Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/2eb4dc6e60eeaff53b92fff9c292a5df7b072cfc.roa
File:                     2eb4dc6e60eeaff53b92fff9c292a5df7b072cfc.roa (raw, json)
Hash identifier:          6YjIIzfPolmOxKiA72QqnOF5POJ+r4sGvv2UJZpiIsk=
Subject key identifier:   02:47:64:6C:FA:36:1A:F2:03:F1:16:29:7E:58:14:5D:A8:65:B7:BE
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       014E93
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/2eb4dc6e60eeaff53b92fff9c292a5df7b072cfc.roa
Signing time:             Wed 14 Sep 2022 14:26:55 +0000
ROA not before:           Fri 19 Aug 2022 16:19:05 +0000
ROA not after:            Mon 19 Aug 2024 16:19:05 +0000
asID:                     27823
IP address blocks:        179.43.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85651 (0x14e93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:19:05 2022 GMT
            Not After : Aug 19 16:19:05 2024 GMT
        Subject: CN=2eb4dc6e60eeaff53b92fff9c292a5df7b072cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:66:2b:0e:e6:3c:35:57:27:06:72:4b:5e:
                    e6:de:98:77:85:bc:d2:ce:1e:47:e7:b2:ac:ad:18:
                    f4:4e:62:87:d7:e8:51:f5:b4:ab:09:82:26:96:21:
                    fc:36:63:34:58:ab:46:cf:90:46:4f:30:ae:37:67:
                    27:16:1d:a5:a5:13:b2:69:0f:33:bf:ec:7c:06:a5:
                    6a:fb:a6:0f:bd:eb:e2:36:29:b6:ae:19:67:71:03:
                    04:e5:28:00:b9:77:11:4c:fb:c8:92:bf:9c:bb:ec:
                    c5:f1:ab:94:1c:7c:f8:c4:32:79:c3:59:d2:09:9d:
                    db:b0:9a:89:33:b0:8e:13:b2:b3:4b:84:78:a4:68:
                    52:2a:59:63:62:45:89:46:fc:6c:0c:4d:30:dd:9c:
                    e4:ab:81:d6:3b:be:5b:01:cd:26:3b:5b:60:25:90:
                    71:6d:7d:75:49:d2:07:fa:48:43:5e:85:7f:82:4a:
                    34:0e:e9:11:f8:78:d6:82:e8:1a:15:40:f3:12:73:
                    85:ab:d3:88:16:10:c6:fc:ca:95:a1:bb:ac:48:75:
                    07:e9:dd:eb:05:ca:a5:8a:d8:5c:23:90:53:fb:74:
                    b4:af:d2:68:df:b0:85:a1:67:2e:bb:c1:f2:76:e6:
                    ef:eb:3c:ad:f8:86:15:f9:71:1b:a1:ba:80:d3:d3:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:47:64:6C:FA:36:1A:F2:03:F1:16:29:7E:58:14:5D:A8:65:B7:BE
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/2eb4dc6e60eeaff53b92fff9c292a5df7b072cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:99:94:cb:c2:71:ac:72:40:d0:dd:90:23:61:1c:f8:7c:0a:
         1d:fd:10:ef:e0:50:8a:b0:56:ef:fd:af:e0:b0:f7:ec:26:9f:
         37:1c:6f:49:07:cb:59:cc:9d:67:f8:b8:40:9b:cc:9a:dc:11:
         95:0b:53:a4:80:c3:3f:a5:ee:8d:04:a3:31:a4:1f:fd:be:4c:
         57:75:fa:0a:84:54:46:34:7a:96:2b:60:c8:c8:75:48:b3:3b:
         c2:81:9e:41:cc:08:60:81:9d:79:1f:87:97:85:ed:e4:79:ed:
         41:04:8f:d4:33:ec:f0:7b:a5:04:f7:a2:58:50:30:6b:8c:08:
         2c:6f:d0:ea:15:9a:3e:b8:8b:c8:c6:45:ce:87:ba:c5:f1:d0:
         22:16:da:d9:df:ea:fb:5f:c5:81:25:77:94:01:9e:e2:dc:86:
         c4:7f:f1:7b:a0:92:44:2a:a9:e9:cc:8b:8c:c0:a9:7f:76:99:
         af:a5:d4:be:40:c5:0a:ab:04:17:c4:80:e2:dd:8c:d2:28:2a:
         8a:f1:ca:4d:8b:b2:e6:4e:32:e0:4a:f3:d6:39:ac:03:40:0e:
         bd:dc:98:02:cf:ba:57:ac:6a:ef:03:97:bf:e7:8b:12:fb:4e:
         62:1c:d1:9d:12:0c:5e:55:e4:99:bc:9d:f3:e6:8c:23:0e:b2:
         3c:e5:24:c2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAU6TMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
N2UxMTllYmU1MWEwMGQ2NTYwYWI3M2ZkNzljNTFhZGE0MDNmMTkwHhcNMjIwODE5
MTYxOTA1WhcNMjQwODE5MTYxOTA1WjAzMTEwLwYDVQQDEygyZWI0ZGM2ZTYwZWVh
ZmY1M2I5MmZmZjljMjkyYTVkZjdiMDcyY2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoMVmKw7mPDVXJwZyS17m3ph3hbzSzh5H57KsrRj0TmKH1+hR
9bSrCYImliH8NmM0WKtGz5BGTzCuN2cnFh2lpROyaQ8zv+x8BqVq+6YPveviNim2
rhlncQME5SgAuXcRTPvIkr+cu+zF8auUHHz4xDJ5w1nSCZ3bsJqJM7COE7KzS4R4
pGhSKlljYkWJRvxsDE0w3Zzkq4HWO75bAc0mO1tgJZBxbX11SdIH+khDXoV/gko0
DukR+HjWgugaFUDzEnOFq9OIFhDG/MqVobusSHUH6d3rBcqlithcI5BT+3S0r9Jo
37CFoWcuu8Hydubv6zyt+IYV+XEbobqA09P2iwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAJHZGz6NhryA/EWKX5YFF2oZbe+MB8GA1UdIwQYMBaAFAcJN4jtSoDCDN7O
EKf/uzEhonKeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjk3ZTEx
OWViZTUxYTAwZDY1NjBhYjczZmQ3OWM1MWFkYTQwM2YxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGQ4ZGYwZjAtNDFjNC00MDFkLWFjMTUtZGUwZGI0
MGFjOWNiLzJlYjRkYzZlNjBlZWFmZjUzYjkyZmZmOWMyOTJhNWRmN2IwNzJjZmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZDhkZjBmMC00MWM0LTQwMWQtYWMxNS1kZTBk
YjQwYWM5Y2IvMjk3ZTExOWViZTUxYTAwZDY1NjBhYjczZmQ3OWM1MWFkYTQwM2Yx
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALMrezANBgkqhkiG9w0BAQsFAAOCAQEAX5mUy8JxrHJA0N2Q
I2Ec+HwKHf0Q7+BQirBW7/2v4LD37CafNxxvSQfLWcydZ/i4QJvMmtwRlQtTpIDD
P6XujQSjMaQf/b5MV3X6CoRURjR6litgyMh1SLM7woGeQcwIYIGdeR+Hl4Xt5Hnt
QQSP1DPs8HulBPeiWFAwa4wILG/Q6hWaPriLyMZFzoe6xfHQIhba2d/q+1/FgSV3
lAGe4tyGxH/xe6CSRCqp6cyLjMCpf3aZr6XUvkDFCqsEF8SA4t2M0igqivHKTYuy
5k4y4Erz1jmsA0AOvdyYAs+6V6xq7wOXv+eLEvtOYhzRnRIMXlXkmbyd8+aMIw6y
POUkwg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org