Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/662340aacdb3823786f466fd61fc395f1092e764.roa
File:                     662340aacdb3823786f466fd61fc395f1092e764.roa (raw, json)
Hash identifier:          Lc7aP7GNvnBNYU2FmQCDptijmkZGVq20pNxf8VkQ3I8=
Subject key identifier:   B8:A1:80:D6:3D:F1:20:B7:DB:EF:87:3D:A3:8B:8A:82:DE:CF:00:25
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       15C132
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/662340aacdb3823786f466fd61fc395f1092e764.roa
Signing time:             Fri 04 Feb 2022 14:29:22 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     138156
IP address blocks:        191.96.92.0/23 maxlen: 24
                          181.215.50.0/23 maxlen: 24
                          191.101.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1425714 (0x15c132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=662340aacdb3823786f466fd61fc395f1092e764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:1e:44:b5:5d:4b:49:23:b0:1b:d2:72:25:
                    62:b8:5b:45:22:00:ca:2a:9e:b5:f8:d6:76:22:d4:
                    48:6c:c2:6d:cc:0d:76:fc:78:70:fc:08:ed:77:cc:
                    3d:e9:01:f7:93:4b:0d:3b:8f:d2:56:f3:ac:09:0e:
                    b2:53:9e:5f:61:d7:b9:d2:86:64:6c:f0:3f:81:d5:
                    e8:a3:e0:6e:bc:1f:50:f3:cd:5e:02:fc:6b:ab:28:
                    72:02:ff:f4:29:71:f6:f4:2e:97:37:6a:bf:7e:75:
                    87:24:08:52:ca:36:67:c7:73:a9:f7:f7:2c:4d:81:
                    c7:69:7d:eb:00:ec:1e:83:db:b1:4a:39:c8:ff:ef:
                    f5:34:bb:b9:f0:21:8a:36:49:ff:28:53:a8:6e:c9:
                    38:25:f5:75:81:07:57:d2:92:e7:00:0d:a7:87:36:
                    aa:17:56:79:99:26:31:08:28:ec:2a:12:c9:89:d7:
                    fc:08:ba:56:a3:0e:18:ed:be:1c:5f:e1:49:c2:bb:
                    40:2d:b2:04:50:58:89:f4:38:63:9d:c1:2e:d8:f5:
                    8a:79:f1:ad:0e:18:0c:c6:42:3d:cf:9f:a6:7a:dd:
                    12:e4:d4:9c:6a:06:c4:6b:63:c1:e5:a6:62:5e:6e:
                    42:dc:ac:66:8c:ba:22:33:4b:7a:7d:6a:51:82:5a:
                    16:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A1:80:D6:3D:F1:20:B7:DB:EF:87:3D:A3:8B:8A:82:DE:CF:00:25
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/662340aacdb3823786f466fd61fc395f1092e764.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.50.0/23
                  191.96.92.0/23
                  191.101.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:85:74:99:49:63:c4:9e:02:d2:2b:da:7a:4d:bf:51:4d:b6:
         54:c7:b9:c0:c0:6e:3e:37:e6:68:b6:a2:af:d8:d2:fb:d7:e3:
         ee:0f:f4:7c:80:64:4b:11:ff:f5:d8:10:e8:10:dd:63:9f:88:
         5d:86:14:fe:b2:16:b1:f0:3f:59:2a:a7:c9:c3:35:dd:d1:c4:
         70:cf:52:11:ee:6c:9c:49:ff:dc:cf:e3:bd:19:be:16:b2:76:
         bc:68:e1:ef:13:90:2b:eb:7f:9f:87:bc:fc:5b:c3:56:74:e9:
         96:14:7c:75:fc:1d:96:b4:5c:b0:65:52:6d:26:1f:3c:b2:5a:
         bb:26:af:8b:22:06:0b:58:54:60:18:43:9d:d1:03:02:4c:a8:
         a9:fa:e7:be:91:91:0c:15:6d:36:b7:7d:c0:f2:34:54:99:db:
         f7:2e:0f:2f:3b:f9:dd:0b:ad:7d:59:fc:21:ff:25:3c:24:21:
         3c:10:c5:f0:9e:3e:5b:c4:c3:f1:92:9c:f9:dc:86:4a:6f:f5:
         58:74:fb:df:80:1c:7f:0c:0e:e9:d2:ef:34:7c:8a:9c:3e:08:
         d3:2d:2c:0c:dd:bf:bf:a9:b7:5f:fe:03:bb:36:cc:33:70:5d:
         f7:31:12:12:42:d9:7c:d5:2d:a9:99:7e:85:dc:0f:e8:91:5e:
         84:3d:eb:8a
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDFcEyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg2NjIzNDBhYWNkYjM4
MjM3ODZmNDY2ZmQ2MWZjMzk1ZjEwOTJlNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsHoeRLVdS0kjsBvSciViuFtFIgDKKp61+NZ2ItRIbMJtzA12
/Hhw/Ajtd8w96QH3k0sNO4/SVvOsCQ6yU55fYde50oZkbPA/gdXoo+BuvB9Q881e
AvxrqyhyAv/0KXH29C6XN2q/fnWHJAhSyjZnx3Op9/csTYHHaX3rAOweg9uxSjnI
/+/1NLu58CGKNkn/KFOobsk4JfV1gQdX0pLnAA2nhzaqF1Z5mSYxCCjsKhLJidf8
CLpWow4Y7b4cX+FJwrtALbIEUFiJ9DhjncEu2PWKefGtDhgMxkI9z5+met0S5NSc
agbEa2PB5aZiXm5C3KxmjLoiM0t6fWpRgloWjwIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFLihgNY98SC32++HPaOLioLezwAlMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzY2MjM0MGFhY2RiMzgyMzc4NmY0NjZmZDYxZmMzOTVmMTA5MmU3NjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAbXXMgMEAb9gXAMEAr9l1DANBgkqhkiG9w0BAQsFAAOCAQEA
GIV0mUljxJ4C0ivaek2/UU22VMe5wMBuPjfmaLair9jS+9fj7g/0fIBkSxH/9dgQ
6BDdY5+IXYYU/rIWsfA/WSqnycM13dHEcM9SEe5snEn/3M/jvRm+FrJ2vGjh7xOQ
K+t/n4e8/FvDVnTplhR8dfwdlrRcsGVSbSYfPLJauyaviyIGC1hUYBhDndEDAkyo
qfrnvpGRDBVtNrd9wPI0VJnb9y4PLzv53QutfVn8If8lPCQhPBDF8J4+W8TD8ZKc
+dyGSm/1WHT734AcfwwO6dLvNHyKnD4I0y0sDN2/v6m3X/4DuzbMM3Bd9zESEkLZ
fNUtqZl+hdwP6JFehD3rig==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org