Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6c954eedf7565fa3fb81e5b016f5f835251cb195.roa
File:                     6c954eedf7565fa3fb81e5b016f5f835251cb195.roa (raw, json)
Hash identifier:          lbFhB/XYJ8UU02Zos8iWO14ZeGW6XA5HDxO+7SCWH48=
Subject key identifier:   E7:11:E1:7E:79:48:AE:99:1A:0C:57:CE:DC:6D:E3:7E:FA:C4:EB:7A
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0EEA9C
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6c954eedf7565fa3fb81e5b016f5f835251cb195.roa
Signing time:             Mon 04 Oct 2021 15:29:33 +0000
ROA not before:           Thu 15 Apr 2021 03:00:00 +0000
ROA not after:            Sat 15 Apr 2023 03:00:00 +0000
asID:                     270353
IP address blocks:        191.101.131.0/24 maxlen: 24
                          191.96.79.0/24 maxlen: 24
                          191.96.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977564 (0xeea9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Apr 15 03:00:00 2021 GMT
            Not After : Apr 15 03:00:00 2023 GMT
        Subject: CN=6c954eedf7565fa3fb81e5b016f5f835251cb195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:be:11:13:cd:37:47:32:64:06:2b:80:66:ec:
                    8c:a0:35:d6:b2:4e:71:53:11:53:81:09:12:d0:a1:
                    1f:6d:50:8d:e2:6c:78:fd:d3:6b:3d:69:c0:f3:1e:
                    cd:1b:73:1a:6b:74:46:8a:6f:19:b5:69:5a:02:5f:
                    b3:07:56:e6:8e:11:60:56:9d:94:43:79:9c:36:af:
                    c1:fb:08:b4:41:c8:01:2e:47:a0:08:50:2a:27:27:
                    84:ff:ee:80:c8:14:f2:cb:13:75:1e:91:6d:fa:10:
                    07:a7:5e:7b:42:2d:6b:70:98:84:a3:ec:67:62:68:
                    9b:69:39:b8:0f:b8:b0:eb:b0:e5:a3:7e:a9:72:2e:
                    b4:ac:2b:4f:32:68:0a:4c:29:2a:d2:31:a5:c3:f3:
                    f8:66:16:6a:1b:03:06:21:1d:d7:2f:11:bd:c1:be:
                    3d:c7:5a:ee:77:1d:7b:8b:4f:c2:0c:ea:7b:44:aa:
                    58:51:61:b4:8b:b9:e8:34:57:64:76:34:1e:04:9d:
                    81:96:ac:2e:ca:c4:56:12:e9:1b:c2:ca:4b:1b:d4:
                    bd:10:32:8f:98:3c:5d:ff:bd:c8:79:72:9f:d0:39:
                    ec:a1:3b:18:1c:18:c9:77:72:64:27:a5:6f:bf:2f:
                    7e:d1:83:19:2a:e3:2a:3e:8c:08:53:3b:71:e4:82:
                    73:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:11:E1:7E:79:48:AE:99:1A:0C:57:CE:DC:6D:E3:7E:FA:C4:EB:7A
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6c954eedf7565fa3fb81e5b016f5f835251cb195.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.78.0/23
                  191.101.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:50:25:b4:dd:41:c3:34:8c:ea:bf:c7:82:eb:d1:8d:0a:b7:
         0e:22:d8:db:97:fa:9e:af:2e:db:6e:79:a6:44:f7:a8:36:13:
         33:32:87:5d:fa:02:45:a9:e1:a8:a3:64:14:1b:14:cc:c8:dc:
         e1:93:e3:7a:8d:55:97:55:42:12:65:6f:2e:56:09:a3:e6:9f:
         6f:c5:a1:1c:4b:da:1b:27:a2:ec:55:14:ad:e3:91:9c:2b:96:
         a6:fc:47:31:16:64:b5:93:84:8c:d3:4b:0b:c2:9d:af:d3:92:
         f9:dc:3f:23:64:c7:c3:e7:e2:fd:d9:88:82:c0:c1:33:d9:0f:
         74:10:fb:ce:82:76:da:ff:d6:f1:f6:fc:b5:e0:96:df:e0:2c:
         07:62:08:68:fd:7b:f2:d6:d4:79:14:2e:04:4d:c0:78:79:df:
         95:a8:4e:8f:ee:46:b9:8a:8f:5b:cf:ca:c1:ad:12:53:b8:1d:
         db:01:4b:09:5f:44:13:e1:ef:8d:01:44:0a:cc:64:fe:eb:4c:
         2d:e2:ec:58:53:f4:9e:ec:8f:22:7b:2d:a4:b1:a6:57:6a:45:
         8e:ce:00:3b:e7:a7:29:9a:fc:e1:30:f1:66:a9:df:d7:59:5a:
         ae:6e:90:81:ba:d1:39:01:a6:46:66:af:36:cc:6a:ba:fc:62:
         a8:48:5e:fd
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDDuqcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwNDE1
MDMwMDAwWhcNMjMwNDE1MDMwMDAwWjAzMTEwLwYDVQQDEyg2Yzk1NGVlZGY3NTY1
ZmEzZmI4MWU1YjAxNmY1ZjgzNTI1MWNiMTk1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj74RE803RzJkBiuAZuyMoDXWsk5xUxFTgQkS0KEfbVCN4mx4
/dNrPWnA8x7NG3Maa3RGim8ZtWlaAl+zB1bmjhFgVp2UQ3mcNq/B+wi0QcgBLkeg
CFAqJyeE/+6AyBTyyxN1HpFt+hAHp157Qi1rcJiEo+xnYmibaTm4D7iw67Dlo36p
ci60rCtPMmgKTCkq0jGlw/P4ZhZqGwMGIR3XLxG9wb49x1rudx17i0/CDOp7RKpY
UWG0i7noNFdkdjQeBJ2BlqwuysRWEukbwspLG9S9EDKPmDxd/73IeXKf0DnsoTsY
HBjJd3JkJ6Vvvy9+0YMZKuMqPowIUztx5IJzOQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFOcR4X55SK6ZGgxXztxt4376xOt6MB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzZjOTU0ZWVkZjc1NjVmYTNmYjgxZTViMDE2ZjVmODM1MjUxY2IxOTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAb9gTgMEAL9lgzANBgkqhkiG9w0BAQsFAAOCAQEAU1AltN1B
wzSM6r/HguvRjQq3DiLY25f6nq8u2255pkT3qDYTMzKHXfoCRanhqKNkFBsUzMjc
4ZPjeo1Vl1VCEmVvLlYJo+afb8WhHEvaGyei7FUUreORnCuWpvxHMRZktZOEjNNL
C8Kdr9OS+dw/I2THw+fi/dmIgsDBM9kPdBD7zoJ22v/W8fb8teCW3+AsB2IIaP17
8tbUeRQuBE3AeHnflahOj+5GuYqPW8/Kwa0SU7gd2wFLCV9EE+HvjQFECsxk/utM
LeLsWFP0nuyPInstpLGmV2pFjs4AO+enKZr84TDxZqnf11larm6QgbrROQGmRmav
NsxquvxiqEhe/Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org