Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/dd6213edea4ad5c4bda0e870e2ac95184bace7bc.roa
File:                     dd6213edea4ad5c4bda0e870e2ac95184bace7bc.roa (raw, json)
Hash identifier:          JdMVgSjhUJHTcdQSjMoKm8DBMX9xr9LpXum1isYi9qU=
Subject key identifier:   17:77:68:C2:32:D0:41:62:A2:7F:D9:76:64:CD:F4:88:03:0B:AE:A0
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       2050A3
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/dd6213edea4ad5c4bda0e870e2ac95184bace7bc.roa
Signing time:             Tue 16 May 2023 18:35:17 +0000
ROA not before:           Mon 15 May 2023 18:35:17 +0000
ROA not after:            Fri 16 May 2025 18:35:17 +0000
asID:                     262166
IP address blocks:        168.234.24.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117795 (0x2050a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: May 15 18:35:17 2023 GMT
            Not After : May 16 18:35:17 2025 GMT
        Subject: CN=dd6213edea4ad5c4bda0e870e2ac95184bace7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:dc:95:88:1f:3f:24:93:86:67:2d:69:50:f0:
                    7b:7b:90:7c:f6:d5:de:66:35:e3:8f:5d:db:80:5c:
                    a9:eb:b1:1d:f3:a7:ec:3d:0a:66:51:75:d2:ec:78:
                    90:a2:5a:2e:c1:b1:92:17:17:dc:ef:cf:6b:20:b1:
                    cb:a2:c8:46:b8:c8:3d:3c:32:1d:cd:6e:e3:6d:e3:
                    79:0f:47:02:36:f2:bf:d1:0c:ee:c4:b5:bf:8c:ef:
                    7f:fe:18:99:7a:f4:4c:4c:17:91:d1:1d:92:1d:29:
                    79:ae:2c:c9:9c:5b:ff:51:78:63:4d:91:ca:0f:0e:
                    0e:d4:d3:f5:70:d9:2a:82:2f:1e:98:58:1b:b9:b5:
                    11:9d:6e:4b:7b:cf:54:f5:9b:d8:92:78:d8:1a:65:
                    81:48:db:75:37:48:72:0f:69:dd:3d:1a:dc:0c:66:
                    c9:d6:18:47:7d:34:eb:cb:34:f5:b4:80:f7:91:43:
                    6a:99:8c:c3:f4:de:f7:78:0a:20:6b:29:56:3a:06:
                    f7:2f:29:85:2e:e2:c2:83:24:84:64:5b:52:02:ff:
                    c2:cc:d9:e5:c7:f4:5b:70:2d:42:ff:af:ab:43:9c:
                    7c:bf:db:4b:63:1d:1d:fa:74:57:45:2d:2b:22:5c:
                    a4:b0:79:3b:ba:5d:4c:34:70:1c:e7:b1:fc:5a:dd:
                    d1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:77:68:C2:32:D0:41:62:A2:7F:D9:76:64:CD:F4:88:03:0B:AE:A0
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/dd6213edea4ad5c4bda0e870e2ac95184bace7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:66:1f:6f:5c:79:99:6e:38:0b:08:95:a4:3b:3c:ac:de:72:
         b6:47:08:f0:b5:5b:7b:c8:6c:54:9e:99:17:0f:40:d6:2d:1c:
         11:d9:5c:e5:3a:25:f5:db:87:b9:f8:cb:37:4d:59:96:9a:e9:
         9d:24:ab:d2:87:8e:4f:fa:4a:25:72:47:fb:5e:e4:3c:c6:7b:
         ba:42:89:a7:7b:0d:a3:a1:e0:b1:47:24:c5:b0:05:b8:58:29:
         5f:e8:3f:eb:e5:c3:9e:d2:2f:97:37:7b:9a:df:79:dc:a8:5e:
         45:54:ce:18:ea:a2:32:dd:4f:b1:e3:6a:58:f1:d2:83:56:97:
         32:1e:a0:ad:74:4f:c3:ad:d1:af:18:54:08:5c:62:b5:6f:f1:
         a1:01:68:e5:4d:ca:3c:6a:ad:84:50:0b:93:50:1f:e8:de:c4:
         e3:9a:76:2a:33:96:d7:2b:a6:3d:bf:a7:8b:cf:0b:da:c1:90:
         75:65:a0:ec:49:f9:da:c2:bb:47:d9:7c:b4:a9:b9:68:98:72:
         c5:7a:82:f9:58:65:3d:87:64:b5:b9:82:43:7e:10:81:80:12:
         7b:ec:91:e7:2b:10:30:55:c8:f1:22:f3:a7:cb:db:b7:0b:8f:
         d2:c3:68:d8:d4:7c:13:17:3e:4a:8f:26:8a:94:85:8c:19:87:
         e4:c3:42:d7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIFCjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM3
YTA3NDBlMGI0NjJiMzZmZDIyN2IyMjBhZmYzMzUzOGI5MzJhNzIwHhcNMjMwNTE1
MTgzNTE3WhcNMjUwNTE2MTgzNTE3WjAzMTEwLwYDVQQDEyhkZDYyMTNlZGVhNGFk
NWM0YmRhMGU4NzBlMmFjOTUxODRiYWNlN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg9yViB8/JJOGZy1pUPB7e5B89tXeZjXjj13bgFyp67Ed86fs
PQpmUXXS7HiQolouwbGSFxfc789rILHLoshGuMg9PDIdzW7jbeN5D0cCNvK/0Qzu
xLW/jO9//hiZevRMTBeR0R2SHSl5rizJnFv/UXhjTZHKDw4O1NP1cNkqgi8emFgb
ubURnW5Le89U9ZvYknjYGmWBSNt1N0hyD2ndPRrcDGbJ1hhHfTTryzT1tID3kUNq
mYzD9N73eAogaylWOgb3LymFLuLCgySEZFtSAv/CzNnlx/RbcC1C/6+rQ5x8v9tL
Yx0d+nRXRS0rIlyksHk7ul1MNHAc57H8Wt3REwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBd3aMIy0EFion/ZdmTN9IgDC66gMB8GA1UdIwQYMBaAFM7h2MxrM3HBmchw
TET0Qk7gI9K+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzdhMDc0
MGUwYjQ2MmIzNmZkMjI3YjIyMGFmZjMzNTM4YjkzMmE3Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjViODQ1ZGYtYjQ0NS00ZTlhLTliN2UtMzQxZWM0
ZjY5NDUzL2RkNjIxM2VkZWE0YWQ1YzRiZGEwZTg3MGUyYWM5NTE4NGJhY2U3YmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNWI4NDVkZi1iNDQ1LTRlOWEtOWI3ZS0zNDFl
YzRmNjk0NTMvMzdhMDc0MGUwYjQ2MmIzNmZkMjI3YjIyMGFmZjMzNTM4YjkzMmE3
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA6jqGDANBgkqhkiG9w0BAQsFAAOCAQEAWmYfb1x5mW44CwiV
pDs8rN5ytkcI8LVbe8hsVJ6ZFw9A1i0cEdlc5Tol9duHufjLN01ZlprpnSSr0oeO
T/pKJXJH+17kPMZ7ukKJp3sNo6HgsUckxbAFuFgpX+g/6+XDntIvlzd7mt953Khe
RVTOGOqiMt1PseNqWPHSg1aXMh6grXRPw63RrxhUCFxitW/xoQFo5U3KPGqthFAL
k1Af6N7E45p2KjOW1yumPb+ni88L2sGQdWWg7En52sK7R9l8tKm5aJhyxXqC+Vhl
PYdktbmCQ34QgYASe+yR5ysQMFXI8SLzp8vbtwuP0sNo2NR8Exc+So8mipSFjBmH
5MNC1w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org