Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/4a25a61aa31027dfa97d47f63755af7d32efee2c.roa
File:                     4a25a61aa31027dfa97d47f63755af7d32efee2c.roa (raw, json)
Hash identifier:          xr0EwyPcn9AqEwA6mf6BcNXJgBsiwY8nQaf/hFnBhd0=
Subject key identifier:   06:21:D9:20:5E:0B:A8:5A:E0:64:4F:DD:69:61:86:2E:40:1E:DB:50
Certificate issuer:       /CN=93c6853cfb5dfd892260ae54bb779c64ff4de7ab
Certificate serial:       0DC6E1
Authority key identifier: 70:16:AA:00:A5:DB:F9:E8:0B:F6:19:99:E6:8D:A4:20:4E:FA:DA:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93c6853cfb5dfd892260ae54bb779c64ff4de7ab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/4a25a61aa31027dfa97d47f63755af7d32efee2c.roa
Signing time:             Wed 24 Mar 2021 14:41:20 +0000
ROA not before:           Wed 24 Mar 2021 14:41:20 +0000
ROA not after:            Tue 24 Mar 2026 14:41:20 +0000
asID:                     61468
IP address blocks:        192.188.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902881 (0xdc6e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c6853cfb5dfd892260ae54bb779c64ff4de7ab
        Validity
            Not Before: Mar 24 14:41:20 2021 GMT
            Not After : Mar 24 14:41:20 2026 GMT
        Subject: CN=4a25a61aa31027dfa97d47f63755af7d32efee2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:0e:57:0f:9b:ed:0d:6a:31:12:4b:b1:ee:
                    d3:4c:73:d8:e8:d4:1a:b5:6f:2d:8e:a5:db:91:21:
                    84:71:aa:32:a2:e4:e1:b7:36:dc:0d:90:d7:f6:7e:
                    e3:83:16:f0:76:90:e4:a5:47:54:74:b6:a2:e0:d8:
                    cf:2c:2f:c5:b1:42:30:1e:c2:fd:63:ab:81:a4:92:
                    53:89:27:6c:a4:e0:27:9e:a7:70:4d:16:f1:64:0f:
                    85:ec:1a:42:e2:ef:46:7c:b4:82:9b:2d:f8:08:f8:
                    be:5e:e4:62:f5:54:43:fd:4a:0f:0e:1b:67:ae:f6:
                    dd:9d:c5:1d:8e:fd:4f:45:50:7e:d9:83:1d:51:22:
                    b9:41:fc:c9:9d:9c:b7:c2:b1:e7:3f:34:2e:73:cf:
                    e8:f0:a7:7c:9f:f9:97:7b:3d:6a:8e:9b:cd:6c:9e:
                    8b:24:a5:60:2f:2f:35:ec:ad:0c:63:a3:47:21:95:
                    4a:67:10:38:da:eb:08:fd:22:a0:a9:43:ea:fc:b0:
                    73:52:81:44:24:8e:a1:92:82:dd:5d:28:4e:7a:3f:
                    a2:d4:e0:b8:e2:98:52:c9:f7:f8:9e:1a:19:bb:9f:
                    5b:ee:5e:21:92:98:c2:a8:f9:67:2b:d0:d0:e1:1b:
                    0c:25:fb:b5:cb:1e:f1:c5:f5:ff:08:ef:94:f5:1e:
                    b6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:21:D9:20:5E:0B:A8:5A:E0:64:4F:DD:69:61:86:2E:40:1E:DB:50
            X509v3 Authority Key Identifier:
