Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/923acbe30c423c3799a5602c1daf6e1a348b4d49.roa
File:                     923acbe30c423c3799a5602c1daf6e1a348b4d49.roa (raw, json)
Hash identifier:          eymPkFi+M84emecb0e8eY6jFVjwahFcPlP4fbaZOPs0=
Subject key identifier:   5B:E0:92:CE:0D:50:B0:E1:E1:12:7E:5A:19:46:82:9E:7F:C7:28:77
Certificate issuer:       /CN=16b44d2a0bda515371a4ded869185f017218c9f2
Certificate serial:       0D8B3F
Authority key identifier: 8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/923acbe30c423c3799a5602c1daf6e1a348b4d49.roa
Signing time:             Wed 24 Mar 2021 14:30:25 +0000
ROA not before:           Wed 24 Mar 2021 14:30:25 +0000
ROA not after:            Tue 24 Mar 2026 14:30:25 +0000
asID:                     263766
IP address blocks:        170.83.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887615 (0xd8b3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b44d2a0bda515371a4ded869185f017218c9f2
        Validity
            Not Before: Mar 24 14:30:25 2021 GMT
            Not After : Mar 24 14:30:25 2026 GMT
        Subject: CN=923acbe30c423c3799a5602c1daf6e1a348b4d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:a0:cc:93:d0:c4:f0:75:27:44:6f:c3:ff:
                    07:2b:e7:bd:3a:f4:77:55:92:16:54:06:26:72:e6:
                    5f:74:a6:ea:6a:d4:b3:61:62:ac:04:9a:2e:e2:aa:
                    1e:a9:c6:28:6a:98:69:79:41:7e:ce:ba:8d:e1:7e:
                    31:d6:a2:5f:23:45:a8:8a:26:22:76:ee:c9:ea:4c:
                    58:d6:1c:78:f6:59:dc:1f:d6:a3:9b:ec:56:e6:cc:
                    8d:6a:65:48:33:c9:f6:38:1a:c6:05:7f:2a:b4:e1:
                    01:3c:22:ee:4c:e4:77:e9:87:79:7f:f5:84:83:0a:
                    38:04:43:2b:eb:f1:4f:b1:e1:52:aa:30:6f:ea:d6:
                    d4:e4:19:c8:da:d1:e6:bc:80:a7:74:29:25:54:b2:
                    0b:c5:1f:5c:80:3b:87:0b:be:4e:d3:fd:71:74:05:
                    99:b1:17:94:ac:07:20:15:0e:08:7b:6a:59:d6:54:
                    df:7a:d9:97:84:ad:cd:9e:27:5f:bb:ab:c7:56:be:
                    76:78:62:1d:af:1f:c4:84:23:4b:af:1b:03:36:89:
                    d7:8a:7f:42:89:81:43:1e:f2:b1:21:12:52:95:71:
                    94:23:d7:f7:55:58:f8:b8:77:72:b6:68:6f:99:3c:
                    48:84:8f:5c:bb:7e:db:87:53:0e:20:cc:e0:e3:24:
                    e7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E0:92:CE:0D:50:B0:E1:E1:12:7E:5A:19:46:82:9E:7F:C7:28:77
            X509v3 Authority Key Identifier:
                keyid:8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/923acbe30c423c3799a5602c1daf6e1a348b4d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/16b44d2a0bda515371a4ded869185f017218c9f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:7c:55:20:5d:47:16:79:66:78:ab:76:0c:dc:91:30:1c:3b:
         83:5c:de:90:20:5e:40:c0:e1:45:d3:ed:8e:33:8d:a1:ae:1a:
         6b:95:e2:8c:56:d7:f8:4c:56:d1:b7:a9:c7:94:e7:c4:85:f9:
         dc:42:e4:5a:e7:5a:b2:43:7f:f3:c6:b2:ce:5b:71:ef:9c:86:
         5a:d1:c2:4c:36:c7:e9:2c:8b:dc:88:43:bf:ca:5c:4b:e3:ad:
         89:0b:73:3b:8f:64:3e:91:91:10:a6:c5:e4:1f:0a:16:e3:65:
         03:94:af:4b:90:43:76:0e:cd:95:d6:88:c2:23:7f:97:48:70:
         9e:d6:82:fe:db:e0:41:a0:60:7a:22:96:8b:5e:48:45:30:40:
         e7:a3:e4:bc:8b:4a:65:71:b8:07:5a:6e:5f:d4:d2:83:79:61:
         ed:08:f5:54:ff:80:57:2a:83:3a:c0:ce:90:84:32:54:87:15:
         40:7f:53:08:82:44:0c:7b:bf:6f:4b:1a:4a:8c:4d:20:19:5e:
         05:0b:9c:01:2b:a6:4d:9f:ec:54:7b:c0:12:c8:b7:34:fd:a4:
         7d:7f:00:c5:32:40:7d:8b:69:ba:ed:47:e9:6f:55:28:f9:78:
         36:c9:21:a2:89:1b:17:59:25:f7:1f:51:d9:61:f0:d8:4b:5d:
         ef:5a:8f:04
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDYs/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE2
YjQ0ZDJhMGJkYTUxNTM3MWE0ZGVkODY5MTg1ZjAxNzIxOGM5ZjIwHhcNMjEwMzI0
MTQzMDI1WhcNMjYwMzI0MTQzMDI1WjAzMTEwLwYDVQQDEyg5MjNhY2JlMzBjNDIz
YzM3OTlhNTYwMmMxZGFmNmUxYTM0OGI0ZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzbSgzJPQxPB1J0Rvw/8HK+e9OvR3VZIWVAYmcuZfdKbqatSz
YWKsBJou4qoeqcYoaphpeUF+zrqN4X4x1qJfI0WoiiYidu7J6kxY1hx49lncH9aj
m+xW5syNamVIM8n2OBrGBX8qtOEBPCLuTOR36Yd5f/WEgwo4BEMr6/FPseFSqjBv
6tbU5BnI2tHmvICndCklVLILxR9cgDuHC75O0/1xdAWZsReUrAcgFQ4Ie2pZ1lTf
etmXhK3Nnidfu6vHVr52eGIdrx/EhCNLrxsDNonXin9CiYFDHvKxIRJSlXGUI9f3
VVj4uHdytmhvmTxIhI9cu37bh1MOIMzg4yTnxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFvgks4NULDh4RJ+WhlGgp5/xyh3MB8GA1UdIwQYMBaAFIvUoyfHIG6r4kOD
a0NxxNHxX6EkMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTZiNDRk
MmEwYmRhNTE1MzcxYTRkZWQ4NjkxODVmMDE3MjE4YzlmMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmFhOGE1MWQtZjllYy00ZDEwLWFmNmEtOTM0YmU0
NTU2ZTVlLzkyM2FjYmUzMGM0MjNjMzc5OWE1NjAyYzFkYWY2ZTFhMzQ4YjRkNDku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mYWE4YTUxZC1mOWVjLTRkMTAtYWY2YS05MzRi
ZTQ1NTZlNWUvMTZiNDRkMmEwYmRhNTE1MzcxYTRkZWQ4NjkxODVmMDE3MjE4Yzlm
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqpTbDANBgkqhkiG9w0BAQsFAAOCAQEAMXxVIF1HFnlmeKt2
DNyRMBw7g1zekCBeQMDhRdPtjjONoa4aa5XijFbX+ExW0bepx5TnxIX53ELkWuda
skN/88ayzltx75yGWtHCTDbH6SyL3IhDv8pcS+OtiQtzO49kPpGREKbF5B8KFuNl
A5SvS5BDdg7NldaIwiN/l0hwntaC/tvgQaBgeiKWi15IRTBA56PkvItKZXG4B1pu
X9TSg3lh7Qj1VP+AVyqDOsDOkIQyVIcVQH9TCIJEDHu/b0saSoxNIBleBQucASum
TZ/sVHvAEsi3NP2kfX8AxTJAfYtpuu1H6W9VKPl4NskhookbF1kl9x9R2WHw2Etd
71qPBA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org