Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ef82ea6-b3a1-4f65-9ef8-c46fc25f2bdc/847d8985a94da24000e7f545833a118bf59d7981.roa
File:                     847d8985a94da24000e7f545833a118bf59d7981.roa (raw, json)
Hash identifier:          VrSPjWnzup1xD1QrR3zyxMLiu0hhViLFxjna0P3gixU=
Subject key identifier:   12:39:73:73:F9:BD:47:CA:5A:4F:9A:6E:0F:45:28:12:2C:04:FC:0A
Certificate issuer:       /CN=58b580d0e5624b31efa4873d0e346d9c524d1450
Certificate serial:       02BCE6
Authority key identifier: 2B:4A:BC:3A:92:3F:99:F9:F8:77:05:E2:05:3C:4E:19:9C:BA:E3:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58b580d0e5624b31efa4873d0e346d9c524d1450.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ef82ea6-b3a1-4f65-9ef8-c46fc25f2bdc/847d8985a94da24000e7f545833a118bf59d7981.roa
Signing time:             Thu 14 Sep 2023 16:23:06 +0000
ROA not before:           Wed 13 Sep 2023 16:23:05 +0000
ROA not after:            Sun 14 Sep 2025 16:23:05 +0000
asID:                     265627
IP address blocks:        201.77.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179430 (0x2bce6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b580d0e5624b31efa4873d0e346d9c524d1450
        Validity
            Not Before: Sep 13 16:23:05 2023 GMT
            Not After : Sep 14 16:23:05 2025 GMT
        Subject: CN=847d8985a94da24000e7f545833a118bf59d7981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f0:0f:31:57:a0:5a:71:15:ba:a1:a8:ef:ea:
                    9b:11:d8:ec:4d:d4:a5:df:75:fe:d1:57:0c:96:fd:
                    1e:97:c4:8a:4d:e3:61:29:9d:4f:46:9b:24:2e:6c:
                    1a:49:20:75:5b:12:ea:c8:fe:ba:17:ec:96:48:d3:
                    20:69:8a:e6:94:26:e4:8a:35:34:d9:83:11:ae:05:
                    92:d6:24:ec:69:f5:62:4a:0d:13:0b:98:e0:4b:70:
                    ac:17:fc:92:12:10:a8:83:59:fc:a7:87:b2:6b:b4:
                    6f:28:60:b3:04:53:ea:4e:fd:47:10:fe:d5:77:f9:
                    49:46:8f:99:c3:f4:af:95:5c:73:87:0a:11:39:0e:
                    21:62:93:f9:b2:e6:ba:d9:c7:1b:41:4f:9b:f0:a7:
                    6d:c4:cb:ae:82:15:9b:ea:ff:63:90:77:fc:5f:4f:
                    54:b7:f7:a0:85:3b:74:fd:a1:ff:1f:81:16:55:ec:
                    39:31:7e:9b:02:7f:e7:27:2a:93:ef:b9:6e:22:53:
                    be:5d:ec:fe:90:eb:c6:7b:79:1c:7a:d4:53:53:ac:
                    f4:5d:3a:27:2e:af:b4:d2:01:39:dc:37:fb:e7:ee:
                    4a:5e:2e:3a:ce:8f:72:21:85:eb:69:cb:1d:1c:b4:
                    2c:e5:5d:01:c9:90:a4:a9:af:e9:44:aa:b9:29:fd:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:39:73:73:F9:BD:47:CA:5A:4F:9A:6E:0F:45:28:12:2C:04:FC:0A
            X509v3 Authority Key Identifier:
                keyid:2B:4A:BC:3A:92:3F:99:F9:F8:77:05:E2:05:3C:4E:19:9C:BA:E3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58b580d0e5624b31efa4873d0e346d9c524d1450.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ef82ea6-b3a1-4f65-9ef8-c46fc25f2bdc/847d8985a94da24000e7f545833a118bf59d7981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ef82ea6-b3a1-4f65-9ef8-c46fc25f2bdc/58b580d0e5624b31efa4873d0e346d9c524d1450.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:a0:cd:bb:6d:55:54:d7:cb:24:53:04:c5:b0:ba:51:b8:9c:
         e2:b6:02:02:58:61:16:a9:e7:7f:d2:33:89:cd:a2:0f:b2:14:
         f9:97:86:77:cc:cf:45:25:48:c2:75:ff:ec:4b:23:30:6c:a7:
         8f:2d:94:cf:c7:79:f3:27:f2:92:8a:3e:2e:6c:f7:c9:65:f9:
         29:70:ec:18:05:c9:fc:aa:a3:91:19:b9:1c:17:24:5c:57:5c:
         35:a0:5b:e7:6a:dc:78:a1:6b:10:2b:19:19:03:11:9b:a0:77:
         43:1e:a6:83:12:31:67:e7:b9:3b:82:4f:20:6a:34:48:9b:03:
         7b:8a:eb:96:2a:ce:9a:b4:2c:92:cc:1c:39:27:39:26:f5:a8:
         3d:bf:47:b9:cc:0b:81:61:04:d3:2d:12:a0:d3:ad:3e:4e:16:
         dd:da:fa:bd:a9:c3:d0:4a:76:76:dc:ab:e1:f4:16:61:0f:87:
         d1:de:ce:2b:3b:0d:5f:c2:de:0e:24:da:bf:e5:40:1d:95:2c:
         74:04:6b:35:db:7c:02:a8:d8:1f:20:7f:df:c0:d8:14:cc:d4:
         ad:a6:65:b6:61:75:d7:8b:69:85:b1:99:5e:7d:4b:53:8b:e1:
         fc:91:52:64:a2:aa:4a:67:09:3c:63:29:c3:94:67:28:ab:39:
         a4:f4:cd:18
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDArzmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU4
YjU4MGQwZTU2MjRiMzFlZmE0ODczZDBlMzQ2ZDljNTI0ZDE0NTAwHhcNMjMwOTEz
MTYyMzA1WhcNMjUwOTE0MTYyMzA1WjAzMTEwLwYDVQQDEyg4NDdkODk4NWE5NGRh
MjQwMDBlN2Y1NDU4MzNhMTE4YmY1OWQ3OTgxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmfAPMVegWnEVuqGo7+qbEdjsTdSl33X+0VcMlv0el8SKTeNh
KZ1PRpskLmwaSSB1WxLqyP66F+yWSNMgaYrmlCbkijU02YMRrgWS1iTsafViSg0T
C5jgS3CsF/ySEhCog1n8p4eya7RvKGCzBFPqTv1HEP7Vd/lJRo+Zw/SvlVxzhwoR
OQ4hYpP5sua62ccbQU+b8KdtxMuughWb6v9jkHf8X09Ut/eghTt0/aH/H4EWVew5
MX6bAn/nJyqT77luIlO+Xez+kOvGe3kcetRTU6z0XTonLq+00gE53Df75+5KXi46
zo9yIYXracsdHLQs5V0ByZCkqa/pRKq5Kf2h0wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBI5c3P5vUfKWk+abg9FKBIsBPwKMB8GA1UdIwQYMBaAFCtKvDqSP5n5+HcF
4gU8ThmcuuMMMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNThiNTgw
ZDBlNTYyNGIzMWVmYTQ4NzNkMGUzNDZkOWM1MjRkMTQ1MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmVmODJlYTYtYjNhMS00ZjY1LTllZjgtYzQ2ZmMy
NWYyYmRjLzg0N2Q4OTg1YTk0ZGEyNDAwMGU3ZjU0NTgzM2ExMThiZjU5ZDc5ODEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZWY4MmVhNi1iM2ExLTRmNjUtOWVmOC1jNDZm
YzI1ZjJiZGMvNThiNTgwZDBlNTYyNGIzMWVmYTQ4NzNkMGUzNDZkOWM1MjRkMTQ1
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAslNbDANBgkqhkiG9w0BAQsFAAOCAQEAdqDNu21VVNfLJFME
xbC6Ubic4rYCAlhhFqnnf9Izic2iD7IU+ZeGd8zPRSVIwnX/7EsjMGynjy2Uz8d5
8yfykoo+Lmz3yWX5KXDsGAXJ/KqjkRm5HBckXFdcNaBb52rceKFrECsZGQMRm6B3
Qx6mgxIxZ+e5O4JPIGo0SJsDe4rrlirOmrQskswcOSc5JvWoPb9HucwLgWEE0y0S
oNOtPk4W3dr6vanD0Ep2dtyr4fQWYQ+H0d7OKzsNX8LeDiTav+VAHZUsdARrNdt8
AqjYHyB/38DYFMzUraZltmF114tphbGZXn1LU4vh/JFSZKKqSmcJPGMpw5RnKKs5
pPTNGA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org