                keyid:70:16:AA:00:A5:DB:F9:E8:0B:F6:19:99:E6:8D:A4:20:4E:FA:DA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93c6853cfb5dfd892260ae54bb779c64ff4de7ab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/4a25a61aa31027dfa97d47f63755af7d32efee2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a8388856-f161-4eaa-ae03-69e2adad78f8/93c6853cfb5dfd892260ae54bb779c64ff4de7ab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:44:b4:eb:b7:46:16:fe:88:7c:b5:f4:6e:a9:03:dd:6b:17:
         0b:56:cb:9b:9d:91:2a:c3:f0:a9:f5:91:23:53:25:2e:0c:a7:
         02:47:40:93:34:40:ad:18:9b:f8:09:8b:58:a2:2d:fe:09:03:
         37:2e:85:f0:31:07:51:4b:61:c2:bb:b7:36:e7:54:e7:4d:5e:
         d3:1b:4a:86:2a:94:8b:10:32:51:d0:da:47:ef:c5:e0:20:88:
         4c:c0:ac:f8:25:a5:54:05:b5:86:1e:22:79:2f:3a:1c:41:fd:
         9d:a7:4a:8d:fb:c8:4b:52:1f:51:35:a4:7b:04:6d:c8:b4:8e:
         fe:f6:ef:1b:d3:07:78:11:28:31:e0:b1:dd:e8:bf:b7:54:26:
         b1:b0:15:f7:76:cc:16:4e:92:1e:e5:79:20:51:89:f6:2f:d5:
         73:13:04:5e:12:e6:a0:95:34:e9:3d:5f:3d:92:9f:39:67:de:
         78:b6:a5:a3:bb:1d:b2:ce:4d:60:c9:b9:1e:37:c4:52:1d:a9:
         95:cb:5f:d6:47:58:44:34:96:26:8d:2e:8e:d2:c4:81:b6:67:
         89:24:9f:19:6c:af:90:1c:ec:1f:4d:ff:25:b6:17:6d:26:82:
         35:d5:e0:9b:43:4b:37:b3:64:76:b2:bb:48:be:ac:5b:d5:64:
         8a:e2:b8:f1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDcbhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkz
YzY4NTNjZmI1ZGZkODkyMjYwYWU1NGJiNzc5YzY0ZmY0ZGU3YWIwHhcNMjEwMzI0
MTQ0MTIwWhcNMjYwMzI0MTQ0MTIwWjAzMTEwLwYDVQQDEyg0YTI1YTYxYWEzMTAy
N2RmYTk3ZDQ3ZjYzNzU1YWY3ZDMyZWZlZTJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq3sOVw+b7Q1qMRJLse7TTHPY6NQatW8tjqXbkSGEcaoyouTh
tzbcDZDX9n7jgxbwdpDkpUdUdLai4NjPLC/FsUIwHsL9Y6uBpJJTiSdspOAnnqdw
TRbxZA+F7BpC4u9GfLSCmy34CPi+XuRi9VRD/UoPDhtnrvbdncUdjv1PRVB+2YMd
USK5QfzJnZy3wrHnPzQuc8/o8Kd8n/mXez1qjpvNbJ6LJKVgLy817K0MY6NHIZVK
ZxA42usI/SKgqUPq/LBzUoFEJI6hkoLdXShOej+i1OC44phSyff4nhoZu59b7l4h
kpjCqPlnK9DQ4RsMJfu1yx7xxfX/CO+U9R628QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAYh2SBeC6ha4GRP3Wlhhi5AHttQMB8GA1UdIwQYMBaAFHAWqgCl2/noC/YZ
meaNpCBO+to7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTNjNjg1
M2NmYjVkZmQ4OTIyNjBhZTU0YmI3NzljNjRmZjRkZTdhYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTgzODg4NTYtZjE2MS00ZWFhLWFlMDMtNjllMmFk
YWQ3OGY4LzRhMjVhNjFhYTMxMDI3ZGZhOTdkNDdmNjM3NTVhZjdkMzJlZmVlMmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hODM4ODg1Ni1mMTYxLTRlYWEtYWUwMy02OWUy
YWRhZDc4ZjgvOTNjNjg1M2NmYjVkZmQ4OTIyNjBhZTU0YmI3NzljNjRmZjRkZTdh
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMC8MTANBgkqhkiG9w0BAQsFAAOCAQEAUUS067dGFv6IfLX0
bqkD3WsXC1bLm52RKsPwqfWRI1MlLgynAkdAkzRArRib+AmLWKIt/gkDNy6F8DEH
UUthwru3NudU501e0xtKhiqUixAyUdDaR+/F4CCITMCs+CWlVAW1hh4ieS86HEH9
nadKjfvIS1IfUTWkewRtyLSO/vbvG9MHeBEoMeCx3ei/t1QmsbAV93bMFk6SHuV5
IFGJ9i/VcxMEXhLmoJU06T1fPZKfOWfeeLalo7sdss5NYMm5HjfEUh2plctf1kdY
RDSWJo0ujtLEgbZniSSfGWyvkBzsH03/JbYXbSaCNdXgm0NLN7NkdrK7SL6sW9Vk
iuK48Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org