Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/561f625d3670dc6dcead827328730823500e49ec.roa
File:                     561f625d3670dc6dcead827328730823500e49ec.roa (raw, json)
Hash identifier:          inrzEP2A38kOQQyx6IUz01G7KmCeXbIDLJEA121PmPo=
Subject key identifier:   A5:6A:03:23:38:67:51:F6:96:D7:FD:91:FC:B2:98:D8:43:53:92:48
Certificate issuer:       /CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Certificate serial:       158355
Authority key identifier: 5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/561f625d3670dc6dcead827328730823500e49ec.roa
Signing time:             Fri 18 Mar 2022 21:01:25 +0000
ROA not before:           Fri 18 Mar 2022 03:00:00 +0000
ROA not after:            Mon 18 Mar 2024 03:00:00 +0000
asID:                     10620
IP address blocks:        191.156.18.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409877 (0x158355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
        Validity
            Not Before: Mar 18 03:00:00 2022 GMT
            Not After : Mar 18 03:00:00 2024 GMT
        Subject: CN=561f625d3670dc6dcead827328730823500e49ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:98:b2:60:be:a5:b2:03:01:e1:95:a6:7f:2e:
                    19:64:69:75:6b:f8:fa:13:9f:28:42:36:6b:34:63:
                    13:61:f6:ab:91:5c:5d:7f:b9:28:4c:76:a6:58:60:
                    90:51:7d:37:4b:1b:d4:27:10:31:88:77:ce:fb:7c:
                    af:95:29:71:0d:65:f7:cf:e3:66:2f:f9:5d:77:8f:
                    e6:2a:74:aa:b5:f3:f9:f1:6f:ae:32:0a:80:fd:c3:
                    1e:12:36:c3:5c:4c:6d:c0:b9:09:c9:37:d6:de:ad:
                    d9:8a:30:90:f8:c6:25:73:be:3a:d7:8a:75:b5:e7:
                    11:92:40:79:90:0d:a1:d5:5d:a7:7c:b5:cc:1e:07:
                    b3:ba:28:74:1a:32:29:ec:f0:04:cb:ad:77:33:fa:
                    41:50:c8:e0:c6:73:fe:37:1e:90:ea:50:f6:6e:b2:
                    50:45:a8:64:2b:99:4a:88:ba:74:b5:34:f7:44:90:
                    29:06:a2:9d:55:6d:c8:8d:35:f9:49:53:8f:fc:12:
                    4d:6f:73:49:c2:ba:bc:83:ce:43:21:b8:d7:ef:45:
                    d5:f6:13:4a:75:98:99:4a:33:cb:85:51:bc:2a:9b:
                    b4:1f:0e:ab:ea:5f:81:d4:fe:19:12:85:87:9f:5c:
                    8b:e3:8c:cb:07:66:94:6a:1c:0e:2f:16:3e:3d:e1:
                    02:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6A:03:23:38:67:51:F6:96:D7:FD:91:FC:B2:98:D8:43:53:92:48
            X509v3 Authority Key Identifier:
                keyid:5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/561f625d3670dc6dcead827328730823500e49ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:29:2f:d3:ce:68:ba:4d:09:af:09:9f:7e:9f:01:0b:57:df:
         d6:d9:75:b5:48:fc:c4:ef:9d:37:9c:65:97:39:b4:2a:5a:ed:
         9c:8b:db:b8:63:cd:00:0f:67:7d:1d:27:62:27:0d:ab:99:3f:
         79:29:1a:d4:05:9b:52:8a:8b:7d:d4:f6:1a:1b:5b:b3:49:2d:
         f4:1b:f6:56:1a:a9:46:a3:9b:91:3d:95:2e:8c:73:51:48:cd:
         ce:b3:2b:19:66:1d:da:ee:fa:eb:18:ea:f4:c7:12:83:41:10:
         77:33:98:ec:cf:82:f6:2d:3f:09:0e:f4:77:3e:67:86:16:12:
         72:59:ee:19:8b:99:b3:d3:15:4b:66:f5:c9:93:f9:3c:0f:a8:
         3b:8f:cb:4b:63:63:ef:05:3f:26:20:38:e9:fb:aa:c0:de:68:
         a4:0a:00:7e:d4:c2:0c:32:6b:67:78:17:99:88:01:36:d9:e7:
         da:0b:6a:c9:a6:39:40:6a:8f:0f:a8:0f:cd:47:47:a3:55:73:
         6b:04:e9:e3:93:fc:dd:e5:fd:15:f9:bc:c0:0a:ce:d6:49:c4:
         1e:26:ee:4a:4f:c5:80:b7:5c:ac:26:a3:c3:13:c0:af:29:7d:
         84:e3:f1:3a:21:85:1f:ef:a9:0b:66:8c:af:cd:5c:a1:e7:74:
         68:4d:a1:3e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFYNVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE2
OGFjYTk0NWU1YjRlMGZhNTc1YmJlMDNiMWFmNjUxNDZlZjBiNmYwHhcNMjIwMzE4
MDMwMDAwWhcNMjQwMzE4MDMwMDAwWjAzMTEwLwYDVQQDEyg1NjFmNjI1ZDM2NzBk
YzZkY2VhZDgyNzMyODczMDgyMzUwMGU0OWVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmZiyYL6lsgMB4ZWmfy4ZZGl1a/j6E58oQjZrNGMTYfarkVxd
f7koTHamWGCQUX03SxvUJxAxiHfO+3yvlSlxDWX3z+NmL/ldd4/mKnSqtfP58W+u
MgqA/cMeEjbDXExtwLkJyTfW3q3ZijCQ+MYlc74614p1tecRkkB5kA2h1V2nfLXM
Hgezuih0GjIp7PAEy613M/pBUMjgxnP+Nx6Q6lD2brJQRahkK5lKiLp0tTT3RJAp
BqKdVW3IjTX5SVOP/BJNb3NJwrq8g85DIbjX70XV9hNKdZiZSjPLhVG8Kpu0Hw6r
6l+B1P4ZEoWHn1yL44zLB2aUahwOLxY+PeECGQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKVqAyM4Z1H2ltf9kfyymNhDU5JIMB8GA1UdIwQYMBaAFFxQ5QNp/Z+ZppL2
iLlivHesiqnLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTY4YWNh
OTQ1ZTViNGUwZmE1NzViYmUwM2IxYWY2NTE0NmVmMGI2Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTgyMTgwNmMtMGU4Mi00MjA0LThiM2MtZGRlN2Mw
ZmM4ZDYyLzU2MWY2MjVkMzY3MGRjNmRjZWFkODI3MzI4NzMwODIzNTAwZTQ5ZWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODIxODA2Yy0wZTgyLTQyMDQtOGIzYy1kZGU3
YzBmYzhkNjIvYTY4YWNhOTQ1ZTViNGUwZmE1NzViYmUwM2IxYWY2NTE0NmVmMGI2
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb+cEjANBgkqhkiG9w0BAQsFAAOCAQEAgCkv085ouk0Jrwmf
fp8BC1ff1tl1tUj8xO+dN5xllzm0KlrtnIvbuGPNAA9nfR0nYicNq5k/eSka1AWb
UoqLfdT2Ghtbs0kt9Bv2VhqpRqObkT2VLoxzUUjNzrMrGWYd2u766xjq9McSg0EQ
dzOY7M+C9i0/CQ70dz5nhhYSclnuGYuZs9MVS2b1yZP5PA+oO4/LS2Nj7wU/JiA4
6fuqwN5opAoAftTCDDJrZ3gXmYgBNtnn2gtqyaY5QGqPD6gPzUdHo1VzawTp45P8
3eX9Ffm8wArO1knEHibuSk/FgLdcrCajwxPAryl9hOPxOiGFH++pC2aMr81coed0
aE2hPg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org