Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/e486856604b673f6a5f6a06c0fcb89681f6a420b.roa
File:                     e486856604b673f6a5f6a06c0fcb89681f6a420b.roa (raw, json)
Hash identifier:          hhoQ06cnUTrggZ6R/0hG3apCNGIAqMDavz97gFDj6Js=
Subject key identifier:   75:20:53:7F:69:DF:63:A1:D3:3E:DC:9B:F9:02:4E:49:72:55:3A:70
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       06A384
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/e486856604b673f6a5f6a06c0fcb89681f6a420b.roa
Signing time:             Thu 23 Feb 2023 17:13:07 +0000
ROA not before:           Fri 17 Feb 2023 18:25:05 +0000
ROA not after:            Fri 21 Feb 2025 18:25:05 +0000
asID:                     22884
IP address blocks:        187.251.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435076 (0x6a384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Feb 17 18:25:05 2023 GMT
            Not After : Feb 21 18:25:05 2025 GMT
        Subject: CN=e486856604b673f6a5f6a06c0fcb89681f6a420b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:dc:5b:61:b9:06:57:72:3c:6b:8d:8c:ba:
                    20:8b:e0:8f:d3:c0:bd:bd:83:6a:de:30:32:27:f3:
                    df:e3:bd:89:6d:37:cb:c9:ba:2e:e6:05:a0:cb:fb:
                    b5:d4:c6:81:cd:d4:46:b1:d2:2e:94:ab:7f:25:cb:
                    21:15:f5:33:32:af:86:b0:a6:c6:bf:f7:a7:cb:6b:
                    e7:07:97:47:46:32:7f:7c:5c:81:2f:1a:f1:0e:de:
                    ea:53:6c:50:a9:2b:40:01:ac:07:4d:a5:bb:d6:0a:
                    7f:55:b8:bf:df:df:22:8a:95:fa:3e:2f:5b:b7:58:
                    36:f8:cc:cb:1d:8b:d6:44:55:13:ee:18:39:2d:0d:
                    7f:16:5a:e3:37:73:bf:6d:c0:df:20:14:7e:51:34:
                    72:39:79:fd:58:13:0a:51:38:db:15:28:bb:6c:21:
                    49:3c:70:51:bf:0d:dd:65:6f:2a:bf:12:49:3d:52:
                    43:24:6d:ab:cf:f4:70:d6:48:82:96:8f:c1:99:fd:
                    9c:2a:52:a8:4d:35:d7:2d:68:45:77:5c:0d:5a:2c:
                    ad:43:c4:8b:a7:29:3e:29:b9:cd:e5:91:56:52:4d:
                    f6:1c:a3:b0:80:c2:ee:ca:ed:81:78:96:81:a0:70:
                    ce:1b:d4:a5:de:48:35:df:6c:0a:65:7f:63:ab:02:
                    aa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:20:53:7F:69:DF:63:A1:D3:3E:DC:9B:F9:02:4E:49:72:55:3A:70
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/e486856604b673f6a5f6a06c0fcb89681f6a420b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f5:58:0e:65:df:c4:fd:f0:aa:a5:ab:d9:e2:6b:9d:fe:6e:
         26:33:72:c4:d0:42:a4:b4:a1:cc:3e:92:32:01:89:fc:d0:bf:
         99:aa:15:80:e5:61:66:b3:7b:0d:80:c0:94:93:97:e4:79:c5:
         86:c1:a6:b8:b6:c3:7b:91:a4:5e:8d:33:b3:f5:4a:47:2b:7e:
         61:1e:6a:82:e4:e3:30:5a:e4:c2:6a:a4:86:46:0d:19:6a:1e:
         21:e5:16:88:44:26:4d:2d:7e:4c:00:77:1b:f4:0c:25:ed:37:
         16:b1:75:5f:3c:3f:63:f2:31:56:88:34:b1:d9:66:62:11:4d:
         2e:02:98:ea:86:60:75:89:bd:80:91:55:5e:7d:22:ae:19:e4:
         47:c9:33:80:c4:a2:0e:c7:da:ab:da:f6:69:af:72:9b:60:e3:
         99:c2:ce:8f:31:54:7f:a4:45:34:66:a1:b5:44:08:8f:f1:dc:
         7e:e6:a0:ec:96:a6:d7:71:84:35:99:e2:40:2a:d9:ae:12:58:
         bc:12:eb:d5:db:e6:f2:6e:f5:07:53:92:3e:43:7d:c7:0d:e2:
         02:6b:b5:1b:02:78:de:7e:f4:e3:97:ff:b7:05:be:b2:b7:4d:
         08:63:dd:72:f2:1c:ec:44:39:18:88:a1:84:95:88:e2:23:26:
         6b:4b:a6:c0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBqOEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
M2Q1Y2RiMTYwNzI2ZGM5MmUwNGVkNDZhNjU4ZWM2YmZjYmJkZDEwHhcNMjMwMjE3
MTgyNTA1WhcNMjUwMjIxMTgyNTA1WjAzMTEwLwYDVQQDEyhlNDg2ODU2NjA0YjY3
M2Y2YTVmNmEwNmMwZmNiODk2ODFmNmE0MjBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsRvcW2G5BldyPGuNjLogi+CP08C9vYNq3jAyJ/Pf472JbTfL
ybou5gWgy/u11MaBzdRGsdIulKt/JcshFfUzMq+GsKbGv/eny2vnB5dHRjJ/fFyB
LxrxDt7qU2xQqStAAawHTaW71gp/Vbi/398iipX6Pi9bt1g2+MzLHYvWRFUT7hg5
LQ1/FlrjN3O/bcDfIBR+UTRyOXn9WBMKUTjbFSi7bCFJPHBRvw3dZW8qvxJJPVJD
JG2rz/Rw1kiClo/Bmf2cKlKoTTXXLWhFd1wNWiytQ8SLpyk+KbnN5ZFWUk32HKOw
gMLuyu2BeJaBoHDOG9Sl3kg132wKZX9jqwKq0QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHUgU39p32Oh0z7cm/kCTklyVTpwMB8GA1UdIwQYMBaAFI9xTwL31bpGSCLp
2dR7u2DVk6EyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTEzZDVj
ZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Q1YWQ2YzAtNDk5Yi00MzgwLTk4NGYtODc0Yzlm
NTFkMmZmL2U0ODY4NTY2MDRiNjczZjZhNWY2YTA2YzBmY2I4OTY4MWY2YTQyMGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZDVhZDZjMC00OTliLTQzODAtOTg0Zi04NzRj
OWY1MWQyZmYvOTEzZDVjZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALv7wjANBgkqhkiG9w0BAQsFAAOCAQEAIPVYDmXfxP3wqqWr
2eJrnf5uJjNyxNBCpLShzD6SMgGJ/NC/maoVgOVhZrN7DYDAlJOX5HnFhsGmuLbD
e5GkXo0zs/VKRyt+YR5qguTjMFrkwmqkhkYNGWoeIeUWiEQmTS1+TAB3G/QMJe03
FrF1Xzw/Y/IxVog0sdlmYhFNLgKY6oZgdYm9gJFVXn0irhnkR8kzgMSiDsfaq9r2
aa9ym2DjmcLOjzFUf6RFNGahtUQIj/Hcfuag7Jam13GENZniQCrZrhJYvBLr1dvm
8m71B1OSPkN9xw3iAmu1GwJ43n7045f/twW+srdNCGPdcvIc7EQ5GIihhJWI4iMm
a0umwA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org