Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/e1abb9a3a3f62904f48ea13b3a812d7cd3f15064.roa
File:                     e1abb9a3a3f62904f48ea13b3a812d7cd3f15064.roa (raw, json)
Hash identifier:          KPeuyvtXKr87zKZwpXOT0wAD+CgIV4cZdqS2shPJ+qI=
Subject key identifier:   8B:AC:88:12:F1:7A:FD:A8:98:61:82:46:32:20:A3:AA:78:D0:9D:3F
Certificate issuer:       /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial:       1A1FDB
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/e1abb9a3a3f62904f48ea13b3a812d7cd3f15064.roa
Signing time:             Wed 10 Aug 2022 19:54:00 +0000
ROA not before:           Tue 17 May 2022 03:00:00 +0000
ROA not after:            Fri 17 May 2024 03:00:00 +0000
asID:                     27986
IP address blocks:        152.231.110.0/24 maxlen: 24
                          152.231.111.0/24 maxlen: 24
                          2800:300::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712091 (0x1a1fdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
        Validity
            Not Before: May 17 03:00:00 2022 GMT
            Not After : May 17 03:00:00 2024 GMT
        Subject: CN=e1abb9a3a3f62904f48ea13b3a812d7cd3f15064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:8b:92:0f:ee:12:54:10:b3:24:c5:79:e6:
                    1e:a3:ba:1f:ff:4c:da:e9:56:6d:6f:01:27:59:08:
                    e9:c4:99:3f:b6:f1:2b:7b:b2:b8:9a:de:e8:f9:52:
                    74:ee:0d:a7:bc:24:32:ee:15:0e:dc:fc:49:b5:65:
                    34:fb:97:6b:17:01:60:a7:6f:12:bb:b8:57:41:ed:
                    5f:26:50:a1:6e:6d:51:db:be:cd:25:75:09:e2:93:
                    24:89:93:ab:53:aa:6c:f0:66:00:b2:df:e6:7e:b3:
                    f9:09:65:7e:98:d1:2b:22:84:f5:5a:1e:cb:16:ac:
                    03:99:5a:38:ad:96:2b:0a:f3:ce:fc:bd:84:b6:38:
                    ea:55:07:99:ef:41:50:a2:e5:cb:d9:cf:f7:26:11:
                    93:c9:a2:e4:cb:03:df:91:5d:a7:db:6a:bf:e7:30:
                    b6:59:6c:1f:5d:13:85:7f:cb:d6:d7:66:5b:11:39:
                    cd:0a:11:d7:60:bf:b2:73:9f:2a:50:7f:c6:6b:59:
                    d5:8c:4e:1e:6e:f1:af:dc:f9:1a:c4:aa:ec:2f:53:
                    39:8e:f5:0a:ff:0a:4c:ab:23:23:04:6b:d7:0d:99:
                    37:48:35:6d:0a:d3:65:ca:e1:78:b2:22:17:b9:74:
                    fe:8a:48:4f:6f:de:cf:fa:6a:f5:ce:86:32:f0:de:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AC:88:12:F1:7A:FD:A8:98:61:82:46:32:20:A3:AA:78:D0:9D:3F
            X509v3 Authority Key Identifier:
                keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/e1abb9a3a3f62904f48ea13b3a812d7cd3f15064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.110.0/23
                IPv6:
