Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/8b02b4ccb6613ecfbc3b98ee03a24206daf49564.roa
File:                     8b02b4ccb6613ecfbc3b98ee03a24206daf49564.roa (raw, json)
Hash identifier:          Gpd3NfYTH0afwpxCn2ehI3LCfLtem3hz1yxg/clmjMI=
Subject key identifier:   D4:9F:8F:7A:C3:4F:A2:60:77:D4:48:08:57:6E:3C:4A:0A:67:42:C8
Certificate issuer:       /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial:       03A7A8
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/8b02b4ccb6613ecfbc3b98ee03a24206daf49564.roa
Signing time:             Thu 05 May 2022 11:51:00 +0000
ROA not before:           Wed 04 May 2022 03:00:00 +0000
ROA not after:            Tue 04 May 2027 03:00:00 +0000
asID:                     272086
IP address blocks:        189.85.40.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239528 (0x3a7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Validity
            Not Before: May  4 03:00:00 2022 GMT
            Not After : May  4 03:00:00 2027 GMT
        Subject: CN=8b02b4ccb6613ecfbc3b98ee03a24206daf49564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:7c:eb:6e:6e:0a:0c:20:61:cd:27:29:f3:
                    f8:8e:02:d0:62:4f:7b:d8:5b:42:1f:f7:c0:fd:44:
                    18:ac:c0:84:8d:19:ab:d0:2a:c9:90:67:24:16:31:
                    ec:d4:c3:40:a6:74:96:bc:6e:85:15:61:ec:83:21:
                    5b:3b:e3:76:26:f8:fb:e4:ac:3d:41:8b:6d:f0:c5:
                    ef:df:3d:b7:5d:ff:4e:a3:5e:82:e4:22:21:cc:9d:
                    6a:19:61:d1:29:be:7c:b2:af:89:cd:d2:4f:05:17:
                    1b:85:7c:a8:32:28:c2:e2:cc:c6:aa:70:f0:e6:7a:
                    d2:21:0e:9b:af:90:16:4b:fa:55:37:cd:b3:42:c9:
                    d5:86:6b:87:d0:d8:cd:e9:f4:cb:c9:87:d3:2e:82:
                    99:60:be:59:16:8d:1b:fd:ae:8a:82:43:b6:b1:74:
                    e9:62:b4:29:97:02:64:eb:bd:6e:15:fa:fe:d8:aa:
                    63:fd:68:3d:5c:ec:82:4e:b1:7a:4b:5b:41:5f:29:
                    7c:fe:a4:ee:57:bb:5a:16:98:4c:77:99:9d:62:f0:
                    82:de:a3:29:74:45:2f:3d:71:bf:43:89:96:a5:55:
                    c6:ee:89:2f:9b:58:fa:d8:a5:6c:a9:9f:56:a4:1b:
                    3a:0a:78:ec:6b:29:62:b4:15:7a:a3:13:46:b6:3b:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9F:8F:7A:C3:4F:A2:60:77:D4:48:08:57:6E:3C:4A:0A:67:42:C8
            X509v3 Authority Key Identifier:
                keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/8b02b4ccb6613ecfbc3b98ee03a24206daf49564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:79:11:52:0a:c7:53:99:4d:d0:81:d9:4e:f4:ed:7f:d1:ae:
         f9:b6:45:0f:79:82:6a:c3:a7:1c:29:91:71:22:99:85:c9:ea:
         30:0c:f5:88:db:8c:0d:73:4f:eb:97:8c:66:95:cf:e4:dc:33:
         fd:45:7f:5e:dd:78:ca:3f:23:67:ed:94:44:5b:8e:51:c2:32:
         62:fb:85:b3:51:0e:d9:dc:af:a0:e6:0f:94:cc:ab:21:89:f0:
         c3:e7:9f:79:62:76:97:2f:09:e2:7d:e5:83:b5:8c:1f:e0:e7:
         7e:9b:89:4f:2d:f5:12:11:87:c9:b1:46:8a:cc:5e:d9:23:da:
         04:78:62:a4:55:92:69:70:c9:0f:ab:9e:3e:be:25:4b:08:8b:
         7f:f7:84:a0:5a:a1:a1:3d:e5:dc:f5:6e:bd:24:92:d4:e1:f6:
         6b:fb:74:40:37:41:2d:ed:ce:25:7f:9a:23:2a:c2:05:7f:e5:
         97:4b:f8:3e:80:61:c6:dd:0a:70:c2:a9:9e:9b:1d:05:80:26:
         79:b5:10:1d:68:70:04:9f:ae:f6:5c:c4:9b:56:98:52:68:54:
         d1:fb:87:ce:30:39:7f:e6:b7:a2:1a:e5:d6:6f:04:4e:ef:ed:
         7f:ca:c3:d7:01:df:7b:e5:4c:de:93:0c:77:3b:85:e1:f3:73:
         c9:25:c3:d6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA6eoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM1
ZWY4NjEyNGEzOGYzZmM0NmU4NWU1MWUwMTQxMWRiMzdmZGIyMDQwHhcNMjIwNTA0
MDMwMDAwWhcNMjcwNTA0MDMwMDAwWjAzMTEwLwYDVQQDEyg4YjAyYjRjY2I2NjEz
ZWNmYmMzYjk4ZWUwM2EyNDIwNmRhZjQ5NTY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwm18625uCgwgYc0nKfP4jgLQYk972FtCH/fA/UQYrMCEjRmr
0CrJkGckFjHs1MNApnSWvG6FFWHsgyFbO+N2Jvj75Kw9QYtt8MXv3z23Xf9Oo16C
5CIhzJ1qGWHRKb58sq+JzdJPBRcbhXyoMijC4szGqnDw5nrSIQ6br5AWS/pVN82z
QsnVhmuH0NjN6fTLyYfTLoKZYL5ZFo0b/a6KgkO2sXTpYrQplwJk671uFfr+2Kpj
/Wg9XOyCTrF6S1tBXyl8/qTuV7taFphMd5mdYvCC3qMpdEUvPXG/Q4mWpVXG7okv
m1j62KVsqZ9WpBs6CnjsaylitBV6oxNGtjt2vwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNSfj3rDT6Jgd9RICFduPEoKZ0LIMB8GA1UdIwQYMBaAFIZWaXKATb3tFH/z
oDjCtpWtwshrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzVlZjg2
MTI0YTM4ZjNmYzQ2ZTg1ZTUxZTAxNDExZGIzN2ZkYjIwNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTkxYzAxZmUtNWUwMi00MjgwLWIyYzMtZTNiZTFm
MjBjMDZkLzhiMDJiNGNjYjY2MTNlY2ZiYzNiOThlZTAzYTI0MjA2ZGFmNDk1NjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOTFjMDFmZS01ZTAyLTQyODAtYjJjMy1lM2Jl
MWYyMGMwNmQvYzVlZjg2MTI0YTM4ZjNmYzQ2ZTg1ZTUxZTAxNDExZGIzN2ZkYjIw
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL1VKDANBgkqhkiG9w0BAQsFAAOCAQEAR3kRUgrHU5lN0IHZ
TvTtf9Gu+bZFD3mCasOnHCmRcSKZhcnqMAz1iNuMDXNP65eMZpXP5Nwz/UV/Xt14
yj8jZ+2URFuOUcIyYvuFs1EO2dyvoOYPlMyrIYnww+efeWJ2ly8J4n3lg7WMH+Dn
fpuJTy31EhGHybFGisxe2SPaBHhipFWSaXDJD6uePr4lSwiLf/eEoFqhoT3l3PVu
vSSS1OH2a/t0QDdBLe3OJX+aIyrCBX/ll0v4PoBhxt0KcMKpnpsdBYAmebUQHWhw
BJ+u9lzEm1aYUmhU0fuHzjA5f+a3ohrl1m8ETu/tf8rD1wHfe+VM3pMMdzuF4fNz
ySXD1g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org