Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/8a92623b6e96a05729dfab7405d8a401178bff90.roa
File:                     8a92623b6e96a05729dfab7405d8a401178bff90.roa (raw, json)
Hash identifier:          UPX0JAgRTfwbIc4hX4ND6aYoRCjvsHInpJbhzjdlJ1M=
Subject key identifier:   B9:8D:14:A0:BB:25:4A:B7:A3:2D:8D:27:B8:19:3D:46:21:73:5E:61
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       2246F9
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/8a92623b6e96a05729dfab7405d8a401178bff90.roa
Signing time:             Tue 25 Apr 2023 15:05:37 +0000
ROA not before:           Mon 24 Apr 2023 15:04:37 +0000
ROA not after:            Fri 25 Apr 2025 15:04:37 +0000
asID:                     28018
IP address blocks:        201.218.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2246393 (0x2246f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 24 15:04:37 2023 GMT
            Not After : Apr 25 15:04:37 2025 GMT
        Subject: CN=8a92623b6e96a05729dfab7405d8a401178bff90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:77:37:14:5f:98:67:3b:4e:dd:3b:1c:2b:40:
                    b9:6b:0a:7a:b5:8e:d5:aa:95:e1:40:2b:9b:6d:4b:
                    36:1f:14:2f:02:40:fb:4d:f9:37:bb:b5:7f:cc:5f:
                    92:73:dc:f8:5e:ac:4b:e5:61:0d:ff:92:f8:53:81:
                    c0:5c:fe:eb:e8:50:16:81:12:00:b1:22:eb:73:c3:
                    15:0b:43:31:37:29:a3:fc:47:00:79:1e:ab:49:49:
                    d0:4d:61:72:c8:29:7a:9c:0a:1a:68:1b:e3:a5:73:
                    3a:99:61:cb:a3:f4:10:e8:32:4e:d4:ad:35:1a:d0:
                    85:84:dc:2a:d8:35:49:6b:7f:e0:96:b0:18:eb:90:
                    5e:d6:04:de:9e:6d:71:e9:96:29:40:da:be:fd:81:
                    fc:77:ab:40:17:f9:a7:95:83:42:0e:90:b0:f1:9f:
                    ac:64:34:da:dd:34:b6:a6:01:37:2b:76:0d:d2:45:
                    30:31:23:cf:b0:43:ad:96:7f:1e:f0:bb:4e:8e:35:
                    97:d2:72:57:7a:ff:5c:36:19:9a:b4:65:0d:75:d5:
                    76:6e:d1:5b:7e:59:0b:98:f2:81:f3:a6:6a:31:52:
                    2a:e0:a7:e8:d0:f4:59:66:40:e1:ed:2f:9d:31:cf:
                    13:a4:c5:84:34:70:59:67:2f:05:5c:99:e8:c5:44:
                    e6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8D:14:A0:BB:25:4A:B7:A3:2D:8D:27:B8:19:3D:46:21:73:5E:61
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/8a92623b6e96a05729dfab7405d8a401178bff90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:0f:e3:13:90:c2:dd:1a:31:d0:44:4e:89:ec:7c:d7:2a:a2:
         b0:47:fb:19:2a:e0:35:61:9b:89:ee:50:ae:73:90:09:cc:06:
         b8:4d:62:73:a8:3b:4f:91:f5:97:03:00:a5:7c:e9:a5:c0:3c:
         99:b4:b5:ac:49:f4:2e:ba:5d:59:b1:13:0f:3e:b7:f4:8f:8e:
         89:89:07:aa:b5:3a:a1:84:83:c9:9b:3b:10:c7:1a:e2:2d:6e:
         66:a4:da:31:a1:66:89:a3:8f:a8:a2:ae:ce:d7:ad:e6:bb:85:
         99:1c:33:22:f3:84:05:9b:7f:79:4b:24:2e:1f:8a:bb:cb:a6:
         8c:bc:b3:3e:fa:47:37:11:7b:ad:78:1e:b3:b2:12:c4:74:dc:
         a1:e2:72:ef:2b:f9:4d:b9:56:e9:c9:41:5e:97:37:be:f9:b8:
         03:d7:d5:26:6c:3f:60:26:50:25:cf:fd:36:66:4e:46:69:ef:
         9c:47:81:fa:13:f6:c9:7d:b0:3d:e4:cc:a8:59:11:ca:f6:9f:
         9b:6e:7d:33:6a:cb:f6:ea:ff:da:33:75:e5:f4:63:7b:06:68:
         e8:f0:45:2e:88:5c:04:11:37:10:7e:7a:1f:f6:d5:81:0b:4b:
         56:1d:2f:85:c2:4c:93:05:52:a9:df:25:46:1e:b5:4e:e9:72:
         89:53:e1:24
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIkb5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
NWRhMzA0MzM0ZmIzNjIwNGEzNzBlOTUwNDg3Njg5ZTgxMWEyYzgwHhcNMjMwNDI0
MTUwNDM3WhcNMjUwNDI1MTUwNDM3WjAzMTEwLwYDVQQDEyg4YTkyNjIzYjZlOTZh
MDU3MjlkZmFiNzQwNWQ4YTQwMTE3OGJmZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgnc3FF+YZztO3TscK0C5awp6tY7VqpXhQCubbUs2HxQvAkD7
Tfk3u7V/zF+Sc9z4XqxL5WEN/5L4U4HAXP7r6FAWgRIAsSLrc8MVC0MxNymj/EcA
eR6rSUnQTWFyyCl6nAoaaBvjpXM6mWHLo/QQ6DJO1K01GtCFhNwq2DVJa3/glrAY
65Be1gTenm1x6ZYpQNq+/YH8d6tAF/mnlYNCDpCw8Z+sZDTa3TS2pgE3K3YN0kUw
MSPPsEOtln8e8LtOjjWX0nJXev9cNhmatGUNddV2btFbflkLmPKB86ZqMVIq4Kfo
0PRZZkDh7S+dMc8TpMWENHBZZy8FXJnoxUTmIwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLmNFKC7JUq3oy2NJ7gZPUYhc15hMB8GA1UdIwQYMBaAFJWonEF2ARCODpgC
PQcm9Ep8UQ9LMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDg1ZGEz
MDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJjOC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWNjNTQ4ZmYtOGYwYy00ZTc1LTgxMjUtNWUwOTVm
YmYyNGMwLzhhOTI2MjNiNmU5NmEwNTcyOWRmYWI3NDA1ZDhhNDAxMTc4YmZmOTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xY2M1NDhmZi04ZjBjLTRlNzUtODEyNS01ZTA5
NWZiZjI0YzAvZDg1ZGEzMDQzMzRmYjM2MjA0YTM3MGU5NTA0ODc2ODllODExYTJj
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMna4DANBgkqhkiG9w0BAQsFAAOCAQEATQ/jE5DC3Rox0ERO
iex81yqisEf7GSrgNWGbie5QrnOQCcwGuE1ic6g7T5H1lwMApXzppcA8mbS1rEn0
LrpdWbETDz639I+OiYkHqrU6oYSDyZs7EMca4i1uZqTaMaFmiaOPqKKuztet5ruF
mRwzIvOEBZt/eUskLh+Ku8umjLyzPvpHNxF7rXges7ISxHTcoeJy7yv5TblW6clB
Xpc3vvm4A9fVJmw/YCZQJc/9NmZORmnvnEeB+hP2yX2wPeTMqFkRyvafm259M2rL
9ur/2jN15fRjewZo6PBFLohcBBE3EH56H/bVgQtLVh0vhcJMkwVSqd8lRh61Tuly
iVPhJA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org