Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/813c6c76772ae0cb18f67e2e69b604b722ff0e15.roa
File:                     813c6c76772ae0cb18f67e2e69b604b722ff0e15.roa (raw, json)
Hash identifier:          O5HxiDlykBa+pASR5+SCpBYS79jKZEx+efjLOWjyz2c=
Subject key identifier:   CC:1B:3E:B8:80:01:6C:B7:54:78:BD:28:76:7D:95:9B:AE:1B:CB:BE
Certificate issuer:       /CN=8f3873d2185c02d28d6e454da708150f962e9305
Certificate serial:       0CE6
Authority key identifier: 18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/813c6c76772ae0cb18f67e2e69b604b722ff0e15.roa
Signing time:             Tue 27 Jun 2023 19:28:23 +0000
ROA not before:           Mon 26 Jun 2023 19:28:23 +0000
ROA not after:            Fri 27 Jun 2025 19:28:23 +0000
asID:                     28067
IP address blocks:        64.28.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3302 (0xce6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3873d2185c02d28d6e454da708150f962e9305
        Validity
            Not Before: Jun 26 19:28:23 2023 GMT
            Not After : Jun 27 19:28:23 2025 GMT
        Subject: CN=813c6c76772ae0cb18f67e2e69b604b722ff0e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:7e:63:d8:7e:65:11:00:d9:53:23:7f:ca:
                    83:c0:e6:90:6c:31:77:76:0c:46:a6:76:4d:1f:b3:
                    5a:ce:6d:04:f2:f5:ba:89:74:33:97:8c:9c:f4:45:
                    21:69:93:26:3f:25:a2:22:49:1f:8e:da:89:ed:85:
                    b0:51:59:c1:a5:c6:97:c1:63:87:74:b5:69:89:33:
                    1d:8c:8b:73:8c:79:10:fa:01:82:2f:31:f2:f1:32:
                    b9:4d:e4:b9:da:70:89:5f:b2:0c:e2:fe:f5:33:31:
                    d7:0a:4a:c4:5d:50:f2:40:6d:30:c6:51:e1:1d:b6:
                    95:7d:21:f4:cf:cc:41:7c:60:ac:91:e2:f7:6b:bd:
                    6f:ec:6f:ba:f7:26:e0:56:67:ab:de:0b:a4:8d:02:
                    0c:fb:44:4a:6a:2f:3e:d5:a4:cb:30:2e:4a:1e:8f:
                    48:da:7e:69:68:10:a6:99:f5:cf:df:47:1f:d2:60:
                    c0:fe:f6:8b:91:85:40:cd:22:44:ae:af:fd:13:65:
                    8c:61:0f:e3:49:84:da:9e:65:33:3b:0c:c6:e6:5c:
                    f2:f3:01:ea:a4:a1:92:4e:83:90:51:89:ae:ea:60:
                    ee:15:60:2e:39:ad:fd:2c:3e:1f:ab:e0:7f:6d:87:
                    cd:f6:9e:e0:5b:f7:8f:c2:8d:10:1f:65:ea:05:4b:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1B:3E:B8:80:01:6C:B7:54:78:BD:28:76:7D:95:9B:AE:1B:CB:BE
            X509v3 Authority Key Identifier:
                keyid:18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/813c6c76772ae0cb18f67e2e69b604b722ff0e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/8f3873d2185c02d28d6e454da708150f962e9305.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:5c:b2:f0:35:d1:0b:04:6d:ea:6c:7c:d2:d7:06:7a:f2:d0:
