Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/3663924bfadad0831e7812e173415915d7d09e32.roa
File:                     3663924bfadad0831e7812e173415915d7d09e32.roa (raw, json)
Hash identifier:          R6I2LyWlygEA4Cfs22ZGSVtXzE0psnSKmTVQ3xiyFf4=
Subject key identifier:   F5:79:29:5A:1E:A1:6C:EE:4F:8E:10:2E:6A:92:D3:04:61:8C:8B:1E
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       068F51
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/3663924bfadad0831e7812e173415915d7d09e32.roa
Signing time:             Tue 21 Feb 2023 18:34:11 +0000
ROA not before:           Sat 18 Feb 2023 18:25:05 +0000
ROA not after:            Fri 21 Feb 2025 18:25:05 +0000
asID:                     17072
IP address blocks:        187.251.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429905 (0x68f51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Feb 18 18:25:05 2023 GMT
            Not After : Feb 21 18:25:05 2025 GMT
        Subject: CN=3663924bfadad0831e7812e173415915d7d09e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:71:b5:a6:5f:4c:2a:4a:a2:68:00:8f:93:c6:
                    e9:18:a3:f4:a7:d2:f8:4f:2a:92:ba:ab:b0:a9:c4:
                    62:d2:06:9b:29:f5:37:c9:a1:ed:54:11:dd:de:13:
                    ce:03:06:a0:d0:06:c8:44:ab:b1:01:f9:74:2d:70:
                    9b:d3:a8:8a:4c:1d:9d:06:bc:fd:f2:07:fc:32:de:
                    cd:bc:a9:1f:d1:d9:20:35:04:f9:b3:c4:2b:3d:4f:
                    86:44:04:5e:de:89:a8:59:6c:f4:f6:8e:97:3b:aa:
                    ef:49:a8:56:5a:ba:7f:27:0d:f3:2f:dc:17:75:8a:
                    81:b7:85:64:19:85:b4:b8:11:15:39:57:6b:9a:9b:
                    e8:12:2d:ca:88:73:8e:e0:35:12:45:a1:fa:65:ed:
                    f3:13:45:96:c1:45:d8:10:e8:4a:0a:ac:57:4d:1a:
                    38:90:94:2b:f9:7b:ec:18:19:29:6b:f2:a8:b0:16:
                    9b:c0:81:2e:f5:80:b4:e3:25:b6:cf:1c:20:68:c4:
                    0c:11:4b:26:14:81:05:f4:a2:4c:00:e7:47:ea:24:
                    00:42:8c:a9:24:14:3d:5f:22:f3:7b:43:85:4b:a3:
                    94:1b:fc:c4:63:e6:ff:fc:d8:f6:4c:7b:3a:81:e1:
                    49:67:79:6c:24:10:c0:c5:cc:cb:63:7d:fe:de:54:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:79:29:5A:1E:A1:6C:EE:4F:8E:10:2E:6A:92:D3:04:61:8C:8B:1E
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/3663924bfadad0831e7812e173415915d7d09e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:9b:1d:08:ea:07:28:0e:a0:e9:c8:75:48:c4:89:ca:cf:bc:
         35:fc:91:66:b2:89:a0:b5:2c:3c:4c:b0:ae:9a:50:ad:65:98:
         98:06:fe:c4:6a:1a:c1:b4:cc:3e:84:b5:e2:82:63:c7:f2:2c:
         fe:33:81:c9:70:b1:b5:e9:bf:8c:0e:31:3b:76:bd:0a:a2:5a:
         ff:e3:36:eb:84:6b:05:8f:63:7c:0d:01:73:85:64:88:a3:59:
         65:cb:81:26:65:48:0e:a0:59:ce:bb:49:6e:5b:a1:49:82:b9:
         7e:05:8b:40:1e:cb:e5:ca:ca:98:a2:0f:6f:be:fa:ad:4d:08:
         00:35:01:07:d4:33:b9:01:71:3a:3c:34:9e:a5:1d:a1:ea:16:
         2f:58:b4:5c:cc:dc:37:0c:c6:75:0c:bd:5b:5e:ea:65:dd:eb:
         bc:30:90:34:b3:1e:28:a0:f6:78:35:a8:60:19:7b:d9:ca:f1:
         7d:1a:ee:41:51:9d:6b:83:7a:b7:7d:de:b2:aa:25:7d:ee:2e:
         78:de:bf:4b:04:78:88:b1:ce:22:76:00:97:78:b4:d9:e2:cf:
         15:53:7e:1a:11:59:d9:a2:b4:2e:bd:2e:70:2f:70:0b:1a:14:
         c4:44:70:5e:b9:84:24:d2:2d:21:6d:26:05:e4:76:45:6a:d7:
         21:a5:54:e5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBo9RMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
M2Q1Y2RiMTYwNzI2ZGM5MmUwNGVkNDZhNjU4ZWM2YmZjYmJkZDEwHhcNMjMwMjE4
MTgyNTA1WhcNMjUwMjIxMTgyNTA1WjAzMTEwLwYDVQQDEygzNjYzOTI0YmZhZGFk
MDgzMWU3ODEyZTE3MzQxNTkxNWQ3ZDA5ZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjHG1pl9MKkqiaACPk8bpGKP0p9L4TyqSuquwqcRi0gabKfU3
yaHtVBHd3hPOAwag0AbIRKuxAfl0LXCb06iKTB2dBrz98gf8Mt7NvKkf0dkgNQT5
s8QrPU+GRARe3omoWWz09o6XO6rvSahWWrp/Jw3zL9wXdYqBt4VkGYW0uBEVOVdr
mpvoEi3KiHOO4DUSRaH6Ze3zE0WWwUXYEOhKCqxXTRo4kJQr+XvsGBkpa/KosBab
wIEu9YC04yW2zxwgaMQMEUsmFIEF9KJMAOdH6iQAQoypJBQ9XyLze0OFS6OUG/zE
Y+b//Nj2THs6geFJZ3lsJBDAxczLY33+3lTdCwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPV5KVoeoWzuT44QLmqS0wRhjIseMB8GA1UdIwQYMBaAFI9xTwL31bpGSCLp
2dR7u2DVk6EyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTEzZDVj
ZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Q1YWQ2YzAtNDk5Yi00MzgwLTk4NGYtODc0Yzlm
NTFkMmZmLzM2NjM5MjRiZmFkYWQwODMxZTc4MTJlMTczNDE1OTE1ZDdkMDllMzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZDVhZDZjMC00OTliLTQzODAtOTg0Zi04NzRj
OWY1MWQyZmYvOTEzZDVjZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALv7wjANBgkqhkiG9w0BAQsFAAOCAQEAo5sdCOoHKA6g6ch1
SMSJys+8NfyRZrKJoLUsPEywrppQrWWYmAb+xGoawbTMPoS14oJjx/Is/jOByXCx
tem/jA4xO3a9CqJa/+M264RrBY9jfA0Bc4VkiKNZZcuBJmVIDqBZzrtJbluhSYK5
fgWLQB7L5crKmKIPb776rU0IADUBB9QzuQFxOjw0nqUdoeoWL1i0XMzcNwzGdQy9
W17qZd3rvDCQNLMeKKD2eDWoYBl72crxfRruQVGda4N6t33esqolfe4ueN6/SwR4
iLHOInYAl3i02eLPFVN+GhFZ2aK0Lr0ucC9wCxoUxERwXrmEJNItIW0mBeR2RWrX
IaVU5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org