Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/c516855edbd03a32079b8836ae9113c0e8c5bbf9.roa
File:                     c516855edbd03a32079b8836ae9113c0e8c5bbf9.roa (raw, json)
Hash identifier:          DdaMshi6pQr/CkY4nWsU5zxaQYooEBmU2ew7co2OmUI=
Subject key identifier:   86:90:59:48:F7:BD:BB:D1:48:82:6A:69:A4:03:63:24:A2:4D:10:70
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       1211D8
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/c516855edbd03a32079b8836ae9113c0e8c5bbf9.roa
Signing time:             Fri 02 Jun 2023 08:30:07 +0000
ROA not before:           Thu 01 Jun 2023 08:30:07 +0000
ROA not after:            Sat 31 May 2025 08:30:07 +0000
asID:                     263833
IP address blocks:        138.255.168.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184216 (0x1211d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Jun  1 08:30:07 2023 GMT
            Not After : May 31 08:30:07 2025 GMT
        Subject: CN=c516855edbd03a32079b8836ae9113c0e8c5bbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:57:ad:f4:ec:89:50:73:e4:2d:06:0d:84:
                    2b:b0:7b:5e:94:b9:1f:5d:38:0f:eb:bb:8a:5c:0e:
                    6f:85:18:f5:67:d4:98:ae:ea:aa:2c:b0:58:15:92:
                    06:dd:41:6e:3e:08:a5:b5:a3:4e:4c:6d:81:27:2c:
                    49:96:cc:ea:1c:c1:47:21:fe:f9:67:72:48:c3:8b:
                    70:55:fa:b5:45:03:3e:f6:fe:54:8c:b3:59:de:d9:
                    42:bf:76:8f:d7:fd:b6:ad:42:b4:8f:4e:1e:d4:c7:
                    66:9a:fd:ab:e0:78:b8:83:5c:cc:ec:ef:91:dc:ce:
                    04:8d:b5:ac:05:5c:2c:13:cf:a0:51:0f:fd:88:94:
                    c4:ee:f2:d2:7e:3b:17:44:da:12:63:1d:c8:a4:ca:
                    c4:d2:14:94:ef:e3:d0:e8:fb:c5:f0:aa:bd:be:9b:
                    c4:73:7c:8b:a8:60:5c:42:32:63:36:34:08:3b:41:
                    0a:f1:21:b8:43:6e:62:10:f5:50:71:f9:e7:40:6e:
                    04:23:e4:31:2d:1a:41:97:8e:35:ef:bb:ba:dc:a6:
                    9d:3f:d5:0d:b0:0a:fa:d3:78:47:46:e0:a9:af:fa:
                    df:c4:33:ef:0a:34:00:10:56:3c:43:ba:7f:fc:47:
                    59:74:d0:5d:cf:6b:5d:7f:66:2f:30:dc:2f:b3:d6:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:90:59:48:F7:BD:BB:D1:48:82:6A:69:A4:03:63:24:A2:4D:10:70
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/c516855edbd03a32079b8836ae9113c0e8c5bbf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:af:73:59:a3:d1:b5:b8:41:94:c8:cc:a2:bf:f5:cb:f4:
         06:08:fc:b0:db:2b:c9:2b:47:f0:65:57:bd:fe:62:ca:7b:31:
         7f:88:e9:13:33:3b:04:bb:95:72:b1:28:7c:8d:fa:fc:c0:ca:
         9a:2d:bf:a7:6b:83:9f:51:93:25:ed:31:5d:8c:1d:fc:d0:7d:
         78:7a:d5:fe:3e:a3:c7:08:05:f6:0f:81:7c:cb:ab:53:69:fc:
         e9:a5:4a:6e:b8:e6:ae:06:f2:de:e9:2f:6c:b3:16:fd:e8:ca:
         46:cc:f0:b5:5d:02:f1:5f:d6:16:32:1a:77:05:d6:1f:6c:7a:
         82:49:89:45:99:4e:82:92:4b:af:16:82:c5:be:be:e8:6f:98:
         56:a0:09:4c:70:13:65:26:bf:2b:83:3e:cf:c4:41:92:1b:fa:
         09:13:3e:5c:13:aa:58:c6:3c:23:5c:b0:f7:94:d6:b9:c0:e2:
         0b:d8:4d:4a:a3:e2:e4:4d:b0:03:fc:bc:54:8d:1f:bc:fd:4b:
         eb:05:40:cc:94:45:6a:f1:14:fc:36:af:0b:38:40:78:89:a2:
         99:eb:ab:d5:fe:fc:d8:5a:f4:36:48:1e:44:0d:c7:95:78:40:
         ad:60:1f:7e:49:6f:e9:e8:9e:13:84:15:5f:96:f4:df:1f:b8:
         e5:87:88:80
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEhHYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhk
NTVlYzkwZThiNmU1ZWNhNmE0MDYwYTlhMTg1MzJmZTFmMzkxYjUwHhcNMjMwNjAx
MDgzMDA3WhcNMjUwNTMxMDgzMDA3WjAzMTEwLwYDVQQDEyhjNTE2ODU1ZWRiZDAz
YTMyMDc5Yjg4MzZhZTkxMTNjMGU4YzViYmY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnVVXrfTsiVBz5C0GDYQrsHtelLkfXTgP67uKXA5vhRj1Z9SY
ruqqLLBYFZIG3UFuPgiltaNOTG2BJyxJlszqHMFHIf75Z3JIw4twVfq1RQM+9v5U
jLNZ3tlCv3aP1/22rUK0j04e1Mdmmv2r4Hi4g1zM7O+R3M4EjbWsBVwsE8+gUQ/9
iJTE7vLSfjsXRNoSYx3IpMrE0hSU7+PQ6PvF8Kq9vpvEc3yLqGBcQjJjNjQIO0EK
8SG4Q25iEPVQcfnnQG4EI+QxLRpBl44177u63KadP9UNsAr603hHRuCpr/rfxDPv
CjQAEFY8Q7p//EdZdNBdz2tdf2YvMNwvs9Yk2wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIaQWUj3vbvRSIJqaaQDYySiTRBwMB8GA1UdIwQYMBaAFNlbt1vM1oSBgjCS
r+WnlnediRtjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGQ1NWVj
OTBlOGI2ZTVlY2E2YTQwNjBhOWExODUzMmZlMWYzOTFiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGViYjYxYzAtNjQwMC00NmQyLWE0MWMtNzM0NmE4
MGZlMDVjL2M1MTY4NTVlZGJkMDNhMzIwNzliODgzNmFlOTExM2MwZThjNWJiZjku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kZWJiNjFjMC02NDAwLTQ2ZDItYTQxYy03MzQ2
YTgwZmUwNWMvOGQ1NWVjOTBlOGI2ZTVlY2E2YTQwNjBhOWExODUzMmZlMWYzOTFi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAYr/qDANBgkqhkiG9w0BAQsFAAOCAQEADnavc1mj0bW4QZTI
zKK/9cv0Bgj8sNsryStH8GVXvf5iynsxf4jpEzM7BLuVcrEofI36/MDKmi2/p2uD
n1GTJe0xXYwd/NB9eHrV/j6jxwgF9g+BfMurU2n86aVKbrjmrgby3ukvbLMW/ejK
RszwtV0C8V/WFjIadwXWH2x6gkmJRZlOgpJLrxaCxb6+6G+YVqAJTHATZSa/K4M+
z8RBkhv6CRM+XBOqWMY8I1yw95TWucDiC9hNSqPi5E2wA/y8VI0fvP1L6wVAzJRF
avEU/DavCzhAeImimeur1f782Fr0NkgeRA3HlXhArWAffklv6eieE4QVX5b03x+4
5YeIgA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org