Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a528d6fd-468f-4a41-a835-3e50e02e7f11/feff8bd155ef6452982a6231c0f8f01044689d42.roa
File:                     feff8bd155ef6452982a6231c0f8f01044689d42.roa (raw, json)
Hash identifier:          BlO0kPl3C2JemQbCpVUwrEnWLZWb7gvsAIdQmNT/2K4=
Subject key identifier:   B1:53:29:11:BD:64:EA:48:C6:D3:54:2B:D0:AE:67:92:0E:EB:97:1B
Certificate issuer:       /CN=d0e50ec4e6fca07a779bf838cb9e0b1d773280b3
Certificate serial:       03E1
Authority key identifier: 42:06:CB:C5:FD:CF:8C:24:FC:7C:00:DD:44:09:EF:55:55:E8:87:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0e50ec4e6fca07a779bf838cb9e0b1d773280b3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a528d6fd-468f-4a41-a835-3e50e02e7f11/feff8bd155ef6452982a6231c0f8f01044689d42.roa
Signing time:             Tue 23 Aug 2022 15:23:26 +0000
ROA not before:           Tue 23 Aug 2022 15:21:46 +0000
ROA not after:            Fri 23 Aug 2024 15:21:46 +0000
asID:                     264741
IP address blocks:        170.233.232.0/22 maxlen: 24
                          170.247.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993 (0x3e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e50ec4e6fca07a779bf838cb9e0b1d773280b3
        Validity
            Not Before: Aug 23 15:21:46 2022 GMT
            Not After : Aug 23 15:21:46 2024 GMT
        Subject: CN=feff8bd155ef6452982a6231c0f8f01044689d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6b:da:30:8f:89:ed:b0:68:9c:5c:b9:01:34:
                    6e:ad:90:e0:f9:2b:da:5d:ab:63:5f:11:c6:3c:5b:
                    0c:e1:03:47:e0:cd:f5:cf:8b:e6:5a:c7:03:81:5f:
                    ac:88:92:76:25:69:a7:41:f3:e7:c3:39:92:7a:c3:
                    3c:a5:b3:60:58:5d:b2:d9:8a:d1:8a:0e:08:d9:b7:
                    b8:42:49:bc:1c:33:4c:76:54:9b:a3:a9:d2:4c:19:
                    22:75:fb:4f:d7:70:13:98:08:f9:f4:df:ee:04:e8:
                    87:f3:06:a8:44:3f:44:00:b2:a0:62:15:18:83:ac:
                    fc:98:76:d7:ac:de:ed:99:09:36:2a:55:67:fc:a9:
                    e3:5d:be:7d:6a:f7:5f:39:38:b1:5c:c7:37:23:ce:
                    04:32:fa:f4:d0:67:03:cc:d6:4b:9d:d9:94:bb:73:
                    84:77:98:ab:aa:11:e2:d2:35:da:b2:d6:f0:18:93:
                    99:32:e3:37:17:01:75:2f:af:8f:1e:4c:8b:7b:a2:
                    6a:eb:72:9e:68:f5:8f:34:62:26:8b:24:4c:7c:0b:
                    25:f7:89:24:6b:9e:e4:0a:a1:4d:28:b4:f8:b5:ff:
                    db:a9:b9:f0:e3:5f:2b:e3:68:e5:4d:c2:fd:5e:21:
                    8b:e5:43:45:44:b2:87:31:fd:7f:06:c5:19:73:4c:
                    78:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:53:29:11:BD:64:EA:48:C6:D3:54:2B:D0:AE:67:92:0E:EB:97:1B
            X509v3 Authority Key Identifier:
