Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e82ebb68a44111c135b0e64e1bddf983227343b2.roa
File:                     e82ebb68a44111c135b0e64e1bddf983227343b2.roa (raw, json)
Hash identifier:          ftvQSU0C+WRoVRI89+TLnhXjvsum+N1bK7FMp5Dh2Pw=
Subject key identifier:   B2:DF:3C:11:D1:A9:38:F4:02:C9:EF:10:BA:4C:C7:B6:CB:8F:73:87
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       127763
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e82ebb68a44111c135b0e64e1bddf983227343b2.roa
Signing time:             Tue 14 Dec 2021 21:11:02 +0000
ROA not before:           Tue 14 Dec 2021 03:00:00 +0000
ROA not after:            Thu 14 Dec 2023 03:00:00 +0000
asID:                     272470
IP address blocks:        191.101.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210211 (0x127763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Dec 14 03:00:00 2021 GMT
            Not After : Dec 14 03:00:00 2023 GMT
        Subject: CN=e82ebb68a44111c135b0e64e1bddf983227343b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:01:a1:49:3b:07:cf:3d:98:ee:af:d0:0b:e5:
                    84:dd:28:43:48:d2:7e:41:fe:3c:46:0f:b7:d2:e7:
                    ef:1c:07:4d:da:ed:bd:51:ff:93:2a:fd:a1:b9:0a:
                    c0:85:da:58:0c:1a:d0:dc:9a:0a:e2:7a:1b:78:1c:
                    7b:1c:da:ab:23:fd:24:d2:de:d7:b0:af:bd:4e:a2:
                    02:38:96:ba:ad:d3:0d:20:ff:67:2a:e5:ac:6c:24:
                    98:5a:44:88:c9:f6:99:41:06:a9:26:67:da:cb:e3:
                    6b:ba:c4:97:9f:ff:21:9c:35:3d:7e:03:ae:56:25:
                    25:6f:3c:e6:e1:b7:5e:52:69:16:85:b9:14:71:ca:
                    17:30:ef:f8:1d:9f:8d:7b:ab:b5:20:e0:3d:82:a1:
                    de:8e:dd:1f:70:75:60:f1:ed:ee:63:fe:09:68:30:
                    30:84:93:06:1a:d4:23:54:f9:c3:31:b9:7c:98:b8:
                    67:37:ec:cf:e4:af:7c:d0:a3:e6:de:c7:ac:27:e1:
                    f5:1b:a7:59:55:f8:98:4e:76:f4:a1:5b:f3:21:33:
                    2e:13:90:4a:e9:1d:38:f2:a9:23:f8:46:c1:ba:f8:
                    48:a6:79:49:8f:a5:39:84:cc:4e:74:7e:b3:db:da:
                    77:37:f8:fe:99:ca:20:d9:39:9d:9f:3c:31:36:d1:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DF:3C:11:D1:A9:38:F4:02:C9:EF:10:BA:4C:C7:B6:CB:8F:73:87
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e82ebb68a44111c135b0e64e1bddf983227343b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.101.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:8f:b2:e2:eb:44:69:8b:89:13:a6:f9:b6:50:dc:67:e8:46:
         f8:d1:e3:b5:66:34:74:f9:46:75:0a:e1:5f:73:7e:38:31:8b:
         ce:9a:8f:32:f4:a3:a7:ac:65:8c:8c:52:2e:3b:f8:5f:95:e7:
         0c:e0:52:e9:04:64:92:56:00:17:13:84:7a:be:04:48:53:f4:
         f8:47:e9:10:49:64:3a:44:21:8a:a1:ce:31:51:1b:4b:a2:a4:
         00:43:e2:47:20:fa:b6:8c:d6:0b:d7:4c:da:02:02:d4:99:20:
         58:f1:1a:fc:1d:f4:af:b0:f7:e3:fa:b9:0a:91:8b:61:39:f0:
         ff:78:26:23:27:e9:60:ac:fa:f6:e6:3f:77:9d:c8:6f:62:4e:
         03:88:58:82:49:3b:16:0a:25:0d:20:c1:04:a8:af:45:00:19:
         36:13:ce:6b:83:a7:c3:9f:59:74:95:3a:f3:80:59:13:6f:9a:
         a9:3b:cb:74:be:d0:df:84:37:77:9f:63:49:b7:d0:24:de:93:
         9f:ca:11:b0:26:b0:d3:35:6c:a1:09:d6:74:e2:49:da:ab:2b:
         b6:1c:6a:40:2f:af:9b:1d:da:d8:47:de:14:9a:9b:9a:2d:a3:
         25:f6:f7:ee:d8:3c:48:ba:d3:99:b0:9b:a5:29:f7:16:b2:1e:
         21:b7:a2:70
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEndjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjExMjE0
MDMwMDAwWhcNMjMxMjE0MDMwMDAwWjAzMTEwLwYDVQQDEyhlODJlYmI2OGE0NDEx
MWMxMzViMGU2NGUxYmRkZjk4MzIyNzM0M2IyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlgGhSTsHzz2Y7q/QC+WE3ShDSNJ+Qf48Rg+30ufvHAdN2u29
Uf+TKv2huQrAhdpYDBrQ3JoK4nobeBx7HNqrI/0k0t7XsK+9TqICOJa6rdMNIP9n
KuWsbCSYWkSIyfaZQQapJmfay+NrusSXn/8hnDU9fgOuViUlbzzm4bdeUmkWhbkU
ccoXMO/4HZ+Ne6u1IOA9gqHejt0fcHVg8e3uY/4JaDAwhJMGGtQjVPnDMbl8mLhn
N+zP5K980KPm3sesJ+H1G6dZVfiYTnb0oVvzITMuE5BK6R048qkj+EbBuvhIpnlJ
j6U5hMxOdH6z29p3N/j+mcog2TmdnzwxNtEQmQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLLfPBHRqTj0AsnvELpMx7bLj3OHMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2U4MmViYjY4YTQ0MTExYzEzNWIwZTY0ZTFiZGRmOTgzMjI3MzQzYjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL9lhzANBgkqhkiG9w0BAQsFAAOCAQEAK4+y4utEaYuJE6b5
tlDcZ+hG+NHjtWY0dPlGdQrhX3N+ODGLzpqPMvSjp6xljIxSLjv4X5XnDOBS6QRk
klYAFxOEer4ESFP0+EfpEElkOkQhiqHOMVEbS6KkAEPiRyD6tozWC9dM2gIC1Jkg
WPEa/B30r7D34/q5CpGLYTnw/3gmIyfpYKz69uY/d53Ib2JOA4hYgkk7FgolDSDB
BKivRQAZNhPOa4Onw59ZdJU684BZE2+aqTvLdL7Q34Q3d59jSbfQJN6Tn8oRsCaw
0zVsoQnWdOJJ2qsrthxqQC+vmx3a2EfeFJqbmi2jJfb37tg8SLrTmbCbpSn3FrIe
IbeicA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org