Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/16493aa54c6b77a2a4033a8492689033a9a8f1de.roa
File:                     16493aa54c6b77a2a4033a8492689033a9a8f1de.roa (raw, json)
Hash identifier:          M8+o6UfpvSjQ+QFRyFpGlmsjhDS+RmS4SMrlm0A7BZw=
Subject key identifier:   B1:5D:1A:94:49:67:A8:F8:5D:F1:F2:A4:F1:67:10:36:A9:08:E6:E5
Certificate issuer:       /CN=a5346d2ac1e2fe0a8450cb3df09c729567332040
Certificate serial:       0D39F7
Authority key identifier: C5:C6:9E:CA:85:A0:88:71:1D:9C:4F:AD:F8:07:16:14:D2:4F:AB:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5346d2ac1e2fe0a8450cb3df09c729567332040.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/16493aa54c6b77a2a4033a8492689033a9a8f1de.roa
Signing time:             Wed 24 Mar 2021 14:42:21 +0000
ROA not before:           Wed 24 Mar 2021 14:42:21 +0000
ROA not after:            Tue 24 Mar 2026 14:42:21 +0000
asID:                     265767
IP address blocks:        164.163.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866807 (0xd39f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5346d2ac1e2fe0a8450cb3df09c729567332040
        Validity
            Not Before: Mar 24 14:42:21 2021 GMT
            Not After : Mar 24 14:42:21 2026 GMT
        Subject: CN=16493aa54c6b77a2a4033a8492689033a9a8f1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6c:d8:9a:88:cf:e4:c7:cc:cf:9a:33:7b:81:
                    e8:11:18:17:f4:4b:62:82:fa:62:d1:01:b2:78:3d:
                    6e:e5:aa:23:de:35:b6:b8:34:94:0a:6e:e5:6b:9c:
                    7d:f5:13:fb:23:3c:28:17:36:84:fe:b1:07:27:9d:
                    38:8f:b2:56:33:ab:fc:d5:b7:92:4a:f0:c4:c2:d2:
                    3a:f6:6d:65:d2:08:77:0f:cd:57:92:ef:18:4c:38:
                    c9:0e:bb:a6:bd:20:4d:75:80:73:11:12:5a:a6:64:
                    a1:81:e8:de:69:bd:4e:ee:62:2c:c6:48:4e:5e:b7:
                    05:98:14:08:f4:24:a1:55:2a:06:4e:ae:35:d8:c1:
                    72:cd:58:e5:6e:1f:c2:8e:ec:ab:a1:5e:ee:33:1f:
                    77:38:df:87:9a:7d:36:23:64:a8:97:65:93:69:ac:
                    85:41:8c:b6:e2:80:66:22:3c:89:7b:8e:4e:43:63:
                    25:85:c8:a0:a9:9a:a6:26:9e:91:ae:f2:7c:ce:56:
                    b4:a5:d8:e4:c7:37:3c:fb:be:92:d4:46:18:22:0a:
                    4d:92:ec:d6:20:df:e1:d3:54:e8:02:c5:f8:33:94:
                    ee:7f:25:fe:67:04:ec:93:40:a1:37:de:47:68:bc:
                    b2:d0:cf:1d:4a:05:c9:c9:ec:0e:b6:ae:be:0d:30:
                    f0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5D:1A:94:49:67:A8:F8:5D:F1:F2:A4:F1:67:10:36:A9:08:E6:E5
            X509v3 Authority Key Identifier:
