Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/ec5637e34f2dfc8f96b7f5f7046d41c6a804c396.roa
File:                     ec5637e34f2dfc8f96b7f5f7046d41c6a804c396.roa (raw, json)
Hash identifier:          aTWKKkPy0eDbfkQW2F97XKWDnGkOLPDqsw4a9luu5aI=
Subject key identifier:   D3:39:0B:31:CB:C8:4C:E4:E3:BD:57:22:CF:2E:3F:75:4B:CC:76:7B
Certificate issuer:       /CN=901c0d961f219c9ac4920f36c147c92354e14b00
Certificate serial:       208EA9
Authority key identifier: 4A:47:70:41:22:2D:CC:A7:25:04:94:4B:73:16:31:6D:7A:AA:12:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/901c0d961f219c9ac4920f36c147c92354e14b00.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/ec5637e34f2dfc8f96b7f5f7046d41c6a804c396.roa
Signing time:             Tue 02 May 2023 17:29:12 +0000
ROA not before:           Mon 01 May 2023 17:29:12 +0000
ROA not after:            Fri 02 May 2025 17:29:12 +0000
asID:                     265763
IP address blocks:        164.163.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133673 (0x208ea9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901c0d961f219c9ac4920f36c147c92354e14b00
        Validity
            Not Before: May  1 17:29:12 2023 GMT
            Not After : May  2 17:29:12 2025 GMT
        Subject: CN=ec5637e34f2dfc8f96b7f5f7046d41c6a804c396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:b6:20:e4:74:42:72:c9:e8:5e:c2:43:d5:
                    8e:df:87:7d:36:e5:69:eb:88:18:cd:9d:7f:7f:ce:
                    74:4f:29:b8:50:c0:3f:88:80:74:b6:3d:f1:8f:2a:
                    03:2e:76:b2:78:47:c8:7f:bc:b2:2a:3a:68:47:43:
                    3c:b9:80:64:8f:b2:bd:82:28:39:b2:65:8f:d9:53:
                    2d:ce:7f:af:4c:c9:ab:31:99:11:18:c1:f2:86:f2:
                    6a:08:c6:4c:08:f5:4e:b9:43:be:20:26:cd:9c:10:
                    dc:2f:aa:4b:06:6f:99:8c:cd:59:27:67:8b:62:2a:
                    75:47:9a:71:6d:7f:19:b2:f9:e3:8d:14:37:88:9f:
                    ca:a7:4d:0b:7b:4e:65:98:77:2c:ab:c6:e0:59:2e:
                    c4:3f:a1:60:0c:08:eb:0a:9c:6a:e7:14:7f:2c:28:
                    b4:57:99:8a:68:4b:c5:f8:e0:b0:b0:7b:58:e2:2a:
                    d9:ca:5d:fe:4a:ee:a7:79:b9:05:aa:ab:2b:83:4f:
                    9e:db:70:22:1b:a6:96:71:f2:b4:f5:45:6d:2c:d2:
                    a8:f2:27:cc:d6:bd:c6:1d:03:ff:e5:94:cc:49:32:
                    e3:9c:28:d6:c0:24:05:b1:a7:af:ee:d6:0f:af:86:
                    19:21:57:cc:ce:98:6e:40:f8:1e:f2:51:c9:90:1b:
                    a7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:39:0B:31:CB:C8:4C:E4:E3:BD:57:22:CF:2E:3F:75:4B:CC:76:7B
            X509v3 Authority Key Identifier:
                keyid:4A:47:70:41:22:2D:CC:A7:25:04:94:4B:73:16:31:6D:7A:AA:12:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/901c0d961f219c9ac4920f36c147c92354e14b00.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/ec5637e34f2dfc8f96b7f5f7046d41c6a804c396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aaf4a569-9acb-44ab-be88-a46d4ede96ce/901c0d961f219c9ac4920f36c147c92354e14b00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:19:4a:fd:96:e0:a0:ae:c3:0c:d7:16:88:7a:1d:df:ad:2f:
         14:88:6d:e1:11:e6:c6:de:0d:38:db:d0:45:57:12:06:ae:e6:
         c6:10:56:9d:ba:71:8b:a6:51:62:13:29:c5:8f:9e:6c:07:d0:
         71:23:5b:b7:f1:da:ab:f6:2d:2c:a5:5c:13:41:00:0c:c9:9c:
         86:40:4e:68:1a:1a:be:0e:32:b8:14:78:00:9f:74:97:d1:4f:
         ab:e4:d3:06:5f:c8:1a:9b:d4:13:21:ef:74:12:3f:52:7e:84:
         15:fb:58:9f:ec:d7:fa:a3:82:2b:30:b7:af:d1:33:af:24:1c:
         ee:52:33:96:b8:83:c3:f9:fd:a0:3c:37:44:b3:48:dd:70:b1:
         96:97:57:d0:53:2e:ff:f1:ed:59:58:4a:2c:b1:2e:b3:0c:6f:
         1a:e1:43:0b:11:c5:17:e9:70:a6:a3:2a:1a:38:9c:22:82:db:
         19:00:c4:c2:2f:19:00:13:8a:4b:d0:19:21:8d:b3:02:65:b0:
         64:9f:fc:03:f8:cd:b4:a8:e2:24:cc:bf:04:b1:63:29:4d:23:
         5f:38:f4:ff:40:c7:79:a0:71:c2:2f:fb:2f:39:2b:61:a0:33:
         08:df:67:16:ea:f1:50:dd:ab:e1:cc:cc:59:3c:49:6d:8a:1f:
         e0:39:97:59
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDII6pMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkw
MWMwZDk2MWYyMTljOWFjNDkyMGYzNmMxNDdjOTIzNTRlMTRiMDAwHhcNMjMwNTAx
MTcyOTEyWhcNMjUwNTAyMTcyOTEyWjAzMTEwLwYDVQQDEyhlYzU2MzdlMzRmMmRm
YzhmOTZiN2Y1ZjcwNDZkNDFjNmE4MDRjMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxOa2IOR0QnLJ6F7CQ9WO34d9NuVp64gYzZ1/f850Tym4UMA/
iIB0tj3xjyoDLnayeEfIf7yyKjpoR0M8uYBkj7K9gig5smWP2VMtzn+vTMmrMZkR
GMHyhvJqCMZMCPVOuUO+ICbNnBDcL6pLBm+ZjM1ZJ2eLYip1R5pxbX8ZsvnjjRQ3
iJ/Kp00Le05lmHcsq8bgWS7EP6FgDAjrCpxq5xR/LCi0V5mKaEvF+OCwsHtY4irZ
yl3+Su6nebkFqqsrg0+e23AiG6aWcfK09UVtLNKo8ifM1r3GHQP/5ZTMSTLjnCjW
wCQFsaev7tYPr4YZIVfMzphuQPge8lHJkBunCwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNM5CzHLyEzk471XIs8uP3VLzHZ7MB8GA1UdIwQYMBaAFEpHcEEiLcynJQSU
S3MWMW16qhLrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTAxYzBk
OTYxZjIxOWM5YWM0OTIwZjM2YzE0N2M5MjM1NGUxNGIwMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWFmNGE1NjktOWFjYi00NGFiLWJlODgtYTQ2ZDRl
ZGU5NmNlL2VjNTYzN2UzNGYyZGZjOGY5NmI3ZjVmNzA0NmQ0MWM2YTgwNGMzOTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYWY0YTU2OS05YWNiLTQ0YWItYmU4OC1hNDZk
NGVkZTk2Y2UvOTAxYzBkOTYxZjIxOWM5YWM0OTIwZjM2YzE0N2M5MjM1NGUxNGIw
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqSjKDANBgkqhkiG9w0BAQsFAAOCAQEAfBlK/ZbgoK7DDNcW
iHod360vFIht4RHmxt4NONvQRVcSBq7mxhBWnbpxi6ZRYhMpxY+ebAfQcSNbt/Ha
q/YtLKVcE0EADMmchkBOaBoavg4yuBR4AJ90l9FPq+TTBl/IGpvUEyHvdBI/Un6E
FftYn+zX+qOCKzC3r9EzryQc7lIzlriDw/n9oDw3RLNI3XCxlpdX0FMu//HtWVhK
LLEuswxvGuFDCxHFF+lwpqMqGjicIoLbGQDEwi8ZABOKS9AZIY2zAmWwZJ/8A/jN
tKjiJMy/BLFjKU0jXzj0/0DHeaBxwi/7LzkrYaAzCN9nFurxUN2r4czMWTxJbYof
4DmXWQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org