Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/ecdfa0b04dc3e8f44ccac061e3ae31c227115d2a.roa
File:                     ecdfa0b04dc3e8f44ccac061e3ae31c227115d2a.roa (raw, json)
Hash identifier:          8dE2De7IyA7cfZ/YSnIJTTCEsC+zTl7L1L2kpY82Ago=
Subject key identifier:   C3:10:C4:68:98:68:4A:46:FA:CB:38:A8:B7:62:69:23:8A:65:AF:AE
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       253F20
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/ecdfa0b04dc3e8f44ccac061e3ae31c227115d2a.roa
Signing time:             Tue 17 Oct 2023 19:52:24 +0000
ROA not before:           Mon 16 Oct 2023 19:52:24 +0000
ROA not after:            Fri 17 Oct 2025 19:52:24 +0000
asID:                     52468
IP address blocks:        167.250.180.0/22 maxlen: 24
                          177.234.192.0/18 maxlen: 24
                          200.24.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2440992 (0x253f20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: Oct 16 19:52:24 2023 GMT
            Not After : Oct 17 19:52:24 2025 GMT
        Subject: CN=ecdfa0b04dc3e8f44ccac061e3ae31c227115d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4e:0c:c9:52:48:46:65:40:66:6c:36:10:21:
                    36:0a:e2:8f:30:38:6b:7a:6f:80:12:68:54:6d:66:
                    72:be:3d:f0:4f:ac:95:24:03:35:35:63:29:1e:b3:
                    a2:5f:71:6b:20:81:4f:e4:c9:45:6b:41:b4:43:23:
                    3d:1e:38:e7:b8:67:71:e3:bd:a8:6e:84:91:83:af:
                    a6:76:d2:d8:8b:2f:92:91:d2:00:5c:7a:e2:32:42:
                    96:37:93:ca:1b:22:e3:c9:de:e8:dd:22:8f:fd:b0:
                    1d:12:67:6d:a1:dc:63:fa:47:9b:44:19:7c:4c:e4:
                    c9:1d:fe:38:51:ba:dc:52:55:1e:5d:ba:48:ac:57:
                    7e:3c:9f:99:6c:70:0c:46:77:b4:84:43:e4:78:96:
                    99:53:52:8e:1b:1a:a1:8e:ba:32:3f:cd:74:aa:41:
                    2b:bb:17:8b:c6:75:62:d9:56:76:8d:8d:8e:0d:f9:
                    27:49:60:81:92:1b:0c:23:43:77:95:61:d7:40:89:
                    83:fb:00:c5:ec:89:b4:b1:60:d3:af:8b:e9:37:f8:
                    6c:6a:87:55:8d:d1:83:9d:bf:20:f3:6e:35:3c:ec:
                    63:2d:56:62:a5:10:d4:84:e6:31:8a:52:9d:43:7e:
                    5c:4d:dc:de:48:aa:0f:be:54:00:ba:30:f0:ec:ee:
                    be:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:10:C4:68:98:68:4A:46:FA:CB:38:A8:B7:62:69:23:8A:65:AF:AE
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/ecdfa0b04dc3e8f44ccac061e3ae31c227115d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.180.0/22
                  177.234.192.0/18
                  200.24.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:31:5d:bc:b4:90:11:f1:72:26:d2:a5:55:5c:a9:d1:dd:fd:
         cf:f6:7c:ff:b8:a8:1e:58:b5:8c:0c:ca:ed:5a:c1:39:1a:b1:
         85:df:62:30:f6:2a:74:3d:0c:20:39:24:07:40:93:92:b5:26:
         27:9f:72:87:72:c1:fc:c1:c2:6c:af:99:74:af:89:22:96:e5:
         bb:53:c6:b0:8d:83:26:16:2b:66:62:d7:06:63:73:c7:3c:41:
         2e:36:93:7d:c0:e1:7a:5f:c1:db:71:b0:ad:58:0b:a6:8d:20:
         51:16:32:58:80:f7:4d:54:c0:ec:47:85:96:b1:91:39:5a:f7:
         6b:3c:1e:94:1b:0d:25:07:55:cf:de:f4:66:ac:d1:f8:e0:c4:
         ae:ea:d8:0c:21:98:ee:3c:46:47:76:c0:4a:30:d5:9e:20:69:
         e0:71:2f:30:d1:cf:63:f3:fa:01:e1:e6:28:88:bc:29:ce:bc:
         1a:3e:6d:a7:f0:ad:fa:c6:61:a4:95:e7:7a:d6:2a:3c:af:39:
         34:b9:0e:54:9a:2d:d9:30:0d:ad:3c:1a:7c:96:d9:d3:7e:c5:
         39:ac:1b:cd:f6:ad:c7:fe:e3:fd:04:4c:8d:e6:0a:9a:56:00:
         da:2a:01:6c:9a:bd:24:da:08:61:47:b9:12:d0:9d:0f:45:0c:
         62:e3:68:e2
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDJT8gMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
M2Q2MDAyMjc2ZTIyOTUyMDBjODVhNjYxMjljNDJlNGQ0ODNjMzQwHhcNMjMxMDE2
MTk1MjI0WhcNMjUxMDE3MTk1MjI0WjAzMTEwLwYDVQQDEyhlY2RmYTBiMDRkYzNl
OGY0NGNjYWMwNjFlM2FlMzFjMjI3MTE1ZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5E4MyVJIRmVAZmw2ECE2CuKPMDhrem+AEmhUbWZyvj3wT6yV
JAM1NWMpHrOiX3FrIIFP5MlFa0G0QyM9HjjnuGdx472oboSRg6+mdtLYiy+SkdIA
XHriMkKWN5PKGyLjyd7o3SKP/bAdEmdtodxj+kebRBl8TOTJHf44UbrcUlUeXbpI
rFd+PJ+ZbHAMRne0hEPkeJaZU1KOGxqhjroyP810qkEruxeLxnVi2VZ2jY2ODfkn
SWCBkhsMI0N3lWHXQImD+wDF7Im0sWDTr4vpN/hsaodVjdGDnb8g8241POxjLVZi
pRDUhOYxilKdQ35cTdzeSKoPvlQAujDw7O6+EwIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFMMQxGiYaEpG+ss4qLdiaSOKZa+uMB8GA1UdIwQYMBaAFDAh+wtyXfK860HI
D7qAy4I4YPkKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWIzZDYw
MDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2MzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTI2M2RjNTctZTExYy00NjA4LTlhZjItYmRmYjE2
ZTIxNmRjL2VjZGZhMGIwNGRjM2U4ZjQ0Y2NhYzA2MWUzYWUzMWMyMjcxMTVkMmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMjYzZGM1Ny1lMTFjLTQ2MDgtOWFmMi1iZGZi
MTZlMjE2ZGMvOWIzZDYwMDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2Mz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAqf6tAMEBrHqwAMEBcgYgDANBgkqhkiG9w0BAQsFAAOCAQEA
jzFdvLSQEfFyJtKlVVyp0d39z/Z8/7ioHli1jAzK7VrBORqxhd9iMPYqdD0MIDkk
B0CTkrUmJ59yh3LB/MHCbK+ZdK+JIpblu1PGsI2DJhYrZmLXBmNzxzxBLjaTfcDh
el/B23GwrVgLpo0gURYyWID3TVTA7EeFlrGROVr3azwelBsNJQdVz970ZqzR+ODE
rurYDCGY7jxGR3bASjDVniBp4HEvMNHPY/P6AeHmKIi8Kc68Gj5tp/Ct+sZhpJXn
etYqPK85NLkOVJot2TANrTwafJbZ037FOawbzfatx/7j/QRMjeYKmlYA2ioBbJq9
JNoIYUe5EtCdD0UMYuNo4g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org