Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d20e3c1d-ae38-4c71-b824-0d45c1be93d5/c5b506eed947267261f03635957de85ad386ee74.roa
File:                     c5b506eed947267261f03635957de85ad386ee74.roa (raw, json)
Hash identifier:          7Y10Lzfg8GPPsw6T8xpIvxxfqWrU6xkTZbGEdlNxT2c=
Subject key identifier:   27:FE:31:A4:ED:D5:4C:9C:6A:60:A0:F6:D4:BD:83:10:F0:14:3A:3D
Certificate issuer:       /CN=12dfd461905739d978bc525fec493be1faf96bbc
Certificate serial:       0D84AE
Authority key identifier: 9A:9F:38:D2:FC:F3:66:2B:05:D4:C6:24:EE:75:8A:09:B0:53:94:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12dfd461905739d978bc525fec493be1faf96bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d20e3c1d-ae38-4c71-b824-0d45c1be93d5/c5b506eed947267261f03635957de85ad386ee74.roa
Signing time:             Wed 24 Mar 2021 14:41:02 +0000
ROA not before:           Wed 24 Mar 2021 14:41:02 +0000
ROA not after:            Tue 24 Mar 2026 14:41:02 +0000
asID:                     264668
IP address blocks:        170.82.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885934 (0xd84ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12dfd461905739d978bc525fec493be1faf96bbc
        Validity
            Not Before: Mar 24 14:41:02 2021 GMT
            Not After : Mar 24 14:41:02 2026 GMT
        Subject: CN=c5b506eed947267261f03635957de85ad386ee74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1b:ba:3e:33:6e:85:d6:3d:4e:e1:4f:49:4a:
                    f7:0d:5b:a3:d1:72:6a:09:8d:cf:19:09:02:13:e6:
                    e3:ab:94:03:77:6c:e8:3d:c7:76:25:55:bd:70:60:
                    f9:6e:7b:15:9c:ac:23:2c:be:45:4f:ee:e6:01:0b:
                    7b:ff:c8:cd:26:31:3c:95:a1:03:12:b0:38:d4:54:
                    71:22:ad:7b:21:cf:63:3c:2a:97:f6:49:5e:98:a5:
                    3e:ee:a6:21:f6:18:39:32:fd:34:41:40:c4:bc:0d:
                    69:e8:06:33:f2:b9:59:f3:3d:3f:66:38:0e:15:fc:
                    fe:af:62:25:0b:82:20:dc:6b:f2:5b:9f:cc:c0:8a:
                    28:cf:0c:8e:6b:04:5d:8c:c5:f9:71:c8:8c:b0:d7:
                    1d:ab:7c:b1:77:bd:80:5c:78:3c:22:18:59:f8:ca:
                    bd:8b:24:06:26:79:2e:e9:cd:1e:90:34:bc:f4:0f:
                    e9:ae:80:f9:b4:ec:81:ab:d5:8a:2e:87:6c:b4:38:
                    d2:e3:74:2c:f9:0f:45:02:af:77:22:ea:1b:08:4d:
                    af:79:bc:58:21:09:cf:a4:35:84:88:4e:2f:28:56:
                    4f:0c:3f:65:c6:ee:64:d9:19:5b:51:0d:82:f4:f0:
                    2f:0b:df:2b:88:31:67:d8:45:7c:39:2b:2b:78:b2:
                    b3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FE:31:A4:ED:D5:4C:9C:6A:60:A0:F6:D4:BD:83:10:F0:14:3A:3D
            X509v3 Authority Key Identifier:
                keyid:9A:9F:38:D2:FC:F3:66:2B:05:D4:C6:24:EE:75:8A:09:B0:53:94:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12dfd461905739d978bc525fec493be1faf96bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d20e3c1d-ae38-4c71-b824-0d45c1be93d5/c5b506eed947267261f03635957de85ad386ee74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d20e3c1d-ae38-4c71-b824-0d45c1be93d5/12dfd461905739d978bc525fec493be1faf96bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:d4:94:fa:82:37:a5:df:57:ee:59:b8:c5:82:38:2e:8c:22:
         44:44:8f:be:5a:a9:ec:5c:94:95:b7:e3:71:ee:44:d0:2b:92:
         2e:de:85:13:02:82:82:27:9b:8b:33:1e:01:ec:16:45:fb:7e:
         cf:32:57:91:b1:55:96:eb:35:e2:75:1e:a2:d0:e8:1c:dc:4d:
         e3:f4:5d:27:3e:b5:9d:f4:cb:94:88:6a:7a:b9:6f:b1:f3:3f:
         44:79:89:5e:3f:68:85:06:91:3a:0e:10:b9:ba:f6:99:4f:84:
         6f:0a:3c:78:8b:52:9f:6d:1a:b3:80:80:c7:5f:88:cc:f5:e5:
         74:24:04:34:81:31:54:0f:78:94:57:90:bb:7e:a6:c3:e1:8f:
         36:45:3f:aa:5a:34:1d:ec:84:f6:f7:b4:ed:94:83:2d:d0:10:
         1b:9c:6f:6e:60:27:10:f5:5c:07:0b:e6:90:2d:4b:34:ed:d8:
         35:80:c3:6e:26:51:2d:3e:62:a8:a7:e2:e9:97:f6:49:d5:75:
         b4:1b:fb:0c:b1:06:c9:34:84:64:de:ff:e7:a2:3c:73:05:c9:
         03:4a:a6:82:c6:99:6f:10:c6:5f:5c:a5:ad:6a:f1:8f:b8:17:
         2b:3d:7e:c4:11:7a:e0:03:18:65:6e:5e:55:b7:aa:a9:2c:1d:
         2c:82:28:ec
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDYSuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEy
ZGZkNDYxOTA1NzM5ZDk3OGJjNTI1ZmVjNDkzYmUxZmFmOTZiYmMwHhcNMjEwMzI0
MTQ0MTAyWhcNMjYwMzI0MTQ0MTAyWjAzMTEwLwYDVQQDEyhjNWI1MDZlZWQ5NDcy
NjcyNjFmMDM2MzU5NTdkZTg1YWQzODZlZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAihu6PjNuhdY9TuFPSUr3DVuj0XJqCY3PGQkCE+bjq5QDd2zo
Pcd2JVW9cGD5bnsVnKwjLL5FT+7mAQt7/8jNJjE8laEDErA41FRxIq17Ic9jPCqX
9klemKU+7qYh9hg5Mv00QUDEvA1p6AYz8rlZ8z0/ZjgOFfz+r2IlC4Ig3GvyW5/M
wIoozwyOawRdjMX5cciMsNcdq3yxd72AXHg8IhhZ+Mq9iyQGJnku6c0ekDS89A/p
roD5tOyBq9WKLodstDjS43Qs+Q9FAq93IuobCE2vebxYIQnPpDWEiE4vKFZPDD9l
xu5k2RlbUQ2C9PAvC98riDFn2EV8OSsreLKzqwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCf+MaTt1UycamCg9tS9gxDwFDo9MB8GA1UdIwQYMBaAFJqfONL882YrBdTG
JO51igmwU5R8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTJkZmQ0
NjE5MDU3MzlkOTc4YmM1MjVmZWM0OTNiZTFmYWY5NmJiYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDIwZTNjMWQtYWUzOC00YzcxLWI4MjQtMGQ0NWMx
YmU5M2Q1L2M1YjUwNmVlZDk0NzI2NzI2MWYwMzYzNTk1N2RlODVhZDM4NmVlNzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kMjBlM2MxZC1hZTM4LTRjNzEtYjgyNC0wZDQ1
YzFiZTkzZDUvMTJkZmQ0NjE5MDU3MzlkOTc4YmM1MjVmZWM0OTNiZTFmYWY5NmJi
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqpSnDANBgkqhkiG9w0BAQsFAAOCAQEAT9SU+oI3pd9X7lm4
xYI4LowiRESPvlqp7FyUlbfjce5E0CuSLt6FEwKCgiebizMeAewWRft+zzJXkbFV
lus14nUeotDoHNxN4/RdJz61nfTLlIhqerlvsfM/RHmJXj9ohQaROg4Qubr2mU+E
bwo8eItSn20as4CAx1+IzPXldCQENIExVA94lFeQu36mw+GPNkU/qlo0HeyE9ve0
7ZSDLdAQG5xvbmAnEPVcBwvmkC1LNO3YNYDDbiZRLT5iqKfi6Zf2SdV1tBv7DLEG
yTSEZN7/56I8cwXJA0qmgsaZbxDGX1ylrWrxj7gXKz1+xBF64AMYZW5eVbeqqSwd
LIIo7A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org