Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/993e45a8acbbafbedc1a35aefe7e3bcb37530f55.roa
File:                     993e45a8acbbafbedc1a35aefe7e3bcb37530f55.roa (raw, json)
Hash identifier:          uWeoJ9O78v5DNuFiYwl0/Hpm7IxLrfVBBsEVaD8x3eU=
Subject key identifier:   DF:2F:F8:71:92:85:E5:41:7C:89:D3:74:9C:77:C1:3C:17:EE:BE:8A
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       068414
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/993e45a8acbbafbedc1a35aefe7e3bcb37530f55.roa
Signing time:             Wed 24 Mar 2021 14:33:36 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     46562
IP address blocks:        191.96.236.0/24 maxlen: 24
                          191.96.237.0/24 maxlen: 24
                          191.96.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427028 (0x68414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=993e45a8acbbafbedc1a35aefe7e3bcb37530f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:08:a3:4a:83:40:c0:2f:ce:16:06:dc:24:bc:
                    8d:c2:6c:4f:89:25:cb:cc:42:b7:e4:ef:d7:04:c8:
                    36:50:6d:0a:52:3c:79:6d:a2:ba:84:f9:41:4a:eb:
                    f2:64:19:c0:fc:2e:3a:9a:af:72:96:ce:6c:b2:17:
                    68:74:30:71:7b:d8:d2:4d:44:ac:2d:30:58:87:a9:
                    1a:e5:db:98:54:35:6f:80:2f:ea:2e:e4:5c:be:42:
                    26:07:26:07:5a:94:2c:84:4a:91:aa:a6:22:a1:d9:
                    a2:6b:d5:8a:93:be:8d:36:fe:e1:18:07:87:4d:d9:
                    3d:99:b3:26:89:ea:5e:63:47:cd:9a:ee:46:11:cc:
                    be:b2:df:5f:d5:6e:4c:0e:c0:7c:8b:de:f2:c1:31:
                    af:20:38:94:15:42:f3:19:e3:f2:74:3b:83:26:5e:
                    c4:28:00:19:03:e5:bc:47:6c:a9:97:81:2f:d0:7a:
                    51:3e:ed:a7:f8:67:ad:39:c3:02:1a:7a:f4:c2:29:
                    84:bb:8b:44:d3:f8:80:ee:98:f4:ec:4a:b8:d3:3a:
                    6d:58:ca:de:f9:68:0b:df:42:f6:a0:33:41:65:1f:
                    bf:46:9c:8a:a6:91:43:8e:b9:b6:67:28:b0:4e:4a:
                    70:1b:21:73:4b:36:1c:00:98:84:71:f8:c5:0c:b9:
                    3f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2F:F8:71:92:85:E5:41:7C:89:D3:74:9C:77:C1:3C:17:EE:BE:8A
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/993e45a8acbbafbedc1a35aefe7e3bcb37530f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.236.0-191.96.238.255

    Signature Algorithm: sha256WithRSAEncryption
         35:3b:e3:03:88:fb:07:3b:ad:22:29:d8:73:ba:a7:4f:81:1f:
         8f:cb:65:49:ad:56:82:3c:cc:df:5c:0b:de:9c:7e:09:ca:ec:
         3e:c3:c6:ad:b2:5f:4c:a9:3e:a7:07:5e:c7:f0:7e:bb:56:78:
         3d:9b:4c:a7:2b:de:d3:b4:79:db:a9:79:ad:46:c9:0e:52:b1:
         5e:13:1f:0f:a8:1a:90:2e:b7:e2:6c:9c:13:1f:4a:f6:5e:ef:
         91:4b:e1:f2:b1:0f:84:b0:eb:7b:0b:59:04:7d:09:05:bf:fc:
         2d:29:3f:52:b8:11:64:9e:ad:46:9f:9f:3a:ae:13:ad:71:b2:
         28:19:11:d3:68:19:0a:f2:50:ff:f9:51:73:32:8e:f3:91:61:
         f4:a5:3e:fa:f2:93:a3:9a:8b:f9:10:10:2d:72:93:50:74:04:
         72:06:1f:22:5f:f2:85:4c:7a:43:80:f1:ed:4d:6b:3d:cb:11:
         7e:6c:6a:60:ae:a7:24:66:f9:0a:f2:f5:eb:5f:43:71:84:72:
         ea:1f:e2:03:b1:b1:51:c0:c8:c8:dc:e1:20:6a:08:dc:78:ee:
         ec:d5:f3:77:80:05:31:e2:04:92:20:15:4d:90:76:e4:ad:7c:
         d2:d9:7c:0a:2a:4c:d4:bd:6b:12:96:51:fe:81:78:ad:69:e9:
         76:26:5a:c3
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDBoQUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MTQzMzI5WhcNMjYwMzI0MTQzMzI5WjAzMTEwLwYDVQQDEyg5OTNlNDVhOGFjYmJh
ZmJlZGMxYTM1YWVmZTdlM2JjYjM3NTMwZjU1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsgijSoNAwC/OFgbcJLyNwmxPiSXLzEK35O/XBMg2UG0KUjx5
baK6hPlBSuvyZBnA/C46mq9yls5sshdodDBxe9jSTUSsLTBYh6ka5duYVDVvgC/q
LuRcvkImByYHWpQshEqRqqYiodmia9WKk76NNv7hGAeHTdk9mbMmiepeY0fNmu5G
Ecy+st9f1W5MDsB8i97ywTGvIDiUFULzGePydDuDJl7EKAAZA+W8R2ypl4Ev0HpR
Pu2n+GetOcMCGnr0wimEu4tE0/iA7pj07Eq40zptWMre+WgL30L2oDNBZR+/RpyK
ppFDjrm2ZyiwTkpwGyFzSzYcAJiEcfjFDLk/MQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFN8v+HGSheVBfInTdJx3wTwX7r6KMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzk5M2U0NWE4YWNiYmFmYmVkYzFhMzVhZWZlN2UzYmNiMzc1MzBmNTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQCv2DsAwQAv2DuMA0GCSqGSIb3DQEBCwUAA4IBAQA1O+MD
iPsHO60iKdhzuqdPgR+Py2VJrVaCPMzfXAvenH4Jyuw+w8atsl9MqT6nB17H8H67
Vng9m0ynK97TtHnbqXmtRskOUrFeEx8PqBqQLrfibJwTH0r2Xu+RS+HysQ+EsOt7
C1kEfQkFv/wtKT9SuBFknq1Gn586rhOtcbIoGRHTaBkK8lD/+VFzMo7zkWH0pT76
8pOjmov5EBAtcpNQdARyBh8iX/KFTHpDgPHtTWs9yxF+bGpgrqckZvkK8vXrX0Nx
hHLqH+IDsbFRwMjI3OEgagjceO7s1fN3gAUx4gSSIBVNkHbkrXzS2XwKKkzUvWsS
llH+gXitael2JlrD
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org