Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/4f4b9c60c46de52521caac88df1e105c7823fd20.roa
File:                     4f4b9c60c46de52521caac88df1e105c7823fd20.roa (raw, json)
Hash identifier:          GdFCzSWmkxCyTOyCyy+Yvnd9LUt6x+xc0x9GRtvCF7U=
Subject key identifier:   2A:1F:9A:6C:9D:5E:D2:57:FC:8F:A2:58:74:B6:17:2A:81:A8:86:CE
Certificate issuer:       /CN=1f366347be3551a900ee22a8f8e9e1de8ffa1d31
Certificate serial:       04B927
Authority key identifier: 3A:84:D3:30:17:CD:30:A3:7B:9C:43:B2:87:E2:2F:23:32:B6:26:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f366347be3551a900ee22a8f8e9e1de8ffa1d31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/4f4b9c60c46de52521caac88df1e105c7823fd20.roa
Signing time:             Wed 31 May 2023 14:39:22 +0000
ROA not before:           Tue 30 May 2023 14:39:22 +0000
ROA not after:            Sat 31 May 2025 14:39:22 +0000
asID:                     270037
IP address blocks:        191.52.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309543 (0x4b927)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f366347be3551a900ee22a8f8e9e1de8ffa1d31
        Validity
            Not Before: May 30 14:39:22 2023 GMT
            Not After : May 31 14:39:22 2025 GMT
        Subject: CN=4f4b9c60c46de52521caac88df1e105c7823fd20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c4:27:12:bc:ea:34:c3:e0:6f:a9:0d:68:cf:
                    41:28:45:ae:56:65:e5:57:f7:8a:d5:54:35:fd:d3:
                    77:a5:8b:57:c0:b9:fb:2c:b8:9b:c5:fe:ec:eb:97:
                    5b:5d:84:7f:14:9b:59:00:85:20:41:32:e8:97:24:
                    ac:5f:c0:a5:30:fb:48:c5:41:01:e8:a9:bd:09:25:
                    e4:68:cf:47:77:45:8f:6e:9c:bc:94:1e:ca:de:d5:
                    55:16:ea:00:86:a8:ae:7e:f8:c3:5d:75:5b:1f:f9:
                    29:1c:ea:c6:37:9c:22:d5:0b:57:dd:b4:ab:e7:89:
                    e7:73:ea:9e:a3:80:1f:40:a4:02:3a:5f:d6:e2:a2:
                    03:50:d1:f1:ec:d3:cb:49:20:7b:49:1a:92:f7:d7:
                    ec:da:e8:38:6d:56:e4:e6:3b:57:78:9a:34:26:a2:
                    ce:8d:eb:63:fe:33:2b:76:b5:5a:34:42:c8:37:d6:
                    5f:a1:af:74:14:0f:ba:2c:ba:96:d2:0b:6b:d9:cc:
                    3f:6a:b3:10:fd:9c:e5:97:7a:50:b7:f9:fc:f7:c7:
                    ac:91:da:d1:32:f6:80:81:6c:3b:b5:cd:c0:db:aa:
                    23:57:b7:70:22:a3:e0:b4:b8:e0:a5:33:02:8f:e5:
                    c2:1e:58:45:d4:0f:c5:25:47:eb:d6:85:0c:78:5e:
                    ca:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1F:9A:6C:9D:5E:D2:57:FC:8F:A2:58:74:B6:17:2A:81:A8:86:CE
            X509v3 Authority Key Identifier:
                keyid:3A:84:D3:30:17:CD:30:A3:7B:9C:43:B2:87:E2:2F:23:32:B6:26:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1f366347be3551a900ee22a8f8e9e1de8ffa1d31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/4f4b9c60c46de52521caac88df1e105c7823fd20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fa0169d-f82f-420c-b689-0a6640618fe1/1f366347be3551a900ee22a8f8e9e1de8ffa1d31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:e1:d6:67:c0:e2:fc:18:3c:b2:95:ca:00:63:c5:dc:71:25:
         3f:8a:4d:2c:fd:b1:ab:ba:fc:4d:c1:1f:a7:03:72:65:45:47:
         71:5b:70:96:82:2e:3e:db:92:62:ff:4b:8e:00:ce:8e:cd:ae:
         93:34:37:5f:6c:a0:2d:19:b4:0f:bc:62:1c:73:b2:4e:ca:4f:
         17:d3:d1:ca:25:4f:0c:a0:da:a1:c6:b9:7c:68:9a:4a:71:15:
         da:4c:02:a1:58:78:8b:50:f1:89:b5:c1:d5:71:f0:2f:fa:6a:
         f1:67:e2:31:6b:a5:9f:3b:83:57:da:93:cf:dc:f9:06:c9:a5:
         68:41:7c:df:5e:ce:b0:19:74:5a:41:bc:5f:99:e6:b1:7c:94:
         47:81:59:e6:a2:00:d6:13:5e:96:ae:10:17:8c:03:c5:e3:82:
         81:e8:39:8a:61:a7:52:0b:cf:49:55:5d:a4:d6:15:92:59:ac:
         28:51:a1:cb:f1:4b:05:b7:0b:fa:19:dc:80:49:4a:35:bd:cb:
         12:ee:96:10:03:f4:76:89:8c:2f:7a:b4:ef:06:7d:d2:84:2c:
         71:6e:37:5f:4f:d9:7d:a8:72:78:af:0a:52:04:d4:c5:a3:65:
         17:42:5e:9c:86:51:ec:96:82:a3:88:c8:88:9c:5a:c8:e5:27:
         3b:e5:6f:31
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBLknMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFm
MzY2MzQ3YmUzNTUxYTkwMGVlMjJhOGY4ZTllMWRlOGZmYTFkMzEwHhcNMjMwNTMw
MTQzOTIyWhcNMjUwNTMxMTQzOTIyWjAzMTEwLwYDVQQDEyg0ZjRiOWM2MGM0NmRl
NTI1MjFjYWFjODhkZjFlMTA1Yzc4MjNmZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnMQnErzqNMPgb6kNaM9BKEWuVmXlV/eK1VQ1/dN3pYtXwLn7
LLibxf7s65dbXYR/FJtZAIUgQTLolySsX8ClMPtIxUEB6Km9CSXkaM9Hd0WPbpy8
lB7K3tVVFuoAhqiufvjDXXVbH/kpHOrGN5wi1QtX3bSr54nnc+qeo4AfQKQCOl/W
4qIDUNHx7NPLSSB7SRqS99fs2ug4bVbk5jtXeJo0JqLOjetj/jMrdrVaNELIN9Zf
oa90FA+6LLqW0gtr2cw/arMQ/Zzll3pQt/n898eskdrRMvaAgWw7tc3A26ojV7dw
IqPgtLjgpTMCj+XCHlhF1A/FJUfr1oUMeF7KZwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCofmmydXtJX/I+iWHS2FyqBqIbOMB8GA1UdIwQYMBaAFDqE0zAXzTCje5xD
sofiLyMytiYCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWYzNjYz
NDdiZTM1NTFhOTAwZWUyMmE4ZjhlOWUxZGU4ZmZhMWQzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGZhMDE2OWQtZjgyZi00MjBjLWI2ODktMGE2NjQw
NjE4ZmUxLzRmNGI5YzYwYzQ2ZGU1MjUyMWNhYWM4OGRmMWUxMDVjNzgyM2ZkMjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZmEwMTY5ZC1mODJmLTQyMGMtYjY4OS0wYTY2
NDA2MThmZTEvMWYzNjYzNDdiZTM1NTFhOTAwZWUyMmE4ZjhlOWUxZGU4ZmZhMWQz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr801DANBgkqhkiG9w0BAQsFAAOCAQEAmeHWZ8Di/Bg8spXK
AGPF3HElP4pNLP2xq7r8TcEfpwNyZUVHcVtwloIuPtuSYv9LjgDOjs2ukzQ3X2yg
LRm0D7xiHHOyTspPF9PRyiVPDKDaoca5fGiaSnEV2kwCoVh4i1DxibXB1XHwL/pq
8WfiMWulnzuDV9qTz9z5BsmlaEF8317OsBl0WkG8X5nmsXyUR4FZ5qIA1hNelq4Q
F4wDxeOCgeg5imGnUgvPSVVdpNYVklmsKFGhy/FLBbcL+hncgElKNb3LEu6WEAP0
domML3q07wZ90oQscW43X0/ZfahyeK8KUgTUxaNlF0JenIZR7JaCo4jIiJxayOUn
O+VvMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org