Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/7be2e0d5efd2b2a88b1b210fb54f8f41cd7ef145.roa
File:                     7be2e0d5efd2b2a88b1b210fb54f8f41cd7ef145.roa (raw, json)
Hash identifier:          PAI+RF9MFc6W2Y/GEkUaLc079DlLoK3wORcgjNBxX5s=
Subject key identifier:   23:30:8D:5C:DF:0C:CD:E6:DC:38:BA:F5:39:A3:C4:E7:5E:5F:3B:95
Certificate issuer:       /CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
Certificate serial:       0E01AE
Authority key identifier: B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/7be2e0d5efd2b2a88b1b210fb54f8f41cd7ef145.roa
Signing time:             Wed 24 Mar 2021 14:41:09 +0000
ROA not before:           Wed 24 Mar 2021 14:41:08 +0000
ROA not after:            Tue 24 Mar 2026 14:41:08 +0000
asID:                     27947
IP address blocks:        168.197.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917934 (0xe01ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513d4f24351d23b0d1286ff946b24bfd08afdc12
        Validity
            Not Before: Mar 24 14:41:08 2021 GMT
            Not After : Mar 24 14:41:08 2026 GMT
        Subject: CN=7be2e0d5efd2b2a88b1b210fb54f8f41cd7ef145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:51:2b:fd:74:4b:96:8e:94:eb:74:0c:5a:
                    90:5e:0f:23:27:34:91:ff:af:85:bd:f2:7e:0a:54:
                    7c:c5:cd:d9:2c:83:d6:17:ba:96:b6:74:9f:f6:30:
                    b5:b6:52:69:35:66:87:91:75:18:92:94:57:dc:f0:
                    17:60:8f:c6:81:cc:ff:db:b3:84:2d:a5:9f:b2:b4:
                    a1:04:85:8f:f4:8f:68:f5:e7:1a:1e:b9:e7:85:67:
                    13:57:75:76:90:76:82:c4:4c:f1:e5:0f:7e:06:0d:
                    4f:12:0f:2e:9a:2a:42:51:a8:a0:ea:62:6c:2b:92:
                    33:46:01:50:cd:4b:33:dc:9e:f8:dc:3a:dd:57:72:
                    08:ab:8c:99:d1:cd:c8:c6:ee:70:59:73:18:76:ad:
                    e1:2e:cd:e1:54:eb:ee:6c:e4:ba:27:69:c0:14:5d:
                    74:f2:89:ce:6c:fa:c0:4c:ab:d6:e4:2c:af:a4:59:
                    7c:82:8e:aa:18:05:48:ce:4c:b2:f5:b0:e0:6f:2f:
                    aa:5e:d2:10:6b:27:42:9f:75:1e:48:61:7f:03:d6:
                    b4:e1:5c:d2:68:36:b7:4e:62:3f:b0:6f:d8:49:02:
                    0d:6e:fa:30:3c:87:ff:17:fe:ca:78:c7:45:8c:45:
                    ea:76:c8:e9:c1:19:85:9a:c9:d8:73:7b:fc:b0:c6:
                    f8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:30:8D:5C:DF:0C:CD:E6:DC:38:BA:F5:39:A3:C4:E7:5E:5F:3B:95
            X509v3 Authority Key Identifier:
                keyid:B2:5F:EE:E0:58:9A:94:87:AE:CE:2B:11:01:69:98:5F:A2:1B:5B:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513d4f24351d23b0d1286ff946b24bfd08afdc12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/7be2e0d5efd2b2a88b1b210fb54f8f41cd7ef145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef96c69d-d455-40a0-a9e3-14dd69c14564/513d4f24351d23b0d1286ff946b24bfd08afdc12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:ae:ee:d6:cf:58:3e:53:b2:e4:32:f5:98:47:e8:88:ee:50:
         4e:11:5d:e1:29:9b:f1:c6:ec:38:f7:2b:6c:d9:07:dd:47:45:
         98:19:d0:0e:8b:85:cf:35:8a:b9:91:4c:1e:f3:2b:06:90:65:
         f6:56:4e:f1:41:aa:fd:ec:c6:f8:24:1e:d6:5f:6a:22:2b:fa:
         78:ec:1a:88:1f:eb:49:84:0f:33:b6:b5:5c:48:50:f8:5d:6e:
         6b:f9:cf:96:df:2a:42:d6:bf:b6:69:a2:6c:df:73:e8:89:e0:
         ea:e1:9d:86:d1:52:85:79:c3:81:e3:19:e5:1d:0d:29:c6:a3:
         14:9a:83:57:48:37:fe:e6:70:6b:76:42:ae:2c:73:97:47:62:
         41:0f:80:15:50:74:8f:18:9e:9a:4e:25:4a:66:f1:c3:ff:51:
         dd:97:f6:b8:84:e0:10:15:51:c1:59:cd:e4:c6:4e:83:97:43:
         a1:1a:15:89:d9:72:c9:7c:d7:97:75:7b:10:28:a2:cb:50:b7:
         03:69:90:12:ee:b8:c8:d5:21:c0:ca:b3:bd:fd:e0:4c:f0:a9:
         de:11:d3:ce:04:79:a3:60:1f:b7:e5:c3:7b:23:2c:91:15:b1:
         51:be:65:b8:23:49:82:ee:ab:ca:5d:53:a2:04:52:15:74:b1:
         11:93:9a:4b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDgGuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUx
M2Q0ZjI0MzUxZDIzYjBkMTI4NmZmOTQ2YjI0YmZkMDhhZmRjMTIwHhcNMjEwMzI0
MTQ0MTA4WhcNMjYwMzI0MTQ0MTA4WjAzMTEwLwYDVQQDEyg3YmUyZTBkNWVmZDJi
MmE4OGIxYjIxMGZiNTRmOGY0MWNkN2VmMTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi4ZRK/10S5aOlOt0DFqQXg8jJzSR/6+FvfJ+ClR8xc3ZLIPW
F7qWtnSf9jC1tlJpNWaHkXUYkpRX3PAXYI/Ggcz/27OELaWfsrShBIWP9I9o9eca
HrnnhWcTV3V2kHaCxEzx5Q9+Bg1PEg8umipCUaig6mJsK5IzRgFQzUsz3J743Drd
V3IIq4yZ0c3Ixu5wWXMYdq3hLs3hVOvubOS6J2nAFF108onObPrATKvW5CyvpFl8
go6qGAVIzkyy9bDgby+qXtIQaydCn3UeSGF/A9a04VzSaDa3TmI/sG/YSQINbvow
PIf/F/7KeMdFjEXqdsjpwRmFmsnYc3v8sMb4LwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCMwjVzfDM3m3Di69TmjxOdeXzuVMB8GA1UdIwQYMBaAFLJf7uBYmpSHrs4r
EQFpmF+iG1vyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTEzZDRm
MjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWY5NmM2OWQtZDQ1NS00MGEwLWE5ZTMtMTRkZDY5
YzE0NTY0LzdiZTJlMGQ1ZWZkMmIyYTg4YjFiMjEwZmI1NGY4ZjQxY2Q3ZWYxNDUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZjk2YzY5ZC1kNDU1LTQwYTAtYTllMy0xNGRk
NjljMTQ1NjQvNTEzZDRmMjQzNTFkMjNiMGQxMjg2ZmY5NDZiMjRiZmQwOGFmZGMx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjFvDANBgkqhkiG9w0BAQsFAAOCAQEAP67u1s9YPlOy5DL1
mEfoiO5QThFd4Smb8cbsOPcrbNkH3UdFmBnQDouFzzWKuZFMHvMrBpBl9lZO8UGq
/ezG+CQe1l9qIiv6eOwaiB/rSYQPM7a1XEhQ+F1ua/nPlt8qQta/tmmibN9z6Ing
6uGdhtFShXnDgeMZ5R0NKcajFJqDV0g3/uZwa3ZCrixzl0diQQ+AFVB0jxiemk4l
Smbxw/9R3Zf2uITgEBVRwVnN5MZOg5dDoRoVidlyyXzXl3V7ECiiy1C3A2mQEu64
yNUhwMqzvf3gTPCp3hHTzgR5o2Aft+XDeyMskRWxUb5luCNJgu6ryl1TogRSFXSx
EZOaSw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org