Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/5dfd2b7e081e406d7b586b625e75960b68438431.roa
File:                     5dfd2b7e081e406d7b586b625e75960b68438431.roa (raw, json)
Hash identifier:          pDg3PJW9enEXk955n+ba6hGWZP5kfCSN1lJxElYTbus=
Subject key identifier:   75:FA:17:63:B4:9D:6D:87:3F:D5:03:5F:EB:99:ED:11:09:C6:5F:2E
Certificate issuer:       /CN=076e25208e9086c7775f52e507d559615ec76616
Certificate serial:       216084
Authority key identifier: 6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/076e25208e9086c7775f52e507d559615ec76616.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/5dfd2b7e081e406d7b586b625e75960b68438431.roa
Signing time:             Mon 10 Jul 2023 18:06:26 +0000
ROA not before:           Sun 09 Jul 2023 18:06:26 +0000
ROA not after:            Thu 10 Jul 2025 18:06:26 +0000
asID:                     262589
IP address blocks:        143.0.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187396 (0x216084)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076e25208e9086c7775f52e507d559615ec76616
        Validity
            Not Before: Jul  9 18:06:26 2023 GMT
            Not After : Jul 10 18:06:26 2025 GMT
        Subject: CN=5dfd2b7e081e406d7b586b625e75960b68438431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:80:85:b1:2b:a5:40:ee:73:64:6b:c8:53:
                    11:39:b4:ba:25:ef:11:38:84:17:b4:f8:c7:57:b7:
                    1c:b7:6c:0b:21:17:24:f6:40:42:a0:46:59:20:e1:
                    ea:1b:c7:2d:96:b9:9a:82:6e:18:19:1d:3a:af:57:
                    77:97:4e:8f:10:f1:23:20:4c:92:d2:cc:71:89:50:
                    cd:5c:6a:a9:3e:80:e1:b3:d0:79:c4:55:f6:9d:ed:
                    71:a5:2d:66:67:db:19:e9:af:a8:08:d3:dd:b4:22:
                    a3:98:d2:64:4a:3d:ca:c8:08:9b:c9:12:58:f2:47:
                    d4:67:c7:f7:81:f1:be:1d:c7:68:0d:1b:1e:98:0a:
                    d3:bb:8b:f5:a9:e2:31:e4:8f:15:cd:f7:76:94:c4:
                    d4:7b:7c:dc:ec:0f:cd:e5:f7:de:95:56:04:7d:f9:
                    aa:d8:39:4a:bb:5f:e0:d5:8c:39:b6:fd:4e:3a:42:
                    86:10:ca:a5:9c:cc:47:f6:49:10:18:68:d1:24:14:
                    b5:71:b4:06:9e:fa:f9:e7:2b:bc:0d:a0:80:63:63:
                    d9:3a:46:0a:b6:0b:ea:00:f3:5c:cd:ad:c5:1e:a5:
                    4a:53:39:bd:3c:b9:2c:b2:ca:32:c6:d1:d0:dd:dc:
                    e5:52:6c:c8:7a:6a:a6:41:b2:e5:c4:c4:bc:3e:16:
                    b7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FA:17:63:B4:9D:6D:87:3F:D5:03:5F:EB:99:ED:11:09:C6:5F:2E
            X509v3 Authority Key Identifier:
                keyid:6F:24:C4:AF:14:A7:4A:B4:D2:12:56:3B:1E:C7:F0:26:7C:9D:9E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/076e25208e9086c7775f52e507d559615ec76616.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/5dfd2b7e081e406d7b586b625e75960b68438431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eb0cda65-ebdc-4205-8eb8-f5132227d1a0/076e25208e9086c7775f52e507d559615ec76616.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:3a:8e:c4:a7:24:be:11:5e:b6:98:59:c9:98:ec:af:66:
         db:47:c1:d8:38:89:5c:fb:9a:ce:5d:89:cb:c5:99:fd:72:a5:
         fd:80:8a:90:7f:95:18:2f:4c:8b:bd:d6:8e:0e:2b:fc:44:23:
         ac:19:18:fb:33:e4:f0:50:65:56:01:eb:1e:4f:1b:83:08:2c:
         26:22:d2:a3:31:ea:f4:95:b2:62:94:ad:69:76:d7:e4:32:05:
         c5:ae:cd:06:1c:4d:9a:70:60:e2:48:ea:a7:b4:92:03:1e:28:
         c6:e9:5d:57:39:2f:b4:59:ca:33:b9:cf:5a:7a:e2:f6:f9:52:
         fc:cd:a9:89:ec:f0:bd:7e:01:45:1d:c1:79:f9:7e:cd:ac:f6:
         6c:5a:05:89:95:2a:20:17:df:8b:5f:08:5c:f2:41:20:09:32:
         06:e5:f3:2c:23:3c:03:74:b8:c1:bf:5c:ce:b0:ef:de:ac:d4:
         fb:f0:0b:7b:83:99:ea:30:e0:0b:86:85:05:d6:6f:d6:df:07:
         1e:0a:c4:a5:4f:80:3b:04:56:07:1a:b2:97:20:78:0c:07:34:
         59:96:d9:6d:58:a9:ec:b6:6e:bb:73:35:cd:40:c6:e7:2a:5e:
         c4:a2:67:b3:23:a6:a7:6b:9b:a6:c6:32:3f:d2:ad:4d:0a:cb:
         d9:63:47:0f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIWCEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA3
NmUyNTIwOGU5MDg2Yzc3NzVmNTJlNTA3ZDU1OTYxNWVjNzY2MTYwHhcNMjMwNzA5
MTgwNjI2WhcNMjUwNzEwMTgwNjI2WjAzMTEwLwYDVQQDEyg1ZGZkMmI3ZTA4MWU0
MDZkN2I1ODZiNjI1ZTc1OTYwYjY4NDM4NDMxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxzqAhbErpUDuc2RryFMRObS6Je8ROIQXtPjHV7cct2wLIRck
9kBCoEZZIOHqG8ctlrmagm4YGR06r1d3l06PEPEjIEyS0sxxiVDNXGqpPoDhs9B5
xFX2ne1xpS1mZ9sZ6a+oCNPdtCKjmNJkSj3KyAibyRJY8kfUZ8f3gfG+HcdoDRse
mArTu4v1qeIx5I8Vzfd2lMTUe3zc7A/N5ffelVYEffmq2DlKu1/g1Yw5tv1OOkKG
EMqlnMxH9kkQGGjRJBS1cbQGnvr55yu8DaCAY2PZOkYKtgvqAPNcza3FHqVKUzm9
PLksssoyxtHQ3dzlUmzIemqmQbLlxMS8Pha3YwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHX6F2O0nW2HP9UDX+uZ7REJxl8uMB8GA1UdIwQYMBaAFG8kxK8Up0q00hJW
Ox7H8CZ8nZ7MMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDc2ZTI1
MjA4ZTkwODZjNzc3NWY1MmU1MDdkNTU5NjE1ZWM3NjYxNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWIwY2RhNjUtZWJkYy00MjA1LThlYjgtZjUxMzIy
MjdkMWEwLzVkZmQyYjdlMDgxZTQwNmQ3YjU4NmI2MjVlNzU5NjBiNjg0Mzg0MzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYjBjZGE2NS1lYmRjLTQyMDUtOGViOC1mNTEz
MjIyN2QxYTAvMDc2ZTI1MjA4ZTkwODZjNzc3NWY1MmU1MDdkNTU5NjE1ZWM3NjYx
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAo8AbDANBgkqhkiG9w0BAQsFAAOCAQEAdME6jsSnJL4RXraY
WcmY7K9m20fB2DiJXPuazl2Jy8WZ/XKl/YCKkH+VGC9Mi73Wjg4r/EQjrBkY+zPk
8FBlVgHrHk8bgwgsJiLSozHq9JWyYpStaXbX5DIFxa7NBhxNmnBg4kjqp7SSAx4o
xuldVzkvtFnKM7nPWnri9vlS/M2piezwvX4BRR3Befl+zaz2bFoFiZUqIBffi18I
XPJBIAkyBuXzLCM8A3S4wb9czrDv3qzU+/ALe4OZ6jDgC4aFBdZv1t8HHgrEpU+A
OwRWBxqylyB4DAc0WZbZbVip7LZuu3M1zUDG5ypexKJnsyOmp2ubpsYyP9KtTQrL
2WNHDw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org