Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ec2d1981-f6b5-4e3b-aacc-a72101157fbe/38e9bf81663c164fbb911637b692589fb25ecbdc.roa
File:                     38e9bf81663c164fbb911637b692589fb25ecbdc.roa (raw, json)
Hash identifier:          hjR7zqQqMdsIKdj2fw5edCIifck0l8M2RiFlHFbyJok=
Subject key identifier:   22:16:1D:83:C5:08:3D:87:02:01:AD:22:A9:61:33:BE:E4:2C:9F:DD
Certificate issuer:       /CN=2510213418f85a88f8db8d2ffb6e84078f9f70b0
Certificate serial:       176FEA
Authority key identifier: EA:F7:4D:BB:44:8B:B3:75:BC:59:BE:74:DE:D7:B2:58:E0:95:3F:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2510213418f85a88f8db8d2ffb6e84078f9f70b0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ec2d1981-f6b5-4e3b-aacc-a72101157fbe/38e9bf81663c164fbb911637b692589fb25ecbdc.roa
Signing time:             Wed 27 Dec 2023 07:30:01 +0000
ROA not before:           Wed 27 Dec 2023 07:30:01 +0000
ROA not after:            Fri 26 Dec 2025 07:30:01 +0000
asID:                     271985
IP address blocks:        177.37.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535978 (0x176fea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2510213418f85a88f8db8d2ffb6e84078f9f70b0
        Validity
            Not Before: Dec 27 07:30:01 2023 GMT
            Not After : Dec 26 07:30:01 2025 GMT
        Subject: CN=38e9bf81663c164fbb911637b692589fb25ecbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:66:f1:26:30:c2:c5:2e:ec:57:16:7a:4e:ec:
                    09:44:94:94:c8:3f:70:c8:c1:82:cd:ee:04:af:46:
                    95:da:a7:d2:3a:57:ef:47:68:31:3e:b3:55:3c:a7:
                    b2:29:ac:7b:1e:5e:f2:42:ff:8b:21:55:b2:c4:77:
                    40:42:80:fb:3e:7f:27:73:42:03:1e:24:68:a4:3a:
                    9f:6b:6f:3f:83:13:b3:58:c4:c6:23:47:dc:32:58:
                    3f:92:ed:15:54:61:3f:ac:97:6d:db:4f:2e:9f:09:
                    6f:e9:82:fe:ce:4f:6e:1e:56:9b:1b:48:75:0b:73:
                    20:b5:3f:2a:29:44:1e:75:29:63:00:4e:56:56:01:
                    e5:48:4a:88:db:07:7d:d7:6f:f8:ca:90:1d:fc:30:
                    be:b3:35:b9:6d:3a:18:f0:c1:74:29:ce:90:42:40:
                    a2:65:6a:e9:5a:88:a3:ee:66:19:23:1c:2a:34:aa:
                    96:d7:75:de:c7:05:9b:50:a0:34:cd:7d:33:05:cf:
                    8b:62:c2:e5:13:28:4d:ec:78:9c:8c:85:9c:40:b6:
                    56:92:36:38:70:4c:0c:c1:18:c4:13:d0:a7:e5:27:
                    f8:5a:e4:e8:fe:fa:7e:12:59:49:f5:9e:b2:e9:b5:
                    a7:4b:e6:4a:71:d6:4e:55:4b:7f:b6:f3:10:6e:26:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:16:1D:83:C5:08:3D:87:02:01:AD:22:A9:61:33:BE:E4:2C:9F:DD
            X509v3 Authority Key Identifier:
                keyid:EA:F7:4D:BB:44:8B:B3:75:BC:59:BE:74:DE:D7:B2:58:E0:95:3F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2510213418f85a88f8db8d2ffb6e84078f9f70b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ec2d1981-f6b5-4e3b-aacc-a72101157fbe/38e9bf81663c164fbb911637b692589fb25ecbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ec2d1981-f6b5-4e3b-aacc-a72101157fbe/2510213418f85a88f8db8d2ffb6e84078f9f70b0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:63:b0:05:dd:35:5a:92:2a:a2:6d:df:3d:9b:61:83:ae:63:
         42:6a:a2:a3:df:7e:8b:b4:f3:b0:57:3f:37:f7:80:af:41:6a:
         87:39:5b:34:82:cf:08:ac:e7:fb:9a:50:96:29:37:13:51:a1:
         c1:dd:43:44:49:e5:f7:6a:02:2b:4d:96:c3:cb:11:b3:ec:56:
         cb:ff:a0:b6:4b:bc:49:a1:33:81:79:89:ec:32:a0:b9:0c:21:
         fb:f3:e0:0f:75:39:db:5f:91:29:10:4d:ed:62:26:31:83:e8:
         3f:03:00:50:15:14:7a:a8:27:a2:ed:c9:c2:a2:d6:71:91:f8:
         60:31:0b:55:88:00:c1:ab:36:90:7f:d3:5c:26:d4:ae:10:61:
         85:39:8b:d3:96:3b:a8:1e:e1:9c:a6:04:fa:38:47:df:6c:4b:
         f7:d2:f8:55:c1:cb:49:2d:d2:a7:76:89:05:57:5b:7b:6e:a3:
         2a:80:40:a1:69:91:f5:ba:68:80:c7:40:af:32:bc:13:72:e4:
         02:f5:36:d4:29:c3:3b:aa:ba:ae:dd:cb:d6:40:1c:64:70:a3:
         81:17:15:28:7c:53:1a:af:20:9b:85:74:db:6a:9a:35:d2:66:
         1b:11:79:43:58:b1:dd:12:1d:65:8b:14:20:02:f6:52:b6:f4:
         b1:27:1d:a5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDF2/qMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI1
MTAyMTM0MThmODVhODhmOGRiOGQyZmZiNmU4NDA3OGY5ZjcwYjAwHhcNMjMxMjI3
MDczMDAxWhcNMjUxMjI2MDczMDAxWjAzMTEwLwYDVQQDEygzOGU5YmY4MTY2M2Mx
NjRmYmI5MTE2MzdiNjkyNTg5ZmIyNWVjYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAymbxJjDCxS7sVxZ6TuwJRJSUyD9wyMGCze4Er0aV2qfSOlfv
R2gxPrNVPKeyKax7Hl7yQv+LIVWyxHdAQoD7Pn8nc0IDHiRopDqfa28/gxOzWMTG
I0fcMlg/ku0VVGE/rJdt208unwlv6YL+zk9uHlabG0h1C3MgtT8qKUQedSljAE5W
VgHlSEqI2wd912/4ypAd/DC+szW5bToY8MF0Kc6QQkCiZWrpWoij7mYZIxwqNKqW
13XexwWbUKA0zX0zBc+LYsLlEyhN7HicjIWcQLZWkjY4cEwMwRjEE9Cn5Sf4WuTo
/vp+EllJ9Z6y6bWnS+ZKcdZOVUt/tvMQbiZTUQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCIWHYPFCD2HAgGtIqlhM77kLJ/dMB8GA1UdIwQYMBaAFOr3TbtEi7N1vFm+
dN7XsljglT8uMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjUxMDIx
MzQxOGY4NWE4OGY4ZGI4ZDJmZmI2ZTg0MDc4ZjlmNzBiMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWMyZDE5ODEtZjZiNS00ZTNiLWFhY2MtYTcyMTAx
MTU3ZmJlLzM4ZTliZjgxNjYzYzE2NGZiYjkxMTYzN2I2OTI1ODlmYjI1ZWNiZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYzJkMTk4MS1mNmI1LTRlM2ItYWFjYy1hNzIx
MDExNTdmYmUvMjUxMDIxMzQxOGY4NWE4OGY4ZGI4ZDJmZmI2ZTg0MDc4ZjlmNzBi
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArElJDANBgkqhkiG9w0BAQsFAAOCAQEAJ2OwBd01WpIqom3f
PZthg65jQmqio99+i7TzsFc/N/eAr0FqhzlbNILPCKzn+5pQlik3E1Ghwd1DREnl
92oCK02Ww8sRs+xWy/+gtku8SaEzgXmJ7DKguQwh+/PgD3U521+RKRBN7WImMYPo
PwMAUBUUeqgnou3JwqLWcZH4YDELVYgAwas2kH/TXCbUrhBhhTmL05Y7qB7hnKYE
+jhH32xL99L4VcHLSS3Sp3aJBVdbe26jKoBAoWmR9bpogMdArzK8E3LkAvU21CnD
O6q6rt3L1kAcZHCjgRcVKHxTGq8gm4V022qaNdJmGxF5Q1ix3RIdZYsUIAL2Urb0
sScdpQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org