Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/211777b9-be8e-41c5-9b5a-0215cce26a76/ed4d9e31f2b5a50f3762b0b4d5c408961fa2bc1a.roa
File:                     ed4d9e31f2b5a50f3762b0b4d5c408961fa2bc1a.roa (raw, json)
Hash identifier:          pUkIkHP0UCtMxD0QbtPZ8eGZt2905aIsEZL1Cw9G4Yw=
Subject key identifier:   20:EF:30:09:86:E6:9E:37:D5:3F:17:73:DD:01:0E:5E:BD:D6:A5:59
Certificate issuer:       /CN=e498dd94d86d24e0d445fe2ba583762324f575b5
Certificate serial:       1653C5
Authority key identifier: B0:63:99:01:6E:FC:92:30:A1:92:99:8D:91:69:B9:90:33:97:47:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e498dd94d86d24e0d445fe2ba583762324f575b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/211777b9-be8e-41c5-9b5a-0215cce26a76/ed4d9e31f2b5a50f3762b0b4d5c408961fa2bc1a.roa
Signing time:             Fri 02 Sep 2022 16:09:32 +0000
ROA not before:           Fri 02 Sep 2022 16:05:12 +0000
ROA not after:            Mon 02 Sep 2024 16:05:12 +0000
asID:                     14080
IP address blocks:        2801:152::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463237 (0x1653c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e498dd94d86d24e0d445fe2ba583762324f575b5
        Validity
            Not Before: Sep  2 16:05:12 2022 GMT
            Not After : Sep  2 16:05:12 2024 GMT
        Subject: CN=ed4d9e31f2b5a50f3762b0b4d5c408961fa2bc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:80:23:05:07:68:f9:9e:f0:88:8b:0c:04:
                    62:25:9c:1f:c0:ce:37:df:25:2d:0e:c0:3f:f4:e2:
                    72:4d:94:45:d8:68:1c:bc:e6:3e:68:a4:10:78:be:
                    9c:dd:b9:89:87:1d:1e:30:e5:f9:fe:2f:c6:a0:e8:
                    7d:f3:ba:68:03:a2:f4:ac:fe:c6:4a:ae:47:b7:20:
                    79:96:b1:72:c6:7c:b4:79:b9:c4:87:5b:4e:e9:2e:
                    18:1c:43:b3:b5:73:08:fc:ab:5c:55:92:c4:33:1c:
                    df:a8:4b:13:e3:c1:77:df:fb:6a:af:b5:28:b9:24:
                    68:dd:81:cc:92:85:b9:b2:32:e3:3a:bb:95:ed:5c:
                    9b:ea:d1:f4:4a:22:a5:c4:d1:5b:e4:41:ee:0d:20:
                    4b:82:77:ca:1c:cd:54:9d:b8:4b:85:b9:80:06:f3:
                    54:bf:4f:eb:90:f3:6a:c7:9b:d6:57:82:bf:0c:59:
                    b7:55:bd:11:dd:5f:48:ac:24:25:45:78:b4:84:cb:
                    40:bb:b9:38:db:bc:d2:3d:cb:cb:b4:cf:24:5b:0b:
                    ef:ba:30:e3:70:d3:f0:64:0c:6f:6a:ba:02:fe:af:
                    ab:43:87:a8:02:85:71:68:5f:a6:8e:1b:9e:53:1a:
                    a9:f1:13:64:f8:86:fc:d3:d7:23:54:cb:b2:4e:9f:
                    ef:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EF:30:09:86:E6:9E:37:D5:3F:17:73:DD:01:0E:5E:BD:D6:A5:59
            X509v3 Authority Key Identifier:
