Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/a9904fc65eac2e4e943a7118dd990d0b6c55f283.roa
File:                     a9904fc65eac2e4e943a7118dd990d0b6c55f283.roa (raw, json)
Hash identifier:          LrS2WmK2USNvRbFMw4lxyoL3ispvfjNBvQDAuTpw4nE=
Subject key identifier:   1A:B4:03:10:3F:B6:3F:84:F5:16:3F:A0:6A:09:EB:E5:4D:E7:1E:1C
Certificate issuer:       /CN=82541385988cb3666d0f41117745c9d3b4df8827
Certificate serial:       05DA94
Authority key identifier: D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/a9904fc65eac2e4e943a7118dd990d0b6c55f283.roa
Signing time:             Thu 30 Nov 2023 06:34:08 +0000
ROA not before:           Thu 30 Nov 2023 06:34:08 +0000
ROA not after:            Sun 30 Nov 2025 06:34:08 +0000
asID:                     272928
IP address blocks:        201.158.96.0/23 maxlen: 23
                          201.158.96.0/24 maxlen: 24
                          201.158.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383636 (0x5da94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82541385988cb3666d0f41117745c9d3b4df8827
        Validity
            Not Before: Nov 30 06:34:08 2023 GMT
            Not After : Nov 30 06:34:08 2025 GMT
        Subject: CN=a9904fc65eac2e4e943a7118dd990d0b6c55f283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ed:73:e7:71:44:fd:24:25:3e:e5:7e:19:e0:
                    97:39:28:b9:8a:a0:e8:08:37:20:2c:6f:d1:25:ce:
                    e9:89:eb:5a:46:34:94:03:21:67:93:f7:5f:4f:71:
                    c9:b9:c3:62:e6:1a:f6:6f:47:c1:e3:4c:e7:11:f0:
                    62:92:d8:7c:b2:93:b5:97:bb:a4:d1:68:94:77:e3:
                    59:cd:66:8e:5e:71:e6:1a:f2:d4:08:d2:ca:6d:c9:
                    a3:6c:e9:63:e3:6e:aa:b7:4b:98:3f:2a:e5:a0:b4:
                    a0:22:47:ab:50:c7:28:a6:6c:45:f5:8c:57:1c:24:
                    13:a7:6f:b1:fc:d8:41:cc:97:fa:0f:11:0a:d3:24:
                    0c:30:e7:7d:b2:1e:b4:f2:a3:67:18:79:a0:20:c9:
                    78:f4:bb:34:f6:a6:ea:91:7e:23:f0:b6:0e:e7:02:
                    ed:27:b9:5f:55:01:72:ce:50:9d:7b:26:66:ec:fb:
                    a6:74:3e:f6:54:ac:14:db:66:70:68:da:4a:9d:58:
                    d1:36:a2:4e:c5:c1:5d:bc:27:44:4f:b4:ab:09:92:
                    98:12:f5:bd:1f:b6:41:c7:eb:ec:77:d7:4a:b0:32:
                    d0:b4:6e:70:17:32:a1:0c:b3:78:d9:44:dc:3f:24:
                    26:a8:99:cc:39:ca:05:e3:9d:ed:2c:3c:6c:fa:52:
                    b1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B4:03:10:3F:B6:3F:84:F5:16:3F:A0:6A:09:EB:E5:4D:E7:1E:1C
            X509v3 Authority Key Identifier:
