Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9b0d54cadeebffde02450dc822979401422ef69b.roa
File:                     9b0d54cadeebffde02450dc822979401422ef69b.roa (raw, json)
Hash identifier:          9tRGvZScAQuvpgxARcN4+phi6Xe97exIvBZk3pCwXVA=
Subject key identifier:   9C:C1:FC:DA:09:15:80:43:88:4F:C8:5B:37:B5:27:18:52:7C:EF:E1
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       061403
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9b0d54cadeebffde02450dc822979401422ef69b.roa
Signing time:             Wed 24 Mar 2021 14:33:34 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     31863
IP address blocks:        191.101.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398339 (0x61403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=9b0d54cadeebffde02450dc822979401422ef69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:38:09:76:92:d8:09:36:93:9b:4e:a1:cd:30:
                    1a:17:8c:85:d3:d7:6a:52:9b:38:aa:79:b5:99:91:
                    f9:d6:89:2e:5f:ea:cb:db:d7:f8:5f:c7:10:f9:70:
                    dd:4a:4f:58:5a:de:4d:55:22:54:f2:70:03:e8:78:
                    4c:e4:b6:e9:17:54:98:0e:c1:74:23:eb:47:49:8d:
                    4c:e6:3f:c1:88:4f:7f:60:d9:69:93:79:44:4f:e4:
                    f0:0c:ab:89:cd:76:08:3f:95:90:79:ba:8b:28:7a:
                    f7:b5:d3:42:f5:b8:c3:3c:a1:9b:ba:be:13:a8:8f:
                    9d:31:c8:45:e8:11:34:a2:e0:d5:31:1c:0b:a6:d9:
                    8a:89:f5:ff:e3:46:1c:66:83:bb:1f:dc:d1:81:48:
                    32:6c:f5:33:ef:92:f9:fd:e6:65:66:a3:fe:05:19:
                    9b:c4:67:e8:c6:7d:52:17:8f:d3:a3:c8:89:86:55:
                    8d:e4:1d:c2:27:cb:1a:8a:a4:8f:19:c2:78:d3:4e:
                    79:79:52:1d:dd:0f:ea:43:bd:ac:ab:2e:c9:6c:b9:
                    83:3e:81:e6:06:62:80:e6:a8:66:26:a5:76:95:d3:
                    9b:e6:1a:a9:c6:9b:5d:64:00:4a:f7:26:b4:dc:e5:
                    a1:12:a9:37:15:79:1d:e9:bc:fe:eb:53:e6:d1:5d:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C1:FC:DA:09:15:80:43:88:4F:C8:5B:37:B5:27:18:52:7C:EF:E1
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9b0d54cadeebffde02450dc822979401422ef69b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:f1:4f:39:d9:15:a2:ac:2b:7d:e1:aa:b7:22:37:61:56:54:
         60:7d:b5:60:cc:f8:df:97:50:27:22:dd:cb:ef:89:42:bd:5f:
         5c:ea:cc:8c:06:da:4d:93:8e:9e:1a:d6:a3:a3:9c:f2:38:58:
         be:fe:45:b2:1f:89:16:3c:f8:77:42:71:5c:a8:ab:f7:38:aa:
         05:95:b4:22:a7:a2:a8:e0:3b:1b:da:3f:00:85:ba:3e:45:19:
         1f:e0:66:39:dd:05:3a:f0:f6:cb:0c:40:28:01:fa:7f:b7:c0:
         ce:2c:fd:ba:84:8a:20:3f:b7:aa:83:32:fc:b7:96:23:c2:77:
         ad:db:5f:f6:04:e6:45:db:cc:47:40:e4:33:5b:d2:38:30:6a:
         57:fb:8e:be:d0:51:37:a9:d1:16:2b:7f:4d:6d:e4:d5:27:22:
         91:d7:ea:d9:30:1f:a2:d4:d7:3a:2a:29:85:c2:ba:3f:a7:12:
         93:1c:f6:77:fe:eb:d1:40:07:dd:d5:f2:74:74:af:e3:47:87:
         d4:e4:e0:de:a6:99:09:e5:5f:f6:e3:d3:e9:fd:66:5b:49:24:
         9a:cb:ab:16:f9:3f:f7:2d:f0:77:36:87:e1:0a:48:36:a2:1d:
         9a:7b:18:6f:dc:f7:09:40:be:92:c6:07:b8:22:ec:02:96:89:
         d0:b3:75:64
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBhQDMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MTQzMzI5WhcNMjYwMzI0MTQzMzI5WjAzMTEwLwYDVQQDEyg5YjBkNTRjYWRlZWJm
ZmRlMDI0NTBkYzgyMjk3OTQwMTQyMmVmNjliMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkjgJdpLYCTaTm06hzTAaF4yF09dqUps4qnm1mZH51okuX+rL
29f4X8cQ+XDdSk9YWt5NVSJU8nAD6HhM5LbpF1SYDsF0I+tHSY1M5j/BiE9/YNlp
k3lET+TwDKuJzXYIP5WQebqLKHr3tdNC9bjDPKGbur4TqI+dMchF6BE0ouDVMRwL
ptmKifX/40YcZoO7H9zRgUgybPUz75L5/eZlZqP+BRmbxGfoxn1SF4/To8iJhlWN
5B3CJ8saiqSPGcJ40055eVId3Q/qQ72sqy7JbLmDPoHmBmKA5qhmJqV2ldOb5hqp
xptdZABK9ya03OWhEqk3FXkd6bz+61Pm0V3w4QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJzB/NoJFYBDiE/IWze1JxhSfO/hMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzliMGQ1NGNhZGVlYmZmZGUwMjQ1MGRjODIyOTc5NDAxNDIyZWY2OWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL9lNDANBgkqhkiG9w0BAQsFAAOCAQEAjvFPOdkVoqwrfeGq
tyI3YVZUYH21YMz435dQJyLdy++JQr1fXOrMjAbaTZOOnhrWo6Oc8jhYvv5Fsh+J
Fjz4d0JxXKir9ziqBZW0IqeiqOA7G9o/AIW6PkUZH+BmOd0FOvD2ywxAKAH6f7fA
ziz9uoSKID+3qoMy/LeWI8J3rdtf9gTmRdvMR0DkM1vSODBqV/uOvtBRN6nRFit/
TW3k1Scikdfq2TAfotTXOiophcK6P6cSkxz2d/7r0UAH3dXydHSv40eH1OTg3qaZ
CeVf9uPT6f1mW0kkmsurFvk/9y3wdzaH4QpINqIdmnsYb9z3CUC+ksYHuCLsApaJ
0LN1ZA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org