Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/92eeddfbb7ca90175bad5132620c3cb1447d8b92.roa
File:                     92eeddfbb7ca90175bad5132620c3cb1447d8b92.roa (raw, json)
Hash identifier:          5yXb3CAySs5+fJTPn4zFLmV/6NR7Xim5NeGZSH3x+Jk=
Subject key identifier:   C4:4D:8D:C0:6D:D8:61:28:87:D3:77:F1:25:7D:E1:0C:0D:BD:05:57
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       12F8E1
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/92eeddfbb7ca90175bad5132620c3cb1447d8b92.roa
Signing time:             Mon 27 Dec 2021 09:53:39 +0000
ROA not before:           Mon 27 Dec 2021 03:00:00 +0000
ROA not after:            Wed 27 Dec 2023 03:00:00 +0000
asID:                     140812
IP address blocks:        191.101.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1243361 (0x12f8e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Dec 27 03:00:00 2021 GMT
            Not After : Dec 27 03:00:00 2023 GMT
        Subject: CN=92eeddfbb7ca90175bad5132620c3cb1447d8b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:66:e3:0a:55:f3:6e:a3:c6:20:f3:a7:b4:78:
                    71:77:a3:71:20:1b:19:6f:35:ed:24:2a:cd:64:b2:
                    6c:47:94:6c:2a:58:1d:44:c1:d6:54:f8:40:2c:d6:
                    ec:92:39:67:ee:4c:b2:6e:66:15:74:e1:e5:65:d9:
                    36:94:9b:0d:46:33:0b:78:98:d9:57:e3:a9:04:87:
                    b6:f6:cb:36:2b:25:a8:80:74:16:6e:0f:14:9b:3d:
                    3c:96:00:e3:86:9e:30:55:a0:f8:81:11:0d:5e:9a:
                    ea:28:b7:7e:d3:97:38:8d:45:e6:ff:28:f4:51:35:
                    4b:1b:93:68:47:ff:3b:9b:d6:d4:c1:aa:dc:a0:2f:
                    28:31:ba:47:ac:04:a3:04:6a:f2:e9:28:ac:ae:08:
                    d7:28:ca:37:bf:3e:a9:c5:51:2e:a6:49:9f:5b:61:
                    52:1c:68:11:49:d5:97:d4:a6:2d:72:f8:4b:17:4e:
                    48:d4:d8:f0:b8:15:cd:af:06:38:b3:a3:24:1e:5f:
                    aa:2c:65:11:ed:16:8b:8e:1b:a2:35:09:85:16:9d:
                    76:c7:3f:9c:fb:9d:f7:d8:6e:e0:04:a3:bc:41:de:
                    d2:38:75:e6:87:49:1d:68:b6:26:33:9d:5d:33:eb:
                    5e:4e:34:d3:37:2f:89:7f:ca:ff:6e:be:da:8f:3f:
                    dd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4D:8D:C0:6D:D8:61:28:87:D3:77:F1:25:7D:E1:0C:0D:BD:05:57
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/92eeddfbb7ca90175bad5132620c3cb1447d8b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:1d:42:9f:3e:cc:49:ef:89:77:a9:25:ee:6c:92:bd:a1:62:
         c7:95:80:eb:03:31:58:14:8e:f9:fc:a7:68:b9:94:e9:b1:e5:
         d3:95:79:4b:ec:55:ba:2e:3f:c8:cf:0f:ef:f1:be:17:dd:ab:
         dd:29:33:21:90:aa:26:8b:3e:a0:3e:e1:55:29:dc:03:05:30:
         50:9e:9a:1a:57:cf:f9:f1:3f:99:0c:42:42:b1:06:3d:50:b2:
         be:0d:00:3d:a5:bb:20:62:76:78:9c:ba:51:5f:8f:01:b0:a9:
         1d:07:af:54:df:c9:7f:8a:c7:f4:71:7d:85:b8:13:17:a4:7d:
         52:d1:54:5a:1b:e3:c2:24:9a:36:45:ed:f2:43:3a:09:f4:32:
         b5:42:37:14:8a:be:d0:b5:82:46:14:13:da:1c:74:03:a0:ff:
         6b:98:d4:17:ae:21:21:1c:35:7f:c1:cd:9d:26:b1:a6:53:06:
         80:ae:e1:8f:dc:20:f6:32:54:09:a7:00:70:09:c7:0a:77:29:
         e4:50:9e:86:32:20:74:55:e6:b7:ce:e9:71:a2:87:ce:35:fb:
         b0:0d:e1:9a:a3:c2:53:d7:ea:d5:bb:a0:28:cd:58:98:cb:be:
         aa:85:42:61:5e:5d:fd:37:1a:9f:ec:0d:d8:b7:32:fd:be:09:
         b6:2e:a0:85
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEvjhMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjExMjI3
MDMwMDAwWhcNMjMxMjI3MDMwMDAwWjAzMTEwLwYDVQQDEyg5MmVlZGRmYmI3Y2E5
MDE3NWJhZDUxMzI2MjBjM2NiMTQ0N2Q4YjkyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgWbjClXzbqPGIPOntHhxd6NxIBsZbzXtJCrNZLJsR5RsKlgd
RMHWVPhALNbskjln7kyybmYVdOHlZdk2lJsNRjMLeJjZV+OpBIe29ss2KyWogHQW
bg8Umz08lgDjhp4wVaD4gRENXprqKLd+05c4jUXm/yj0UTVLG5NoR/87m9bUwarc
oC8oMbpHrASjBGry6SisrgjXKMo3vz6pxVEupkmfW2FSHGgRSdWX1KYtcvhLF05I
1NjwuBXNrwY4s6MkHl+qLGUR7RaLjhuiNQmFFp12xz+c+5332G7gBKO8Qd7SOHXm
h0kdaLYmM51dM+teTjTTNy+Jf8r/br7ajz/dTwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMRNjcBt2GEoh9N38SV94QwNvQVXMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzkyZWVkZGZiYjdjYTkwMTc1YmFkNTEzMjYyMGMzY2IxNDQ3ZDhiOTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL9l/zANBgkqhkiG9w0BAQsFAAOCAQEAWx1Cnz7MSe+Jd6kl
7mySvaFix5WA6wMxWBSO+fynaLmU6bHl05V5S+xVui4/yM8P7/G+F92r3SkzIZCq
Jos+oD7hVSncAwUwUJ6aGlfP+fE/mQxCQrEGPVCyvg0APaW7IGJ2eJy6UV+PAbCp
HQevVN/Jf4rH9HF9hbgTF6R9UtFUWhvjwiSaNkXt8kM6CfQytUI3FIq+0LWCRhQT
2hx0A6D/a5jUF64hIRw1f8HNnSaxplMGgK7hj9wg9jJUCacAcAnHCncp5FCehjIg
dFXmt87pcaKHzjX7sA3hmqPCU9fq1bugKM1YmMu+qoVCYV5d/Tcan+wN2Lcy/b4J
ti6ghQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org