                  2800:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:70:9d:56:f1:35:1e:54:28:3c:3f:0a:7c:d8:3e:58:dd:0b:
         8a:ec:23:a6:d1:48:bb:ae:90:43:19:74:60:ea:a0:40:62:32:
         fa:1a:a6:4d:2c:36:83:7a:f7:e1:95:22:93:8f:b9:74:c6:fb:
         bc:8c:61:7b:b2:6f:20:00:57:fc:c5:24:54:08:16:c8:29:a1:
         61:7e:8f:63:56:e3:25:37:fc:70:6d:86:3d:f6:d7:aa:b0:41:
         b7:6c:cf:93:c3:23:0d:68:c3:2d:e1:39:88:b5:ba:a7:ab:2a:
         af:17:fd:78:fa:4c:ef:80:b4:04:4c:17:94:f9:f3:25:d3:56:
         90:5f:a2:38:69:d9:98:78:46:ba:dd:01:d1:5c:44:33:81:16:
         12:b0:97:2f:e8:24:6e:88:7e:bb:e0:71:1a:47:7d:fb:03:a2:
         97:50:57:12:c8:2a:54:61:de:54:bc:c5:0b:46:36:8e:61:33:
         d7:56:b2:31:80:0c:44:82:59:ce:72:70:d7:a2:92:7c:c8:13:
         25:67:d5:32:a7:99:ad:b3:81:97:35:d8:29:f0:d1:0a:b7:40:
         bf:fd:f2:15:4c:84:4d:60:25:dc:b9:ac:e9:0a:6f:8d:6a:c8:
         2f:74:5b:68:03:61:2c:4f:8d:71:b4:fd:fc:5c:c7:5b:87:71:
         e7:f6:85:a4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDGh/bMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
ZmJiYjE3M2MyMTdhYTgwMzBmYzZkOTM3OTg0MzU3OTIyOWNlMzEwHhcNMjIwNTE3
MDMwMDAwWhcNMjQwNTE3MDMwMDAwWjAzMTEwLwYDVQQDEyhlMWFiYjlhM2EzZjYy
OTA0ZjQ4ZWExM2IzYTgxMmQ3Y2QzZjE1MDY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAr42Lkg/uElQQsyTFeeYeo7of/0za6VZtbwEnWQjpxJk/tvEr
e7K4mt7o+VJ07g2nvCQy7hUO3PxJtWU0+5drFwFgp28Su7hXQe1fJlChbm1R277N
JXUJ4pMkiZOrU6ps8GYAst/mfrP5CWV+mNErIoT1Wh7LFqwDmVo4rZYrCvPO/L2E
tjjqVQeZ70FQouXL2c/3JhGTyaLkywPfkV2n22q/5zC2WWwfXROFf8vW12ZbETnN
ChHXYL+yc58qUH/Ga1nVjE4ebvGv3PkaxKrsL1M5jvUK/wpMqyMjBGvXDZk3SDVt
CtNlyuF4siIXuXT+ikhPb97P+mr1zoYy8N7S8QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFIusiBLxev2omGGCRjIgo6p40J0/MB8GA1UdIwQYMBaAFG3Yh857qEWbykhx
HffAqeGP1nKBMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVmYmJi
MTczYzIxN2FhODAzMGZjNmQ5Mzc5ODQzNTc5MjI5Y2UzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDRhZmQxNzAtMDc1ZS00M2RmLWI0YTEtYzM0Zjc2
YzE4Y2NlL2UxYWJiOWEzYTNmNjI5MDRmNDhlYTEzYjNhODEyZDdjZDNmMTUwNjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80NGFmZDE3MC0wNzVlLTQzZGYtYjRhMS1jMzRm
NzZjMThjY2UvMDVmYmJiMTczYzIxN2FhODAzMGZjNmQ5Mzc5ODQzNTc5MjI5Y2Uz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAZjnbjANBAIAAjAHAwUAKAADADANBgkqhkiG9w0BAQsFAAOC
AQEAeHCdVvE1HlQoPD8KfNg+WN0LiuwjptFIu66QQxl0YOqgQGIy+hqmTSw2g3r3
4ZUik4+5dMb7vIxhe7JvIABX/MUkVAgWyCmhYX6PY1bjJTf8cG2GPfbXqrBBt2zP
k8MjDWjDLeE5iLW6p6sqrxf9ePpM74C0BEwXlPnzJdNWkF+iOGnZmHhGut0B0VxE
M4EWErCXL+gkboh+u+BxGkd9+wOil1BXEsgqVGHeVLzFC0Y2jmEz11ayMYAMRIJZ
znJw16KSfMgTJWfVMqeZrbOBlzXYKfDRCrdAv/3yFUyETWAl3Lms6QpvjWrIL3Rb
aANhLE+NcbT9/FzHW4dx5/aFpA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org