Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/8af55b158371f5bad1ee974d54f43315edbf240b.roa
File:                     8af55b158371f5bad1ee974d54f43315edbf240b.roa (raw, json)
Hash identifier:          kDCRmT5K/W4xk2m7qu6yXqe9DsdBV2O/9CnP0uArazw=
Subject key identifier:   18:96:33:6B:95:E6:2E:ED:4E:51:67:8C:50:B6:9C:CD:74:12:00:02
Certificate issuer:       /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial:       0DAA0E
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/8af55b158371f5bad1ee974d54f43315edbf240b.roa
Signing time:             Wed 24 Mar 2021 14:47:31 +0000
ROA not before:           Wed 24 Mar 2021 14:47:30 +0000
ROA not after:            Tue 24 Mar 2026 14:47:30 +0000
asID:                     27807
IP address blocks:        150.185.0.0/16 maxlen: 16
                          150.186.0.0/15 maxlen: 16
                          150.188.0.0/15 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895502 (0xdaa0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
        Validity
            Not Before: Mar 24 14:47:30 2021 GMT
            Not After : Mar 24 14:47:30 2026 GMT
        Subject: CN=8af55b158371f5bad1ee974d54f43315edbf240b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:f8:83:ca:9c:b6:ae:a7:57:34:14:af:a3:
                    4f:c6:1b:28:b2:e4:73:20:71:50:e7:1a:88:6a:03:
                    28:03:d4:61:66:d4:9b:57:62:29:84:20:53:53:97:
                    75:da:c0:05:ee:6d:1e:bb:d5:b9:fc:56:31:85:12:
                    39:de:07:8e:fe:bc:06:ef:a6:dd:c4:69:50:ab:65:
                    d3:03:03:f8:c2:1a:26:92:f8:c1:b8:ab:c9:f2:f4:
                    83:d3:ba:15:ac:1e:99:7f:7e:47:ea:6d:01:e7:9a:
                    58:86:4a:29:1a:ae:fb:e8:ba:71:6b:d6:b7:cc:8b:
                    ee:b6:dd:14:2c:ad:a5:23:ca:aa:fd:33:3a:91:90:
                    72:2d:5a:26:cd:2e:8f:d7:e8:bf:81:9c:70:eb:d6:
                    06:45:cf:d7:3e:06:07:c8:a2:f3:bb:41:c4:60:78:
                    0e:c5:c5:81:02:1a:56:36:cf:a7:be:87:33:71:88:
                    9a:40:e5:41:71:a4:8e:d9:4e:6e:cb:e0:2c:d5:af:
                    13:05:36:e4:64:46:7f:33:17:70:94:36:84:0c:54:
                    46:8f:6a:b3:cf:89:2e:1d:91:da:b2:d6:95:41:b5:
                    1b:fc:5d:fc:d0:57:19:ef:e8:a0:66:05:0b:bb:b4:
                    82:25:e9:34:29:ee:6d:e6:18:ee:fe:11:85:d6:76:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:96:33:6B:95:E6:2E:ED:4E:51:67:8C:50:B6:9C:CD:74:12:00:02
            X509v3 Authority Key Identifier:
                keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/8af55b158371f5bad1ee974d54f43315edbf240b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.185.0.0-150.189.255.255

