Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/ed973745354376673fa8731b8f78c89f1d160414.roa
File:                     ed973745354376673fa8731b8f78c89f1d160414.roa (raw, json)
Hash identifier:          daSjKeScumlbJ0AWeleIdcePmbrMqh4MpSHaF5BRMH4=
Subject key identifier:   63:4B:02:FD:EC:FF:23:D1:D8:96:C6:31:C8:0F:D5:E4:79:A1:F7:FC
Certificate issuer:       /CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Certificate serial:       0DA3CE
Authority key identifier: 1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/ed973745354376673fa8731b8f78c89f1d160414.roa
Signing time:             Wed 24 Mar 2021 14:32:36 +0000
ROA not before:           Wed 24 Mar 2021 14:32:36 +0000
ROA not after:            Tue 24 Mar 2026 14:32:36 +0000
asID:                     264683
IP address blocks:        168.227.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893902 (0xda3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbdd559af6aac3348d7a10caf850960a448f10d
        Validity
            Not Before: Mar 24 14:32:36 2021 GMT
            Not After : Mar 24 14:32:36 2026 GMT
        Subject: CN=ed973745354376673fa8731b8f78c89f1d160414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:3e:8a:6b:8d:7a:63:77:80:34:7c:53:08:
                    ea:38:dd:d4:15:4e:11:f4:9a:a1:7d:2d:f1:f6:13:
                    00:74:df:00:0b:fe:cb:bb:ca:19:64:f5:6a:4e:a6:
                    77:b4:f5:da:63:e4:65:29:5e:fc:d4:b1:8a:86:9b:
                    5b:11:89:67:e2:fd:c5:5f:51:fd:46:96:a5:bd:c8:
                    f7:c7:05:6c:3b:db:2b:1f:33:df:89:45:e6:a1:e0:
                    2b:27:5c:e7:b8:84:63:78:27:75:4b:6e:ed:ee:d1:
                    4a:20:02:78:f1:7b:b0:d7:27:e9:25:83:00:ec:22:
                    c2:95:4f:54:43:be:79:db:64:49:00:79:20:ef:88:
                    ef:06:49:dd:ce:cb:99:e7:ba:c8:e1:9e:95:1e:1e:
                    39:ea:f5:f9:41:51:96:8e:9f:ee:53:2c:a5:ff:f6:
                    50:9d:fd:d9:bd:10:21:e4:c0:57:69:af:05:de:ac:
                    9b:4d:90:dd:6d:86:8f:f3:31:e8:1c:a6:34:1d:d5:
                    04:1e:74:04:75:de:b0:6d:a0:9d:58:be:c7:4e:e6:
                    e1:12:1b:99:52:1c:b6:bb:b1:94:a3:36:ba:4c:13:
                    b8:92:61:d9:62:b9:43:5b:cc:dc:30:b3:4b:87:a1:
                    51:80:85:20:ec:0d:de:ef:08:29:5b:5a:e4:aa:ed:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4B:02:FD:EC:FF:23:D1:D8:96:C6:31:C8:0F:D5:E4:79:A1:F7:FC
            X509v3 Authority Key Identifier:
                keyid:1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/ed973745354376673fa8731b8f78c89f1d160414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:83:75:df:01:5b:9a:59:56:a4:1f:6a:c9:36:2e:f8:88:ca:
         56:88:1e:f0:5b:43:9a:f7:4f:cd:fa:22:6b:d7:df:1d:03:99:
         1c:99:9a:c0:63:20:01:12:d1:fc:be:52:7c:de:f8:a2:e1:62:
         00:14:aa:27:16:53:25:5d:17:32:d6:21:44:76:79:49:10:5e:
         a5:8e:85:62:04:da:ba:e5:aa:37:fd:ed:72:44:7c:b1:36:e9:
         48:53:f3:e1:da:25:07:76:7b:68:3b:b6:0f:99:41:42:1e:39:
         02:df:2a:1a:8d:77:fd:90:8a:74:9a:b5:72:0a:63:e8:ff:e3:
         fb:fd:98:85:5c:27:ab:ee:5a:12:d3:02:c8:6d:3f:f6:b9:ff:
         83:79:95:08:53:07:43:03:f9:13:c9:f7:a6:0c:67:ed:3f:01:
         52:81:98:0d:3b:d5:7d:3b:1a:7c:83:ab:23:7e:0e:52:c7:a3:
         72:7c:31:33:ea:f8:1a:aa:f8:fd:a4:0b:76:9b:7a:56:4c:ae:
         0f:e6:9e:07:98:63:d7:aa:2e:41:18:9f:79:0f:75:42:83:a6:
         00:c0:56:c0:9f:ef:6a:68:91:c9:7c:83:a8:ea:40:50:3a:d7:
         95:05:c0:8b:91:cb:5e:21:b8:08:13:36:70:fc:b5:0c:c6:30:
         ce:b5:03:c4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDaPOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmRkNTU5YWY2YWFjMzM0OGQ3YTEwY2FmODUwOTYwYTQ0OGYxMGQwHhcNMjEwMzI0
MTQzMjM2WhcNMjYwMzI0MTQzMjM2WjAzMTEwLwYDVQQDEyhlZDk3Mzc0NTM1NDM3
NjY3M2ZhODczMWI4Zjc4Yzg5ZjFkMTYwNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAyPc+imuNemN3gDR8UwjqON3UFU4R9JqhfS3x9hMAdN8AC/7L
u8oZZPVqTqZ3tPXaY+RlKV781LGKhptbEYln4v3FX1H9Rpalvcj3xwVsO9srHzPf
iUXmoeArJ1znuIRjeCd1S27t7tFKIAJ48Xuw1yfpJYMA7CLClU9UQ75522RJAHkg
74jvBkndzsuZ57rI4Z6VHh456vX5QVGWjp/uUyyl//ZQnf3ZvRAh5MBXaa8F3qyb
TZDdbYaP8zHoHKY0HdUEHnQEdd6wbaCdWL7HTubhEhuZUhy2u7GUoza6TBO4kmHZ
YrlDW8zcMLNLh6FRgIUg7A3e7wgpW1rkqu3A0QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGNLAv3s/yPR2JbGMcgP1eR5off8MB8GA1UdIwQYMBaAFB0G69sZpzK7R7gp
S5aVAAtfSbLCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiZGQ1
NTlhZjZhYWMzMzQ4ZDdhMTBjYWY4NTA5NjBhNDQ4ZjEwZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWIyYzcwNjYtOTVjYS00NGNkLWI5YzgtYmQ5N2Q2
ZDcxOGFiL2VkOTczNzQ1MzU0Mzc2NjczZmE4NzMxYjhmNzhjODlmMWQxNjA0MTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YjJjNzA2Ni05NWNhLTQ0Y2QtYjljOC1iZDk3
ZDZkNzE4YWIvYmZiZGQ1NTlhZjZhYWMzMzQ4ZDdhMTBjYWY4NTA5NjBhNDQ4ZjEw
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjjGDANBgkqhkiG9w0BAQsFAAOCAQEAGYN13wFbmllWpB9q
yTYu+IjKVoge8FtDmvdPzfoia9ffHQOZHJmawGMgARLR/L5SfN74ouFiABSqJxZT
JV0XMtYhRHZ5SRBepY6FYgTauuWqN/3tckR8sTbpSFPz4dolB3Z7aDu2D5lBQh45
At8qGo13/ZCKdJq1cgpj6P/j+/2YhVwnq+5aEtMCyG0/9rn/g3mVCFMHQwP5E8n3
pgxn7T8BUoGYDTvVfTsafIOrI34OUsejcnwxM+r4Gqr4/aQLdpt6VkyuD+aeB5hj
16ouQRifeQ91QoOmAMBWwJ/vamiRyXyDqOpAUDrXlQXAi5HLXiG4CBM2cPy1DMYw
zrUDxA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:58 2024 by rpki-client on console-fra.rpki-client.org