                keyid:C5:C6:9E:CA:85:A0:88:71:1D:9C:4F:AD:F8:07:16:14:D2:4F:AB:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5346d2ac1e2fe0a8450cb3df09c729567332040.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/16493aa54c6b77a2a4033a8492689033a9a8f1de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ea6ab424-b789-47f1-a378-392f7125db70/a5346d2ac1e2fe0a8450cb3df09c729567332040.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:2c:0b:34:d2:5e:00:55:29:f3:93:7a:53:24:77:d8:3e:14:
         6f:03:cc:11:55:2f:8b:77:40:20:b2:06:08:e9:7b:08:10:b2:
         35:ef:9a:1f:50:03:d1:17:04:db:87:3f:e4:8a:aa:64:58:66:
         37:70:9a:5e:96:4d:2a:95:b8:af:a5:51:6c:d0:04:4f:1a:47:
         38:46:4f:7b:35:0e:c9:83:7c:f2:17:8b:5e:cb:7a:b3:25:97:
         d4:6e:24:7b:aa:64:f2:b7:22:dd:d8:e2:4a:0e:eb:23:1d:78:
         a5:98:0f:14:bd:a3:b0:27:d5:2e:ba:44:cc:4e:69:55:8f:44:
         32:e9:22:9a:64:a4:f2:f3:e6:c9:89:b5:51:b6:8c:f7:99:77:
         55:b9:0e:56:c7:10:97:63:8f:36:85:bc:be:87:df:4c:11:33:
         e5:e5:2c:60:ab:17:7b:8b:ff:b3:a2:56:d7:0b:0f:df:d9:19:
         11:fd:f9:c4:8b:ed:f7:2b:99:a0:1d:be:cc:ea:6b:8c:a5:82:
         58:f2:52:41:78:1c:55:ca:94:29:a2:e4:f4:a2:7e:fe:a0:a1:
         c9:15:f0:a3:24:ca:73:ed:6c:94:9e:bb:78:3b:ab:77:2f:ab:
         13:de:b1:cf:37:8f:1a:8a:9f:ec:0e:0c:ec:58:d6:7a:22:22:
         3c:51:79:9d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDTn3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE1
MzQ2ZDJhYzFlMmZlMGE4NDUwY2IzZGYwOWM3Mjk1NjczMzIwNDAwHhcNMjEwMzI0
MTQ0MjIxWhcNMjYwMzI0MTQ0MjIxWjAzMTEwLwYDVQQDEygxNjQ5M2FhNTRjNmI3
N2EyYTQwMzNhODQ5MjY4OTAzM2E5YThmMWRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvWzYmojP5MfMz5oze4HoERgX9Etigvpi0QGyeD1u5aoj3jW2
uDSUCm7la5x99RP7IzwoFzaE/rEHJ504j7JWM6v81beSSvDEwtI69m1l0gh3D81X
ku8YTDjJDrumvSBNdYBzERJapmShgejeab1O7mIsxkhOXrcFmBQI9CShVSoGTq41
2MFyzVjlbh/CjuyroV7uMx93ON+Hmn02I2Sol2WTaayFQYy24oBmIjyJe45OQ2Ml
hcigqZqmJp6RrvJ8zla0pdjkxzc8+76S1EYYIgpNkuzWIN/h01ToAsX4M5TufyX+
ZwTsk0ChN95HaLyy0M8dSgXJyewOtq6+DTDwzQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLFdGpRJZ6j4XfHypPFnEDapCOblMB8GA1UdIwQYMBaAFMXGnsqFoIhxHZxP
rfgHFhTST6u5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTUzNDZk
MmFjMWUyZmUwYTg0NTBjYjNkZjA5YzcyOTU2NzMzMjA0MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWE2YWI0MjQtYjc4OS00N2YxLWEzNzgtMzkyZjcx
MjVkYjcwLzE2NDkzYWE1NGM2Yjc3YTJhNDAzM2E4NDkyNjg5MDMzYTlhOGYxZGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYTZhYjQyNC1iNzg5LTQ3ZjEtYTM3OC0zOTJm
NzEyNWRiNzAvYTUzNDZkMmFjMWUyZmUwYTg0NTBjYjNkZjA5YzcyOTU2NzMzMjA0
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqSjSDANBgkqhkiG9w0BAQsFAAOCAQEAEiwLNNJeAFUp85N6
UyR32D4UbwPMEVUvi3dAILIGCOl7CBCyNe+aH1AD0RcE24c/5IqqZFhmN3CaXpZN
KpW4r6VRbNAETxpHOEZPezUOyYN88heLXst6syWX1G4ke6pk8rci3djiSg7rIx14
pZgPFL2jsCfVLrpEzE5pVY9EMukimmSk8vPmyYm1UbaM95l3VbkOVscQl2OPNoW8
voffTBEz5eUsYKsXe4v/s6JW1wsP39kZEf35xIvt9yuZoB2+zOprjKWCWPJSQXgc
VcqUKaLk9KJ+/qChyRXwoyTKc+1slJ67eDurdy+rE96xzzePGoqf7A4M7FjWeiIi
PFF5nQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org