Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9a0bab2-ceec-4d73-bf51-cda5196aa9ce/55391e8de09d0c8e0584423a5c1ebbd310da9dc3.roa
File:                     55391e8de09d0c8e0584423a5c1ebbd310da9dc3.roa (raw, json)
Hash identifier:          e3j23wnPB8lK62PqbKDkS3+E3PgR1DAAN+RArA7JdjM=
Subject key identifier:   69:D6:A8:88:A4:A8:D5:AC:A6:17:7C:AC:EC:8D:90:D8:C9:0A:A8:A9
Certificate issuer:       /CN=7fba37307c4a12e522f65e5e452a58b5727413f3
Certificate serial:       0D228B
Authority key identifier: 7B:CD:71:6E:07:AC:1D:D5:34:EB:5E:4F:A1:0A:E3:B4:2C:57:53:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fba37307c4a12e522f65e5e452a58b5727413f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9a0bab2-ceec-4d73-bf51-cda5196aa9ce/55391e8de09d0c8e0584423a5c1ebbd310da9dc3.roa
Signing time:             Wed 24 Mar 2021 14:41:16 +0000
ROA not before:           Wed 24 Mar 2021 14:41:16 +0000
ROA not after:            Tue 24 Mar 2026 14:41:16 +0000
asID:                     61468
IP address blocks:        192.188.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860811 (0xd228b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fba37307c4a12e522f65e5e452a58b5727413f3
        Validity
            Not Before: Mar 24 14:41:16 2021 GMT
            Not After : Mar 24 14:41:16 2026 GMT
        Subject: CN=55391e8de09d0c8e0584423a5c1ebbd310da9dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:59:63:56:28:47:ff:79:e2:b8:a3:a7:f8:
                    bb:d8:3c:a4:49:00:5f:f2:6c:be:3b:d4:0d:c5:be:
                    20:20:e9:45:d6:fb:77:63:ab:c3:5c:cc:bd:5d:e7:
                    53:cb:6a:c2:86:24:35:f4:83:3b:0d:f8:b7:f5:c6:
                    5c:24:d5:30:bc:a2:6a:36:9c:68:03:47:ff:89:69:
                    3c:85:94:de:5e:cd:5c:e4:b4:f1:8e:13:9d:69:5e:
                    62:18:2a:1a:65:e8:b2:16:4c:98:08:3e:54:b0:12:
                    53:02:f6:20:2e:7f:b8:74:62:48:d4:ba:de:9d:5d:
                    1e:36:cf:55:14:79:b1:23:ca:07:45:7f:9d:d3:07:
                    f4:4b:44:6f:17:50:a8:6c:eb:94:9d:b0:2f:bc:8c:
                    81:64:d4:07:be:39:53:b2:e0:34:cd:74:bc:dc:d5:
                    22:4e:eb:71:fb:ba:97:b0:28:ce:cb:46:2f:fd:78:
                    82:c7:e0:02:5d:9a:31:50:cc:1d:68:5f:a7:96:3b:
                    60:88:f1:08:65:a7:f3:dc:63:9c:9b:ff:39:5f:4a:
                    bb:ac:45:09:6c:b1:a8:b8:c4:f8:81:d6:27:b0:9f:
                    55:53:f0:7d:e7:33:d8:e8:bb:92:55:09:48:62:cf:
                    8f:ba:3b:11:3f:d9:58:64:16:fa:5d:28:a4:8b:59:
                    c1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D6:A8:88:A4:A8:D5:AC:A6:17:7C:AC:EC:8D:90:D8:C9:0A:A8:A9
            X509v3 Authority Key Identifier:
                keyid:7B:CD:71:6E:07:AC:1D:D5:34:EB:5E:4F:A1:0A:E3:B4:2C:57:53:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fba37307c4a12e522f65e5e452a58b5727413f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9a0bab2-ceec-4d73-bf51-cda5196aa9ce/55391e8de09d0c8e0584423a5c1ebbd310da9dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9a0bab2-ceec-4d73-bf51-cda5196aa9ce/7fba37307c4a12e522f65e5e452a58b5727413f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:a1:20:3f:39:ef:d3:d6:99:a6:ae:57:28:1f:8b:bd:a8:c8:
         88:f9:51:aa:b4:25:1e:99:cc:e5:89:50:b6:97:dc:52:63:87:
         fe:dd:9c:42:34:3b:34:1a:ed:b3:d9:f2:e4:ed:3d:f3:87:2b:
         da:43:94:33:ae:23:5f:1c:a5:15:d4:fc:87:73:e6:8e:6b:51:
         d6:15:27:40:90:2c:fc:6c:80:b9:00:7c:6a:65:2a:37:82:49:
         a0:25:f8:0d:98:4c:bd:19:b1:bc:02:06:ff:c4:bd:e8:3b:9b:
         2c:d9:ed:de:40:dd:44:3c:b6:e7:7f:f3:de:d8:b1:83:44:e9:
         b6:ff:b5:40:96:a2:4d:ca:8d:9b:f9:4c:31:89:b8:0e:f3:d5:
         3f:9d:b5:56:32:a9:c8:9d:1c:72:34:3d:6f:a1:dc:b7:45:b9:
         c0:e2:89:da:fd:14:7f:7d:79:d0:11:b5:02:8e:f6:2b:73:31:
         0d:c7:3a:c8:98:7b:f2:88:28:56:a6:27:89:fb:1f:8a:62:ad:
         f0:64:1a:d4:da:46:ba:09:cc:f4:b4:50:2c:c2:00:35:46:ed:
         3f:5c:61:2a:69:1a:7e:05:01:43:5a:98:73:29:d0:fd:01:77:
         ca:f1:ee:24:01:f3:d8:94:c9:1e:f9:a0:63:55:5f:fe:34:7e:
         1d:fe:cd:78
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDSKLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdm
YmEzNzMwN2M0YTEyZTUyMmY2NWU1ZTQ1MmE1OGI1NzI3NDEzZjMwHhcNMjEwMzI0
MTQ0MTE2WhcNMjYwMzI0MTQ0MTE2WjAzMTEwLwYDVQQDEyg1NTM5MWU4ZGUwOWQw
YzhlMDU4NDQyM2E1YzFlYmJkMzEwZGE5ZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoRlZY1YoR/954rijp/i72DykSQBf8my+O9QNxb4gIOlF1vt3
Y6vDXMy9XedTy2rChiQ19IM7Dfi39cZcJNUwvKJqNpxoA0f/iWk8hZTeXs1c5LTx
jhOdaV5iGCoaZeiyFkyYCD5UsBJTAvYgLn+4dGJI1LrenV0eNs9VFHmxI8oHRX+d
0wf0S0RvF1CobOuUnbAvvIyBZNQHvjlTsuA0zXS83NUiTutx+7qXsCjOy0Yv/XiC
x+ACXZoxUMwdaF+nljtgiPEIZafz3GOcm/85X0q7rEUJbLGouMT4gdYnsJ9VU/B9
5zPY6LuSVQlIYs+PujsRP9lYZBb6XSiki1nBBQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGnWqIikqNWsphd8rOyNkNjJCqipMB8GA1UdIwQYMBaAFHvNcW4HrB3VNOte
T6EK47QsV1PKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2ZiYTM3
MzA3YzRhMTJlNTIyZjY1ZTVlNDUyYTU4YjU3Mjc0MTNmMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjlhMGJhYjItY2VlYy00ZDczLWJmNTEtY2RhNTE5
NmFhOWNlLzU1MzkxZThkZTA5ZDBjOGUwNTg0NDIzYTVjMWViYmQzMTBkYTlkYzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mOWEwYmFiMi1jZWVjLTRkNzMtYmY1MS1jZGE1
MTk2YWE5Y2UvN2ZiYTM3MzA3YzRhMTJlNTIyZjY1ZTVlNDUyYTU4YjU3Mjc0MTNm
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMC8NDANBgkqhkiG9w0BAQsFAAOCAQEAcKEgPznv09aZpq5X
KB+LvajIiPlRqrQlHpnM5YlQtpfcUmOH/t2cQjQ7NBrts9ny5O0984cr2kOUM64j
XxylFdT8h3PmjmtR1hUnQJAs/GyAuQB8amUqN4JJoCX4DZhMvRmxvAIG/8S96Dub
LNnt3kDdRDy253/z3tixg0Tptv+1QJaiTcqNm/lMMYm4DvPVP521VjKpyJ0ccjQ9
b6Hct0W5wOKJ2v0Uf3150BG1Ao72K3MxDcc6yJh78ogoVqYnifsfimKt8GQa1NpG
ugnM9LRQLMIANUbtP1xhKmkafgUBQ1qYcynQ/QF3yvHuJAHz2JTJHvmgY1Vf/jR+
Hf7NeA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org