         f1:e1:c2:a5:33:b5:59:67:30:72:c3:ea:c0:40:70:a8:93:e6:
         bf:3f:6b:54:7e:4a:1c:22:07:7a:2b:b4:d1:f1:d0:9c:29:71:
         c3:9a:aa:82:b8:d5:d0:1a:90:e4:20:ea:99:b0:12:20:4f:82:
         82:ad:01:03:f6:89:38:51:26:ea:ac:05:f2:49:41:f7:72:a8:
         2c:78:ca:d2:f9:20:30:6e:c4:fd:07:18:88:41:96:73:b6:c0:
         fb:0e:42:7e:8c:e8:fd:11:c5:d0:47:de:18:8f:29:a8:8d:0f:
         fa:91:3d:56:c0:35:6d:eb:1b:9b:85:99:be:a0:ca:ee:60:3b:
         a2:7d:c9:49:97:d2:5a:4d:7b:4d:cf:e0:39:cc:2f:b6:cb:53:
         1c:dd:fc:a6:9d:32:94:05:3b:9a:6c:6a:a1:8a:8f:b3:8a:55:
         e5:3f:1a:36:d2:6d:b5:7e:fa:d8:b8:ad:be:db:a5:81:4d:7c:
         b8:b4:35:f7:28:e5:4a:95:86:17:02:4a:54:70:58:5e:f4:52:
         8d:4b:da:f4:fd:4c:d0:0e:b6:b8:a0:06:d9:5b:59:c9:51:ff:
         1e:a5:cf:cf:63:93:19:1e:7d:11:71:83:79:40:1e:d4:69:f8:
         9c:0a:d4:26
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICDOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOGYz
ODczZDIxODVjMDJkMjhkNmU0NTRkYTcwODE1MGY5NjJlOTMwNTAeFw0yMzA2MjYx
OTI4MjNaFw0yNTA2MjcxOTI4MjNaMDMxMTAvBgNVBAMTKDgxM2M2Yzc2NzcyYWUw
Y2IxOGY2N2UyZTY5YjYwNGI3MjJmZjBlMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqZn5j2H5lEQDZUyN/yoPA5pBsMXd2DEamdk0fs1rObQTy9bqJ
dDOXjJz0RSFpkyY/JaIiSR+O2onthbBRWcGlxpfBY4d0tWmJMx2Mi3OMeRD6AYIv
MfLxMrlN5LnacIlfsgzi/vUzMdcKSsRdUPJAbTDGUeEdtpV9IfTPzEF8YKyR4vdr
vW/sb7r3JuBWZ6veC6SNAgz7REpqLz7VpMswLkoej0jafmloEKaZ9c/fRx/SYMD+
9ouRhUDNIkSur/0TZYxhD+NJhNqeZTM7DMbmXPLzAeqkoZJOg5BRia7qYO4VYC45
rf0sPh+r4H9th832nuBb94/CjRAfZeoFSxqtAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUzBs+uIABbLdUeL0odn2Vm64by74wHwYDVR0jBBgwFoAUGJcuFKdCBCDgk86A
an/0aek+a80wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS84ZjM4NzNk
MjE4NWMwMmQyOGQ2ZTQ1NGRhNzA4MTUwZjk2MmU5MzA1LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mYWJjY2ZlOS03NTFkLTQ0MTktOWE2NS1lMzZmOTZj
NzRhMjEvODEzYzZjNzY3NzJhZTBjYjE4ZjY3ZTJlNjliNjA0YjcyMmZmMGUxNS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2ZhYmNjZmU5LTc1MWQtNDQxOS05YTY1LWUzNmY5
NmM3NGEyMS84ZjM4NzNkMjE4NWMwMmQyOGQ2ZTQ1NGRhNzA4MTUwZjk2MmU5MzA1
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAQByCMA0GCSqGSIb3DQEBCwUAA4IBAQAvXLLwNdELBG3qbHzS
1wZ68tDx4cKlM7VZZzByw+rAQHCok+a/P2tUfkocIgd6K7TR8dCcKXHDmqqCuNXQ
GpDkIOqZsBIgT4KCrQED9ok4USbqrAXySUH3cqgseMrS+SAwbsT9BxiIQZZztsD7
DkJ+jOj9EcXQR94YjymojQ/6kT1WwDVt6xubhZm+oMruYDuifclJl9JaTXtNz+A5
zC+2y1Mc3fymnTKUBTuabGqhio+zilXlPxo20m21fvrYuK2+26WBTXy4tDX3KOVK
lYYXAkpUcFhe9FKNS9r0/UzQDra4oAbZW1nJUf8epc/PY5MZHn0RcYN5QB7Uafic
CtQm
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org