                keyid:B0:63:99:01:6E:FC:92:30:A1:92:99:8D:91:69:B9:90:33:97:47:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e498dd94d86d24e0d445fe2ba583762324f575b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/211777b9-be8e-41c5-9b5a-0215cce26a76/ed4d9e31f2b5a50f3762b0b4d5c408961fa2bc1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/211777b9-be8e-41c5-9b5a-0215cce26a76/e498dd94d86d24e0d445fe2ba583762324f575b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:152::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:d8:f5:3e:7c:f6:e1:22:ce:25:d8:05:5c:df:de:ef:c4:41:
         9e:da:c3:4b:37:14:eb:94:41:51:23:65:de:83:65:31:00:bb:
         32:e2:cf:ca:ec:e0:b5:95:69:a5:84:85:3c:50:79:e0:51:2d:
         6d:53:d5:d2:95:72:ad:3a:1b:82:89:93:96:ae:bb:a9:47:da:
         a3:05:32:48:24:01:68:2b:89:de:5e:4b:fc:f5:3c:f1:98:ad:
         da:7c:d7:ae:56:5d:81:4d:d6:e7:e6:4a:60:8f:5a:4f:c8:5d:
         14:e4:04:ce:29:c5:ad:f4:29:ca:df:e0:b6:2b:92:b6:50:7e:
         e6:0c:bb:8d:4d:14:e1:c5:c2:d5:ee:ef:ae:dc:46:4e:5c:3e:
         58:fd:e7:76:47:44:94:71:a6:72:42:5d:70:ba:0a:63:90:29:
         4d:aa:a4:ec:38:32:fc:d6:8e:40:11:55:b3:64:d0:68:45:b0:
         fe:3c:ff:df:54:f3:16:4b:fc:d6:4c:db:6d:1e:d0:a7:85:ec:
         1f:36:2d:19:30:0a:bc:10:ad:34:0f:c1:6b:9b:0b:b6:c5:fe:
         81:22:2e:44:f0:d7:93:21:24:4a:7f:7f:b2:e1:4f:96:8b:af:
         43:09:ca:3a:bc:13:cd:ef:84:85:e5:6c:e7:78:c8:6f:af:02:
         61:40:74:b8
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIDFlPFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU0
OThkZDk0ZDg2ZDI0ZTBkNDQ1ZmUyYmE1ODM3NjIzMjRmNTc1YjUwHhcNMjIwOTAy
MTYwNTEyWhcNMjQwOTAyMTYwNTEyWjAzMTEwLwYDVQQDEyhlZDRkOWUzMWYyYjVh
NTBmMzc2MmIwYjRkNWM0MDg5NjFmYTJiYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsNmAIwUHaPme8IiLDARiJZwfwM433yUtDsA/9OJyTZRF2Ggc
vOY+aKQQeL6c3bmJhx0eMOX5/i/GoOh987poA6L0rP7GSq5HtyB5lrFyxny0ebnE
h1tO6S4YHEOztXMI/KtcVZLEMxzfqEsT48F33/tqr7UouSRo3YHMkoW5sjLjOruV
7Vyb6tH0SiKlxNFb5EHuDSBLgnfKHM1UnbhLhbmABvNUv0/rkPNqx5vWV4K/DFm3
Vb0R3V9IrCQlRXi0hMtAu7k427zSPcvLtM8kWwvvujDjcNPwZAxvaroC/q+rQ4eo
AoVxaF+mjhueUxqp8RNk+Ib809cjVMuyTp/vSwIDAQABo4ICXTCCAlkwHQYDVR0O
BBYEFCDvMAmG5p431T8Xc90BDl691qVZMB8GA1UdIwQYMBaAFLBjmQFu/JIwoZKZ
jZFpuZAzl0caMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTQ5OGRk
OTRkODZkMjRlMGQ0NDVmZTJiYTU4Mzc2MjMyNGY1NzViNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjExNzc3YjktYmU4ZS00MWM1LTliNWEtMDIxNWNj
ZTI2YTc2L2VkNGQ5ZTMxZjJiNWE1MGYzNzYyYjBiNGQ1YzQwODk2MWZhMmJjMWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yMTE3NzdiOS1iZThlLTQxYzUtOWI1YS0wMjE1
Y2NlMjZhNzYvZTQ5OGRkOTRkODZkMjRlMGQ0NDVmZTJiYTU4Mzc2MjMyNGY1NzVi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACgBAVIAMA0GCSqGSIb3DQEBCwUAA4IBAQA52PU+fPbhIs4l
2AVc397vxEGe2sNLNxTrlEFRI2Xeg2UxALsy4s/K7OC1lWmlhIU8UHngUS1tU9XS
lXKtOhuCiZOWrrupR9qjBTJIJAFoK4neXkv89TzxmK3afNeuVl2BTdbn5kpgj1pP
yF0U5ATOKcWt9CnK3+C2K5K2UH7mDLuNTRThxcLV7u+u3EZOXD5Y/ed2R0SUcaZy
Ql1wugpjkClNqqTsODL81o5AEVWzZNBoRbD+PP/fVPMWS/zWTNttHtCnhewfNi0Z
MAq8EK00D8Frmwu2xf6BIi5E8NeTISRKf3+y4U+Wi69DCco6vBPN74SF5WzneMhv
rwJhQHS4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org