Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/b2e0399111fd6d40156c9ce206fb94401688cfd1.roa
File:                     b2e0399111fd6d40156c9ce206fb94401688cfd1.roa (raw, json)
Hash identifier:          rGGvIMr93DGLRsuRu4zywBS9Rswg1Ivknd0XTNaptdU=
Subject key identifier:   DE:74:1A:CE:41:D0:94:E3:B9:07:3A:A4:C8:D3:4F:27:61:E9:2D:74
Certificate issuer:       /CN=c8a7a1242e172a41c94834befa2ea1e8179abf68
Certificate serial:       129CAC
Authority key identifier: 71:AB:D1:81:99:7C:89:D2:3A:C0:59:67:7A:C9:5C:DD:10:12:39:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8a7a1242e172a41c94834befa2ea1e8179abf68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/b2e0399111fd6d40156c9ce206fb94401688cfd1.roa
Signing time:             Thu 21 Oct 2021 02:51:30 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265787
IP address blocks:        192.141.36.0/24 maxlen: 24
                          192.141.39.0/24 maxlen: 24
                          192.141.37.0/24 maxlen: 24
                          192.141.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1219756 (0x129cac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8a7a1242e172a41c94834befa2ea1e8179abf68
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=b2e0399111fd6d40156c9ce206fb94401688cfd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7a:71:4e:16:41:85:67:ad:49:68:9a:75:09:
                    73:fc:3f:70:27:20:35:47:76:db:19:56:b0:9f:70:
                    4f:77:81:09:41:e7:b4:e9:88:7a:13:71:04:4f:f7:
                    63:5c:34:71:82:ae:8b:d7:46:ae:ee:4f:1d:0c:d9:
                    1e:cb:4d:fc:a7:4c:c1:bd:9b:ba:6e:f9:85:09:a7:
                    e1:b2:9c:35:26:58:ae:18:7d:6c:94:4e:11:05:e1:
                    4e:f5:5c:21:02:74:b3:92:43:d5:e8:df:1c:32:4b:
                    69:ea:7e:bf:70:ab:5d:56:c5:6f:16:dd:cf:2c:48:
                    49:5a:c6:e0:26:f7:25:99:e6:18:48:95:7e:cb:6c:
                    2b:02:44:46:34:58:a5:8b:b2:ad:43:2a:29:ac:f5:
                    76:1d:88:e6:46:70:ba:f0:54:8c:a7:ed:34:33:3d:
                    4b:19:97:23:a8:58:63:98:cc:52:01:ee:05:a2:a4:
                    8a:c8:98:0f:29:19:fa:c4:dd:ff:f7:20:fd:38:62:
                    ec:bf:d3:a3:ab:d7:3e:37:ad:4d:42:b7:4e:9b:d8:
                    e3:df:a7:c9:36:a2:9b:f8:b8:c6:04:21:b9:62:f0:
                    1f:be:18:49:21:61:2b:bc:eb:53:38:cd:3c:fd:f5:
                    d3:b0:3f:0d:4c:b0:82:bd:b9:99:31:fb:1d:94:3e:
                    2e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:74:1A:CE:41:D0:94:E3:B9:07:3A:A4:C8:D3:4F:27:61:E9:2D:74
            X509v3 Authority Key Identifier:
