Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef59e962-36a0-4498-b1ec-fd7419893dc6/6b0c3b88c0eadb854c5e825c148feb7b35137238.roa
File:                     6b0c3b88c0eadb854c5e825c148feb7b35137238.roa (raw, json)
Hash identifier:          cqY1Ue5/Yc5WPP+Zh0vx1KK5LgjDVs3SNwzeGKUV6Wo=
Subject key identifier:   42:9D:F8:15:51:32:04:A8:C0:95:59:CE:6E:F2:E2:BF:FA:2B:F4:ED
Certificate issuer:       /CN=0e18b91516586380fb9819f57c1b133f3fdbccd0
Certificate serial:       0DBD30
Authority key identifier: 7F:E9:89:4D:CE:99:B6:CD:11:41:6D:97:7A:6B:F4:F9:84:75:CF:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0e18b91516586380fb9819f57c1b133f3fdbccd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef59e962-36a0-4498-b1ec-fd7419893dc6/6b0c3b88c0eadb854c5e825c148feb7b35137238.roa
Signing time:             Wed 24 Mar 2021 14:31:27 +0000
ROA not before:           Wed 24 Mar 2021 14:31:27 +0000
ROA not after:            Tue 24 Mar 2026 14:31:27 +0000
asID:                     264678
IP address blocks:        168.205.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900400 (0xdbd30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e18b91516586380fb9819f57c1b133f3fdbccd0
        Validity
            Not Before: Mar 24 14:31:27 2021 GMT
            Not After : Mar 24 14:31:27 2026 GMT
        Subject: CN=6b0c3b88c0eadb854c5e825c148feb7b35137238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:3e:e8:41:f9:8b:92:ed:cf:7d:75:49:3d:
                    0b:23:67:15:72:f1:c9:cb:fc:ae:78:0c:fb:30:22:
                    87:fc:67:f1:5d:eb:68:db:bd:e6:9f:d3:22:b7:d8:
                    49:ea:1f:6f:1a:07:d2:44:41:fd:56:dd:f6:66:1e:
                    83:b1:33:0b:06:53:d0:9d:c4:ea:75:f3:9d:32:ce:
                    50:f1:36:71:53:d0:a6:1e:eb:1f:0a:2f:2c:ec:ec:
                    d5:a4:b5:ea:ac:f0:e0:a5:a1:12:8c:96:82:d7:f3:
                    3a:70:33:97:c0:3a:f3:78:dd:54:0f:5d:1d:86:e1:
                    14:45:02:68:f2:80:93:c4:b1:ec:d0:a3:24:a1:1d:
                    89:23:92:7d:8f:03:6c:2f:25:22:d6:39:bb:fd:5c:
                    9a:cb:fc:a5:11:62:47:0c:b5:d9:de:20:70:0b:24:
                    f5:d6:de:c8:56:ca:8c:e8:21:a6:9a:94:18:54:bf:
                    09:d2:2b:52:03:9e:9b:f4:8c:19:c6:9f:4b:88:6a:
                    8a:0c:44:2c:d3:ca:6a:e7:1b:05:a2:e7:f5:e2:ce:
                    a5:b8:06:0e:47:30:44:1e:45:59:97:c2:74:55:e7:
                    53:b1:dd:31:d8:f4:43:5c:8b:b7:02:9a:d9:47:49:
                    8d:e9:c9:33:56:4c:6c:07:c7:1b:24:8c:c2:55:75:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9D:F8:15:51:32:04:A8:C0:95:59:CE:6E:F2:E2:BF:FA:2B:F4:ED
            X509v3 Authority Key Identifier:
