Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/f9588e93ed20cd344f052b9573e4d9019629851c.roa
File:                     f9588e93ed20cd344f052b9573e4d9019629851c.roa (raw, json)
Hash identifier:          djulVzGiWchcrSIB0QPOWYzOdTx4icYfRedx/yEAk30=
Subject key identifier:   8C:B8:F8:42:AA:A2:4F:21:88:11:93:F0:FD:70:F7:F1:7A:AB:CE:62
Certificate issuer:       /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial:       202C9D
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/f9588e93ed20cd344f052b9573e4d9019629851c.roa
Signing time:             Tue 16 May 2023 17:24:46 +0000
ROA not before:           Mon 15 May 2023 17:24:46 +0000
ROA not after:            Fri 16 May 2025 17:24:46 +0000
asID:                     262166
IP address blocks:        168.234.96.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2108573 (0x202c9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
        Validity
            Not Before: May 15 17:24:46 2023 GMT
            Not After : May 16 17:24:46 2025 GMT
        Subject: CN=f9588e93ed20cd344f052b9573e4d9019629851c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e0:d2:9d:fe:f6:22:d0:19:62:c7:d4:5c:3b:
                    cf:c2:d6:3a:1a:0a:ff:93:37:53:50:59:e9:86:b0:
                    0a:f0:56:03:ca:0f:19:0d:aa:0f:3b:2a:32:62:97:
                    03:d2:7b:01:0e:5a:f3:3d:d1:d2:2b:0e:88:3c:c1:
                    d9:f6:e4:70:06:c8:bd:dd:28:78:a8:e1:d8:18:d8:
                    18:1b:47:f6:02:0a:5f:cc:d4:94:36:85:38:36:a9:
                    e1:a6:8f:0e:eb:7c:5f:1a:ee:cc:21:b3:e6:73:37:
                    32:d3:e4:d7:18:3e:97:ed:d8:f4:73:1a:8b:20:dd:
                    3c:16:30:28:be:3c:ec:bc:11:6d:f1:f4:38:6e:b0:
                    bb:ef:4a:0a:7e:c8:e7:47:7f:06:db:a7:61:f5:fa:
                    a0:85:76:27:47:85:60:e6:a0:ce:b6:cc:0e:1d:d2:
                    8f:bb:ad:09:b1:11:1c:a2:77:4e:4a:06:62:72:e7:
                    05:ff:a2:30:d6:9c:07:41:59:92:86:28:5b:f7:cd:
                    23:4e:d1:60:55:64:83:dc:14:12:f2:1c:ec:1e:3d:
                    8d:4a:67:76:04:6b:5f:13:ca:d1:3d:2f:c6:41:79:
                    5c:8f:63:49:da:9b:21:65:0b:c8:1f:ad:48:93:23:
                    88:26:51:97:d1:5a:2a:69:a5:e8:22:08:ee:95:38:
                    a5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B8:F8:42:AA:A2:4F:21:88:11:93:F0:FD:70:F7:F1:7A:AB:CE:62
            X509v3 Authority Key Identifier:
                keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/f9588e93ed20cd344f052b9573e4d9019629851c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:1c:dc:c9:65:03:4c:e0:4a:83:3d:cc:71:86:ce:dd:8a:3b:
