Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/6250726bf0621baa85496aa2a9922a77a2a1272e.roa
File:                     6250726bf0621baa85496aa2a9922a77a2a1272e.roa (raw, json)
Hash identifier:          AKVU7P7CF5QidK20Wx3rkp4fuxaqY3qEbrLnBDRX8D4=
Subject key identifier:   E7:00:00:60:6A:43:B0:E2:D4:58:2B:95:A1:24:07:87:A5:81:17:A9
Certificate issuer:       /CN=e50dd9ef106afe1a2202d69bd6a27111b0ecc08c
Certificate serial:       0DCF37
Authority key identifier: 5C:AF:A0:F2:F2:88:AA:E9:28:B8:50:A7:D8:03:FC:27:31:59:B8:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e50dd9ef106afe1a2202d69bd6a27111b0ecc08c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/6250726bf0621baa85496aa2a9922a77a2a1272e.roa
Signing time:             Wed 24 Mar 2021 14:31:06 +0000
ROA not before:           Wed 24 Mar 2021 14:31:06 +0000
ROA not after:            Tue 24 Mar 2026 14:31:06 +0000
asID:                     265659
IP address blocks:        170.247.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905015 (0xdcf37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50dd9ef106afe1a2202d69bd6a27111b0ecc08c
        Validity
            Not Before: Mar 24 14:31:06 2021 GMT
            Not After : Mar 24 14:31:06 2026 GMT
        Subject: CN=6250726bf0621baa85496aa2a9922a77a2a1272e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:52:20:ac:11:6d:5f:49:77:07:95:84:c6:
                    3d:f1:d6:81:f6:27:64:5e:ea:ea:16:ee:e0:16:5d:
                    d1:56:ff:f5:e7:d1:07:37:45:a1:e9:27:88:50:55:
                    68:ad:1b:86:74:41:aa:32:a4:6f:f0:8a:c4:94:59:
                    0a:43:51:d0:d6:6d:23:0a:68:bc:07:3c:b3:d2:20:
                    75:7a:76:46:5e:3e:f8:fc:a1:cb:2f:c2:f3:00:a4:
                    87:45:3b:a8:31:03:e6:1b:8f:a5:55:b3:69:4a:c7:
                    2b:d2:0e:9c:8a:8d:a8:2e:60:62:8d:a0:09:51:8b:
                    4e:22:d3:35:a9:73:ea:a3:10:8e:57:ce:26:eb:9f:
                    ce:71:bb:a6:62:66:7e:04:82:29:ad:7b:21:92:28:
                    da:0e:06:c7:0b:7f:74:a9:a5:77:43:9f:0c:84:b6:
                    bc:e0:a7:ea:93:e0:78:d9:ac:bb:aa:d4:90:23:7d:
                    e2:39:ee:9e:f5:f7:25:35:04:2a:02:3a:a7:7e:54:
                    33:21:f0:1f:bf:c9:a0:51:fd:d5:ee:a8:7d:9b:c8:
                    e8:17:cb:3d:5d:de:01:49:2c:47:2d:0b:bb:4e:bf:
                    ed:c2:c0:3b:05:eb:0f:b0:43:45:33:86:81:f2:51:
                    8b:7f:39:ec:4b:b5:8a:8f:22:55:a8:1b:f9:cf:a2:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:00:00:60:6A:43:B0:E2:D4:58:2B:95:A1:24:07:87:A5:81:17:A9
            X509v3 Authority Key Identifier:
                keyid:5C:AF:A0:F2:F2:88:AA:E9:28:B8:50:A7:D8:03:FC:27:31:59:B8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e50dd9ef106afe1a2202d69bd6a27111b0ecc08c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/6250726bf0621baa85496aa2a9922a77a2a1272e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5083c0e-9c5a-47c7-ac99-061d77bff53c/e50dd9ef106afe1a2202d69bd6a27111b0ecc08c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:ac:2f:53:38:ed:56:a1:ae:3e:66:b0:ed:62:70:b6:51:3c:
         62:f7:7d:5b:84:95:e3:f6:dc:b9:e0:80:c6:51:d1:5e:fc:7f:
         b0:a9:cb:ef:cb:f8:3e:05:e2:50:e8:ff:cd:fd:a1:e7:3a:4f:
         7f:b3:11:ba:af:7e:e5:03:de:eb:f3:73:ef:d0:4d:3d:0f:18:
         41:0d:40:93:33:df:ca:b3:dd:a4:11:5a:ba:e1:71:ef:7f:77:
         ea:c6:0d:6a:09:bc:1c:34:0b:5e:42:82:11:45:2c:4d:07:06:
         67:c0:ee:86:08:28:98:9c:aa:f6:6c:05:de:82:6e:83:22:e7:
         e8:6f:1b:de:6e:ab:0d:41:ea:24:eb:d9:9d:54:fc:4f:00:78:
         8d:8f:cd:4b:73:1d:d1:6b:ab:4d:3a:cf:3c:99:bf:75:6c:5d:
         cc:df:dc:33:d9:40:ec:ff:b2:ad:5e:57:73:a6:7e:18:b5:90:
         45:7c:78:76:67:14:7f:c3:d1:30:49:db:64:fe:d6:82:58:84:
         98:91:6f:6f:93:fa:00:01:e1:2f:06:23:af:25:fe:87:08:6a:
         51:f4:b9:82:28:5c:2e:d7:0b:d9:e2:a4:8c:3e:00:31:49:1a:
         1b:62:f5:21:33:a4:2d:7b:96:13:cf:f2:ec:bf:7b:93:f3:69:
         8d:eb:6a:1f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDc83MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
MGRkOWVmMTA2YWZlMWEyMjAyZDY5YmQ2YTI3MTExYjBlY2MwOGMwHhcNMjEwMzI0
MTQzMTA2WhcNMjYwMzI0MTQzMTA2WjAzMTEwLwYDVQQDEyg2MjUwNzI2YmYwNjIx
YmFhODU0OTZhYTJhOTkyMmE3N2EyYTEyNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiyBSIKwRbV9JdweVhMY98daB9idkXurqFu7gFl3RVv/159EH
N0Wh6SeIUFVorRuGdEGqMqRv8IrElFkKQ1HQ1m0jCmi8Bzyz0iB1enZGXj74/KHL
L8LzAKSHRTuoMQPmG4+lVbNpSscr0g6cio2oLmBijaAJUYtOItM1qXPqoxCOV84m
65/OcbumYmZ+BIIprXshkijaDgbHC390qaV3Q58MhLa84Kfqk+B42ay7qtSQI33i
Oe6e9fclNQQqAjqnflQzIfAfv8mgUf3V7qh9m8joF8s9Xd4BSSxHLQu7Tr/twsA7
BesPsENFM4aB8lGLfznsS7WKjyJVqBv5z6JTsQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOcAAGBqQ7Di1FgrlaEkB4elgRepMB8GA1UdIwQYMBaAFFyvoPLyiKrpKLhQ
p9gD/CcxWbg+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTUwZGQ5
ZWYxMDZhZmUxYTIyMDJkNjliZDZhMjcxMTFiMGVjYzA4Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjUwODNjMGUtOWM1YS00N2M3LWFjOTktMDYxZDc3
YmZmNTNjLzYyNTA3MjZiZjA2MjFiYWE4NTQ5NmFhMmE5OTIyYTc3YTJhMTI3MmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNTA4M2MwZS05YzVhLTQ3YzctYWM5OS0wNjFk
NzdiZmY1M2MvZTUwZGQ5ZWYxMDZhZmUxYTIyMDJkNjliZDZhMjcxMTFiMGVjYzA4
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqr3YDANBgkqhkiG9w0BAQsFAAOCAQEAkKwvUzjtVqGuPmaw
7WJwtlE8Yvd9W4SV4/bcueCAxlHRXvx/sKnL78v4PgXiUOj/zf2h5zpPf7MRuq9+
5QPe6/Nz79BNPQ8YQQ1AkzPfyrPdpBFauuFx73936sYNagm8HDQLXkKCEUUsTQcG
Z8DuhggomJyq9mwF3oJugyLn6G8b3m6rDUHqJOvZnVT8TwB4jY/NS3Md0WurTTrP
PJm/dWxdzN/cM9lA7P+yrV5Xc6Z+GLWQRXx4dmcUf8PRMEnbZP7WgliEmJFvb5P6
AAHhLwYjryX+hwhqUfS5gihcLtcL2eKkjD4AMUkaG2L1ITOkLXuWE8/y7L97k/Np
jetqHw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org