Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ea4d94ca8729d081acebb00ddd1dee6021e973c1.roa
File:                     ea4d94ca8729d081acebb00ddd1dee6021e973c1.roa (raw, json)
Hash identifier:          dtlUZiFS5M/eoEnZUqhZcdum2kIAIxXsX3zIWpl/CiA=
Subject key identifier:   A9:96:7A:F6:C2:5A:1F:25:FF:22:40:33:EC:8E:26:E6:B1:B9:2E:E2
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       165FDC
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ea4d94ca8729d081acebb00ddd1dee6021e973c1.roa
Signing time:             Fri 18 Feb 2022 10:25:59 +0000
ROA not before:           Wed 31 Mar 2021 03:00:00 +0000
ROA not after:            Fri 31 Mar 2023 03:00:00 +0000
asID:                     8100
IP address blocks:        191.96.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466332 (0x165fdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 31 03:00:00 2021 GMT
            Not After : Mar 31 03:00:00 2023 GMT
        Subject: CN=ea4d94ca8729d081acebb00ddd1dee6021e973c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:62:d8:83:68:42:41:dd:b8:33:76:7c:e4:
                    5a:e4:19:8b:6e:f2:ab:a2:8c:bf:91:f6:f4:48:bf:
                    ff:68:86:3d:38:db:eb:0b:8d:2e:ac:00:92:db:09:
                    29:84:a3:fd:11:ed:ed:6b:df:30:a5:bf:8b:f5:6a:
                    db:c2:73:a8:96:1b:9e:f8:ea:f0:14:f2:f8:64:2c:
                    05:0e:de:6b:d8:85:1d:77:ba:d6:ac:ce:f9:f1:b2:
                    13:21:58:e5:5c:f3:0f:68:8f:cc:15:30:20:66:b5:
                    f7:a1:0f:36:69:e3:6f:9a:77:3c:2f:f6:3d:46:cc:
                    8e:76:3e:84:60:00:8b:48:96:79:6a:8d:16:60:6c:
                    45:c0:60:65:c6:60:57:27:13:c8:bf:e1:5a:0f:61:
                    b1:27:5e:ed:52:b2:4a:1a:b5:18:b6:56:6a:f0:36:
                    92:0e:2e:f1:d8:b9:a8:54:b4:02:0a:e2:76:3b:46:
                    58:00:c6:a8:c6:fd:04:a4:88:bf:f2:9f:81:1d:eb:
                    1a:ca:6c:6a:7e:9d:ab:db:17:25:98:1c:d7:ab:00:
                    70:6b:dc:08:2c:e8:af:35:18:48:8c:13:db:ce:09:
                    2f:e0:9c:e7:00:d3:2c:e1:0e:7f:27:df:68:ef:b3:
                    14:89:0f:92:d2:a7:8e:32:d8:6b:cf:c1:99:db:f8:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:96:7A:F6:C2:5A:1F:25:FF:22:40:33:EC:8E:26:E6:B1:B9:2E:E2
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ea4d94ca8729d081acebb00ddd1dee6021e973c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:d3:da:03:d8:1e:61:c2:f4:68:99:5f:75:fe:bf:37:e6:5b:
         a2:6b:63:bb:a1:d4:5a:57:33:7e:a5:e7:6c:bb:a3:4c:de:be:
         22:d2:8b:e1:8b:97:77:c4:68:cb:60:70:83:71:59:ca:f6:c5:
         38:80:d7:9c:d7:db:a8:6a:d6:e4:77:66:a3:1e:5b:ec:86:36:
         6e:eb:fc:62:91:91:3a:f3:cb:f6:ce:b2:b7:a6:63:e2:28:e5:
         79:1e:c4:43:4f:ec:e2:11:32:00:32:53:af:a6:22:ab:bc:3f:
         a3:95:27:80:ce:1f:7e:d0:03:8b:62:03:0b:e5:7e:54:fa:c2:
         19:d1:c6:5b:d5:c9:48:23:08:c9:1c:9b:23:67:2d:10:6b:a9:
         5c:6e:29:1d:77:28:62:cb:64:a6:fb:b9:63:7f:26:ec:13:51:
         4a:2c:d9:3c:a6:ec:6f:35:80:d9:6d:67:9a:8e:bb:57:f7:05:
         1f:11:a5:8e:84:b9:bb:80:82:ba:44:c3:9a:72:81:50:80:ae:
         b8:44:e8:72:ad:33:3e:43:1c:13:75:3d:e5:2d:fb:28:43:fa:
         b6:de:76:62:6b:39:da:1e:6e:2d:5d:2d:0e:1c:df:c8:92:ef:
         28:dc:be:d9:1e:ed:40:f8:05:a7:3a:63:87:2f:6a:4b:81:77:
         9f:f2:c6:d2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFl/cMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzMx
MDMwMDAwWhcNMjMwMzMxMDMwMDAwWjAzMTEwLwYDVQQDEyhlYTRkOTRjYTg3Mjlk
MDgxYWNlYmIwMGRkZDFkZWU2MDIxZTk3M2MxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAu9Zi2INoQkHduDN2fORa5BmLbvKrooy/kfb0SL//aIY9ONvr
C40urACS2wkphKP9Ee3ta98wpb+L9WrbwnOolhue+OrwFPL4ZCwFDt5r2IUdd7rW
rM758bITIVjlXPMPaI/MFTAgZrX3oQ82aeNvmnc8L/Y9RsyOdj6EYACLSJZ5ao0W
YGxFwGBlxmBXJxPIv+FaD2GxJ17tUrJKGrUYtlZq8DaSDi7x2LmoVLQCCuJ2O0ZY
AMaoxv0EpIi/8p+BHesaymxqfp2r2xclmBzXqwBwa9wILOivNRhIjBPbzgkv4Jzn
ANMs4Q5/J99o77MUiQ+S0qeOMthrz8GZ2/hBowIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKmWevbCWh8l/yJAM+yOJuaxuS7iMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2VhNGQ5NGNhODcyOWQwODFhY2ViYjAwZGRkMWRlZTYwMjFlOTczYzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL9gQDANBgkqhkiG9w0BAQsFAAOCAQEAVdPaA9geYcL0aJlf
df6/N+Zbomtju6HUWlczfqXnbLujTN6+ItKL4YuXd8Roy2Bwg3FZyvbFOIDXnNfb
qGrW5Hdmox5b7IY2buv8YpGROvPL9s6yt6Zj4ijleR7EQ0/s4hEyADJTr6Yiq7w/
o5UngM4fftADi2IDC+V+VPrCGdHGW9XJSCMIyRybI2ctEGupXG4pHXcoYstkpvu5
Y38m7BNRSizZPKbsbzWA2W1nmo67V/cFHxGljoS5u4CCukTDmnKBUICuuETocq0z
PkMcE3U95S37KEP6tt52Yms52h5uLV0tDhzfyJLvKNy+2R7tQPgFpzpjhy9qS4F3
n/LG0g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org