    Signature Algorithm: sha256WithRSAEncryption
         3c:7d:63:9e:50:57:16:e2:48:9c:fb:25:59:f9:fe:86:8e:e3:
         dc:fc:0c:a1:7a:50:3a:a0:66:f6:9f:5b:1c:09:55:d7:9c:9e:
         ea:e5:5d:7b:f4:32:16:9c:08:86:0c:8b:90:b6:96:f1:96:a2:
         56:22:6c:75:a4:cd:dd:ea:05:cf:59:81:d9:dc:c7:14:f0:bb:
         5d:2a:00:6f:80:ad:a1:e5:47:df:25:1b:39:ea:ca:ae:18:3b:
         07:e7:2b:bd:ea:d1:b7:49:c4:63:4b:23:2d:2e:81:61:3e:0c:
         a0:b0:55:54:de:70:e3:21:cc:ed:de:12:b7:fe:95:6d:52:ac:
         c1:49:d1:b8:36:de:b7:9b:73:a0:6e:b0:f1:aa:6a:ad:bf:12:
         4a:d5:37:5c:47:95:08:33:eb:e4:1d:f2:06:a2:41:94:dd:08:
         43:7a:6e:51:55:87:41:cd:5d:56:02:9a:06:de:de:ee:67:68:
         8a:53:23:60:86:de:e7:7e:35:c7:a0:e9:d9:7f:41:70:9b:dc:
         a3:ec:78:03:da:e0:8c:3d:d7:b1:12:b1:65:4a:f0:74:dc:57:
         b6:6c:86:35:93:f6:9e:3a:13:93:64:7c:b4:3e:df:fe:6c:99:
         b6:ce:bf:87:b5:d6:46:6f:ae:a0:4b:90:98:b4:8b:14:23:f9:
         e7:cf:26:76
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDDaoOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDcw
M2JlZGUxNTllZmRmM2ZkODVlNmI0OWJkZWQ2Yzc5ZGM1MjUzMDcwHhcNMjEwMzI0
MTQ0NzMwWhcNMjYwMzI0MTQ0NzMwWjAzMTEwLwYDVQQDEyg4YWY1NWIxNTgzNzFm
NWJhZDFlZTk3NGQ1NGY0MzMxNWVkYmYyNDBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArWP4g8qctq6nVzQUr6NPxhsosuRzIHFQ5xqIagMoA9RhZtSb
V2IphCBTU5d12sAF7m0eu9W5/FYxhRI53geO/rwG76bdxGlQq2XTAwP4whomkvjB
uKvJ8vSD07oVrB6Zf35H6m0B55pYhkopGq776Lpxa9a3zIvutt0ULK2lI8qq/TM6
kZByLVomzS6P1+i/gZxw69YGRc/XPgYHyKLzu0HEYHgOxcWBAhpWNs+nvoczcYia
QOVBcaSO2U5uy+As1a8TBTbkZEZ/MxdwlDaEDFRGj2qzz4kuHZHastaVQbUb/F38
0FcZ7+igZgULu7SCJek0Ke5t5hju/hGF1nYchwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFBiWM2uV5i7tTlFnjFC2nM10EgACMB8GA1UdIwQYMBaAFHmsn71HO0C8BtDw
US5CTe1rKogpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzAzYmVk
ZTE1OWVmZGYzZmQ4NWU2YjQ5YmRlZDZjNzlkYzUyNTMwNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWI2YmMxNTAtZGVmYi00MTlhLWFhYTEtYTVhMzU5
NTQyYTg1LzhhZjU1YjE1ODM3MWY1YmFkMWVlOTc0ZDU0ZjQzMzE1ZWRiZjI0MGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YjZiYzE1MC1kZWZiLTQxOWEtYWFhMS1hNWEz
NTk1NDJhODUvNzAzYmVkZTE1OWVmZGYzZmQ4NWU2YjQ5YmRlZDZjNzlkYzUyNTMw
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDDAKAwMAlrkDAwGWvDANBgkqhkiG9w0BAQsFAAOCAQEAPH1jnlBX
FuJInPslWfn+ho7j3PwMoXpQOqBm9p9bHAlV15ye6uVde/QyFpwIhgyLkLaW8Zai
ViJsdaTN3eoFz1mB2dzHFPC7XSoAb4CtoeVH3yUbOerKrhg7B+crverRt0nEY0sj
LS6BYT4MoLBVVN5w4yHM7d4St/6VbVKswUnRuDbet5tzoG6w8apqrb8SStU3XEeV
CDPr5B3yBqJBlN0IQ3puUVWHQc1dVgKaBt7e7mdoilMjYIbe5341x6Dp2X9BcJvc
o+x4A9rgjD3XsRKxZUrwdNxXtmyGNZP2njoTk2R8tD7f/myZts6/h7XWRm+uoEuQ
mLSLFCP5588mdg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org