Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/37171e5382383b7bbc0a89851e855de6b7fc2afc.roa
File:                     37171e5382383b7bbc0a89851e855de6b7fc2afc.roa (raw, json)
Hash identifier:          FKYdFjoeEV0PPoRecxVP6/6dB+FjyeblpMAk8g+m3CQ=
Subject key identifier:   31:B9:70:9E:36:94:AF:66:6C:6A:15:C0:95:56:A9:1C:DF:FA:AA:17
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       06C1D2
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/37171e5382383b7bbc0a89851e855de6b7fc2afc.roa
Signing time:             Wed 24 Mar 2021 14:33:37 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     32780
IP address blocks:        191.101.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442834 (0x6c1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=37171e5382383b7bbc0a89851e855de6b7fc2afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:17:6f:73:e6:c8:41:90:ac:80:4c:0f:a6:f1:
                    a7:6a:5f:34:19:76:c9:64:d1:65:41:b7:9d:5c:95:
                    96:89:99:7f:ba:b4:16:e6:b3:99:c6:3c:0b:ab:b4:
                    83:31:1c:c5:3c:20:24:81:51:4f:21:89:f2:3f:7b:
                    b2:6f:bb:5e:89:be:dd:79:05:8f:4f:24:41:fc:9f:
                    04:06:81:0b:e3:57:13:57:a8:e5:5b:bd:2a:f2:a6:
                    5d:95:8d:dc:f9:2e:22:01:22:ba:da:7a:af:02:26:
                    eb:99:ce:85:d2:f4:f0:7f:c7:67:6c:a9:6b:88:dc:
                    38:d8:08:f3:ba:40:60:01:0c:bd:4d:67:6e:89:61:
                    a1:f9:a6:6e:72:4a:1f:89:4e:f2:42:c3:a4:f4:5e:
                    f7:b7:61:65:3e:2c:f0:5a:12:36:e8:74:42:ef:91:
                    d9:79:d6:75:55:67:67:ed:2e:ea:a3:14:56:41:96:
                    74:20:75:90:ef:82:d7:e2:fc:72:61:c1:2b:b3:eb:
                    19:4a:5c:5e:f2:d0:55:05:11:1d:9d:e4:9a:f5:73:
                    d6:1c:81:9a:05:c7:fa:21:6f:8d:a6:56:b5:a8:0a:
                    cf:6e:1a:40:4c:5d:af:9a:87:b5:7a:a9:46:04:df:
                    08:ce:67:09:3d:f6:56:71:a8:66:30:df:b7:5e:04:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B9:70:9E:36:94:AF:66:6C:6A:15:C0:95:56:A9:1C:DF:FA:AA:17
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/37171e5382383b7bbc0a89851e855de6b7fc2afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:13:89:7e:fb:c0:9a:b7:34:a1:19:c2:e8:72:3b:e5:ed:f8:
         9b:2a:e3:31:80:82:1c:72:16:97:11:c8:d2:6c:a8:de:71:fd:
         af:47:3c:7e:23:b0:27:a9:a4:37:c8:12:f6:88:66:b5:1b:66:
         30:53:76:e5:1a:d7:24:72:cb:e1:d9:b6:41:5a:d1:3a:c0:42:
         c1:0c:33:03:0a:9d:01:f3:49:d8:d6:37:46:2d:b8:6b:3b:19:
         05:7c:72:40:6f:83:b3:f3:ec:10:7a:4f:b5:b8:1d:4f:30:dc:
         c2:c8:4b:91:ad:19:8a:fa:f1:13:2b:e7:fe:e2:1b:04:17:75:
         6a:24:03:ee:9b:e7:61:19:0c:e1:90:ee:2a:61:99:46:69:79:
         eb:b0:17:46:00:b4:61:fa:17:6d:fe:96:dc:df:56:87:d5:e0:
         97:ec:03:86:1d:a5:ff:9a:61:f4:83:d4:8e:fe:49:67:68:8a:
         87:d5:05:91:c2:84:1a:3c:71:8a:6c:a2:08:d9:2a:8e:d9:c2:
         52:96:79:63:37:1c:07:dd:77:4e:01:e1:72:61:f1:b7:17:62:
         44:0c:c0:22:1d:0c:c7:f0:32:41:57:6c:fb:3c:64:7d:7e:5b:
         98:da:55:8d:84:30:18:42:88:04:46:9c:a0:1d:ee:96:c2:c4:
         d6:e2:1b:9f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBsHSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MTQzMzI5WhcNMjYwMzI0MTQzMzI5WjAzMTEwLwYDVQQDEygzNzE3MWU1MzgyMzgz
YjdiYmMwYTg5ODUxZTg1NWRlNmI3ZmMyYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiRdvc+bIQZCsgEwPpvGnal80GXbJZNFlQbedXJWWiZl/urQW
5rOZxjwLq7SDMRzFPCAkgVFPIYnyP3uyb7teib7deQWPTyRB/J8EBoEL41cTV6jl
W70q8qZdlY3c+S4iASK62nqvAibrmc6F0vTwf8dnbKlriNw42AjzukBgAQy9TWdu
iWGh+aZuckofiU7yQsOk9F73t2FlPizwWhI26HRC75HZedZ1VWdn7S7qoxRWQZZ0
IHWQ74LX4vxyYcErs+sZSlxe8tBVBREdneSa9XPWHIGaBcf6IW+Npla1qArPbhpA
TF2vmoe1eqlGBN8IzmcJPfZWcahmMN+3XgTTXwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDG5cJ42lK9mbGoVwJVWqRzf+qoXMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzM3MTcxZTUzODIzODNiN2JiYzBhODk4NTFlODU1ZGU2YjdmYzJhZmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL9lrjANBgkqhkiG9w0BAQsFAAOCAQEAkhOJfvvAmrc0oRnC
6HI75e34myrjMYCCHHIWlxHI0myo3nH9r0c8fiOwJ6mkN8gS9ohmtRtmMFN25RrX
JHLL4dm2QVrROsBCwQwzAwqdAfNJ2NY3Ri24azsZBXxyQG+Ds/PsEHpPtbgdTzDc
wshLka0ZivrxEyvn/uIbBBd1aiQD7pvnYRkM4ZDuKmGZRml567AXRgC0YfoXbf6W
3N9Wh9Xgl+wDhh2l/5ph9IPUjv5JZ2iKh9UFkcKEGjxximyiCNkqjtnCUpZ5Yzcc
B913TgHhcmHxtxdiRAzAIh0Mx/AyQVds+zxkfX5bmNpVjYQwGEKIBEacoB3ulsLE
1uIbnw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org