Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/51fe2d77919325225f1349210f6073ced59bf2f7.roa
File:                     51fe2d77919325225f1349210f6073ced59bf2f7.roa (raw, json)
Hash identifier:          MMfSCPhylJ9TWt8tPkYdjXjL1jBmjVAXERHGq0rpWdA=
Subject key identifier:   F4:88:08:E6:C2:3E:AA:FA:FF:0D:63:A0:67:A3:2B:40:9D:86:7B:79
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       26D523
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/51fe2d77919325225f1349210f6073ced59bf2f7.roa
Signing time:             Wed 30 Aug 2023 17:50:36 +0000
ROA not before:           Tue 29 Aug 2023 17:50:30 +0000
ROA not after:            Sat 30 Aug 2025 17:50:30 +0000
asID:                     263804
IP address blocks:        186.112.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2544931 (0x26d523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Aug 29 17:50:30 2023 GMT
            Not After : Aug 30 17:50:30 2025 GMT
        Subject: CN=51fe2d77919325225f1349210f6073ced59bf2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:14:83:96:47:55:b4:ba:85:10:25:7f:3f:ff:
                    7a:c1:d8:64:e7:f3:54:a5:1d:ff:d3:1a:81:6e:2f:
                    61:47:c3:2c:fc:98:27:05:59:c6:a7:cf:f9:5f:d8:
                    5d:c4:71:a3:ec:43:7a:c9:74:d9:19:f6:4b:2d:12:
                    47:8c:a9:93:70:fa:1b:8e:b2:a3:04:2c:82:7d:aa:
                    08:6b:83:9a:41:98:c2:2f:f0:ff:f9:0b:38:b2:0e:
                    4c:2e:f2:16:aa:a1:92:2e:49:55:2f:a7:67:26:64:
                    1c:91:69:d9:9a:70:e6:19:29:26:2b:3a:bd:88:78:
                    9e:f3:56:42:ca:7f:67:3e:99:49:7a:07:2d:86:87:
                    81:46:ef:43:d3:59:97:27:a3:57:30:bd:d9:83:5e:
                    20:8b:d9:86:ed:30:0c:32:e7:b0:28:33:27:37:40:
                    24:7f:6a:fe:4b:89:18:b9:44:38:9f:ca:49:f3:44:
                    41:7e:bd:12:b5:f9:4a:7c:fc:8b:49:94:f4:1e:56:
                    48:21:9a:b9:b6:de:75:c2:94:c5:66:10:f5:33:58:
                    bb:1a:03:dd:67:d6:24:ec:c6:48:99:3f:07:17:be:
                    05:7f:ff:59:13:69:ac:af:a1:82:44:77:11:69:3e:
                    1d:ab:83:ce:11:4f:6d:99:17:52:21:5a:98:27:0e:
                    d7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:88:08:E6:C2:3E:AA:FA:FF:0D:63:A0:67:A3:2B:40:9D:86:7B:79
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/51fe2d77919325225f1349210f6073ced59bf2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.112.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a3:7e:08:3e:5c:84:a1:1f:dd:de:31:ad:dc:54:c5:13:64:
         ff:16:bb:aa:db:da:82:59:2d:bf:a1:bd:57:9c:d5:d3:33:90:
         40:0e:4c:5e:7b:f1:ed:d9:fe:a7:30:3e:c2:97:db:90:ca:3e:
         01:9f:34:cd:aa:78:00:69:6e:80:5a:82:8d:3b:78:b6:5e:bf:
         4c:99:7c:86:ed:00:72:09:ee:f1:db:73:70:8b:c9:66:bd:57:
         1a:3f:b5:14:a9:58:71:6e:fa:c5:d8:20:3c:03:17:4d:e5:aa:
         19:4b:41:27:7c:c7:6d:60:7c:e3:a9:b3:4c:b4:47:93:00:38:
         8e:6b:80:70:71:cd:a6:ec:22:f5:06:e3:1d:80:0b:f4:33:61:
         a2:17:86:a4:62:3e:f2:de:e8:5d:b6:f9:63:12:1b:7e:ee:ad:
         93:50:cf:e7:c5:44:35:6c:f6:2c:a4:5b:be:35:18:4e:07:44:
         ba:71:ec:ce:23:0a:eb:4a:80:44:e9:e1:8e:84:da:02:14:82:
         fe:24:a7:df:70:68:08:a5:f6:0e:3a:d6:37:eb:26:9a:c3:28:
         28:40:a7:09:e7:06:e4:75:ec:a0:eb:fd:1b:84:97:89:8a:61:
         16:e4:76:4d:0f:8c:66:a1:8a:ee:6e:4a:66:90:3b:7a:cb:9e:
         38:5a:90:12
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJtUjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIz
NTgwMDc4ZjRmODk3ZmNmZGJhYTBkOTBjMmVjNmY0NjBlMzMyMjIwHhcNMjMwODI5
MTc1MDMwWhcNMjUwODMwMTc1MDMwWjAzMTEwLwYDVQQDEyg1MWZlMmQ3NzkxOTMy
NTIyNWYxMzQ5MjEwZjYwNzNjZWQ1OWJmMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkxSDlkdVtLqFECV/P/96wdhk5/NUpR3/0xqBbi9hR8Ms/Jgn
BVnGp8/5X9hdxHGj7EN6yXTZGfZLLRJHjKmTcPobjrKjBCyCfaoIa4OaQZjCL/D/
+Qs4sg5MLvIWqqGSLklVL6dnJmQckWnZmnDmGSkmKzq9iHie81ZCyn9nPplJegct
hoeBRu9D01mXJ6NXML3Zg14gi9mG7TAMMuewKDMnN0Akf2r+S4kYuUQ4n8pJ80RB
fr0StflKfPyLSZT0HlZIIZq5tt51wpTFZhD1M1i7GgPdZ9Yk7MZImT8HF74Ff/9Z
E2msr6GCRHcRaT4dq4POEU9tmRdSIVqYJw7XyQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPSICObCPqr6/w1joGejK0Cdhnt5MB8GA1UdIwQYMBaAFN/Gyo1ROTKXljh0
TDeMs6BDDpW1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjM1ODAw
NzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIyMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzIwYjU1OGEtODllMC00YzllLWI2YzgtZDdjNjk0
NjMyMTIwLzUxZmUyZDc3OTE5MzI1MjI1ZjEzNDkyMTBmNjA3M2NlZDU5YmYyZjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMjBiNTU4YS04OWUwLTRjOWUtYjZjOC1kN2M2
OTQ2MzIxMjAvYjM1ODAwNzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIy
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALpwgDANBgkqhkiG9w0BAQsFAAOCAQEAgqN+CD5chKEf3d4x
rdxUxRNk/xa7qtvaglktv6G9V5zV0zOQQA5MXnvx7dn+pzA+wpfbkMo+AZ80zap4
AGlugFqCjTt4tl6/TJl8hu0Acgnu8dtzcIvJZr1XGj+1FKlYcW76xdggPAMXTeWq
GUtBJ3zHbWB846mzTLRHkwA4jmuAcHHNpuwi9QbjHYAL9DNhoheGpGI+8t7oXbb5
YxIbfu6tk1DP58VENWz2LKRbvjUYTgdEunHsziMK60qAROnhjoTaAhSC/iSn33Bo
CKX2DjrWN+smmsMoKECnCecG5HXsoOv9G4SXiYphFuR2TQ+MZqGK7m5KZpA7esue
OFqQEg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org