Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/00cc32221234c41fedb3b63e7ef723e1bd3b6ced.roa
File:                     00cc32221234c41fedb3b63e7ef723e1bd3b6ced.roa (raw, json)
Hash identifier:          RS2xzqjhIFFfwvMhArlO860F8pNsikSx3gyEIEuW1Ro=
Subject key identifier:   66:BE:8D:05:89:53:BF:AF:EF:3E:00:BC:7D:CD:72:0B:5D:94:DE:CA
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       1928F6
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/00cc32221234c41fedb3b63e7ef723e1bd3b6ced.roa
Signing time:             Wed 08 Jun 2022 22:44:42 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Sat 08 Jun 2024 03:00:00 +0000
asID:                     52444
IP address blocks:        201.234.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1648886 (0x1928f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Jun  8 03:00:00 2024 GMT
        Subject: CN=00cc32221234c41fedb3b63e7ef723e1bd3b6ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:89:4b:b7:81:06:81:e3:f1:b8:77:ad:74:0e:
                    87:60:cb:ae:d2:f6:3a:4d:be:ff:98:45:8d:b2:60:
                    cc:06:25:c0:33:7d:f3:2e:f6:48:7e:3d:ca:35:25:
                    40:63:c5:ba:4f:96:ff:a5:97:ea:2b:d3:c7:be:c5:
                    ac:8b:b6:b2:75:fe:1d:09:5f:55:49:a7:4f:98:69:
                    d2:0c:74:80:88:31:dc:2d:98:69:3e:16:6d:a6:1e:
                    c3:47:24:0d:5d:20:04:9d:80:22:2a:b1:2c:4b:5e:
                    42:a6:4e:b0:b9:cf:60:4c:03:1e:f8:54:00:a4:bd:
                    cb:5f:14:2d:fa:9c:2f:e3:b5:73:ff:53:40:1c:4a:
                    b8:53:02:c4:2d:53:31:42:33:a7:3b:1e:32:50:e8:
                    8c:2b:1f:7e:16:54:50:e7:b6:83:4b:c0:7b:be:cf:
                    ac:d4:17:7e:be:88:39:5f:6b:90:a3:f2:c0:40:d0:
                    cb:71:2c:1e:1b:9c:fa:fc:c8:a2:bb:d9:5f:24:54:
                    75:fd:dd:75:13:f1:cf:4e:40:7c:1e:89:46:76:9b:
                    9c:39:51:dc:88:a2:b5:0c:10:78:df:44:2c:af:2a:
                    32:d8:cf:5f:61:70:5b:51:a2:65:32:f5:3e:0d:fb:
                    2f:ef:2e:24:b9:2f:ea:a3:ff:f6:17:71:80:1e:04:
                    e3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BE:8D:05:89:53:BF:AF:EF:3E:00:BC:7D:CD:72:0B:5D:94:DE:CA
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/00cc32221234c41fedb3b63e7ef723e1bd3b6ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:fc:dc:52:9b:2f:f6:06:a1:ce:31:7f:f0:9e:76:6e:54:8c:
         58:5a:c4:20:55:1a:74:8a:1c:c1:4b:e4:56:74:7a:4c:43:2f:
         cc:98:ef:85:4f:b9:0f:10:67:d1:c0:81:2d:15:cc:21:2d:4d:
         ea:21:3f:88:18:d9:e9:a0:e3:41:bd:04:5a:5c:d4:42:86:b4:
         92:9f:4f:ea:4f:f8:ac:ac:7b:d0:61:a2:bb:18:7e:af:51:ce:
         55:61:a0:b3:67:aa:82:16:69:61:5c:1c:da:3e:79:0f:84:a6:
         a1:d3:d9:54:e1:26:d8:3c:46:ef:ec:52:44:05:60:ec:f6:c4:
         fc:f2:c2:12:05:94:5c:ef:3d:a4:90:12:d8:5c:ae:ea:fd:c6:
         dd:f9:b2:33:ba:e0:10:83:80:d3:12:ea:4a:92:c8:d8:ad:aa:
         78:43:06:76:32:b8:97:b2:31:a0:ca:cf:03:09:dc:91:46:da:
         16:bb:37:de:d4:3c:20:72:4f:73:99:c2:01:52:bb:3e:9a:52:
         f7:53:7e:b2:28:ef:8c:32:10:86:b1:ba:56:f5:15:a4:0e:fb:
         48:0d:f2:5b:ee:8d:36:07:3d:c8:d9:e4:c3:6b:60:8a:64:ab:
         22:74:ff:d0:ca:69:c1:75:60:b0:94:5c:f3:6d:0d:13:6d:88:
         1a:91:0f:2b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGSj2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc5
N2ZiYzZjZGRhMmYzNjYxYjJhMzM1MDYwY2I4NGQ4MDg3MDY2NTkwHhcNMjIwNjA4
MDMwMDAwWhcNMjQwNjA4MDMwMDAwWjAzMTEwLwYDVQQDEygwMGNjMzIyMjEyMzRj
NDFmZWRiM2I2M2U3ZWY3MjNlMWJkM2I2Y2VkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm4lLt4EGgePxuHetdA6HYMuu0vY6Tb7/mEWNsmDMBiXAM33z
LvZIfj3KNSVAY8W6T5b/pZfqK9PHvsWsi7aydf4dCV9VSadPmGnSDHSAiDHcLZhp
PhZtph7DRyQNXSAEnYAiKrEsS15Cpk6wuc9gTAMe+FQApL3LXxQt+pwv47Vz/1NA
HEq4UwLELVMxQjOnOx4yUOiMKx9+FlRQ57aDS8B7vs+s1Bd+vog5X2uQo/LAQNDL
cSweG5z6/Miiu9lfJFR1/d11E/HPTkB8HolGdpucOVHciKK1DBB430Qsryoy2M9f
YXBbUaJlMvU+Dfsv7y4kuS/qo//2F3GAHgTjZwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGa+jQWJU7+v7z4AvH3NcgtdlN7KMB8GA1UdIwQYMBaAFCtidz8C0hsm2p0G
Y2LQrCl1X2lJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzk3ZmJj
NmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTI3ZTQwOTUtMmY0NS00ZWM5LThmNzUtZTc5OTM4
NWZiYWQwLzAwY2MzMjIyMTIzNGM0MWZlZGIzYjYzZTdlZjcyM2UxYmQzYjZjZWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMjdlNDA5NS0yZjQ1LTRlYzktOGY3NS1lNzk5
Mzg1ZmJhZDAvNzk3ZmJjNmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnqLjANBgkqhkiG9w0BAQsFAAOCAQEAVvzcUpsv9gahzjF/
8J52blSMWFrEIFUadIocwUvkVnR6TEMvzJjvhU+5DxBn0cCBLRXMIS1N6iE/iBjZ
6aDjQb0EWlzUQoa0kp9P6k/4rKx70GGiuxh+r1HOVWGgs2eqghZpYVwc2j55D4Sm
odPZVOEm2DxG7+xSRAVg7PbE/PLCEgWUXO89pJAS2Fyu6v3G3fmyM7rgEIOA0xLq
SpLI2K2qeEMGdjK4l7IxoMrPAwnckUbaFrs33tQ8IHJPc5nCAVK7PppS91N+sijv
jDIQhrG6VvUVpA77SA3yW+6NNgc9yNnkw2tgimSrInT/0MppwXVgsJRc820NE22I
GpEPKw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org