Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fbd52d2690760bcd7221b86a28cd0e3b3cfddbfa.roa
File:                     fbd52d2690760bcd7221b86a28cd0e3b3cfddbfa.roa (raw, json)
Hash identifier:          CFk9+BzMfBnLm/HSAZZvhpUYt5xeiXkOydiEIuaAOtc=
Subject key identifier:   B9:16:EE:09:DC:C2:7F:15:A7:99:4F:03:36:BD:59:03:EF:18:19:26
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0F1AF6
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fbd52d2690760bcd7221b86a28cd0e3b3cfddbfa.roa
Signing time:             Tue 05 Oct 2021 20:50:43 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     63023
IP address blocks:        191.96.104.0/24 maxlen: 24
                          191.96.105.0/24 maxlen: 24
                          191.96.75.0/24 maxlen: 24
                          191.96.201.0/24 maxlen: 24
                          191.96.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989942 (0xf1af6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=fbd52d2690760bcd7221b86a28cd0e3b3cfddbfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b6:c8:e1:65:75:38:d7:54:05:50:c4:6e:41:
                    d1:4b:03:d3:3f:8b:9e:e7:14:bf:71:75:47:8a:fd:
                    6d:14:9b:ad:00:53:1e:bb:8c:6d:36:cd:1d:7a:9c:
                    81:27:14:49:6b:de:34:f2:82:f4:89:38:d9:e8:f2:
                    95:5b:ae:cf:59:9e:bb:a2:13:74:b5:fa:4d:7e:f4:
                    f7:a1:c5:48:1a:52:7e:66:c7:df:e1:1e:a8:c8:cf:
                    ad:ad:a5:63:97:db:00:81:21:a5:dc:f3:cd:9a:06:
                    a9:83:1a:d5:06:df:df:a1:01:d0:30:ce:79:96:b5:
                    00:11:c8:a9:65:d9:db:61:24:e1:69:01:ad:c3:3d:
                    ca:96:f5:9d:19:3d:48:66:8e:57:8b:52:fd:c5:3f:
                    a3:35:d1:12:27:3d:d8:94:fb:ff:c2:b3:cf:01:6f:
                    36:06:4a:f8:81:2a:66:d3:51:0f:ed:c1:ab:41:ce:
                    e1:38:0b:2b:d8:70:d0:46:d1:35:75:60:cc:0e:b5:
                    d6:6f:a9:b5:e5:59:88:3f:04:61:3a:46:de:ce:f0:
                    5e:82:c2:a1:cc:5c:4a:20:45:7b:84:2e:1a:94:39:
                    ea:0f:65:36:88:c9:c9:fe:54:1a:e4:77:3e:36:78:
                    d6:cb:8e:26:ef:17:a4:06:e7:18:14:9e:78:05:90:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:16:EE:09:DC:C2:7F:15:A7:99:4F:03:36:BD:59:03:EF:18:19:26
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fbd52d2690760bcd7221b86a28cd0e3b3cfddbfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.75.0/24
                  191.96.104.0/23
                  191.96.201.0/24
                  191.96.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:0a:b9:f1:43:66:db:79:67:a1:ad:d9:d3:eb:f4:51:07:19:
         dc:df:3e:fd:05:51:7d:13:9d:3c:ce:16:19:3d:3d:a1:5f:c4:
         c4:6e:df:c7:f0:87:aa:f6:69:80:28:eb:f8:e6:5a:94:b2:d7:
         3b:01:d3:83:6f:20:01:62:0e:b2:15:70:16:3a:01:ab:30:ab:
         4e:91:7f:d3:f0:1c:9f:fc:b9:a8:57:29:d4:2e:d9:dd:c1:1c:
         ac:2c:50:00:ca:05:02:09:bb:71:6d:e7:f1:95:d5:0b:db:e6:
         fb:54:d9:19:92:bb:3e:55:23:52:25:eb:c2:76:41:be:ca:63:
         a2:ce:fd:a9:84:36:70:f2:b3:db:04:94:cb:9b:1d:7e:49:20:
         25:cb:66:96:76:ed:c8:7e:4a:5c:db:4f:c4:12:77:c7:2d:83:
         17:60:fe:a2:9d:ca:e3:65:e9:3f:9e:7b:c8:98:cc:84:e0:fe:
         8a:c8:55:d2:05:a7:2c:4e:cc:c1:9d:37:ba:d1:ce:be:4f:91:
         89:34:65:81:97:72:5b:cf:a3:6f:02:e3:b4:0f:c7:c9:2c:ff:
         13:a5:f9:ff:6a:a9:49:cf:cb:59:e2:a2:8d:ff:ad:5c:33:cc:
         e3:0d:b3:63:0a:f0:ed:9d:44:e3:f3:e1:86:48:20:d0:ee:2e:
         55:c9:0c:7d
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIDDxr2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyhmYmQ1MmQyNjkwNzYw
YmNkNzIyMWI4NmEyOGNkMGUzYjNjZmRkYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmrbI4WV1ONdUBVDEbkHRSwPTP4ue5xS/cXVHiv1tFJutAFMe
u4xtNs0depyBJxRJa9408oL0iTjZ6PKVW67PWZ67ohN0tfpNfvT3ocVIGlJ+Zsff
4R6oyM+traVjl9sAgSGl3PPNmgapgxrVBt/foQHQMM55lrUAEcipZdnbYSThaQGt
wz3KlvWdGT1IZo5Xi1L9xT+jNdESJz3YlPv/wrPPAW82Bkr4gSpm01EP7cGrQc7h
OAsr2HDQRtE1dWDMDrXWb6m15VmIPwRhOkbezvBegsKhzFxKIEV7hC4alDnqD2U2
iMnJ/lQa5Hc+NnjWy44m7xekBucYFJ54BZBsBwIDAQABo4ICbTCCAmkwHQYDVR0O
BBYEFLkW7gncwn8Vp5lPAza9WQPvGBkmMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiL2ZiZDUyZDI2OTA3NjBiY2Q3MjIxYjg2YTI4Y2QwZTNiM2NmZGRiZmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQi
MCAwHgQCAAEwGAMEAL9gSwMEAb9gaAMEAL9gyQMEAL9g7zANBgkqhkiG9w0BAQsF
AAOCAQEAdAq58UNm23lnoa3Z0+v0UQcZ3N8+/QVRfROdPM4WGT09oV/ExG7fx/CH
qvZpgCjr+OZalLLXOwHTg28gAWIOshVwFjoBqzCrTpF/0/Acn/y5qFcp1C7Z3cEc
rCxQAMoFAgm7cW3n8ZXVC9vm+1TZGZK7PlUjUiXrwnZBvspjos79qYQ2cPKz2wSU
y5sdfkkgJctmlnbtyH5KXNtPxBJ3xy2DF2D+op3K42XpP557yJjMhOD+ishV0gWn
LE7MwZ03utHOvk+RiTRlgZdyW8+jbwLjtA/HySz/E6X5/2qpSc/LWeKijf+tXDPM
4w2zYwrw7Z1E4/Phhkgg0O4uVckMfQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org