Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/a037ff51a647c1b66dacab9f53475767e61933dc.roa
File:                     a037ff51a647c1b66dacab9f53475767e61933dc.roa (raw, json)
Hash identifier:          6qRZB2q9L7NHo43qZDRFY5RxUq3YbFYSpHjqBlp+8U4=
Subject key identifier:   4E:C9:B8:D8:8D:32:EA:01:18:BC:D7:02:38:CA:BA:53:92:7C:64:6D
Certificate issuer:       /CN=fb50c890f528476e4fa2d2c2022430fcb59129e0
Certificate serial:       0258C3
Authority key identifier: 1E:4B:B1:5B:13:88:F3:E5:A5:43:14:10:40:C0:C2:63:00:DA:C8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb50c890f528476e4fa2d2c2022430fcb59129e0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/a037ff51a647c1b66dacab9f53475767e61933dc.roa
Signing time:             Tue 08 Aug 2023 09:07:33 +0000
ROA not before:           Mon 07 Aug 2023 09:07:33 +0000
ROA not after:            Fri 08 Aug 2025 09:07:33 +0000
asID:                     45470
IP address blocks:        143.255.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153795 (0x258c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb50c890f528476e4fa2d2c2022430fcb59129e0
        Validity
            Not Before: Aug  7 09:07:33 2023 GMT
            Not After : Aug  8 09:07:33 2025 GMT
        Subject: CN=a037ff51a647c1b66dacab9f53475767e61933dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:07:bd:73:0a:33:df:ee:fe:e2:1d:b4:b6:
                    4a:7d:de:f2:de:12:46:45:b5:a2:e7:15:30:12:31:
                    2b:b9:19:a4:b6:b9:ef:f9:2d:e2:ae:da:ea:40:80:
                    4e:76:a3:e8:1e:5f:d6:b0:55:60:26:a9:bb:db:47:
                    4a:22:98:80:d4:4a:b4:91:c9:a2:70:1b:06:8d:14:
                    2a:65:1c:55:b3:79:15:38:7b:38:89:e9:09:3e:28:
                    c1:a3:2c:b0:67:8c:e5:a3:b1:be:fc:96:31:c2:cf:
                    70:88:0f:0c:19:50:8f:ae:c1:f2:e7:c1:f1:45:96:
                    0f:e9:2a:35:0b:88:6f:fa:53:51:24:68:2d:68:b5:
                    c6:b0:51:ea:06:a5:30:28:32:ca:f7:46:c7:54:cd:
                    7c:85:6e:3e:8b:64:45:2a:b1:87:8b:a1:35:c7:cc:
                    71:f0:f2:82:cd:1d:9f:b7:ed:ef:10:4a:21:52:df:
                    3c:d6:e1:7e:15:18:ac:6a:a2:e1:8b:fa:82:e7:09:
                    cd:80:7b:24:34:5f:a2:3e:ca:e0:fd:ea:5b:74:ed:
                    09:0b:4c:45:32:e5:1b:6d:ac:de:34:6d:ee:0e:18:
                    2f:ef:ec:7d:20:0f:8f:f7:4f:6b:78:82:19:a7:84:
                    a7:d4:a4:07:6f:20:0c:39:1b:11:d7:3b:b2:dc:f7:
                    79:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C9:B8:D8:8D:32:EA:01:18:BC:D7:02:38:CA:BA:53:92:7C:64:6D
            X509v3 Authority Key Identifier:
                keyid:1E:4B:B1:5B:13:88:F3:E5:A5:43:14:10:40:C0:C2:63:00:DA:C8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb50c890f528476e4fa2d2c2022430fcb59129e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/a037ff51a647c1b66dacab9f53475767e61933dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/fb50c890f528476e4fa2d2c2022430fcb59129e0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:0a:34:06:ed:c8:94:c8:34:cf:ff:b4:a7:aa:b3:3f:0f:2b:
         d9:fb:15:13:5c:ac:04:5d:6d:87:52:a2:eb:bd:77:7f:7a:8a:
         78:d3:a9:95:74:b7:56:60:75:86:9d:3b:9a:7e:7a:47:64:c4:
         c4:7b:3d:90:e8:4a:5a:af:70:92:2d:27:0d:6a:4c:2c:41:11:
         bf:aa:68:36:c3:12:86:ef:ba:05:00:fb:46:ee:0d:88:f2:28:
         db:c2:5b:96:6a:aa:18:bf:6f:d6:37:46:37:f3:a9:1f:c2:01:
         bf:fb:38:90:d6:34:96:e9:96:39:24:e6:b7:5c:c4:21:d2:f4:
         c8:8d:a5:e1:a1:2d:ea:c5:c2:e2:30:f5:d4:01:93:ca:ae:83:
         95:88:f4:00:d3:e2:c9:11:aa:8f:17:70:de:a0:bb:a5:6c:1f:
         25:96:66:a8:e5:40:35:b8:22:a1:bf:b7:bd:04:19:82:7e:04:
         32:fe:66:d4:20:e5:e5:eb:21:0a:2f:02:16:87:56:60:93:f8:
         9e:1f:bf:f8:c6:65:91:54:af:1b:4c:fa:de:6d:60:d9:9a:bc:
         48:42:07:c6:72:c9:6c:80:d0:4a:bd:f2:00:36:25:f2:40:18:
         3f:ad:e8:8b:44:a9:d1:c2:44:55:30:d9:f0:1a:67:f5:ee:75:
         6c:cc:21:37
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAljDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZi
NTBjODkwZjUyODQ3NmU0ZmEyZDJjMjAyMjQzMGZjYjU5MTI5ZTAwHhcNMjMwODA3
MDkwNzMzWhcNMjUwODA4MDkwNzMzWjAzMTEwLwYDVQQDEyhhMDM3ZmY1MWE2NDdj
MWI2NmRhY2FiOWY1MzQ3NTc2N2U2MTkzM2RjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArvMHvXMKM9/u/uIdtLZKfd7y3hJGRbWi5xUwEjEruRmktrnv
+S3irtrqQIBOdqPoHl/WsFVgJqm720dKIpiA1Eq0kcmicBsGjRQqZRxVs3kVOHs4
iekJPijBoyywZ4zlo7G+/JYxws9wiA8MGVCPrsHy58HxRZYP6So1C4hv+lNRJGgt
aLXGsFHqBqUwKDLK90bHVM18hW4+i2RFKrGHi6E1x8xx8PKCzR2ft+3vEEohUt88
1uF+FRisaqLhi/qC5wnNgHskNF+iPsrg/epbdO0JC0xFMuUbbazeNG3uDhgv7+x9
IA+P909reIIZp4Sn1KQHbyAMORsR1zuy3Pd5EwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFE7JuNiNMuoBGLzXAjjKulOSfGRtMB8GA1UdIwQYMBaAFB5LsVsTiPPlpUMU
EEDAwmMA2shdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmI1MGM4
OTBmNTI4NDc2ZTRmYTJkMmMyMDIyNDMwZmNiNTkxMjllMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWNmMTYyNmYtY2I2Yi00ZTU2LWE5YzUtOThjNzcy
ZDM5ZWE4L2EwMzdmZjUxYTY0N2MxYjY2ZGFjYWI5ZjUzNDc1NzY3ZTYxOTMzZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85Y2YxNjI2Zi1jYjZiLTRlNTYtYTljNS05OGM3
NzJkMzllYTgvZmI1MGM4OTBmNTI4NDc2ZTRmYTJkMmMyMDIyNDMwZmNiNTkxMjll
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAI//nDANBgkqhkiG9w0BAQsFAAOCAQEANwo0Bu3IlMg0z/+0
p6qzPw8r2fsVE1ysBF1th1Ki6713f3qKeNOplXS3VmB1hp07mn56R2TExHs9kOhK
Wq9wki0nDWpMLEERv6poNsMShu+6BQD7Ru4NiPIo28JblmqqGL9v1jdGN/OpH8IB
v/s4kNY0lumWOSTmt1zEIdL0yI2l4aEt6sXC4jD11AGTyq6DlYj0ANPiyRGqjxdw
3qC7pWwfJZZmqOVANbgiob+3vQQZgn4EMv5m1CDl5eshCi8CFodWYJP4nh+/+MZl
kVSvG0z63m1g2Zq8SEIHxnLJbIDQSr3yADYl8kAYP63oi0Sp0cJEVTDZ8Bpn9e51
bMwhNw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org