Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e22429a4eb604079fb958cb4e2941c6391fca58f.roa
File:                     e22429a4eb604079fb958cb4e2941c6391fca58f.roa (raw, json)
Hash identifier:          u5PCqkKuPWAW2hI48xpPelAuxjahu2c144ND/53KOUo=
Subject key identifier:   6B:96:67:54:86:1A:0E:CE:71:84:ED:AD:A5:13:13:3B:AF:52:A8:AA
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0F2D23
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e22429a4eb604079fb958cb4e2941c6391fca58f.roa
Signing time:             Thu 07 Oct 2021 14:42:12 +0000
ROA not before:           Thu 07 Oct 2021 03:00:00 +0000
ROA not after:            Sat 07 Oct 2023 03:00:00 +0000
asID:                     268756
IP address blocks:        191.96.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994595 (0xf2d23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Oct  7 03:00:00 2021 GMT
            Not After : Oct  7 03:00:00 2023 GMT
        Subject: CN=e22429a4eb604079fb958cb4e2941c6391fca58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:12:83:ca:2d:06:66:8f:d3:c2:d4:9d:78:ba:
                    16:52:3b:5e:0e:b6:55:10:48:4b:18:8f:4d:1d:32:
                    4b:ed:e7:e3:b3:b9:8a:7f:65:22:e2:0f:ba:5a:d4:
                    f6:bf:15:b2:0c:ed:6c:44:0c:cb:45:da:2f:8c:9d:
                    47:92:ac:ec:37:f7:38:86:22:57:5f:08:aa:c8:b8:
                    02:3c:c7:d1:d6:60:a7:01:69:f8:8c:87:53:50:bb:
                    bc:8b:93:73:a0:c2:0a:e1:40:02:40:4b:8a:dc:e6:
                    84:b2:2c:4e:7e:b8:14:78:21:35:69:b3:da:00:ee:
                    2c:75:fa:a6:22:c5:73:73:19:93:d8:e9:d1:db:e6:
                    f5:9e:39:84:e7:18:7f:22:f0:d6:30:25:a1:3a:52:
                    1a:b7:0a:21:dc:80:85:01:be:4b:bc:b7:0c:cb:78:
                    81:3f:68:4e:9b:bd:28:4b:f8:2b:30:4e:cd:07:f5:
                    bd:fc:6c:96:76:37:19:e9:74:ce:bf:f9:93:e8:26:
                    5d:07:c7:bf:02:84:d9:70:62:54:2a:0f:ba:87:6e:
                    2f:74:f2:a5:79:72:52:ef:14:68:2f:0d:4f:6e:75:
                    1a:a9:e3:77:f6:48:21:a6:15:6b:49:a8:90:87:64:
                    f6:1b:eb:97:b2:6e:57:9b:8b:59:be:f8:af:f4:ca:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:96:67:54:86:1A:0E:CE:71:84:ED:AD:A5:13:13:3B:AF:52:A8:AA
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e22429a4eb604079fb958cb4e2941c6391fca58f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:75:e6:e9:09:a1:ad:61:6c:12:a3:6d:2e:da:c4:eb:9b:6d:
         39:50:fb:71:6b:b0:51:d8:42:40:9e:15:b3:ac:17:40:b8:66:
         ae:82:03:e9:26:84:d9:cb:8b:a1:04:6a:9e:90:d1:d8:1a:96:
         af:ff:1a:27:c5:2c:9d:74:71:0b:80:2b:82:b6:fb:48:84:b7:
         1f:92:05:cf:db:ee:64:22:40:e9:33:a8:3c:51:ed:9f:be:a9:
         7d:7c:20:b0:35:8d:8d:a8:42:80:f8:9f:ef:09:b9:ec:c3:25:
         cd:29:a4:e1:d1:c6:80:c9:bb:40:ac:2d:ff:60:92:a0:ed:08:
         b6:21:9c:aa:52:dc:da:04:80:02:c1:c7:3d:ad:ac:59:64:8f:
         56:02:07:17:e6:01:45:94:f3:84:bf:dc:52:23:97:27:15:46:
         21:b4:39:a1:16:67:ca:ca:9e:54:21:ce:cb:0c:22:62:69:af:
         93:a5:aa:66:ec:db:a6:5e:c0:96:47:44:99:bd:79:9a:eb:57:
         ce:64:c0:ab:01:07:12:8a:13:0f:ba:bb:eb:3f:af:3b:70:db:
         e5:a7:ae:00:ce:f7:a7:3a:bf:f3:ea:b4:54:69:42:0e:f5:2c:
         f8:f2:bd:4c:65:e0:d7:b5:fa:0c:b0:68:e6:9b:76:7f:b9:67:
         38:a1:86:16
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDy0jMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjExMDA3
MDMwMDAwWhcNMjMxMDA3MDMwMDAwWjAzMTEwLwYDVQQDEyhlMjI0MjlhNGViNjA0
MDc5ZmI5NThjYjRlMjk0MWM2MzkxZmNhNThmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoRKDyi0GZo/TwtSdeLoWUjteDrZVEEhLGI9NHTJL7efjs7mK
f2Ui4g+6WtT2vxWyDO1sRAzLRdovjJ1HkqzsN/c4hiJXXwiqyLgCPMfR1mCnAWn4
jIdTULu8i5NzoMIK4UACQEuK3OaEsixOfrgUeCE1abPaAO4sdfqmIsVzcxmT2OnR
2+b1njmE5xh/IvDWMCWhOlIatwoh3ICFAb5LvLcMy3iBP2hOm70oS/grME7NB/W9
/GyWdjcZ6XTOv/mT6CZdB8e/AoTZcGJUKg+6h24vdPKleXJS7xRoLw1PbnUaqeN3
9kghphVrSaiQh2T2G+uXsm5Xm4tZvviv9MrWowIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGuWZ1SGGg7OcYTtraUTEzuvUqiqMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2UyMjQyOWE0ZWI2MDQwNzlmYjk1OGNiNGUyOTQxYzYzOTFmY2E1OGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL9gAjANBgkqhkiG9w0BAQsFAAOCAQEAJ3Xm6QmhrWFsEqNt
LtrE65ttOVD7cWuwUdhCQJ4Vs6wXQLhmroID6SaE2cuLoQRqnpDR2BqWr/8aJ8Us
nXRxC4Argrb7SIS3H5IFz9vuZCJA6TOoPFHtn76pfXwgsDWNjahCgPif7wm57MMl
zSmk4dHGgMm7QKwt/2CSoO0ItiGcqlLc2gSAAsHHPa2sWWSPVgIHF+YBRZTzhL/c
UiOXJxVGIbQ5oRZnysqeVCHOywwiYmmvk6WqZuzbpl7AlkdEmb15mutXzmTAqwEH
EooTD7q76z+vO3Db5aeuAM73pzq/8+q0VGlCDvUs+PK9TGXg17X6DLBo5pt2f7ln
OKGGFg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org