Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1b39a6805df45b7af76682119d2b46333a8c60c7.roa
File:                     1b39a6805df45b7af76682119d2b46333a8c60c7.roa (raw, json)
Hash identifier:          OY885RMsEdlxpChx8S/Cj7MtICAA1ZOEO9hd/fMBN0g=
Subject key identifier:   9D:01:A5:13:17:D3:10:62:93:5D:C9:9A:FB:1D:28:FF:03:4B:E8:FD
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       060867
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1b39a6805df45b7af76682119d2b46333a8c60c7.roa
Signing time:             Wed 24 Mar 2021 14:33:34 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     60721
IP address blocks:        191.101.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395367 (0x60867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=1b39a6805df45b7af76682119d2b46333a8c60c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:6f:57:32:c7:87:ef:ba:93:bb:77:10:57:
                    31:ee:03:99:5f:52:87:ae:52:cf:1e:37:2c:df:cc:
                    cd:f5:83:73:d3:dd:57:41:92:46:52:50:3b:de:a2:
                    9c:b3:9f:73:5f:0c:88:b5:86:69:7b:5f:5d:03:6f:
                    bd:d8:90:1b:d2:b6:95:a0:d3:fc:8a:cf:2c:ee:0f:
                    10:59:0e:08:83:b4:2f:58:a6:61:99:96:ef:b0:fd:
                    71:fc:22:3a:33:80:2c:d8:1a:03:79:71:98:98:44:
                    d0:7d:2d:8f:a1:67:89:fb:7f:b2:ce:db:35:1b:88:
                    8a:58:a4:ef:f1:48:9f:89:96:4f:21:ca:7b:8e:58:
                    39:d1:ce:af:61:b4:3c:47:9f:f6:4b:9b:54:1e:72:
                    92:6f:d9:05:fd:c8:1e:ad:76:bc:ad:0d:05:77:47:
                    0f:9d:ce:e1:6f:81:7c:b3:9b:5e:80:54:30:c2:6b:
                    90:0b:a6:f4:87:7f:94:2a:68:94:2d:15:3c:a5:ec:
                    3a:c2:fa:84:8c:86:eb:fe:7a:6f:bf:7d:30:64:84:
                    d1:14:da:8f:10:ac:c4:67:75:1c:10:b4:d2:52:92:
                    0a:b5:b9:67:71:22:d6:47:fb:77:93:84:f8:39:78:
                    b1:4b:78:1f:b1:e0:0b:5c:3a:cf:bc:1b:55:3a:c0:
                    e1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:01:A5:13:17:D3:10:62:93:5D:C9:9A:FB:1D:28:FF:03:4B:E8:FD
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1b39a6805df45b7af76682119d2b46333a8c60c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:70:96:7c:ae:59:17:44:aa:3d:f7:c9:c6:5c:81:2f:ce:85:
         40:38:5a:46:67:b7:46:05:f6:cc:44:6e:4a:db:1b:c4:dc:50:
         cd:4c:28:e9:a7:4e:97:32:0a:40:a8:6b:54:ed:04:48:be:cd:
         33:f1:94:68:f7:03:cb:dc:f8:8d:03:59:b8:dd:d4:b2:4c:37:
         07:30:7c:bc:42:2a:cf:c0:92:51:92:22:e7:59:7c:92:50:97:
         a3:f7:c9:13:eb:b9:2f:f1:d4:ff:9f:25:c1:a6:57:ec:01:34:
         e9:f6:bd:58:25:9f:c8:28:90:fe:f4:5d:c5:61:b1:dd:d1:98:
         9b:a3:c9:5c:ff:dc:dd:fc:ab:02:34:55:b9:87:68:0a:ad:7a:
         c7:d5:f5:37:bd:bf:ad:a6:a7:8e:d1:8c:10:c5:f4:b6:e0:1a:
         e9:2f:10:e6:9c:76:da:41:51:39:45:7c:84:4b:de:94:ad:7a:
         21:41:fc:5a:66:6e:20:2c:ca:b4:71:4a:1a:3d:79:14:3f:b9:
         5e:43:81:c9:82:48:ed:a0:4d:78:71:6e:2f:f6:f9:53:0d:63:
         9d:78:2f:6a:a5:e8:da:4a:17:e0:fa:84:ba:27:66:e2:95:88:
         e5:1b:59:65:65:98:1c:dd:8a:b9:83:33:45:b2:f3:21:8b:2a:
         1b:0b:33:26
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBghnMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MTQzMzI5WhcNMjYwMzI0MTQzMzI5WjAzMTEwLwYDVQQDEygxYjM5YTY4MDVkZjQ1
YjdhZjc2NjgyMTE5ZDJiNDYzMzNhOGM2MGM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkYJvVzLHh++6k7t3EFcx7gOZX1KHrlLPHjcs38zN9YNz091X
QZJGUlA73qKcs59zXwyItYZpe19dA2+92JAb0raVoNP8is8s7g8QWQ4Ig7QvWKZh
mZbvsP1x/CI6M4As2BoDeXGYmETQfS2PoWeJ+3+yzts1G4iKWKTv8UifiZZPIcp7
jlg50c6vYbQ8R5/2S5tUHnKSb9kF/cgerXa8rQ0Fd0cPnc7hb4F8s5tegFQwwmuQ
C6b0h3+UKmiULRU8pew6wvqEjIbr/npvv30wZITRFNqPEKzEZ3UcELTSUpIKtbln
cSLWR/t3k4T4OXixS3gfseALXDrPvBtVOsDhiQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ0BpRMX0xBik13JmvsdKP8DS+j9MB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzFiMzlhNjgwNWRmNDViN2FmNzY2ODIxMTlkMmI0NjMzM2E4YzYwYzcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL9l/jANBgkqhkiG9w0BAQsFAAOCAQEAa3CWfK5ZF0SqPffJ
xlyBL86FQDhaRme3RgX2zERuStsbxNxQzUwo6adOlzIKQKhrVO0ESL7NM/GUaPcD
y9z4jQNZuN3Uskw3BzB8vEIqz8CSUZIi51l8klCXo/fJE+u5L/HU/58lwaZX7AE0
6fa9WCWfyCiQ/vRdxWGx3dGYm6PJXP/c3fyrAjRVuYdoCq16x9X1N72/raanjtGM
EMX0tuAa6S8Q5px22kFROUV8hEvelK16IUH8WmZuICzKtHFKGj15FD+5XkOByYJI
7aBNeHFuL/b5Uw1jnXgvaqXo2koX4PqEuidm4pWI5RtZZWWYHN2KuYMzRbLzIYsq
GwszJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org