                keyid:42:06:CB:C5:FD:CF:8C:24:FC:7C:00:DD:44:09:EF:55:55:E8:87:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0e50ec4e6fca07a779bf838cb9e0b1d773280b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a528d6fd-468f-4a41-a835-3e50e02e7f11/feff8bd155ef6452982a6231c0f8f01044689d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a528d6fd-468f-4a41-a835-3e50e02e7f11/d0e50ec4e6fca07a779bf838cb9e0b1d773280b3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.232.0/22
                  170.247.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:0e:be:65:b6:e5:c8:90:48:17:67:24:1d:aa:d7:9a:16:d9:
         c0:76:f7:58:7b:7a:cc:c7:3c:87:8e:3c:8f:2c:e0:2c:0f:59:
         bd:dc:4b:e5:91:67:8a:e3:a5:7f:a3:70:09:cf:cc:8f:e2:7f:
         c7:17:51:4c:6c:a4:db:d0:2d:42:4d:5e:cf:26:25:89:6d:6f:
         b3:d6:b8:a8:88:04:47:70:0e:a4:1e:77:57:87:84:50:19:4b:
         43:0e:d1:6d:e9:33:7b:47:e5:96:7b:e5:15:80:2d:64:e1:be:
         e8:0c:06:33:49:17:f6:df:87:ed:ee:82:52:c0:35:b1:e3:05:
         b2:58:6e:3c:cc:34:58:5f:3e:93:e6:ba:bd:31:a4:0c:d3:9c:
         03:dd:5c:62:ea:59:dd:00:80:fa:11:2a:9c:06:78:c0:e3:dc:
         1d:33:7c:41:83:a1:af:15:12:34:c4:c9:c8:15:fc:e8:b1:41:
         a8:d3:17:4c:5e:d2:00:d9:ac:fc:c1:a8:15:6b:5b:ae:89:30:
         11:ff:86:cc:06:b4:28:84:bf:15:d1:53:f6:84:32:96:c1:1c:
         78:2e:3b:04:d9:e0:04:03:49:d2:b5:a5:2a:ae:16:cd:03:eb:
         ca:a1:ba:94:63:26:ab:24:b0:5a:c4:49:84:35:17:47:4e:41:
         bd:e4:a3:09
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZDBl
NTBlYzRlNmZjYTA3YTc3OWJmODM4Y2I5ZTBiMWQ3NzMyODBiMzAeFw0yMjA4MjMx
NTIxNDZaFw0yNDA4MjMxNTIxNDZaMDMxMTAvBgNVBAMTKGZlZmY4YmQxNTVlZjY0
NTI5ODJhNjIzMWMwZjhmMDEwNDQ2ODlkNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCEa9owj4ntsGicXLkBNG6tkOD5K9pdq2NfEcY8WwzhA0fgzfXP
i+ZaxwOBX6yIknYlaadB8+fDOZJ6wzyls2BYXbLZitGKDgjZt7hCSbwcM0x2VJuj
qdJMGSJ1+0/XcBOYCPn03+4E6IfzBqhEP0QAsqBiFRiDrPyYdtes3u2ZCTYqVWf8
qeNdvn1q9185OLFcxzcjzgQy+vTQZwPM1kud2ZS7c4R3mKuqEeLSNdqy1vAYk5ky
4zcXAXUvr48eTIt7omrrcp5o9Y80YiaLJEx8CyX3iSRrnuQKoU0otPi1/9upufDj
XyvjaOVNwv1eIYvlQ0VEsocx/X8GxRlzTHhPAgMBAAGjggJhMIICXTAdBgNVHQ4E
FgQUsVMpEb1k6kjG01Qr0K5nkg7rlxswHwYDVR0jBBgwFoAUQgbLxf3PjCT8fADd
RAnvVVXoh7kwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9kMGU1MGVj
NGU2ZmNhMDdhNzc5YmY4MzhjYjllMGIxZDc3MzI4MGIzLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hNTI4ZDZmZC00NjhmLTRhNDEtYTgzNS0zZTUwZTAy
ZTdmMTEvZmVmZjhiZDE1NWVmNjQ1Mjk4MmE2MjMxYzBmOGYwMTA0NDY4OWQ0Mi5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2E1MjhkNmZkLTQ2OGYtNGE0MS1hODM1LTNlNTBl
MDJlN2YxMS9kMGU1MGVjNGU2ZmNhMDdhNzc5YmY4MzhjYjllMGIxZDc3MzI4MGIz
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYw
FDASBAIAATAMAwQCqunoAwQCqvdYMA0GCSqGSIb3DQEBCwUAA4IBAQBHDr5ltuXI
kEgXZyQdqteaFtnAdvdYe3rMxzyHjjyPLOAsD1m93EvlkWeK46V/o3AJz8yP4n/H
F1FMbKTb0C1CTV7PJiWJbW+z1rioiARHcA6kHndXh4RQGUtDDtFt6TN7R+WWe+UV
gC1k4b7oDAYzSRf234ft7oJSwDWx4wWyWG48zDRYXz6T5rq9MaQM05wD3Vxi6lnd
AID6ESqcBnjA49wdM3xBg6GvFRI0xMnIFfzosUGo0xdMXtIA2az8wagVa1uuiTAR
/4bMBrQohL8V0VP2hDKWwRx4LjsE2eAEA0nStaUqrhbNA+vKobqUYyarJLBaxEmE
NRdHTkG95KMJ
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org