Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/71944b440101caf95b5cc7779b6644a6e27a9057.roa
File:                     71944b440101caf95b5cc7779b6644a6e27a9057.roa (raw, json)
Hash identifier:          hXfnVZdp0bomFalMEd5aObAKEracHDKZHu1y70e18ko=
Subject key identifier:   2D:03:71:FA:BE:3C:A0:21:EB:03:27:F1:60:82:DA:CA:BD:8B:10:F0
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0C8E58
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/71944b440101caf95b5cc7779b6644a6e27a9057.roa
Signing time:             Fri 13 Aug 2021 18:48:44 +0000
ROA not before:           Fri 13 Aug 2021 03:00:00 +0000
ROA not after:            Sun 13 Aug 2023 03:00:00 +0000
asID:                     269261
IP address blocks:        191.96.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822872 (0xc8e58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Aug 13 03:00:00 2021 GMT
            Not After : Aug 13 03:00:00 2023 GMT
        Subject: CN=71944b440101caf95b5cc7779b6644a6e27a9057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d4:7b:bc:41:82:91:14:81:dc:f6:3a:a0:f2:
                    ec:61:cf:26:8f:d3:99:e1:86:5a:c7:25:40:46:45:
                    41:31:2e:17:cf:cd:fb:78:f4:19:b2:0c:0e:5a:e3:
                    95:4d:a3:3d:a0:21:cf:54:50:70:c2:73:8f:28:81:
                    25:a3:21:cf:88:8e:f0:fd:9b:dd:bc:b6:7e:f2:98:
                    64:6f:2d:d1:89:bd:bf:72:72:bd:85:7e:0b:cf:93:
                    6b:3c:1f:b4:0b:70:c7:63:23:a5:31:9d:5b:d4:6e:
                    28:f6:aa:94:42:b7:61:21:0a:eb:1e:42:ff:45:8e:
                    00:86:e3:98:30:6e:2a:f9:e5:34:e9:5d:d6:10:f7:
                    b9:eb:97:75:24:00:cd:95:cb:f4:7d:1a:1b:c2:b7:
                    ed:2c:01:6d:0a:95:e1:14:e8:41:18:d8:70:f8:64:
                    9d:6f:1c:f8:3a:a8:ad:78:96:95:ae:5f:68:79:bf:
                    61:73:29:bd:24:58:c3:0b:f0:8f:7f:61:8b:1f:0d:
                    2c:09:3c:0d:89:e3:a9:93:97:83:0a:47:d9:0a:1d:
                    65:35:41:b0:02:4c:1d:72:30:89:71:73:0d:91:75:
                    e0:80:f2:ce:77:16:b9:1b:70:cf:39:e2:e9:9b:0a:
                    ec:7a:22:24:3e:7c:fb:9b:75:42:73:4b:da:59:76:
                    0b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:03:71:FA:BE:3C:A0:21:EB:03:27:F1:60:82:DA:CA:BD:8B:10:F0
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/71944b440101caf95b5cc7779b6644a6e27a9057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:07:45:76:a9:20:e8:ec:5e:10:6c:bf:64:fd:c4:42:96:d2:
         ed:89:69:8a:0c:f8:a4:55:0f:16:e4:9c:ef:4e:bf:87:2f:6d:
         5d:08:d0:44:61:e3:47:c1:00:43:c4:93:e7:87:cc:87:d2:b9:
         6e:8b:f8:7c:9b:b4:b6:de:d5:e9:3b:17:63:8d:16:13:24:44:
         88:39:a9:75:ff:71:c8:02:ed:77:40:90:e1:e8:b2:2f:8d:c7:
         ae:04:09:d0:92:92:61:c6:e2:48:7d:27:3a:f2:01:e8:a2:1c:
         dd:14:7d:34:d5:2b:35:93:88:4d:ce:c6:c5:b1:30:29:3b:fd:
         33:ca:cb:2e:84:9d:4f:e3:67:23:22:ac:92:36:5a:27:d5:5b:
         ab:4d:ef:18:96:e0:e3:90:02:3e:bb:22:ad:63:1e:8d:4d:74:
         f3:72:53:53:87:31:ec:64:0a:9e:ef:54:ff:6b:90:a0:70:b9:
         b2:49:db:40:89:62:d0:38:af:58:22:7e:83:f7:19:a8:ee:c2:
         f1:d0:e9:0d:52:d4:41:60:2e:3c:0f:6e:5d:8c:f1:b6:1a:84:
         45:79:d3:60:48:cc:85:86:09:df:16:05:91:6b:99:e3:59:92:
         3b:75:da:08:19:b5:be:55:58:c0:df:47:50:10:ed:cf:db:1c:
         8e:97:68:46
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDI5YMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwODEz
MDMwMDAwWhcNMjMwODEzMDMwMDAwWjAzMTEwLwYDVQQDEyg3MTk0NGI0NDAxMDFj
YWY5NWI1Y2M3Nzc5YjY2NDRhNmUyN2E5MDU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhdR7vEGCkRSB3PY6oPLsYc8mj9OZ4YZaxyVARkVBMS4Xz837
ePQZsgwOWuOVTaM9oCHPVFBwwnOPKIEloyHPiI7w/ZvdvLZ+8phkby3Rib2/cnK9
hX4Lz5NrPB+0C3DHYyOlMZ1b1G4o9qqUQrdhIQrrHkL/RY4AhuOYMG4q+eU06V3W
EPe565d1JADNlcv0fRobwrftLAFtCpXhFOhBGNhw+GSdbxz4OqiteJaVrl9oeb9h
cym9JFjDC/CPf2GLHw0sCTwNieOpk5eDCkfZCh1lNUGwAkwdcjCJcXMNkXXggPLO
dxa5G3DPOeLpmwrseiIkPnz7m3VCc0vaWXYL/wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC0Dcfq+PKAh6wMn8WCC2sq9ixDwMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzcxOTQ0YjQ0MDEwMWNhZjk1YjVjYzc3NzliNjY0NGE2ZTI3YTkwNTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL9gYjANBgkqhkiG9w0BAQsFAAOCAQEAZwdFdqkg6OxeEGy/
ZP3EQpbS7Ylpigz4pFUPFuSc706/hy9tXQjQRGHjR8EAQ8ST54fMh9K5bov4fJu0
tt7V6TsXY40WEyREiDmpdf9xyALtd0CQ4eiyL43HrgQJ0JKSYcbiSH0nOvIB6KIc
3RR9NNUrNZOITc7GxbEwKTv9M8rLLoSdT+NnIyKskjZaJ9Vbq03vGJbg45ACPrsi
rWMejU1083JTU4cx7GQKnu9U/2uQoHC5sknbQIli0DivWCJ+g/cZqO7C8dDpDVLU
QWAuPA9uXYzxthqERXnTYEjMhYYJ3xYFkWuZ41mSO3XaCBm1vlVYwN9HUBDtz9sc
jpdoRg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org