Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/8a80dc8a3c58031ab5ebbe501de280ad8b62e26f.roa
File:                     8a80dc8a3c58031ab5ebbe501de280ad8b62e26f.roa (raw, json)
Hash identifier:          7uMtOvvS3H5UuYxXSJUnsvzLVyV8ZzxetwUtf/e+iIw=
Subject key identifier:   2F:BA:13:0E:16:98:8F:A0:98:C4:A9:3C:AA:E0:9E:E0:F7:B1:2B:B2
Certificate issuer:       /CN=8977e71e589f7dff93910384f64766de5bd105bb
Certificate serial:       9F77
Authority key identifier: 1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/8a80dc8a3c58031ab5ebbe501de280ad8b62e26f.roa
Signing time:             Wed 24 Mar 2021 14:36:24 +0000
ROA not before:           Wed 24 Mar 2021 14:36:24 +0000
ROA not after:            Tue 24 Mar 2026 14:36:24 +0000
asID:                     262929
IP address blocks:        191.102.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40823 (0x9f77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8977e71e589f7dff93910384f64766de5bd105bb
        Validity
            Not Before: Mar 24 14:36:24 2021 GMT
            Not After : Mar 24 14:36:24 2026 GMT
        Subject: CN=8a80dc8a3c58031ab5ebbe501de280ad8b62e26f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7f:83:8b:9c:33:10:8f:e3:25:18:67:9f:fc:
                    00:37:f0:45:6f:7c:9c:28:70:fc:57:e6:da:88:49:
                    b5:10:f3:75:76:28:2e:49:a9:cf:10:95:78:58:c4:
                    93:fc:a6:73:4f:41:eb:a3:13:b4:a3:47:99:a0:27:
                    6c:95:9e:9b:ae:eb:f8:fc:0a:82:bc:17:47:12:32:
                    ee:7b:78:ff:74:7d:14:64:1c:89:75:bb:21:a3:cd:
                    17:95:7c:98:a3:82:fd:b0:cc:67:ff:78:d1:a1:81:
                    96:84:ec:63:aa:b3:f2:d2:d4:e3:9b:59:0b:80:e8:
                    9b:ee:d1:09:7d:bc:ea:c2:e4:92:36:d3:92:37:de:
                    34:8e:6c:b1:4b:c2:70:d9:80:a5:70:60:2b:29:8a:
                    24:1b:b5:d6:7f:ec:98:75:f5:b4:6c:5b:c6:03:4d:
                    15:e8:c6:16:34:f6:cc:0e:3b:b8:03:1e:81:46:dc:
                    af:04:5e:a7:49:ed:ce:10:22:13:6a:48:cd:35:48:
                    38:4d:99:77:a7:35:21:94:e5:d5:ea:60:f2:1f:8e:
                    9f:97:93:21:ed:92:b4:8d:f5:90:be:d8:b0:6f:cf:
                    4d:0d:fa:2a:2e:5f:cd:10:fa:31:01:84:d0:e3:b1:
                    78:a2:73:aa:db:74:48:3e:1b:00:1d:a7:cb:30:91:
                    1d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BA:13:0E:16:98:8F:A0:98:C4:A9:3C:AA:E0:9E:E0:F7:B1:2B:B2
            X509v3 Authority Key Identifier:
                keyid:1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/8a80dc8a3c58031ab5ebbe501de280ad8b62e26f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/8977e71e589f7dff93910384f64766de5bd105bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:f5:fd:ab:1d:58:85:0b:1b:f1:ac:8a:81:37:2a:5e:1b:bf:
         b0:3c:e2:76:c3:6f:38:62:d5:1f:97:a4:f4:c2:06:0a:87:b3:
         d6:14:0d:d4:86:11:0d:c8:e3:c5:d7:77:e0:55:77:bb:31:5c:
         e7:aa:e3:3c:d4:af:09:2f:a1:00:9b:c8:d3:44:4a:cf:32:6f:
         ab:49:f0:f6:77:32:b7:ba:ed:a7:a9:f4:c3:b5:00:9d:dc:83:
         3b:d6:db:dd:af:18:59:57:75:c5:28:b3:5e:63:e4:6e:4c:38:
         8f:8b:5d:19:49:a3:2b:48:b4:46:8a:4d:c4:ca:ba:b9:d6:aa:
         26:46:3b:aa:27:75:0c:99:5b:9a:2d:92:28:2b:b0:28:49:a8:
         12:d4:39:3b:49:5d:c5:62:85:66:02:ed:e0:88:6b:81:2b:68:
         ea:4d:3d:1c:f7:9b:03:35:7d:ae:86:77:d2:8a:12:37:ac:cf:
         e0:f5:9a:0f:12:ad:52:10:06:b1:2d:21:f0:ea:f4:b6:09:da:
         13:b5:65:e7:fc:f1:ba:63:91:be:df:35:47:ba:75:09:08:3f:
         b4:48:77:0b:8b:4d:f0:e1:4d:af:51:d0:9f:9f:2e:2d:40:1b:
         7c:1a:a6:21:81:8d:91:ac:39:21:51:5e:02:f2:37:88:7b:6a:
         d9:4c:7f:82
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAJ93MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg5
NzdlNzFlNTg5ZjdkZmY5MzkxMDM4NGY2NDc2NmRlNWJkMTA1YmIwHhcNMjEwMzI0
MTQzNjI0WhcNMjYwMzI0MTQzNjI0WjAzMTEwLwYDVQQDEyg4YTgwZGM4YTNjNTgw
MzFhYjVlYmJlNTAxZGUyODBhZDhiNjJlMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjn+Di5wzEI/jJRhnn/wAN/BFb3ycKHD8V+baiEm1EPN1digu
SanPEJV4WMST/KZzT0HroxO0o0eZoCdslZ6bruv4/AqCvBdHEjLue3j/dH0UZByJ
dbsho80XlXyYo4L9sMxn/3jRoYGWhOxjqrPy0tTjm1kLgOib7tEJfbzqwuSSNtOS
N940jmyxS8Jw2YClcGArKYokG7XWf+yYdfW0bFvGA00V6MYWNPbMDju4Ax6BRtyv
BF6nSe3OECITakjNNUg4TZl3pzUhlOXV6mDyH46fl5Mh7ZK0jfWQvtiwb89NDfoq
Ll/NEPoxAYTQ47F4onOq23RIPhsAHafLMJEdVwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFC+6Ew4WmI+gmMSpPKrgnuD3sSuyMB8GA1UdIwQYMBaAFBtJKMZJokmmvkck
y1Stj19K97PqMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODk3N2U3
MWU1ODlmN2RmZjkzOTEwMzg0ZjY0NzY2ZGU1YmQxMDViYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVjMWJkNTgtOTE2Ni00N2Y3LTlhYWQtMjRlNDNm
OWUyODM4LzhhODBkYzhhM2M1ODAzMWFiNWViYmU1MDFkZTI4MGFkOGI2MmUyNmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWMxYmQ1OC05MTY2LTQ3ZjctOWFhZC0yNGU0
M2Y5ZTI4MzgvODk3N2U3MWU1ODlmN2RmZjkzOTEwMzg0ZjY0NzY2ZGU1YmQxMDVi
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL9mPTANBgkqhkiG9w0BAQsFAAOCAQEAXvX9qx1YhQsb8ayK
gTcqXhu/sDzidsNvOGLVH5ek9MIGCoez1hQN1IYRDcjjxdd34FV3uzFc56rjPNSv
CS+hAJvI00RKzzJvq0nw9ncyt7rtp6n0w7UAndyDO9bb3a8YWVd1xSizXmPkbkw4
j4tdGUmjK0i0RopNxMq6udaqJkY7qid1DJlbmi2SKCuwKEmoEtQ5O0ldxWKFZgLt
4IhrgSto6k09HPebAzV9roZ30ooSN6zP4PWaDxKtUhAGsS0h8Or0tgnaE7Vl5/zx
umORvt81R7p1CQg/tEh3C4tN8OFNr1HQn58uLUAbfBqmIYGNkaw5IVFeAvI3iHtq
2Ux/gg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org