         2c:74:8f:dc:3a:46:0f:10:61:95:e4:de:45:58:5c:32:73:64:
         4e:ac:da:92:ba:9a:94:02:a4:61:bf:25:fb:c0:fb:1f:3f:6a:
         a7:8f:89:87:1d:f3:7c:f8:fb:46:9e:72:81:53:29:f9:0c:92:
         79:d4:30:03:9c:a4:82:bd:48:63:12:17:3e:3c:ce:c8:ea:fc:
         8d:18:fc:10:fe:be:80:db:33:10:0a:99:11:d8:f6:87:19:c2:
         f7:40:00:f5:49:6e:65:7e:90:bd:d7:80:49:81:d1:97:f0:2a:
         50:6d:d4:91:80:10:0d:f5:86:01:34:0b:12:cb:c5:24:a7:47:
         4b:1d:cc:eb:83:ab:95:6e:03:0e:79:87:53:b8:24:73:3e:92:
         e3:cf:99:41:bf:19:e8:19:3c:dc:c3:cd:35:9a:0b:3e:ae:ab:
         c5:e8:59:c7:4a:48:54:27:c7:f5:df:f7:50:80:5c:7f:9c:94:
         56:cd:21:b3:a2:59:c0:52:32:d1:78:c4:d2:10:1d:73:31:2b:
         07:65:7d:70:d1:a0:89:fc:78:71:da:3e:94:6b:e8:bf:df:8b:
         90:a4:bc:2c:0a:b6:d2:cd:82:3a:6e:1c:be:a5:f4:4d:14:10:
         6a:f5:7e:5f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDICydMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM3
YTA3NDBlMGI0NjJiMzZmZDIyN2IyMjBhZmYzMzUzOGI5MzJhNzIwHhcNMjMwNTE1
MTcyNDQ2WhcNMjUwNTE2MTcyNDQ2WjAzMTEwLwYDVQQDEyhmOTU4OGU5M2VkMjBj
ZDM0NGYwNTJiOTU3M2U0ZDkwMTk2Mjk4NTFjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgeDSnf72ItAZYsfUXDvPwtY6Ggr/kzdTUFnphrAK8FYDyg8Z
DaoPOyoyYpcD0nsBDlrzPdHSKw6IPMHZ9uRwBsi93Sh4qOHYGNgYG0f2AgpfzNSU
NoU4Nqnhpo8O63xfGu7MIbPmczcy0+TXGD6X7dj0cxqLIN08FjAovjzsvBFt8fQ4
brC770oKfsjnR38G26dh9fqghXYnR4Vg5qDOtswOHdKPu60JsREcondOSgZicucF
/6Iw1pwHQVmShihb980jTtFgVWSD3BQS8hzsHj2NSmd2BGtfE8rRPS/GQXlcj2NJ
2pshZQvIH61IkyOIJlGX0VoqaaXoIgjulTilTQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIy4+EKqok8hiBGT8P1w9/F6q85iMB8GA1UdIwQYMBaAFM7h2MxrM3HBmchw
TET0Qk7gI9K+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzdhMDc0
MGUwYjQ2MmIzNmZkMjI3YjIyMGFmZjMzNTM4YjkzMmE3Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjViODQ1ZGYtYjQ0NS00ZTlhLTliN2UtMzQxZWM0
ZjY5NDUzL2Y5NTg4ZTkzZWQyMGNkMzQ0ZjA1MmI5NTczZTRkOTAxOTYyOTg1MWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNWI4NDVkZi1iNDQ1LTRlOWEtOWI3ZS0zNDFl
YzRmNjk0NTMvMzdhMDc0MGUwYjQ2MmIzNmZkMjI3YjIyMGFmZjMzNTM4YjkzMmE3
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA6jqYDANBgkqhkiG9w0BAQsFAAOCAQEAChzcyWUDTOBKgz3M
cYbO3Yo7LHSP3DpGDxBhleTeRVhcMnNkTqzakrqalAKkYb8l+8D7Hz9qp4+Jhx3z
fPj7Rp5ygVMp+QySedQwA5ykgr1IYxIXPjzOyOr8jRj8EP6+gNszEAqZEdj2hxnC
90AA9UluZX6QvdeASYHRl/AqUG3UkYAQDfWGATQLEsvFJKdHSx3M64OrlW4DDnmH
U7gkcz6S48+ZQb8Z6Bk83MPNNZoLPq6rxehZx0pIVCfH9d/3UIBcf5yUVs0hs6JZ
wFIy0XjE0hAdczErB2V9cNGgifx4cdo+lGvov9+LkKS8LAq20s2COm4cvqX0TRQQ
avV+Xw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:14 2024 by rpki-client on console-fra.rpki-client.org