Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/aa91e6356ff862d80ed1e424d5b54326b4510f9f.roa
File:                     aa91e6356ff862d80ed1e424d5b54326b4510f9f.roa (raw, json)
Hash identifier:          yBUL5K2USr1DqnaWs8LOKXOQL1fkJtF0wYjweZaGRpc=
Subject key identifier:   F7:B9:3C:42:0D:31:3E:33:86:A0:47:B4:EB:21:75:96:28:48:E7:09
Certificate issuer:       /CN=928723b4ebd5246c0aa94baeaa44572b7b3662b3
Certificate serial:       0D392F
Authority key identifier: 42:E0:8F:E1:1A:DA:5B:56:FE:46:4E:5E:12:A9:21:A0:6E:BD:86:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/928723b4ebd5246c0aa94baeaa44572b7b3662b3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/aa91e6356ff862d80ed1e424d5b54326b4510f9f.roa
Signing time:             Wed 24 Mar 2021 14:32:34 +0000
ROA not before:           Wed 24 Mar 2021 14:32:34 +0000
ROA not after:            Tue 24 Mar 2026 14:32:34 +0000
asID:                     5692
IP address blocks:        163.10.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866607 (0xd392f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928723b4ebd5246c0aa94baeaa44572b7b3662b3
        Validity
            Not Before: Mar 24 14:32:34 2021 GMT
            Not After : Mar 24 14:32:34 2026 GMT
        Subject: CN=aa91e6356ff862d80ed1e424d5b54326b4510f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:69:1e:06:eb:1f:af:24:4f:86:69:c1:ae:41:
                    b2:2a:cf:86:37:d0:60:b2:69:87:03:9d:5d:7d:cd:
                    0d:4d:c6:34:e0:cd:f4:40:d7:50:a4:10:91:c4:c0:
                    79:2c:02:e4:d4:c0:e2:1b:c0:5c:c6:ff:e0:8f:4b:
                    5e:c7:9c:df:4a:79:ff:58:4f:e9:64:85:8e:6d:35:
                    92:ac:5b:16:8e:99:b6:33:6d:db:f7:4f:76:be:26:
                    c7:69:a7:39:25:bf:dc:a0:76:b0:b2:8a:3a:4e:f1:
                    6d:9e:9b:26:3a:e8:36:29:8f:79:73:bc:a7:84:f4:
                    48:31:4c:c0:93:fd:be:3c:be:42:58:83:29:93:be:
                    43:3d:84:10:91:f6:7f:e3:91:43:f1:d0:ab:bf:c1:
                    4c:b3:71:ac:24:5d:c4:2c:8d:1e:c5:a3:6c:0a:99:
                    7a:0c:5f:f0:72:1e:59:fc:0f:32:03:e7:0f:35:51:
                    48:13:fb:72:e1:fb:c2:16:37:5e:19:1c:31:d9:ff:
                    18:de:80:35:4a:d6:f3:5b:a5:f6:cc:21:0e:c3:a7:
                    60:44:b9:11:e4:cb:08:0d:d4:79:1c:c0:01:75:3f:
                    53:a3:af:cf:14:5b:53:28:c5:1a:11:09:42:dc:fa:
                    05:c6:d3:d7:d1:c9:ef:b2:e2:54:c5:5d:38:b1:86:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B9:3C:42:0D:31:3E:33:86:A0:47:B4:EB:21:75:96:28:48:E7:09
            X509v3 Authority Key Identifier:
                keyid:42:E0:8F:E1:1A:DA:5B:56:FE:46:4E:5E:12:A9:21:A0:6E:BD:86:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/928723b4ebd5246c0aa94baeaa44572b7b3662b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/aa91e6356ff862d80ed1e424d5b54326b4510f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e977afc1-14c3-4ce9-a69b-5b88fc35838a/928723b4ebd5246c0aa94baeaa44572b7b3662b3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:23:c3:29:82:e2:1b:c3:1d:aa:fc:74:2c:62:70:75:55:7d:
         f5:84:95:52:13:9b:fd:d2:65:c5:88:76:ec:0f:dc:ba:a4:74:
         21:a0:e5:68:39:0d:01:38:ad:af:82:03:64:24:83:0e:b9:94:
         f1:4f:18:33:7b:2e:bb:83:85:30:9b:59:46:d8:4a:bd:5c:08:
         c3:7f:4f:6c:b1:2c:3a:02:2c:75:84:98:bc:c3:57:4a:cd:19:
         63:18:63:db:a0:4a:a8:b7:aa:68:ed:85:a5:4f:a2:59:e5:8a:
         03:23:6e:fb:e4:f3:0f:c5:d9:d4:fd:3e:b4:95:9a:66:19:ec:
         9a:e6:6e:a9:25:46:da:2f:a2:6c:01:51:f6:63:5d:1c:64:b1:
         dc:cc:9b:1d:14:2b:0d:bb:83:84:e7:64:ed:3a:75:1f:4b:ef:
         f0:ca:2d:39:42:3f:40:d9:5a:d8:5e:00:8a:e6:ad:39:a8:0c:
         b3:06:14:33:e8:2a:37:dc:a4:b0:ce:9e:02:aa:f1:2c:e3:44:
         46:4d:ee:4e:33:6d:74:24:99:f9:ab:c0:f3:8c:6d:e7:5f:be:
         88:d3:4a:4a:46:08:fd:fb:97:d6:25:c0:85:b1:95:75:17:12:
         8a:02:c6:b1:6d:b2:30:b2:32:2e:a7:b1:05:9f:d8:ce:5b:88:
         d0:d8:96:87
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDDTkvMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDky
ODcyM2I0ZWJkNTI0NmMwYWE5NGJhZWFhNDQ1NzJiN2IzNjYyYjMwHhcNMjEwMzI0
MTQzMjM0WhcNMjYwMzI0MTQzMjM0WjAzMTEwLwYDVQQDEyhhYTkxZTYzNTZmZjg2
MmQ4MGVkMWU0MjRkNWI1NDMyNmI0NTEwZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnWkeBusfryRPhmnBrkGyKs+GN9BgsmmHA51dfc0NTcY04M30
QNdQpBCRxMB5LALk1MDiG8Bcxv/gj0tex5zfSnn/WE/pZIWObTWSrFsWjpm2M23b
9092vibHaac5Jb/coHawsoo6TvFtnpsmOug2KY95c7ynhPRIMUzAk/2+PL5CWIMp
k75DPYQQkfZ/45FD8dCrv8FMs3GsJF3ELI0exaNsCpl6DF/wch5Z/A8yA+cPNVFI
E/ty4fvCFjdeGRwx2f8Y3oA1StbzW6X2zCEOw6dgRLkR5MsIDdR5HMABdT9To6/P
FFtTKMUaEQlC3PoFxtPX0cnvsuJUxV04sYZTsQIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFPe5PEINMT4zhqBHtOshdZYoSOcJMB8GA1UdIwQYMBaAFELgj+Ea2ltW/kZO
XhKpIaBuvYakMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTI4NzIz
YjRlYmQ1MjQ2YzBhYTk0YmFlYWE0NDU3MmI3YjM2NjJiMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTk3N2FmYzEtMTRjMy00Y2U5LWE2OWItNWI4OGZj
MzU4MzhhL2FhOTFlNjM1NmZmODYyZDgwZWQxZTQyNGQ1YjU0MzI2YjQ1MTBmOWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lOTc3YWZjMS0xNGMzLTRjZTktYTY5Yi01Yjg4
ZmMzNTgzOGEvOTI4NzIzYjRlYmQ1MjQ2YzBhYTk0YmFlYWE0NDU3MmI3YjM2NjJi
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAKMKMA0GCSqGSIb3DQEBCwUAA4IBAQAVI8MpguIbwx2q/HQs
YnB1VX31hJVSE5v90mXFiHbsD9y6pHQhoOVoOQ0BOK2vggNkJIMOuZTxTxgzey67
g4Uwm1lG2Eq9XAjDf09ssSw6Aix1hJi8w1dKzRljGGPboEqot6po7YWlT6JZ5YoD
I2775PMPxdnU/T60lZpmGeya5m6pJUbaL6JsAVH2Y10cZLHczJsdFCsNu4OE52Tt
OnUfS+/wyi05Qj9A2VrYXgCK5q05qAyzBhQz6Co33KSwzp4CqvEs40RGTe5OM210
JJn5q8DzjG3nX76I00pKRgj9+5fWJcCFsZV1FxKKAsaxbbIwsjIup7EFn9jOW4jQ
2JaH
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org