Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/f4f4be58acc88ba4e0704e59fbb3c5adea98d54d.roa
File:                     f4f4be58acc88ba4e0704e59fbb3c5adea98d54d.roa (raw, json)
Hash identifier:          hvuPC30cqvlR1SDi71Y6+aPEsIZUYl0RCZsd3xKAe7M=
Subject key identifier:   CF:FE:95:0D:62:BF:1A:BF:91:47:AF:55:F2:00:BD:2F:53:A7:69:FB
Certificate issuer:       /CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Certificate serial:       0DABA6
Authority key identifier: 1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/f4f4be58acc88ba4e0704e59fbb3c5adea98d54d.roa
Signing time:             Wed 24 Mar 2021 22:48:54 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     264683
IP address blocks:        168.227.24.0/24 maxlen: 24
                          168.227.25.0/24 maxlen: 24
                          168.227.26.0/24 maxlen: 24
                          168.227.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895910 (0xdaba6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbdd559af6aac3348d7a10caf850960a448f10d
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=f4f4be58acc88ba4e0704e59fbb3c5adea98d54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:49:f9:86:81:12:b5:6f:48:73:06:7f:2a:2b:
                    f2:09:15:e8:05:1e:08:46:6d:a5:31:d5:1c:81:51:
                    42:5a:8d:ac:85:72:f5:7f:d8:18:1e:9c:d9:be:7a:
                    e5:1a:b4:fd:c6:9d:77:08:0c:6b:00:ab:39:91:48:
                    c1:c5:e3:7d:62:0e:54:bf:b6:4e:70:74:30:ad:90:
                    39:cd:7a:2e:3c:5f:81:57:4a:e4:63:af:d6:48:49:
                    05:a7:e0:2a:85:aa:ee:c0:92:1c:97:6d:95:a0:af:
                    9a:a4:b5:de:29:45:2c:53:1b:5f:b8:e6:c1:45:39:
                    6c:46:a5:fb:ab:26:1a:35:7c:10:a2:bd:a1:ae:95:
                    c1:c3:48:f1:c0:d8:6c:af:c8:b8:8b:c8:5a:d7:8e:
                    8f:92:3f:83:1e:ac:3c:76:da:20:0a:37:8d:c4:08:
                    d9:80:ed:b1:a8:f4:03:e5:d8:99:08:37:b3:28:da:
                    53:9f:7f:33:8f:85:6a:43:e2:ab:f8:4b:95:16:8e:
                    ae:35:89:2f:3a:6b:56:ba:6d:f2:41:0a:fc:9a:86:
                    f6:e7:28:d9:c4:9a:28:01:44:55:42:e9:76:da:9d:
                    42:79:19:d7:80:b5:e3:32:2a:e6:66:9c:e1:c2:7d:
                    ba:73:c8:3b:ee:b5:39:f6:aa:88:19:a4:b9:f1:ea:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FE:95:0D:62:BF:1A:BF:91:47:AF:55:F2:00:BD:2F:53:A7:69:FB
            X509v3 Authority Key Identifier:
                keyid:1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/f4f4be58acc88ba4e0704e59fbb3c5adea98d54d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:4c:77:5a:38:c9:0b:e0:94:cd:3e:72:54:43:88:27:a5:40:
         2a:e6:d5:a3:0c:f7:fd:e3:b2:c1:de:93:a8:63:9f:73:70:e9:
         5f:b5:8e:4f:7f:f5:0f:75:6a:91:b9:fa:a3:77:7d:4c:5b:bd:
         84:73:83:3d:58:17:1a:1c:ad:a1:39:44:b2:2d:49:33:fe:ba:
         50:c1:55:74:d4:7e:17:7b:d1:d9:bc:29:a5:f3:22:5d:15:85:
         e9:0b:b0:5f:9c:6d:17:bd:90:30:e6:bc:93:da:5c:ee:40:e5:
         47:7e:b5:b7:2f:b0:63:e1:f9:ff:5b:24:97:df:a4:ce:98:f7:
         19:05:60:0d:6a:67:a3:75:42:18:59:79:a7:cd:1e:f8:81:51:
         39:58:45:f5:9a:f1:9c:38:58:ef:61:7d:91:c6:1d:34:7c:eb:
         78:fb:8c:8b:e5:82:9f:28:81:4e:44:0f:b2:22:0d:96:68:e5:
         a0:7a:22:35:02:a7:47:42:1e:2f:56:8d:94:2d:af:66:17:fd:
         94:09:07:9f:4a:b4:8d:a5:b9:e6:09:49:c8:55:32:e4:87:d3:
         31:a3:ee:2e:9d:cf:fd:9e:4f:4e:0d:07:3d:ec:8d:c3:c0:c0:
         b4:db:dc:b3:20:62:f1:62:ed:ef:42:7b:2a:ad:a4:77:88:cd:
         9c:c5:e7:8a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDaumMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJm
YmRkNTU5YWY2YWFjMzM0OGQ3YTEwY2FmODUwOTYwYTQ0OGYxMGQwHhcNMjEwMzI0
MjI0NzU5WhcNMjMwMzI0MjI0NzU5WjAzMTEwLwYDVQQDEyhmNGY0YmU1OGFjYzg4
YmE0ZTA3MDRlNTlmYmIzYzVhZGVhOThkNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp0n5hoEStW9IcwZ/KivyCRXoBR4IRm2lMdUcgVFCWo2shXL1
f9gYHpzZvnrlGrT9xp13CAxrAKs5kUjBxeN9Yg5Uv7ZOcHQwrZA5zXouPF+BV0rk
Y6/WSEkFp+AqharuwJIcl22VoK+apLXeKUUsUxtfuObBRTlsRqX7qyYaNXwQor2h
rpXBw0jxwNhsr8i4i8ha146Pkj+DHqw8dtogCjeNxAjZgO2xqPQD5diZCDezKNpT
n38zj4VqQ+Kr+EuVFo6uNYkvOmtWum3yQQr8mob25yjZxJooAURVQul22p1CeRnX
gLXjMirmZpzhwn26c8g77rU59qqIGaS58eoW5wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFM/+lQ1ivxq/kUevVfIAvS9Tp2n7MB8GA1UdIwQYMBaAFB0G69sZpzK7R7gp
S5aVAAtfSbLCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmZiZGQ1
NTlhZjZhYWMzMzQ4ZDdhMTBjYWY4NTA5NjBhNDQ4ZjEwZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWIyYzcwNjYtOTVjYS00NGNkLWI5YzgtYmQ5N2Q2
ZDcxOGFiL2Y0ZjRiZTU4YWNjODhiYTRlMDcwNGU1OWZiYjNjNWFkZWE5OGQ1NGQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YjJjNzA2Ni05NWNhLTQ0Y2QtYjljOC1iZDk3
ZDZkNzE4YWIvYmZiZGQ1NTlhZjZhYWMzMzQ4ZDdhMTBjYWY4NTA5NjBhNDQ4ZjEw
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjjGDANBgkqhkiG9w0BAQsFAAOCAQEApEx3WjjJC+CUzT5y
VEOIJ6VAKubVowz3/eOywd6TqGOfc3DpX7WOT3/1D3Vqkbn6o3d9TFu9hHODPVgX
GhytoTlEsi1JM/66UMFVdNR+F3vR2bwppfMiXRWF6QuwX5xtF72QMOa8k9pc7kDl
R361ty+wY+H5/1skl9+kzpj3GQVgDWpno3VCGFl5p80e+IFROVhF9ZrxnDhY72F9
kcYdNHzrePuMi+WCnyiBTkQPsiINlmjloHoiNQKnR0IeL1aNlC2vZhf9lAkHn0q0
jaW55glJyFUy5IfTMaPuLp3P/Z5PTg0HPeyNw8DAtNvcsyBi8WLt70J7Kq2kd4jN
nMXnig==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org