Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/55ca37bfc5b103237baa56cb62fb59aedf867c21.roa
File:                     55ca37bfc5b103237baa56cb62fb59aedf867c21.roa (raw, json)
Hash identifier:          MOBwr5ulL9dvHiV8wkUZRFi1ZZcA7iVWGi1TYNWhx3s=
Subject key identifier:   7E:4F:29:D8:25:24:A9:5E:A2:EB:E9:10:48:87:BB:C6:F6:BC:80:3A
Certificate issuer:       /CN=bfa1a6cea5071fa02d7426401f14b3d6b3d0da83
Certificate serial:       06A6
Authority key identifier: 3A:13:D5:51:2E:F7:7C:6A:F8:FA:C3:BE:15:8C:AD:91:7C:C0:39:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/55ca37bfc5b103237baa56cb62fb59aedf867c21.roa
Signing time:             Wed 29 Mar 2023 09:04:04 +0000
ROA not before:           Tue 28 Mar 2023 09:00:53 +0000
ROA not after:            Sat 29 Mar 2025 09:00:53 +0000
asID:                     271908
IP address blocks:        131.255.17.0/24 maxlen: 24
                          131.255.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1702 (0x6a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa1a6cea5071fa02d7426401f14b3d6b3d0da83
        Validity
            Not Before: Mar 28 09:00:53 2023 GMT
            Not After : Mar 29 09:00:53 2025 GMT
        Subject: CN=55ca37bfc5b103237baa56cb62fb59aedf867c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f0:09:42:a6:47:00:89:e3:f1:89:ea:21:13:
                    ef:65:da:f8:be:f7:0c:e1:cd:81:cf:9a:20:c1:09:
                    52:f8:24:ae:ae:3d:e9:75:76:bd:eb:2b:f1:6f:50:
                    cb:22:ed:93:ca:e7:16:15:3e:ed:2d:29:a6:4a:bb:
                    82:74:ef:59:24:98:81:32:ce:9c:44:48:08:06:31:
                    71:df:9d:4f:b9:26:3b:54:68:71:b5:0d:7e:21:5c:
                    f6:75:5d:f0:98:78:88:7d:ab:af:6a:2d:4d:be:b2:
                    49:43:16:68:97:14:8e:2c:0c:64:14:51:e2:8e:03:
                    3e:07:5b:87:ad:f7:3b:b2:36:a7:bd:ed:80:ef:12:
                    ce:b2:c0:5e:0e:f0:d9:3b:d5:e0:72:cb:f0:b3:d4:
                    59:c5:63:4f:38:a9:ef:79:6c:42:56:7f:ce:d1:1b:
                    8f:3e:9f:6c:c1:20:97:0b:2f:fb:6a:9d:38:b7:9b:
                    fc:9d:80:55:ce:11:03:b0:0e:ed:30:e7:ec:d5:c8:
                    20:30:0e:41:9a:26:4b:bb:da:5b:e8:db:e3:35:c3:
                    ed:90:dc:35:9a:66:31:4a:2a:30:8c:26:17:bc:bf:
                    52:29:f9:77:f2:79:a1:36:cd:42:4f:63:14:0b:af:
                    7a:6f:a7:8b:4f:f6:93:49:48:e4:9c:e2:4e:ba:da:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4F:29:D8:25:24:A9:5E:A2:EB:E9:10:48:87:BB:C6:F6:BC:80:3A
            X509v3 Authority Key Identifier:
                keyid:3A:13:D5:51:2E:F7:7C:6A:F8:FA:C3:BE:15:8C:AD:91:7C:C0:39:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/55ca37bfc5b103237baa56cb62fb59aedf867c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.17.0-131.255.19.255

