Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a9baa840-d32f-4de1-bbef-38ff6d177b9c/d1af0a2042832a1918af28233f06b6e0edba6a15.roa
File:                     d1af0a2042832a1918af28233f06b6e0edba6a15.roa (raw, json)
Hash identifier:          WAt4rHUVEfNaDjbbndy4sBMsJZouNHqR1fgqQ4BFp78=
Subject key identifier:   1A:5F:09:BA:CD:EC:25:65:FD:CC:26:98:08:DF:1E:90:36:58:77:EF
Certificate issuer:       /CN=6a82ac4609981781de65ddd594914153680d2145
Certificate serial:       023B25
Authority key identifier: 39:ED:93:79:50:31:AC:E7:EA:C8:D9:E4:EC:DC:CB:82:5D:29:B1:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a82ac4609981781de65ddd594914153680d2145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a9baa840-d32f-4de1-bbef-38ff6d177b9c/d1af0a2042832a1918af28233f06b6e0edba6a15.roa
Signing time:             Wed 27 Jul 2022 15:40:14 +0000
ROA not before:           Wed 27 Jul 2022 03:00:00 +0000
ROA not after:            Sat 27 Jul 2024 03:00:00 +0000
asID:                     263772
IP address blocks:        138.186.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146213 (0x23b25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a82ac4609981781de65ddd594914153680d2145
        Validity
            Not Before: Jul 27 03:00:00 2022 GMT
            Not After : Jul 27 03:00:00 2024 GMT
        Subject: CN=d1af0a2042832a1918af28233f06b6e0edba6a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4a:73:32:09:bf:39:db:40:4f:1d:21:d0:c0:
                    f9:78:36:33:6f:f2:84:35:8c:97:f2:7a:ec:7d:50:
                    b9:f5:33:63:11:52:65:ac:cf:e8:ac:e5:03:84:b1:
                    81:1c:6a:48:a0:ac:a7:e4:5c:e7:dd:ef:75:aa:2b:
                    5e:48:7b:b1:0c:5e:8f:c5:01:59:78:de:d2:ed:54:
                    2e:17:19:78:a0:a4:1f:c6:c4:00:a3:6a:cd:54:8e:
                    72:57:44:34:cb:2d:40:68:32:80:6e:e4:ec:5e:08:
                    78:5b:76:31:84:c4:bf:4c:ae:f3:56:4e:35:24:6f:
                    62:40:89:1a:a4:07:ac:d1:2c:39:4d:96:1e:a7:91:
                    20:0e:1b:8a:ef:26:35:2d:4a:5c:1b:32:f0:a4:ef:
                    7f:41:50:df:1e:51:64:63:b6:c1:df:c8:73:5c:95:
                    8e:e5:30:b4:bb:d7:ba:15:0a:4d:c8:b4:be:8a:74:
                    41:13:a3:68:e2:b4:ab:48:13:2c:c9:d2:7a:6a:43:
                    f4:ab:89:41:ba:7e:00:8c:5a:76:e1:a8:db:1e:6e:
                    ee:a5:22:1b:50:bd:1b:93:d7:70:e9:2d:65:ff:c4:
                    8c:ff:69:0e:b1:93:a7:73:3b:87:b7:51:92:fd:01:
                    77:c3:74:77:31:c6:be:80:97:f0:64:74:17:21:20:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5F:09:BA:CD:EC:25:65:FD:CC:26:98:08:DF:1E:90:36:58:77:EF
            X509v3 Authority Key Identifier:
                keyid:39:ED:93:79:50:31:AC:E7:EA:C8:D9:E4:EC:DC:CB:82:5D:29:B1:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a82ac4609981781de65ddd594914153680d2145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a9baa840-d32f-4de1-bbef-38ff6d177b9c/d1af0a2042832a1918af28233f06b6e0edba6a15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a9baa840-d32f-4de1-bbef-38ff6d177b9c/6a82ac4609981781de65ddd594914153680d2145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:dc:c6:aa:cb:9b:87:d8:1b:e6:14:e9:3f:5d:a8:79:61:11:
         c8:e9:b6:e2:75:30:8b:00:06:f6:54:7d:24:75:bc:95:72:9f:
         f9:8a:98:53:b8:35:cb:36:e3:18:6b:69:0e:95:de:e2:1e:22:
         fa:e1:d4:db:b5:4c:05:96:84:33:9a:3a:ab:5f:a1:39:3d:23:
         bd:57:7a:85:6e:2f:5e:c8:21:ec:94:ee:b2:17:18:c4:50:a4:
         b1:49:c1:e9:70:b9:2a:84:dc:bb:6a:b1:af:a1:5c:de:f6:be:
         b6:32:6a:33:7f:15:1e:be:6d:50:60:b0:f9:f5:14:79:8f:2b:
         c9:71:1f:75:fd:9d:ad:2d:b5:2f:f0:2d:e5:bd:30:67:d6:52:
         e2:4d:50:df:b4:f0:3f:bb:30:b7:0e:a7:95:ed:a6:e0:b1:fe:
         9c:8e:57:78:21:b3:52:ab:33:d0:2c:b8:4a:4f:4f:39:34:95:
         d4:c5:50:f0:84:50:57:66:19:18:af:b8:62:e7:f1:a8:4a:7f:
         92:b1:7d:f9:34:b0:19:5f:e8:0d:9e:7a:19:17:28:66:8d:dc:
         f5:70:e6:96:c7:43:93:ca:4e:ba:4a:c2:b9:61:54:47:81:32:
         a5:5b:ef:c9:69:b6:b9:f0:81:99:6b:15:e1:dc:b1:64:77:29:
         e5:3f:05:f1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAjslMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZh
ODJhYzQ2MDk5ODE3ODFkZTY1ZGRkNTk0OTE0MTUzNjgwZDIxNDUwHhcNMjIwNzI3
MDMwMDAwWhcNMjQwNzI3MDMwMDAwWjAzMTEwLwYDVQQDEyhkMWFmMGEyMDQyODMy
YTE5MThhZjI4MjMzZjA2YjZlMGVkYmE2YTE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkUpzMgm/OdtATx0h0MD5eDYzb/KENYyX8nrsfVC59TNjEVJl
rM/orOUDhLGBHGpIoKyn5Fzn3e91qiteSHuxDF6PxQFZeN7S7VQuFxl4oKQfxsQA
o2rNVI5yV0Q0yy1AaDKAbuTsXgh4W3YxhMS/TK7zVk41JG9iQIkapAes0Sw5TZYe
p5EgDhuK7yY1LUpcGzLwpO9/QVDfHlFkY7bB38hzXJWO5TC0u9e6FQpNyLS+inRB
E6No4rSrSBMsydJ6akP0q4lBun4AjFp24ajbHm7upSIbUL0bk9dw6S1l/8SM/2kO
sZOnczuHt1GS/QF3w3R3Mca+gJfwZHQXISB+HQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBpfCbrN7CVl/cwmmAjfHpA2WHfvMB8GA1UdIwQYMBaAFDntk3lQMazn6sjZ
5Ozcy4JdKbEAMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmE4MmFj
NDYwOTk4MTc4MWRlNjVkZGQ1OTQ5MTQxNTM2ODBkMjE0NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTliYWE4NDAtZDMyZi00ZGUxLWJiZWYtMzhmZjZk
MTc3YjljL2QxYWYwYTIwNDI4MzJhMTkxOGFmMjgyMzNmMDZiNmUwZWRiYTZhMTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hOWJhYTg0MC1kMzJmLTRkZTEtYmJlZi0zOGZm
NmQxNzdiOWMvNmE4MmFjNDYwOTk4MTc4MWRlNjVkZGQ1OTQ5MTQxNTM2ODBkMjE0
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoq6DDANBgkqhkiG9w0BAQsFAAOCAQEAMtzGqsubh9gb5hTp
P12oeWERyOm24nUwiwAG9lR9JHW8lXKf+YqYU7g1yzbjGGtpDpXe4h4i+uHU27VM
BZaEM5o6q1+hOT0jvVd6hW4vXsgh7JTushcYxFCksUnB6XC5KoTcu2qxr6Fc3va+
tjJqM38VHr5tUGCw+fUUeY8ryXEfdf2drS21L/At5b0wZ9ZS4k1Q37TwP7swtw6n
le2m4LH+nI5XeCGzUqsz0Cy4Sk9POTSV1MVQ8IRQV2YZGK+4YufxqEp/krF9+TSw
GV/oDZ56GRcoZo3c9XDmlsdDk8pOukrCuWFUR4EypVvvyWm2ufCBmWsV4dyxZHcp
5T8F8Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org