgkqhkiG9w0BAQsFAAOCAQEAHDoUetly8NhU+7xJ
alJSYvybv+YxnZSPgFFaAdlBT1sfbfq5/AiP+EMV3dMlQh0O0LqtQbZm99BO8nkm
NBZ/+tHWMtZ2eFaRQpEN8ab618NN+k7MZ0EADLVwEkvdtZX5ciBqWuT332JY74O5
1P1eZcV6kKsO04oqSjryRy3w5qBGfGXpZf7Fqh8QyBTe+x9WlE+r/e9kI7zkRLsS
3zu8eBXQwDsRIVoqaiLFCzEU22zFnQUUmaCG7h+ZAJtvwxPV2OQtCAeF/GCPVxu9
TidNbCMGuLRm7TE69OaIacO4Jd85fYAKOexowjq7V7GNPU4lwtZAJe8MmjrR/Wb8
61pr0Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org