Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ee7fc18b-ea25-4f3c-b4f8-842956bd348c/8728a0718d1652e5eaa84e5a7fbe48f11801d1fe.roa
File:                     8728a0718d1652e5eaa84e5a7fbe48f11801d1fe.roa (raw, json)
Hash identifier:          I8Y9IbDl+te94AJpuUpoKgXIYm9eVKMf/UkPsZno81A=
Subject key identifier:   DD:AB:B7:46:F8:08:E4:5B:06:B8:12:9A:AE:26:D1:84:62:80:D8:27
Certificate issuer:       /CN=fd9f8eac7d0df0e975176ef49038eea9d65b8651
Certificate serial:       129D93
Authority key identifier: 52:D3:A4:44:E7:25:65:98:22:2C:55:E7:62:40:E8:DB:00:87:71:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd9f8eac7d0df0e975176ef49038eea9d65b8651.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ee7fc18b-ea25-4f3c-b4f8-842956bd348c/8728a0718d1652e5eaa84e5a7fbe48f11801d1fe.roa
Signing time:             Sat 22 Apr 2023 08:30:00 +0000
ROA not before:           Fri 21 Apr 2023 08:30:00 +0000
ROA not after:            Sun 20 Apr 2025 08:30:00 +0000
asID:                     28005
IP address blocks:        164.163.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1219987 (0x129d93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd9f8eac7d0df0e975176ef49038eea9d65b8651
        Validity
            Not Before: Apr 21 08:30:00 2023 GMT
            Not After : Apr 20 08:30:00 2025 GMT
        Subject: CN=8728a0718d1652e5eaa84e5a7fbe48f11801d1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:3b:f9:ac:55:78:f2:4c:cc:e3:62:57:c9:
                    2d:96:65:c8:5f:b3:85:1d:72:26:c2:51:55:d5:5f:
                    fe:df:0a:fc:7d:89:35:99:b7:bb:59:52:95:01:f8:
                    a1:36:c3:4a:13:48:c2:ee:14:63:20:46:db:f6:1a:
                    9d:9f:16:73:88:43:cb:8a:a2:a7:04:f6:44:95:2b:
                    ae:68:5f:cb:af:ae:a1:45:15:46:ed:40:36:43:d2:
                    fb:c3:02:45:4e:ab:3e:64:c9:28:6d:01:44:2c:b3:
                    47:92:bd:d0:09:ca:09:b3:a0:78:13:08:94:0c:ed:
                    10:42:e6:b8:1e:cd:fe:e9:5a:3c:fb:04:e6:db:ee:
                    7f:ae:4f:b5:f6:be:77:13:3a:a7:a0:69:ad:6c:07:
                    dc:47:98:1d:8b:ff:ae:76:10:33:2f:dc:7c:7c:8e:
                    af:cb:75:d3:17:d8:24:ef:c0:6e:c7:cf:78:50:e6:
                    0c:24:84:dd:de:7f:92:bf:9d:e1:f1:ff:2a:0d:a9:
                    a8:83:c3:a5:b3:8c:7c:1a:51:80:44:ec:c8:58:cc:
                    2d:29:66:c5:11:7c:1b:72:a4:19:ba:6c:56:05:7f:
                    90:45:3c:18:4c:59:27:c1:80:c9:7a:90:81:2b:8e:
                    16:85:31:00:92:fd:e2:2d:68:8f:1f:aa:bc:0a:df:
                    80:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AB:B7:46:F8:08:E4:5B:06:B8:12:9A:AE:26:D1:84:62:80:D8:27
            X509v3 Authority Key Identifier:
                keyid:52:D3:A4:44:E7:25:65:98:22:2C:55:E7:62:40:E8:DB:00:87:71:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd9f8eac7d0df0e975176ef49038eea9d65b8651.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ee7fc18b-ea25-4f3c-b4f8-842956bd348c/8728a0718d1652e5eaa84e5a7fbe48f11801d1fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ee7fc18b-ea25-4f3c-b4f8-842956bd348c/fd9f8eac7d0df0e975176ef49038eea9d65b8651.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:de:50:51:c7:52:2f:78:90:80:94:24:eb:38:6e:8e:cf:fa:
         ad:6c:1f:ff:ae:fe:e6:a4:bd:34:4f:a2:88:67:d6:9f:ce:33:
         47:c9:f3:42:52:cb:40:d3:5b:cf:63:32:22:84:bb:e1:fa:7a:
         e7:a0:47:9d:ff:74:1b:89:87:a1:33:e4:38:e1:8d:10:1a:d7:
         0e:f3:81:b5:9c:50:ba:25:d8:cd:2a:7f:1d:92:74:3d:34:2c:
         d5:31:88:10:73:e8:a6:d5:69:1b:be:ba:3b:00:03:ab:f9:29:
         65:19:3a:e6:c4:27:26:10:c7:de:f8:d7:e4:77:63:15:26:30:
         aa:58:d6:35:ba:22:28:2f:88:74:34:ea:63:75:df:48:fc:b0:
         d8:71:e9:45:30:22:ed:ab:99:3b:f0:8a:35:36:16:0a:e9:fd:
         93:60:bc:0d:e8:2d:6c:41:61:79:59:a0:11:7e:e5:74:79:6f:
         7b:04:b7:31:5b:26:58:6e:05:1b:9f:a4:09:64:db:ff:6e:44:
         0c:e8:62:a6:fe:28:03:5d:69:bd:18:1c:ca:fa:e7:c9:0d:dd:
         07:fc:05:b6:a5:15:fb:21:73:ef:aa:cb:e6:49:aa:86:a7:5f:
         60:0a:0b:71:06:26:4d:f4:23:fc:22:5c:28:2e:5e:ef:7e:94:
         4d:de:4f:b9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEp2TMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZk
OWY4ZWFjN2QwZGYwZTk3NTE3NmVmNDkwMzhlZWE5ZDY1Yjg2NTEwHhcNMjMwNDIx
MDgzMDAwWhcNMjUwNDIwMDgzMDAwWjAzMTEwLwYDVQQDEyg4NzI4YTA3MThkMTY1
MmU1ZWFhODRlNWE3ZmJlNDhmMTE4MDFkMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoNg7+axVePJMzONiV8ktlmXIX7OFHXImwlFV1V/+3wr8fYk1
mbe7WVKVAfihNsNKE0jC7hRjIEbb9hqdnxZziEPLiqKnBPZElSuuaF/Lr66hRRVG
7UA2Q9L7wwJFTqs+ZMkobQFELLNHkr3QCcoJs6B4EwiUDO0QQua4Hs3+6Vo8+wTm
2+5/rk+19r53EzqnoGmtbAfcR5gdi/+udhAzL9x8fI6vy3XTF9gk78Bux894UOYM
JITd3n+Sv53h8f8qDamog8Ols4x8GlGAROzIWMwtKWbFEXwbcqQZumxWBX+QRTwY
TFknwYDJepCBK44WhTEAkv3iLWiPH6q8Ct+AcQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFN2rt0b4CORbBrgSmq4m0YRigNgnMB8GA1UdIwQYMBaAFFLTpETnJWWYIixV
52JA6NsAh3HCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmQ5Zjhl
YWM3ZDBkZjBlOTc1MTc2ZWY0OTAzOGVlYTlkNjViODY1MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWU3ZmMxOGItZWEyNS00ZjNjLWI0ZjgtODQyOTU2
YmQzNDhjLzg3MjhhMDcxOGQxNjUyZTVlYWE4NGU1YTdmYmU0OGYxMTgwMWQxZmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZTdmYzE4Yi1lYTI1LTRmM2MtYjRmOC04NDI5
NTZiZDM0OGMvZmQ5ZjhlYWM3ZDBkZjBlOTc1MTc2ZWY0OTAzOGVlYTlkNjViODY1
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqSj9DANBgkqhkiG9w0BAQsFAAOCAQEAVN5QUcdSL3iQgJQk
6zhujs/6rWwf/67+5qS9NE+iiGfWn84zR8nzQlLLQNNbz2MyIoS74fp656BHnf90
G4mHoTPkOOGNEBrXDvOBtZxQuiXYzSp/HZJ0PTQs1TGIEHPoptVpG766OwADq/kp
ZRk65sQnJhDH3vjX5HdjFSYwqljWNboiKC+IdDTqY3XfSPyw2HHpRTAi7auZO/CK
NTYWCun9k2C8DegtbEFheVmgEX7ldHlvewS3MVsmWG4FG5+kCWTb/25EDOhipv4o
A11pvRgcyvrnyQ3dB/wFtqUV+yFz76rL5kmqhqdfYAoLcQYmTfQj/CJcKC5e736U
Td5PuQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org