Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/60e9dc7556400e31c1197dce1f3f55b44c670bd7.roa
File:                     60e9dc7556400e31c1197dce1f3f55b44c670bd7.roa (raw, json)
Hash identifier:          YEJS9xw0TuTLcWsvQLLr+ftKBFHySnGa+ADgDUo+2yg=
Subject key identifier:   08:F7:2E:33:C7:E7:13:8A:60:D2:FD:0E:8E:32:FD:24:CE:2C:FF:C7
Certificate issuer:       /CN=9155d1ceb3948af4b1d280927ef77d604a5582eb
Certificate serial:       0D1DE9
Authority key identifier: EB:F2:97:60:6F:53:C8:20:C1:F7:B9:0E:EE:98:A2:A8:EA:8F:87:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9155d1ceb3948af4b1d280927ef77d604a5582eb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/60e9dc7556400e31c1197dce1f3f55b44c670bd7.roa
Signing time:             Wed 24 Mar 2021 14:45:23 +0000
ROA not before:           Wed 24 Mar 2021 14:45:23 +0000
ROA not after:            Tue 24 Mar 2026 14:45:23 +0000
asID:                     264676
IP address blocks:        168.205.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859625 (0xd1de9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9155d1ceb3948af4b1d280927ef77d604a5582eb
        Validity
            Not Before: Mar 24 14:45:23 2021 GMT
            Not After : Mar 24 14:45:23 2026 GMT
        Subject: CN=60e9dc7556400e31c1197dce1f3f55b44c670bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:83:ab:d1:6c:92:ba:df:92:79:91:57:2f:
                    04:30:a2:e9:1c:0a:47:d1:75:d7:fa:3f:ae:ef:1a:
                    9e:f1:28:98:6a:ba:c2:af:71:ea:06:05:28:77:d3:
                    2a:f4:f9:cf:eb:a3:27:6e:cb:cb:59:0a:b5:c1:23:
                    d5:24:37:4b:dc:b4:1d:50:66:b8:60:41:cb:ed:69:
                    9c:f9:fd:bf:f7:b1:0c:46:a5:f8:d9:2a:90:9e:ae:
                    2e:05:11:f8:12:5f:28:7c:ec:44:34:c1:37:a4:20:
                    5e:9e:9f:ae:16:92:1a:47:7d:b6:62:da:88:8b:6c:
                    7c:a8:d1:71:49:85:4b:60:0c:46:a2:5c:99:08:ca:
                    6f:79:2c:b9:e8:ad:7e:14:2b:25:57:94:40:b9:08:
                    3a:f1:49:9c:ab:ac:55:8b:ba:08:3d:36:3c:fd:dc:
                    ba:d5:bb:b9:90:f7:73:56:b4:53:e2:65:a7:9f:64:
                    19:0f:62:c6:d4:21:38:ef:82:12:7d:a8:8b:71:6a:
                    10:ea:a1:f8:b6:06:39:b8:56:8b:93:18:5b:53:f3:
                    c0:fa:6b:6b:db:a3:e1:be:db:31:61:28:64:f2:70:
                    47:7f:62:fd:ed:68:84:45:cc:b8:80:c0:13:0b:63:
                    dc:b4:3a:fe:48:b6:6f:4f:e4:e4:c5:1a:0e:84:c3:
                    44:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F7:2E:33:C7:E7:13:8A:60:D2:FD:0E:8E:32:FD:24:CE:2C:FF:C7
            X509v3 Authority Key Identifier:
                keyid:EB:F2:97:60:6F:53:C8:20:C1:F7:B9:0E:EE:98:A2:A8:EA:8F:87:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9155d1ceb3948af4b1d280927ef77d604a5582eb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/60e9dc7556400e31c1197dce1f3f55b44c670bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb5b470c-2612-47d3-a321-a51159e16543/9155d1ceb3948af4b1d280927ef77d604a5582eb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:27:19:d0:4b:a7:a5:84:07:0a:39:eb:18:7e:61:f2:32:f2:
         2a:54:72:ba:1a:fe:75:48:17:22:4a:d9:42:00:4e:2c:90:32:
         fc:f6:c1:3b:a3:56:a0:c2:63:ce:02:f6:75:16:62:3e:7c:81:
         7f:87:d5:5d:85:bd:11:15:dd:43:fb:50:f1:d9:de:57:9b:18:
         ff:f1:95:6a:ce:5a:0f:21:97:d0:0b:80:07:9f:f1:7f:34:0e:
         cd:47:2c:4c:67:94:9c:56:49:1e:bb:bc:bf:04:34:fc:62:bb:
         ec:10:9d:43:e1:b4:25:8c:01:c1:69:eb:f3:c9:e9:9b:a1:a1:
         6e:6b:46:cf:57:da:e7:ff:2b:05:46:4a:b9:de:ba:4d:1a:d8:
         33:10:de:43:75:0d:c6:9d:38:c7:c7:f7:a7:d2:57:73:53:e3:
         2d:d8:08:f1:21:8f:4a:68:37:3a:69:38:10:dd:91:dc:50:65:
         ee:55:81:a7:8e:5f:38:62:46:da:b3:f3:58:f4:cc:de:bf:45:
         4e:10:1e:99:92:47:c6:4d:96:c9:73:83:fc:34:da:49:ba:36:
         a7:e6:b0:24:5e:be:bc:3a:82:c9:a5:f0:05:b5:ee:7d:69:79:
         e5:0d:2d:2e:13:47:1d:32:50:76:e3:98:99:cf:44:bb:b7:25:
         5d:30:7d:cc
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDR3pMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
NTVkMWNlYjM5NDhhZjRiMWQyODA5MjdlZjc3ZDYwNGE1NTgyZWIwHhcNMjEwMzI0
MTQ0NTIzWhcNMjYwMzI0MTQ0NTIzWjAzMTEwLwYDVQQDEyg2MGU5ZGM3NTU2NDAw
ZTMxYzExOTdkY2UxZjNmNTViNDRjNjcwYmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqc6Dq9FskrrfknmRVy8EMKLpHApH0XXX+j+u7xqe8SiYarrC
r3HqBgUod9Mq9PnP66MnbsvLWQq1wSPVJDdL3LQdUGa4YEHL7Wmc+f2/97EMRqX4
2SqQnq4uBRH4El8ofOxENME3pCBenp+uFpIaR322YtqIi2x8qNFxSYVLYAxGolyZ
CMpveSy56K1+FCslV5RAuQg68Umcq6xVi7oIPTY8/dy61bu5kPdzVrRT4mWnn2QZ
D2LG1CE474ISfaiLcWoQ6qH4tgY5uFaLkxhbU/PA+mtr26PhvtsxYShk8nBHf2L9
7WiERcy4gMATC2PctDr+SLZvT+TkxRoOhMNEDwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAj3LjPH5xOKYNL9Do4y/STOLP/HMB8GA1UdIwQYMBaAFOvyl2BvU8ggwfe5
Du6Yoqjqj4dqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTE1NWQx
Y2ViMzk0OGFmNGIxZDI4MDkyN2VmNzdkNjA0YTU1ODJlYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmI1YjQ3MGMtMjYxMi00N2QzLWEzMjEtYTUxMTU5
ZTE2NTQzLzYwZTlkYzc1NTY0MDBlMzFjMTE5N2RjZTFmM2Y1NWI0NGM2NzBiZDcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iYjViNDcwYy0yNjEyLTQ3ZDMtYTMyMS1hNTEx
NTllMTY1NDMvOTE1NWQxY2ViMzk0OGFmNGIxZDI4MDkyN2VmNzdkNjA0YTU1ODJl
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjNCDANBgkqhkiG9w0BAQsFAAOCAQEAcScZ0EunpYQHCjnr
GH5h8jLyKlRyuhr+dUgXIkrZQgBOLJAy/PbBO6NWoMJjzgL2dRZiPnyBf4fVXYW9
ERXdQ/tQ8dneV5sY//GVas5aDyGX0AuAB5/xfzQOzUcsTGeUnFZJHru8vwQ0/GK7
7BCdQ+G0JYwBwWnr88npm6GhbmtGz1fa5/8rBUZKud66TRrYMxDeQ3UNxp04x8f3
p9JXc1PjLdgI8SGPSmg3Omk4EN2R3FBl7lWBp45fOGJG2rPzWPTM3r9FThAemZJH
xk2WyXOD/DTaSbo2p+awJF6+vDqCyaXwBbXufWl55Q0tLhNHHTJQduOYmc9Eu7cl
XTB9zA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org