Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/b71cd3ffd26daf6b710dfe01c5961e29b8787bbe.roa
File:                     b71cd3ffd26daf6b710dfe01c5961e29b8787bbe.roa (raw, json)
Hash identifier:          E3lgb3HwrofTlRfCsRtnEnWK++FmhMqwXIw5lxQtv8c=
Subject key identifier:   9D:0F:F8:4D:75:3A:67:B9:C4:E6:57:EE:1C:48:0B:4A:3B:C5:1E:63
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0F052D
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/b71cd3ffd26daf6b710dfe01c5961e29b8787bbe.roa
Signing time:             Wed 13 Dec 2023 05:51:43 +0000
ROA not before:           Wed 13 Dec 2023 05:51:42 +0000
ROA not after:            Sat 13 Dec 2025 05:51:42 +0000
asID:                     17072
IP address blocks:        187.189.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984365 (0xf052d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Dec 13 05:51:42 2023 GMT
            Not After : Dec 13 05:51:42 2025 GMT
        Subject: CN=b71cd3ffd26daf6b710dfe01c5961e29b8787bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:b8:be:34:4e:91:0b:2e:b1:cb:db:22:f2:
                    e9:c8:c2:a4:cf:e3:a9:10:ff:b3:0f:ef:d9:c4:60:
                    3b:5a:4e:2a:79:9b:cd:b5:48:82:41:8e:19:cb:d4:
                    37:cc:38:69:1c:14:73:42:e0:9b:cb:b6:e6:cb:9e:
                    1e:99:6b:d3:51:f7:ed:66:a3:a2:9b:7e:d9:78:81:
                    06:d4:44:0e:86:0e:10:13:0d:5a:36:cf:36:a5:ca:
                    a2:0f:8d:03:47:f2:65:76:5a:f6:37:df:72:75:1d:
                    44:05:16:0e:69:6a:a9:d1:25:66:92:46:89:72:e6:
                    18:4f:97:c3:7c:32:4e:77:41:e5:4c:b6:05:43:8f:
                    10:59:13:20:d3:56:68:9a:c9:4b:70:6d:b9:14:b8:
                    75:d4:97:17:d0:78:5f:d1:5e:09:23:47:eb:cb:6c:
                    ba:36:fc:b9:c3:6e:d6:00:ff:a8:7c:d2:18:fd:8d:
                    2c:56:8c:c3:d8:a1:2c:e0:22:f1:1a:23:8f:6d:dc:
                    af:70:c6:3f:51:73:8d:bd:63:ba:8f:75:de:e7:4f:
                    88:fa:c5:2a:0d:9b:0b:58:c6:35:46:2b:9e:5a:fb:
                    2b:b5:a6:2d:99:fd:fd:0d:58:61:69:ef:db:4c:fa:
                    19:ad:6a:f5:ae:49:ab:94:14:1c:27:73:58:b9:a3:
                    d6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0F:F8:4D:75:3A:67:B9:C4:E6:57:EE:1C:48:0B:4A:3B:C5:1E:63
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/b71cd3ffd26daf6b710dfe01c5961e29b8787bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.189.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:71:e2:46:af:7d:2d:09:09:f2:ed:ce:25:97:d6:51:3b:c0:
         9c:c8:5c:81:19:f3:bf:de:fa:81:d3:96:75:75:10:c2:19:69:
         da:b4:52:05:04:09:71:2a:27:44:47:89:28:cc:2b:77:19:02:
         ed:e5:45:45:2b:81:de:80:16:87:5e:47:33:b5:0f:42:92:d0:
         8d:d7:4f:b2:12:ba:69:f9:e5:c4:a6:ad:32:b3:cd:74:b7:2e:
         9f:e2:90:eb:0c:87:0b:2f:49:72:3a:83:57:88:01:e7:0c:5e:
         a0:d6:ef:f6:b9:90:56:e8:ea:5a:2f:52:0f:84:a5:7b:01:8f:
         57:2d:b5:d8:2a:ab:70:d8:9e:73:b8:49:77:04:72:af:66:d6:
         19:de:eb:49:85:ed:cf:31:50:9c:53:dd:ae:ec:8e:21:25:18:
         f2:27:5f:e5:d9:fb:68:01:a6:9b:00:36:1f:87:4d:1e:dc:7e:
         c0:1d:a6:c2:c3:33:ff:8c:f6:30:8d:c6:6a:19:7b:9f:ea:02:
         0f:21:6f:f3:93:16:96:03:73:37:d9:6e:cd:4e:8b:91:e6:b2:
         a3:5f:35:ac:86:c9:ce:1c:45:7e:82:f3:71:e7:ff:8d:7b:28:
         ae:84:00:e6:22:20:3c:d8:f4:65:45:12:83:23:95:ad:8a:57:
         0a:9c:f6:03
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDwUtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
M2Q1Y2RiMTYwNzI2ZGM5MmUwNGVkNDZhNjU4ZWM2YmZjYmJkZDEwHhcNMjMxMjEz
MDU1MTQyWhcNMjUxMjEzMDU1MTQyWjAzMTEwLwYDVQQDEyhiNzFjZDNmZmQyNmRh
ZjZiNzEwZGZlMDFjNTk2MWUyOWI4Nzg3YmJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArjS4vjROkQsuscvbIvLpyMKkz+OpEP+zD+/ZxGA7Wk4qeZvN
tUiCQY4Zy9Q3zDhpHBRzQuCby7bmy54emWvTUfftZqOim37ZeIEG1EQOhg4QEw1a
Ns82pcqiD40DR/Jldlr2N99ydR1EBRYOaWqp0SVmkkaJcuYYT5fDfDJOd0HlTLYF
Q48QWRMg01ZomslLcG25FLh11JcX0Hhf0V4JI0fry2y6Nvy5w27WAP+ofNIY/Y0s
VozD2KEs4CLxGiOPbdyvcMY/UXONvWO6j3Xe50+I+sUqDZsLWMY1RiueWvsrtaYt
mf39DVhhae/bTPoZrWr1rkmrlBQcJ3NYuaPWmwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ0P+E11Ome5xOZX7hxIC0o7xR5jMB8GA1UdIwQYMBaAFI9xTwL31bpGSCLp
2dR7u2DVk6EyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTEzZDVj
ZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Q1YWQ2YzAtNDk5Yi00MzgwLTk4NGYtODc0Yzlm
NTFkMmZmL2I3MWNkM2ZmZDI2ZGFmNmI3MTBkZmUwMWM1OTYxZTI5Yjg3ODdiYmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZDVhZDZjMC00OTliLTQzODAtOTg0Zi04NzRj
OWY1MWQyZmYvOTEzZDVjZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALu9DzANBgkqhkiG9w0BAQsFAAOCAQEArnHiRq99LQkJ8u3O
JZfWUTvAnMhcgRnzv976gdOWdXUQwhlp2rRSBQQJcSonREeJKMwrdxkC7eVFRSuB
3oAWh15HM7UPQpLQjddPshK6afnlxKatMrPNdLcun+KQ6wyHCy9JcjqDV4gB5wxe
oNbv9rmQVujqWi9SD4SlewGPVy212CqrcNiec7hJdwRyr2bWGd7rSYXtzzFQnFPd
ruyOISUY8idf5dn7aAGmmwA2H4dNHtx+wB2mwsMz/4z2MI3Gahl7n+oCDyFv85MW
lgNzN9luzU6Lkeayo181rIbJzhxFfoLzcef/jXsoroQA5iIgPNj0ZUUSgyOVrYpX
Cpz2Aw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org