Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/bfa6295d887325a55aa7ba09f876f4106d3b5b09.roa
File:                     bfa6295d887325a55aa7ba09f876f4106d3b5b09.roa (raw, json)
Hash identifier:          2brlDTydnwyTHYpObZI9VMtOvboAtABGzL7s8Ui3Q6M=
Subject key identifier:   A1:FC:B6:DA:C2:E1:B5:1B:5A:E5:C6:AB:19:8B:8F:A7:40:3C:9F:61
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       0B0745
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/bfa6295d887325a55aa7ba09f876f4106d3b5b09.roa
Signing time:             Fri 18 Nov 2022 19:40:51 +0000
ROA not before:           Thu 17 Nov 2022 19:40:15 +0000
ROA not after:            Mon 18 Nov 2024 19:40:15 +0000
asID:                     27768
IP address blocks:        201.217.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722757 (0xb0745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Nov 17 19:40:15 2022 GMT
            Not After : Nov 18 19:40:15 2024 GMT
        Subject: CN=bfa6295d887325a55aa7ba09f876f4106d3b5b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:f8:f5:5b:ff:92:d3:e2:0f:35:2b:34:6d:
                    30:7f:7f:cc:7e:47:44:9f:f9:99:95:ee:1e:f2:9d:
                    f0:fe:0b:93:1a:b8:6b:44:0f:6a:8e:8b:b7:66:22:
                    d0:f2:8b:83:f5:21:94:dc:88:1c:ae:6d:e5:fe:eb:
                    68:5f:e4:8e:96:a2:b5:0c:9f:03:a3:07:ce:be:ea:
                    54:54:31:ab:03:ea:bd:6f:67:ff:fb:b9:71:2f:86:
                    b4:2d:09:58:31:5b:9d:c9:77:21:e8:50:f9:da:87:
                    e2:fc:92:3b:49:f7:59:23:96:b6:94:1d:ba:be:91:
                    25:b8:f1:29:e1:4a:3b:da:34:9b:c9:5d:c1:6f:14:
                    d1:4b:4e:dc:f9:7e:34:5d:41:21:23:ea:49:8f:e7:
                    e1:7a:39:ca:ca:a5:0f:5d:d2:fb:ce:78:8d:7b:84:
                    09:7f:59:a6:7e:94:92:19:1e:23:d4:e8:01:59:a0:
                    4a:ef:2f:dd:a7:d6:cd:82:cd:09:1b:74:19:fb:15:
                    18:28:7e:90:39:6d:ac:1b:0f:25:c4:12:9c:90:cb:
                    65:21:66:32:17:c5:85:d4:b6:6d:ce:73:b6:37:d3:
                    d9:72:35:cf:59:8a:37:7f:c2:5d:6e:bb:ab:ff:d8:
                    6c:55:83:31:1e:4c:0d:38:a0:ed:d1:a2:f7:dd:e5:
                    35:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FC:B6:DA:C2:E1:B5:1B:5A:E5:C6:AB:19:8B:8F:A7:40:3C:9F:61
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/bfa6295d887325a55aa7ba09f876f4106d3b5b09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:72:c5:dc:9d:84:29:74:64:1d:88:07:ea:85:33:79:ef:be:
         59:a2:05:12:20:18:f7:b3:bd:3b:b6:dc:a0:57:ad:9f:b4:dc:
         c9:db:28:2d:b0:02:86:96:10:83:12:d0:0a:1d:bb:9e:bb:09:
         e5:96:0c:6c:2a:5a:a4:cf:7c:01:01:15:bb:0d:a2:bb:59:5d:
         60:29:e2:2c:79:15:66:41:a9:fc:aa:95:8c:27:4b:a4:ab:2d:
         9c:fe:b1:09:11:c0:ce:b9:ea:0c:5d:78:6c:dd:c7:a7:6b:4d:
         9a:8f:cf:2c:53:20:8a:b3:94:aa:86:70:b1:ea:93:a2:e6:46:
         dc:fb:b8:ff:02:c2:52:5e:f2:40:3e:3d:a4:7a:3c:60:e6:41:
         97:20:48:14:6a:4b:58:ec:0f:e7:56:30:3a:65:6f:c5:eb:26:
         5a:96:c7:1a:10:a1:1f:47:74:39:5a:c8:f9:a1:80:7f:7e:23:
         5f:c0:d8:2f:25:b9:8c:2c:4c:94:ee:a1:fb:6f:cb:f5:3a:65:
         ae:0c:e9:b1:47:3e:44:fa:36:5d:a0:bd:f5:57:c6:36:a0:2e:
         7c:22:4e:c3:d6:5c:93:e6:27:74:49:09:80:e2:8b:e4:16:ec:
         eb:3d:b1:a6:60:5f:00:f8:25:72:86:5d:f7:0e:a6:0d:f9:50:
         ab:92:0d:b5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCwdFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
NjlmYjM4N2JlZmM5NmYwMTlkMDE0YzZlNTIzNGQwOTU1NTUzYTkwHhcNMjIxMTE3
MTk0MDE1WhcNMjQxMTE4MTk0MDE1WjAzMTEwLwYDVQQDEyhiZmE2Mjk1ZDg4NzMy
NWE1NWFhN2JhMDlmODc2ZjQxMDZkM2I1YjA5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtHz49Vv/ktPiDzUrNG0wf3/MfkdEn/mZle4e8p3w/guTGrhr
RA9qjou3ZiLQ8ouD9SGU3Igcrm3l/utoX+SOlqK1DJ8DowfOvupUVDGrA+q9b2f/
+7lxL4a0LQlYMVudyXch6FD52ofi/JI7SfdZI5a2lB26vpEluPEp4Uo72jSbyV3B
bxTRS07c+X40XUEhI+pJj+fhejnKyqUPXdL7zniNe4QJf1mmfpSSGR4j1OgBWaBK
7y/dp9bNgs0JG3QZ+xUYKH6QOW2sGw8lxBKckMtlIWYyF8WF1LZtznO2N9PZcjXP
WYo3f8Jdbrur/9hsVYMxHkwNOKDt0aL33eU1jwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKH8ttrC4bUbWuXGqxmLj6dAPJ9hMB8GA1UdIwQYMBaAFAyFBRRHaAvbICkP
JHQ1FbXmEmp/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ2OWZi
Mzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNhOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTRhZDY4ZTMtYTdmMC00ZDUxLTg2NTgtY2NmOWMy
NmQzZWE3L2JmYTYyOTVkODg3MzI1YTU1YWE3YmEwOWY4NzZmNDEwNmQzYjViMDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNGFkNjhlMy1hN2YwLTRkNTEtODY1OC1jY2Y5
YzI2ZDNlYTcvOTQ2OWZiMzg3YmVmYzk2ZjAxOWQwMTRjNmU1MjM0ZDA5NTU1NTNh
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnZEDANBgkqhkiG9w0BAQsFAAOCAQEALXLF3J2EKXRkHYgH
6oUzee++WaIFEiAY97O9O7bcoFetn7TcydsoLbAChpYQgxLQCh27nrsJ5ZYMbCpa
pM98AQEVuw2iu1ldYCniLHkVZkGp/KqVjCdLpKstnP6xCRHAzrnqDF14bN3Hp2tN
mo/PLFMgirOUqoZwseqTouZG3Pu4/wLCUl7yQD49pHo8YOZBlyBIFGpLWOwP51Yw
OmVvxesmWpbHGhChH0d0OVrI+aGAf34jX8DYLyW5jCxMlO6h+2/L9TplrgzpsUc+
RPo2XaC99VfGNqAufCJOw9Zck+YndEkJgOKL5Bbs6z2xpmBfAPglcoZd9w6mDflQ
q5INtQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org