                keyid:D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/a9904fc65eac2e4e943a7118dd990d0b6c55f283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/82541385988cb3666d0f41117745c9d3b4df8827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:bc:b4:99:7d:61:02:7e:67:ea:01:6f:f3:29:f2:52:b8:df:
         19:ee:5d:d7:ec:31:e7:8c:13:e3:56:11:d0:4e:39:45:10:1b:
         98:8f:97:35:8b:f2:0c:6f:a9:59:06:05:0f:4d:27:bb:bd:fd:
         65:1d:71:c7:55:ad:c9:04:ad:23:6d:fe:da:79:d6:30:8b:12:
         48:94:b8:3c:31:03:57:7b:2f:48:b5:ae:dc:ed:7d:7e:d9:28:
         c2:cb:4b:88:6d:53:cf:93:a5:98:ed:ed:ae:ec:91:c8:d1:2b:
         67:86:40:b9:ab:77:37:98:e8:9f:22:36:c2:97:3a:5c:b3:76:
         74:d5:d8:b8:64:31:51:54:11:b0:dc:7e:2a:13:ae:b4:86:0c:
         6c:5f:8e:39:a3:b4:08:bc:b3:92:3d:0c:75:58:37:1d:68:32:
         b7:2f:95:fd:58:17:82:1c:5a:7b:5d:90:a7:e2:f3:19:9f:43:
         af:4b:f8:fa:aa:40:73:26:26:48:db:76:18:6d:6b:01:6f:65:
         79:e8:7d:ef:7b:f7:3f:72:5f:57:57:01:8f:7d:4f:09:8c:30:
         54:98:cf:24:fc:f8:b2:17:71:f3:ef:bf:e1:c5:1a:07:e5:69:
         1a:00:dd:5e:fa:ed:58:3d:9c:6a:fe:18:09:b9:e1:a9:19:04:
         e5:c3:ba:8b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBdqUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgy
NTQxMzg1OTg4Y2IzNjY2ZDBmNDExMTc3NDVjOWQzYjRkZjg4MjcwHhcNMjMxMTMw
MDYzNDA4WhcNMjUxMTMwMDYzNDA4WjAzMTEwLwYDVQQDEyhhOTkwNGZjNjVlYWMy
ZTRlOTQzYTcxMThkZDk5MGQwYjZjNTVmMjgzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAme1z53FE/SQlPuV+GeCXOSi5iqDoCDcgLG/RJc7pietaRjSU
AyFnk/dfT3HJucNi5hr2b0fB40znEfBikth8spO1l7uk0WiUd+NZzWaOXnHmGvLU
CNLKbcmjbOlj426qt0uYPyrloLSgIkerUMcopmxF9YxXHCQTp2+x/NhBzJf6DxEK
0yQMMOd9sh608qNnGHmgIMl49Ls09qbqkX4j8LYO5wLtJ7lfVQFyzlCdeyZm7Pum
dD72VKwU22ZwaNpKnVjRNqJOxcFdvCdET7SrCZKYEvW9H7ZBx+vsd9dKsDLQtG5w
FzKhDLN42UTcPyQmqJnMOcoF453tLDxs+lKxOwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBq0AxA/tj+E9RY/oGoJ6+VN5x4cMB8GA1UdIwQYMBaAFNEbJML7ZZQgMgZO
AuWCSpVxvCEGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODI1NDEz
ODU5ODhjYjM2NjZkMGY0MTExNzc0NWM5ZDNiNGRmODgyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzdkMGYwZDUtOTFkZi00YmE2LWJjZWItMGE4YjU4
Njc1MGYxL2E5OTA0ZmM2NWVhYzJlNGU5NDNhNzExOGRkOTkwZDBiNmM1NWYyODMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zN2QwZjBkNS05MWRmLTRiYTYtYmNlYi0wYThi
NTg2NzUwZjEvODI1NDEzODU5ODhjYjM2NjZkMGY0MTExNzc0NWM5ZDNiNGRmODgy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcmeYDANBgkqhkiG9w0BAQsFAAOCAQEAoby0mX1hAn5n6gFv
8ynyUrjfGe5d1+wx54wT41YR0E45RRAbmI+XNYvyDG+pWQYFD00nu739ZR1xx1Wt
yQStI23+2nnWMIsSSJS4PDEDV3svSLWu3O19ftkowstLiG1Tz5OlmO3truyRyNEr
Z4ZAuat3N5jonyI2wpc6XLN2dNXYuGQxUVQRsNx+KhOutIYMbF+OOaO0CLyzkj0M
dVg3HWgyty+V/VgXghxae12Qp+LzGZ9Dr0v4+qpAcyYmSNt2GG1rAW9leeh973v3
P3JfV1cBj31PCYwwVJjPJPz4shdx8++/4cUaB+VpGgDdXvrtWD2cav4YCbnhqRkE
5cO6iw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org