Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/04d88f4b6077810f072e83ff499cf994c70ab254.roa
File:                     04d88f4b6077810f072e83ff499cf994c70ab254.roa (raw, json)
Hash identifier:          9KoHmOQaH2rouJ/dR5hKDM98BvWYNowe/Exq7icRpno=
Subject key identifier:   31:2F:C1:FB:6E:44:28:FD:B8:D8:D9:FC:B1:22:66:6A:B4:5D:82:98
Certificate issuer:       /CN=a0ece5cb3349a401474499eb301920b68090f2ce
Certificate serial:       10EE1F
Authority key identifier: 94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/04d88f4b6077810f072e83ff499cf994c70ab254.roa
Signing time:             Thu 29 Jul 2021 07:17:36 +0000
ROA not before:           Wed 28 Jul 2021 03:00:00 +0000
ROA not after:            Fri 28 Jul 2023 03:00:00 +0000
asID:                     266664
IP address blocks:        192.141.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109535 (0x10ee1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ece5cb3349a401474499eb301920b68090f2ce
        Validity
            Not Before: Jul 28 03:00:00 2021 GMT
            Not After : Jul 28 03:00:00 2023 GMT
        Subject: CN=04d88f4b6077810f072e83ff499cf994c70ab254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:55:1b:25:cd:2c:ea:42:0f:88:30:d6:3a:b4:
                    9f:09:29:f9:80:e9:e9:9f:96:c0:9f:1f:4c:a7:a8:
                    5e:6c:de:24:77:a0:62:d5:08:32:00:2d:3f:81:dc:
                    7e:5c:79:59:68:d1:6b:6e:78:c6:ce:c6:aa:af:62:
                    27:95:12:58:21:d1:f1:d4:4b:57:f9:1d:2c:d7:91:
                    f1:1d:94:5d:eb:c6:40:74:3d:1c:e7:eb:d0:33:eb:
                    fa:60:61:d6:fe:bf:8b:73:43:e8:3c:31:77:25:4b:
                    9a:aa:71:07:a9:ff:09:2f:f5:6f:12:3d:f8:0b:71:
                    91:e8:a7:17:90:94:00:3e:7d:b8:bd:6a:32:e8:62:
                    7d:61:c0:28:d1:0f:e9:e3:a0:ce:2e:6e:de:69:7a:
                    3a:5c:31:19:9a:8c:5d:2f:f4:f5:42:5b:26:67:ff:
                    56:dc:a7:3a:f0:e6:3e:ab:df:0f:8d:fd:4c:85:36:
                    dc:18:a7:fc:70:43:7f:82:f7:ab:f3:b1:02:00:e7:
                    47:1a:a7:c3:6c:46:85:62:0d:14:5e:07:47:6c:60:
                    3f:f0:6f:a6:df:c8:80:69:fc:97:a3:ee:2a:3a:88:
                    3b:84:b2:d3:05:c2:c5:73:bd:78:ba:60:0c:d0:b4:
                    12:89:9c:6c:39:d3:35:36:e1:1c:b0:67:b3:20:7e:
                    f3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2F:C1:FB:6E:44:28:FD:B8:D8:D9:FC:B1:22:66:6A:B4:5D:82:98
            X509v3 Authority Key Identifier:
                keyid:94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/04d88f4b6077810f072e83ff499cf994c70ab254.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/a0ece5cb3349a401474499eb301920b68090f2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:41:01:6a:bd:47:fa:d7:7f:bf:c9:d1:c1:47:2f:04:f2:74:
         88:68:3d:ff:ee:10:20:2c:ad:df:75:b6:de:9b:83:b7:b2:35:
         08:5b:36:29:e6:b5:e9:58:98:25:37:d0:0e:fe:b8:cb:cb:1a:
         89:9c:1f:69:4d:f6:37:e9:a9:42:63:5d:55:90:01:a3:dd:d1:
         13:ad:69:a4:41:e8:e4:61:64:93:55:ae:8e:fa:ee:f9:ca:9a:
         e7:aa:2d:d2:b9:93:ec:ba:12:d0:e9:27:f5:dd:76:50:41:5e:
         de:da:9c:81:84:66:35:e8:a6:41:2f:ff:e6:bf:24:92:cf:e1:
         cd:89:87:ec:f4:e8:ff:56:50:9e:f2:88:31:1d:bb:f8:05:fa:
         08:fe:d3:1c:1f:3d:55:f7:e2:ff:bf:bc:4e:15:a2:68:aa:e0:
         71:42:5a:9b:3e:9f:83:b0:e8:37:f4:a5:b9:58:c9:c0:f0:94:
         de:da:c3:43:73:49:4c:d6:1c:d5:1e:48:47:26:3b:f7:41:b3:
         28:24:96:9e:da:bd:40:1b:19:ca:bc:91:38:f4:6d:62:ea:22:
         ab:50:5a:0b:7e:36:12:e2:d5:c9:bf:dd:bc:0e:d5:a3:fe:fa:
         d2:f1:d3:68:de:44:e6:19:4b:ca:ec:af:55:ae:f9:e5:ad:02:
         a9:e0:db:14
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEO4fMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEw
ZWNlNWNiMzM0OWE0MDE0NzQ0OTllYjMwMTkyMGI2ODA5MGYyY2UwHhcNMjEwNzI4
MDMwMDAwWhcNMjMwNzI4MDMwMDAwWjAzMTEwLwYDVQQDEygwNGQ4OGY0YjYwNzc4
MTBmMDcyZTgzZmY0OTljZjk5NGM3MGFiMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA31UbJc0s6kIPiDDWOrSfCSn5gOnpn5bAnx9Mp6hebN4kd6Bi
1QgyAC0/gdx+XHlZaNFrbnjGzsaqr2InlRJYIdHx1EtX+R0s15HxHZRd68ZAdD0c
5+vQM+v6YGHW/r+Lc0PoPDF3JUuaqnEHqf8JL/VvEj34C3GR6KcXkJQAPn24vWoy
6GJ9YcAo0Q/p46DOLm7eaXo6XDEZmoxdL/T1QlsmZ/9W3Kc68OY+q98Pjf1MhTbc
GKf8cEN/gver87ECAOdHGqfDbEaFYg0UXgdHbGA/8G+m38iAafyXo+4qOog7hLLT
BcLFc714umAM0LQSiZxsOdM1NuEcsGezIH7zbQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDEvwftuRCj9uNjZ/LEiZmq0XYKYMB8GA1UdIwQYMBaAFJRSbBzul8wOk+dQ
fpB/67614pkdMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTBlY2U1
Y2IzMzQ5YTQwMTQ3NDQ5OWViMzAxOTIwYjY4MDkwZjJjZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMmQ5MzdmNjYtYWNlNi00MmEyLWJhYWUtZTE1MGI2
NmQwZTVlLzA0ZDg4ZjRiNjA3NzgxMGYwNzJlODNmZjQ5OWNmOTk0YzcwYWIyNTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yZDkzN2Y2Ni1hY2U2LTQyYTItYmFhZS1lMTUw
YjY2ZDBlNWUvYTBlY2U1Y2IzMzQ5YTQwMTQ3NDQ5OWViMzAxOTIwYjY4MDkwZjJj
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsCNCDANBgkqhkiG9w0BAQsFAAOCAQEAKkEBar1H+td/v8nR
wUcvBPJ0iGg9/+4QICyt33W23puDt7I1CFs2Kea16ViYJTfQDv64y8saiZwfaU32
N+mpQmNdVZABo93RE61ppEHo5GFkk1Wujvru+cqa56ot0rmT7LoS0Okn9d12UEFe
3tqcgYRmNeimQS//5r8kks/hzYmH7PTo/1ZQnvKIMR27+AX6CP7THB89Vffi/7+8
ThWiaKrgcUJamz6fg7DoN/SluVjJwPCU3trDQ3NJTNYc1R5IRyY790GzKCSWntq9
QBsZyryROPRtYuoiq1BaC342EuLVyb/dvA7Vo/760vHTaN5E5hlLyuyvVa755a0C
qeDbFA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org