                keyid:7F:E9:89:4D:CE:99:B6:CD:11:41:6D:97:7A:6B:F4:F9:84:75:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0e18b91516586380fb9819f57c1b133f3fdbccd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef59e962-36a0-4498-b1ec-fd7419893dc6/6b0c3b88c0eadb854c5e825c148feb7b35137238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef59e962-36a0-4498-b1ec-fd7419893dc6/0e18b91516586380fb9819f57c1b133f3fdbccd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:f8:6f:e9:37:98:3a:3c:ef:c2:01:2a:a0:3d:fc:2f:ae:f1:
         17:1c:a9:9f:34:6e:f1:94:c2:8f:85:04:d2:5e:6f:a4:42:5b:
         69:22:11:d8:17:7b:77:27:c5:41:e9:42:c3:db:99:74:5b:12:
         63:34:8c:fe:87:ad:6c:e9:aa:d4:84:50:30:f1:31:c4:ec:0f:
         82:cb:7e:9b:78:31:2e:d3:8c:00:51:5e:48:05:bf:16:ed:b4:
         c4:f4:b1:ba:be:b1:69:47:e0:f0:2a:ad:69:aa:e9:a3:5f:dd:
         fa:a9:b4:39:a5:f9:9a:2c:ee:fb:af:75:d7:1d:ae:24:8f:b9:
         f5:41:27:eb:59:96:ef:06:c7:b9:fe:cf:a5:c1:ff:97:b4:bc:
         be:02:13:2a:71:6a:7d:89:ec:c6:ff:27:06:59:0f:92:e4:5d:
         e3:48:ae:f6:80:9f:d6:88:1c:6d:b5:7f:9d:2c:bd:4d:86:3a:
         84:14:2d:2c:52:a8:ba:90:d6:ff:ab:8b:56:22:a4:9c:42:d0:
         21:2f:c1:be:4b:06:63:9a:d9:f7:db:1c:27:f8:41:c6:1e:88:
         38:a2:99:c9:9f:b7:66:88:db:b6:0f:ad:a2:7d:a3:93:a3:18:
         d1:34:54:e0:1b:f9:c0:1c:9e:2d:f0:f2:55:a6:a0:0c:6f:00:
         25:26:d6:76
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDb0wMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBl
MThiOTE1MTY1ODYzODBmYjk4MTlmNTdjMWIxMzNmM2ZkYmNjZDAwHhcNMjEwMzI0
MTQzMTI3WhcNMjYwMzI0MTQzMTI3WjAzMTEwLwYDVQQDEyg2YjBjM2I4OGMwZWFk
Yjg1NGM1ZTgyNWMxNDhmZWI3YjM1MTM3MjM4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApx0+6EH5i5Ltz311ST0LI2cVcvHJy/yueAz7MCKH/GfxXeto
273mn9Mit9hJ6h9vGgfSREH9Vt32Zh6DsTMLBlPQncTqdfOdMs5Q8TZxU9CmHusf
Ci8s7OzVpLXqrPDgpaESjJaC1/M6cDOXwDrzeN1UD10dhuEURQJo8oCTxLHs0KMk
oR2JI5J9jwNsLyUi1jm7/Vyay/ylEWJHDLXZ3iBwCyT11t7IVsqM6CGmmpQYVL8J
0itSA56b9IwZxp9LiGqKDEQs08pq5xsFouf14s6luAYORzBEHkVZl8J0VedTsd0x
2PRDXIu3AprZR0mN6ckzVkxsB8cbJIzCVXWVkQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEKd+BVRMgSowJVZzm7y4r/6K/TtMB8GA1UdIwQYMBaAFH/piU3OmbbNEUFt
l3pr9PmEdc98MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGUxOGI5
MTUxNjU4NjM4MGZiOTgxOWY1N2MxYjEzM2YzZmRiY2NkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWY1OWU5NjItMzZhMC00NDk4LWIxZWMtZmQ3NDE5
ODkzZGM2LzZiMGMzYjg4YzBlYWRiODU0YzVlODI1YzE0OGZlYjdiMzUxMzcyMzgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjU5ZTk2Mi0zNmEwLTQ0OTgtYjFlYy1mZDc0
MTk4OTNkYzYvMGUxOGI5MTUxNjU4NjM4MGZiOTgxOWY1N2MxYjEzM2YzZmRiY2Nk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjNdDANBgkqhkiG9w0BAQsFAAOCAQEABPhv6TeYOjzvwgEq
oD38L67xFxypnzRu8ZTCj4UE0l5vpEJbaSIR2Bd7dyfFQelCw9uZdFsSYzSM/oet
bOmq1IRQMPExxOwPgst+m3gxLtOMAFFeSAW/Fu20xPSxur6xaUfg8Cqtaarpo1/d
+qm0OaX5mizu+6911x2uJI+59UEn61mW7wbHuf7PpcH/l7S8vgITKnFqfYnsxv8n
BlkPkuRd40iu9oCf1ogcbbV/nSy9TYY6hBQtLFKoupDW/6uLViKknELQIS/BvksG
Y5rZ99scJ/hBxh6IOKKZyZ+3Zojbtg+ton2jk6MY0TRU4Bv5wByeLfDyVaagDG8A
JSbWdg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org