    Signature Algorithm: sha256WithRSAEncryption
         0d:d1:49:ca:2e:35:30:df:43:c6:86:74:cc:33:ce:3e:ec:87:
         66:0e:d9:5a:b4:68:bc:26:f1:2d:4c:b8:ad:87:97:e2:d3:2e:
         9c:ce:fb:67:ce:ee:53:ea:59:fa:bc:a1:89:fa:a1:9d:69:5c:
         d7:d8:8c:97:d2:38:de:9e:31:bc:6c:aa:0a:1a:31:48:3a:de:
         45:17:71:a9:5b:a9:04:1f:93:f6:75:76:7a:1c:8b:60:7e:5a:
         91:40:20:8c:ef:a3:c2:22:ed:e6:8b:03:97:65:08:a0:76:c5:
         e4:b1:40:81:7d:5a:6a:79:1f:5b:4f:18:66:96:2e:de:e0:a6:
         91:7e:22:15:d3:c5:47:90:bb:d6:26:a4:c7:67:ba:07:68:6a:
         3d:9d:48:d1:ad:07:e5:af:bb:e4:06:55:34:c0:fe:57:b6:d3:
         8e:c5:58:0d:5b:c9:c4:eb:07:1d:60:95:af:a3:c0:eb:54:fb:
         ac:aa:a1:25:1d:e2:1c:af:76:41:44:96:0c:43:ce:e6:ec:6f:
         e4:33:97:a8:eb:63:9b:8b:f0:8d:09:39:fb:c8:f2:f3:eb:86:
         98:c9:ed:fa:6b:bf:0c:bd:be:b3:fb:08:4d:06:6b:be:7a:c2:
         bc:e5:b6:9e:53:45:bb:2d:89:ba:c9:2f:45:f4:82:d7:b8:e3:
         b7:fb:a8:bc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoYmZh
MWE2Y2VhNTA3MWZhMDJkNzQyNjQwMWYxNGIzZDZiM2QwZGE4MzAeFw0yMzAzMjgw
OTAwNTNaFw0yNTAzMjkwOTAwNTNaMDMxMTAvBgNVBAMTKDU1Y2EzN2JmYzViMTAz
MjM3YmFhNTZjYjYyZmI1OWFlZGY4NjdjMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCA8AlCpkcAiePxieohE+9l2vi+9wzhzYHPmiDBCVL4JK6uPel1
dr3rK/FvUMsi7ZPK5xYVPu0tKaZKu4J071kkmIEyzpxESAgGMXHfnU+5JjtUaHG1
DX4hXPZ1XfCYeIh9q69qLU2+sklDFmiXFI4sDGQUUeKOAz4HW4et9zuyNqe97YDv
Es6ywF4O8Nk71eByy/Cz1FnFY084qe95bEJWf87RG48+n2zBIJcLL/tqnTi3m/yd
gFXOEQOwDu0w5+zVyCAwDkGaJku72lvo2+M1w+2Q3DWaZjFKKjCMJhe8v1Ip+Xfy
eaE2zUJPYxQLr3pvp4tP9pNJSOSc4k662kS1AgMBAAGjggJjMIICXzAdBgNVHQ4E
FgQUfk8p2CUkqV6i6+kQSIe7xva8gDowHwYDVR0jBBgwFoAUOhPVUS73fGr4+sO+
FYytkXzAOTQwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9iZmExYTZj
ZWE1MDcxZmEwMmQ3NDI2NDAxZjE0YjNkNmIzZDBkYTgzLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9lMDMxOWQyYi1lYWM0LTRiMmMtOTg4Yi1hNzY3ZGU5
NGMxYWYvNTVjYTM3YmZjNWIxMDMyMzdiYWE1NmNiNjJmYjU5YWVkZjg2N2MyMS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2UwMzE5ZDJiLWVhYzQtNGIyYy05ODhiLWE3Njdk
ZTk0YzFhZi9iZmExYTZjZWE1MDcxZmEwMmQ3NDI2NDAxZjE0YjNkNmIzZDBkYTgz
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgw
FjAUBAIAATAOMAwDBACD/xEDBAKD/xAwDQYJKoZIhvcNAQELBQADggEBAA3RScou
NTDfQ8aGdMwzzj7sh2YO2Vq0aLwm8S1MuK2Hl+LTLpzO+2fO7lPqWfq8oYn6oZ1p
XNfYjJfSON6eMbxsqgoaMUg63kUXcalbqQQfk/Z1dnoci2B+WpFAIIzvo8Ii7eaL
A5dlCKB2xeSxQIF9Wmp5H1tPGGaWLt7gppF+IhXTxUeQu9YmpMdnugdoaj2dSNGt
B+Wvu+QGVTTA/le2047FWA1bycTrBx1gla+jwOtU+6yqoSUd4hyvdkFElgxDzubs
b+Qzl6jrY5uL8I0JOfvI8vPrhpjJ7fprvwy9vrP7CE0Ga756wrzltp5TRbstibrJ
L0X0gte447f7qLw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org