                keyid:71:AB:D1:81:99:7C:89:D2:3A:C0:59:67:7A:C9:5C:DD:10:12:39:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8a7a1242e172a41c94834befa2ea1e8179abf68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/b2e0399111fd6d40156c9ce206fb94401688cfd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ca0d7d8-e4bf-40ab-9a7e-61f5d254f9c9/c8a7a1242e172a41c94834befa2ea1e8179abf68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:10:2b:07:34:7d:c0:da:d4:df:e1:52:d6:fa:e7:7d:06:77:
         48:cc:6d:97:97:63:96:21:8e:0b:95:3a:ac:20:17:93:9d:ae:
         58:db:8e:bd:1e:dc:59:69:0c:89:c1:39:17:f2:c3:aa:d7:3d:
         be:92:ef:3c:10:09:ab:4b:42:de:e8:66:9e:b1:3f:78:6f:37:
         f3:89:db:27:f3:c5:2d:bf:d6:9c:75:81:90:d2:91:e6:27:8b:
         47:c2:53:bf:1a:fc:eb:c0:d5:d3:a8:89:34:ef:4c:d1:df:db:
         14:6a:23:29:fd:cf:26:14:54:75:b0:df:63:69:e0:80:9a:82:
         db:40:07:32:13:df:05:76:8a:5c:fa:fe:d1:1e:39:e3:b8:1d:
         e6:ea:68:d2:d0:9b:40:00:cc:f0:c4:80:de:aa:8d:e0:75:af:
         d5:e9:01:a3:d8:4d:d9:8a:fc:13:39:79:09:45:01:15:74:dd:
         44:2a:04:01:66:38:6e:da:fa:f2:ea:12:c1:f0:b2:25:65:4e:
         3f:cb:b4:3e:81:ce:a3:7c:dc:c6:2d:16:c5:d6:47:28:30:17:
         98:56:e0:69:62:9b:ec:75:27:2b:c8:f1:bf:4a:8b:42:1b:61:
         c2:39:0b:c4:f2:93:a4:23:1f:ef:23:92:67:8f:74:d2:44:26:
         c6:dc:d6:f2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEpysMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM4
YTdhMTI0MmUxNzJhNDFjOTQ4MzRiZWZhMmVhMWU4MTc5YWJmNjgwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhiMmUwMzk5MTExZmQ2
ZDQwMTU2YzljZTIwNmZiOTQ0MDE2ODhjZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh3pxThZBhWetSWiadQlz/D9wJyA1R3bbGVawn3BPd4EJQee0
6Yh6E3EET/djXDRxgq6L10au7k8dDNkey038p0zBvZu6bvmFCafhspw1JliuGH1s
lE4RBeFO9VwhAnSzkkPV6N8cMktp6n6/cKtdVsVvFt3PLEhJWsbgJvclmeYYSJV+
y2wrAkRGNFili7KtQyoprPV2HYjmRnC68FSMp+00Mz1LGZcjqFhjmMxSAe4FoqSK
yJgPKRn6xN3/9yD9OGLsv9Ojq9c+N61NQrdOm9jj36fJNqKb+LjGBCG5YvAfvhhJ
IWErvOtTOM08/fXTsD8NTLCCvbmZMfsdlD4uqQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFN50Gs5B0JTjuQc6pMjTTydh6S10MB8GA1UdIwQYMBaAFHGr0YGZfInSOsBZ
Z3rJXN0QEjl2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzhhN2Ex
MjQyZTE3MmE0MWM5NDgzNGJlZmEyZWExZTgxNzlhYmY2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGNhMGQ3ZDgtZTRiZi00MGFiLTlhN2UtNjFmNWQy
NTRmOWM5L2IyZTAzOTkxMTFmZDZkNDAxNTZjOWNlMjA2ZmI5NDQwMTY4OGNmZDEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wY2EwZDdkOC1lNGJmLTQwYWItOWE3ZS02MWY1
ZDI1NGY5YzkvYzhhN2ExMjQyZTE3MmE0MWM5NDgzNGJlZmEyZWExZTgxNzlhYmY2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsCNJDANBgkqhkiG9w0BAQsFAAOCAQEALRArBzR9wNrU3+FS
1vrnfQZ3SMxtl5djliGOC5U6rCAXk52uWNuOvR7cWWkMicE5F/LDqtc9vpLvPBAJ
q0tC3uhmnrE/eG8384nbJ/PFLb/WnHWBkNKR5ieLR8JTvxr868DV06iJNO9M0d/b
FGojKf3PJhRUdbDfY2nggJqC20AHMhPfBXaKXPr+0R4547gd5upo0tCbQADM8MSA
3qqN4HWv1ekBo9hN2Yr8Ezl5CUUBFXTdRCoEAWY4btr68uoSwfCyJWVOP8u0PoHO
o3zcxi0WxdZHKDAXmFbgaWKb7HUnK8jxv0qLQhthwjkLxPKTpCMf7yOSZ4900kQm
xtzW8g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org