Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ab02b2e5-4250-440a-9b86-36bb8a9596a6/254fd5b4a469a6f28a64b31bdc12e7ee1d78923d.roa
File:                     254fd5b4a469a6f28a64b31bdc12e7ee1d78923d.roa (raw, json)
Hash identifier:          W00lrznWMH8qN+OWtdUVlH6MBzwT1O6PHua+cy+0mL4=
Subject key identifier:   FC:49:C9:6C:3D:2C:91:04:D4:19:FC:25:AE:5C:3F:98:81:D5:B1:A5
Certificate issuer:       /CN=0e2b4993ff8faf766a23840cd3b913b0b3367d37
Certificate serial:       0331
Authority key identifier: A5:23:F9:90:17:C6:73:D6:5C:10:6B:5D:B0:27:EE:9C:7A:D3:0A:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0e2b4993ff8faf766a23840cd3b913b0b3367d37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ab02b2e5-4250-440a-9b86-36bb8a9596a6/254fd5b4a469a6f28a64b31bdc12e7ee1d78923d.roa
Signing time:             Mon 04 Oct 2021 22:41:46 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     394474
IP address blocks:        128.201.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817 (0x331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2b4993ff8faf766a23840cd3b913b0b3367d37
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=254fd5b4a469a6f28a64b31bdc12e7ee1d78923d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:e0:54:83:27:b9:cc:d1:ba:98:f5:06:2f:
                    83:fe:ec:ec:0c:d1:ef:94:ea:a2:9b:21:15:3a:77:
                    c8:04:bf:4b:4f:b8:6e:88:24:e4:7c:98:13:1e:6b:
                    57:77:fe:01:f7:6c:8b:5a:58:0c:59:8f:d6:52:ee:
                    88:ef:94:ba:ae:6f:33:8a:1a:2d:32:d1:8c:71:ea:
                    9e:17:2b:bb:49:a9:d6:19:21:f6:f0:3c:ad:09:15:
                    59:fa:46:de:de:92:ab:bc:54:4e:8f:10:b8:28:16:
                    4a:b5:b8:3b:13:fb:5b:70:86:f9:ba:92:49:48:72:
                    fb:0b:6b:24:7b:06:49:cb:e0:30:43:b5:98:31:90:
                    7e:7f:6a:e6:2c:69:f7:9a:cd:99:4a:71:9a:ee:20:
                    0a:19:38:db:7f:5e:5e:48:2a:f3:0d:a9:9f:6c:98:
                    e6:2f:e2:ee:e6:3b:93:2d:22:c4:3d:16:59:3e:b0:
                    f0:b3:f8:48:64:a2:46:ac:66:ad:11:3a:14:fd:bb:
                    11:7b:f4:0a:02:26:ff:d7:91:03:5e:75:3e:a4:5b:
                    6e:64:5a:4b:16:e1:6a:50:db:d0:94:55:d1:b9:f9:
                    f6:e5:c6:60:9f:ed:34:e1:77:e7:b2:54:de:f1:98:
                    66:3b:5d:41:c4:26:2b:23:d2:70:33:65:a5:19:98:
                    2a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:49:C9:6C:3D:2C:91:04:D4:19:FC:25:AE:5C:3F:98:81:D5:B1:A5
            X509v3 Authority Key Identifier:
                keyid:A5:23:F9:90:17:C6:73:D6:5C:10:6B:5D:B0:27:EE:9C:7A:D3:0A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0e2b4993ff8faf766a23840cd3b913b0b3367d37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ab02b2e5-4250-440a-9b86-36bb8a9596a6/254fd5b4a469a6f28a64b31bdc12e7ee1d78923d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ab02b2e5-4250-440a-9b86-36bb8a9596a6/0e2b4993ff8faf766a23840cd3b913b0b3367d37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:9c:c1:aa:16:57:5c:ff:54:d3:f6:ca:8f:56:a3:e8:ad:49:
