Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/04865c6b9104eb1f4ec20f92519b9451108d86e9.roa
File:                     04865c6b9104eb1f4ec20f92519b9451108d86e9.roa (raw, json)
Hash identifier:          UZEtVpwLpMS10d5FZ5yhQA1TzPIEVSmtTpGbsUgyxE4=
Subject key identifier:   8C:58:45:36:3E:52:9F:11:83:45:BA:DE:25:9C:49:2C:7F:3C:4B:1A
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       140F81
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/04865c6b9104eb1f4ec20f92519b9451108d86e9.roa
Signing time:             Wed 12 Jan 2022 13:26:24 +0000
ROA not before:           Mon 27 Sep 2021 03:00:00 +0000
ROA not after:            Wed 27 Sep 2023 03:00:00 +0000
asID:                     272479
IP address blocks:        191.96.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1314689 (0x140f81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Sep 27 03:00:00 2021 GMT
            Not After : Sep 27 03:00:00 2023 GMT
        Subject: CN=04865c6b9104eb1f4ec20f92519b9451108d86e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:13:c0:5b:bf:18:2a:cd:8c:14:5f:f4:cb:
                    ba:80:a3:48:b4:12:55:4d:2c:ff:9d:5f:34:fc:2a:
                    26:cb:99:5c:b9:47:6e:98:67:29:59:34:34:a0:43:
                    af:02:4d:a9:2d:12:ef:8a:6d:d0:d0:29:7f:b6:28:
                    52:ad:f1:cd:aa:bc:ac:55:4b:74:a2:cb:c9:cc:0d:
                    ae:9b:c8:0c:43:27:11:a5:6b:fe:6c:a0:04:cb:f7:
                    06:48:32:e2:79:87:fd:54:6d:d8:3c:99:da:8b:3d:
                    14:eb:09:4b:32:63:58:d7:e4:2a:f3:46:b9:0c:e2:
                    9a:aa:7b:b6:7a:ea:ca:32:de:2f:59:88:31:e5:6a:
                    6a:66:77:3f:31:06:2b:07:e5:94:3e:0c:ad:39:62:
                    fd:87:43:a1:2d:38:61:af:86:3f:9e:73:15:89:be:
                    51:60:4a:97:8c:40:f5:48:a1:ab:45:ab:c4:1b:14:
                    78:16:08:1b:6e:10:f0:1c:31:33:0d:81:79:b7:13:
                    ef:e5:3b:4e:ed:ed:77:60:d4:63:be:a1:3c:a6:83:
                    30:a4:6b:5e:14:46:78:fb:64:36:ac:26:17:f5:d9:
                    fa:61:ce:e7:d7:5c:89:24:c7:9e:e4:43:6c:0c:23:
                    4d:b3:6e:49:44:d9:85:22:26:05:b6:ef:39:c7:cf:
                    78:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:58:45:36:3E:52:9F:11:83:45:BA:DE:25:9C:49:2C:7F:3C:4B:1A
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/04865c6b9104eb1f4ec20f92519b9451108d86e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:7b:73:a5:31:81:76:9f:42:5d:61:a7:d8:8c:ae:91:15:
         01:c5:5a:f4:88:d7:21:47:28:04:37:44:44:e9:95:e0:6d:13:
         51:05:60:78:d8:75:1a:39:b4:38:5d:a2:34:8c:1e:23:69:4c:
         4f:a3:55:2e:3d:bb:6f:b7:a7:0b:b6:3b:c3:a4:7b:84:24:e3:
         cb:ac:45:94:c3:ae:43:a4:db:d1:97:91:3c:4d:c6:e3:54:9b:
         9b:db:5a:83:7d:ac:31:dc:51:36:0a:ce:f0:55:03:d7:86:4b:
         c6:f4:5f:9b:0e:82:a7:5d:69:a1:ea:1e:93:86:76:1f:59:cd:
         87:04:fa:02:f6:57:ec:68:5e:63:3b:27:e5:ac:4b:c9:ed:89:
         d4:3e:d6:1a:ee:60:4d:f9:d0:34:35:50:b4:0a:ff:82:1c:b5:
         5b:6a:ce:64:78:99:5f:13:14:ba:f4:22:b1:c9:1f:e2:27:b8:
         54:2c:1d:24:de:ea:66:02:ff:77:d6:44:18:0f:cc:93:64:35:
         2e:49:a7:2a:84:5d:5e:c7:0a:7d:18:4a:dd:97:63:f1:64:33:
         8b:38:0a:74:ea:71:9e:e7:c0:04:2b:fb:39:fd:5f:4e:44:07:
         0d:49:64:1d:c1:be:5f:21:4d:9b:28:0b:1a:64:75:47:dc:ce:
         6e:6c:cc:9d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFA+BMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwOTI3
MDMwMDAwWhcNMjMwOTI3MDMwMDAwWjAzMTEwLwYDVQQDEygwNDg2NWM2YjkxMDRl
YjFmNGVjMjBmOTI1MTliOTQ1MTEwOGQ4NmU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo2ATwFu/GCrNjBRf9Mu6gKNItBJVTSz/nV80/Comy5lcuUdu
mGcpWTQ0oEOvAk2pLRLvim3Q0Cl/tihSrfHNqrysVUt0osvJzA2um8gMQycRpWv+
bKAEy/cGSDLieYf9VG3YPJnaiz0U6wlLMmNY1+Qq80a5DOKaqnu2eurKMt4vWYgx
5WpqZnc/MQYrB+WUPgytOWL9h0OhLThhr4Y/nnMVib5RYEqXjED1SKGrRavEGxR4
FggbbhDwHDEzDYF5txPv5TtO7e13YNRjvqE8poMwpGteFEZ4+2Q2rCYX9dn6Yc7n
11yJJMee5ENsDCNNs25JRNmFIiYFtu85x8947wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIxYRTY+Up8Rg0W63iWcSSx/PEsaMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzA0ODY1YzZiOTEwNGViMWY0ZWMyMGY5MjUxOWI5NDUxMTA4ZDg2ZTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL9gnjANBgkqhkiG9w0BAQsFAAOCAQEAHA17c6UxgXafQl1h
p9iMrpEVAcVa9IjXIUcoBDdEROmV4G0TUQVgeNh1Gjm0OF2iNIweI2lMT6NVLj27
b7enC7Y7w6R7hCTjy6xFlMOuQ6Tb0ZeRPE3G41Sbm9tag32sMdxRNgrO8FUD14ZL
xvRfmw6Cp11poeoek4Z2H1nNhwT6AvZX7GheYzsn5axLye2J1D7WGu5gTfnQNDVQ
tAr/ghy1W2rOZHiZXxMUuvQisckf4ie4VCwdJN7qZgL/d9ZEGA/Mk2Q1LkmnKoRd
XscKfRhK3Zdj8WQzizgKdOpxnufABCv7Of1fTkQHDUlkHcG+XyFNmygLGmR1R9zO
bmzMnQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org