         ad:d8:2d:26:4e:43:40:7a:4c:01:f1:c6:22:40:c9:07:c2:05:
         fb:af:35:3d:0c:c3:78:3c:e7:7d:af:cf:98:45:09:4e:0b:ef:
         e6:91:cb:17:61:11:3e:86:2f:50:d9:c6:6f:76:49:ea:48:ef:
         74:13:ba:93:28:c8:8d:a1:3b:23:0a:96:59:52:11:43:73:7a:
         01:40:53:62:80:ad:1b:59:a1:bf:b0:ae:6b:9c:7b:1d:fd:62:
         19:c0:e2:c8:61:1a:bd:8c:05:62:f3:3f:03:f8:45:ee:10:92:
         4e:02:d2:dd:14:59:ac:f3:91:be:29:d4:ad:ec:a2:e4:21:53:
         4e:f1:fb:b1:99:72:35:b8:e1:62:d1:90:bc:b4:e6:21:90:42:
         23:b6:d6:6d:f5:79:9f:ee:76:67:d8:af:8d:25:3f:46:8d:93:
         17:5e:81:e2:01:9c:90:d1:ae:fd:cb:1a:7e:ab:8d:d4:06:81:
         76:a0:ac:de:3d:e4:79:5b:4a:51:c8:bb:40:01:45:c4:4d:af:
         f6:f4:35:56:2d:6e:99:71:1f:13:76:9c:c8:5f:6b:78:bc:83:
         b8:a7:94:5d:ce:a5:99:b1:51:3e:d5:f1:ed:75:24:c1:05:a6:
         00:09:90:28
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMGUy
YjQ5OTNmZjhmYWY3NjZhMjM4NDBjZDNiOTEzYjBiMzM2N2QzNzAeFw0yMTEwMDQw
MzAwMDBaFw0yMzEwMDQwMzAwMDBaMDMxMTAvBgNVBAMTKDI1NGZkNWI0YTQ2OWE2
ZjI4YTY0YjMxYmRjMTJlN2VlMWQ3ODkyM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDR+OBUgye5zNG6mPUGL4P+7OwM0e+U6qKbIRU6d8gEv0tPuG6I
JOR8mBMea1d3/gH3bItaWAxZj9ZS7ojvlLqubzOKGi0y0Yxx6p4XK7tJqdYZIfbw
PK0JFVn6Rt7ekqu8VE6PELgoFkq1uDsT+1twhvm6kklIcvsLayR7BknL4DBDtZgx
kH5/auYsafeazZlKcZruIAoZONt/Xl5IKvMNqZ9smOYv4u7mO5MtIsQ9Flk+sPCz
+EhkokasZq0ROhT9uxF79AoCJv/XkQNedT6kW25kWksW4WpQ29CUVdG5+fblxmCf
7TThd+eyVN7xmGY7XUHEJisj0nAzZaUZmCrLAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQU/EnJbD0skQTUGfwlrlw/mIHVsaUwHwYDVR0jBBgwFoAUpSP5kBfGc9ZcEGtd
sCfunHrTCrkwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8wZTJiNDk5
M2ZmOGZhZjc2NmEyMzg0MGNkM2I5MTNiMGIzMzY3ZDM3LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hYjAyYjJlNS00MjUwLTQ0MGEtOWI4Ni0zNmJiOGE5
NTk2YTYvMjU0ZmQ1YjRhNDY5YTZmMjhhNjRiMzFiZGMxMmU3ZWUxZDc4OTIzZC5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2FiMDJiMmU1LTQyNTAtNDQwYS05Yjg2LTM2YmI4
YTk1OTZhNi8wZTJiNDk5M2ZmOGZhZjc2NmEyMzg0MGNkM2I5MTNiMGIzMzY3ZDM3
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCgMkEMA0GCSqGSIb3DQEBCwUAA4IBAQBpnMGqFldc/1TT9sqP
VqPorUmt2C0mTkNAekwB8cYiQMkHwgX7rzU9DMN4POd9r8+YRQlOC+/mkcsXYRE+
hi9Q2cZvdknqSO90E7qTKMiNoTsjCpZZUhFDc3oBQFNigK0bWaG/sK5rnHsd/WIZ
wOLIYRq9jAVi8z8D+EXuEJJOAtLdFFms85G+KdSt7KLkIVNO8fuxmXI1uOFi0ZC8
tOYhkEIjttZt9Xmf7nZn2K+NJT9GjZMXXoHiAZyQ0a79yxp+q43UBoF2oKzePeR5
W0pRyLtAAUXETa/29DVWLW6ZcR8TdpzIX2t4vIO4p5RdzqWZsVE+1fHtdSTBBaYA
CZAo
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:50 2023 by rpki-client on console-ams.rpki-client.org