Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5118c0ae-3c95-490d-9a25-46d08dc22994/4043f09cc5e166d50a610689881a635fe6979df1.roa
File:                     4043f09cc5e166d50a610689881a635fe6979df1.roa (raw, json)
Hash identifier:          UOg5E5N73Lnoqho/CRGYLecb4SzF7cHt1EjZR3d13GM=
Subject key identifier:   73:62:6D:BB:45:4D:28:F2:DD:CC:AE:34:03:AC:A0:85:BE:14:16:AC
Certificate issuer:       /CN=ee42e5a432e083cea8550e05b2516cca17761923
Certificate serial:       FE0E
Authority key identifier: A7:7F:03:85:AD:0C:BA:96:76:57:49:DF:DE:03:EA:98:13:3A:17:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee42e5a432e083cea8550e05b2516cca17761923.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5118c0ae-3c95-490d-9a25-46d08dc22994/4043f09cc5e166d50a610689881a635fe6979df1.roa
Signing time:             Tue 06 Jun 2023 20:41:26 +0000
ROA not before:           Mon 05 Jun 2023 20:41:26 +0000
ROA not after:            Fri 06 Jun 2025 20:41:26 +0000
asID:                     263241
IP address blocks:        192.100.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65038 (0xfe0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee42e5a432e083cea8550e05b2516cca17761923
        Validity
            Not Before: Jun  5 20:41:26 2023 GMT
            Not After : Jun  6 20:41:26 2025 GMT
        Subject: CN=4043f09cc5e166d50a610689881a635fe6979df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:79:8d:25:9a:54:fa:39:93:d0:b4:42:fb:f6:
                    53:09:68:bf:e2:6f:a7:ee:92:46:97:27:77:f0:d9:
                    d6:c7:e6:76:18:1b:9b:f1:5b:02:1c:ae:eb:bb:79:
                    f5:91:3c:68:da:7e:a8:ca:47:e4:3e:63:eb:87:7e:
                    ad:65:d4:ec:db:53:1a:c4:16:f6:a2:04:61:d5:85:
                    4b:99:1d:20:7d:e8:50:1c:36:b9:73:40:ca:1a:23:
                    36:d0:a9:28:84:d3:d5:41:d2:9a:47:d3:14:62:a9:
                    5b:3f:1c:f1:37:ca:91:67:2b:50:04:a6:4b:c8:27:
                    87:53:00:04:29:f1:00:a3:f3:5f:a1:62:69:4b:a2:
                    f2:5f:fc:66:91:42:c6:07:c9:b7:7b:c6:6d:a4:28:
                    9b:ce:88:3a:58:11:9a:c8:81:a6:06:25:8b:51:70:
                    2c:8a:4f:37:99:73:14:16:07:e7:b3:49:41:21:6e:
                    0b:37:5e:c9:69:be:b8:d4:e6:02:9a:3f:49:6f:07:
                    2f:eb:a5:03:e7:bc:8c:93:65:21:0e:3e:f1:d6:66:
                    f2:6c:66:68:83:67:f6:87:91:2b:7c:06:a2:d7:ec:
                    4a:f3:cf:6e:a5:a9:81:f4:f2:ef:02:b4:8d:b5:2b:
                    ee:18:c3:ad:ed:4a:f6:4b:e4:82:97:fb:8f:42:09:
                    04:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:62:6D:BB:45:4D:28:F2:DD:CC:AE:34:03:AC:A0:85:BE:14:16:AC
            X509v3 Authority Key Identifier:
                keyid:A7:7F:03:85:AD:0C:BA:96:76:57:49:DF:DE:03:EA:98:13:3A:17:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee42e5a432e083cea8550e05b2516cca17761923.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5118c0ae-3c95-490d-9a25-46d08dc22994/4043f09cc5e166d50a610689881a635fe6979df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5118c0ae-3c95-490d-9a25-46d08dc22994/ee42e5a432e083cea8550e05b2516cca17761923.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:e8:c3:78:47:14:a7:23:8b:32:c5:98:f6:3d:ac:32:01:2f:
         f4:4f:91:89:d5:a7:48:33:2d:05:a8:57:d6:5f:ba:69:15:1e:
         ef:b1:fe:2a:f6:56:7f:47:77:c1:47:9b:bb:f0:92:8e:7a:0d:
         54:ce:10:f3:58:74:c1:72:de:50:c8:e0:e7:72:99:77:e0:92:
         80:0b:7d:c7:1f:21:a6:7d:75:6c:25:29:d0:db:d4:3d:a7:eb:
         57:72:dc:45:4d:57:b7:0e:ad:38:89:ad:51:1a:e0:07:2c:ad:
         00:00:9a:80:c3:6a:f9:d7:db:91:5b:f2:15:8f:59:1e:8f:61:
         ba:10:c2:3b:6f:43:89:c3:a1:37:be:13:56:9a:b8:03:bb:c7:
         65:3e:33:fa:cf:09:aa:74:f8:d0:34:14:ac:5d:38:f5:97:1a:
         20:83:b6:8c:f3:00:3a:5d:1d:4c:90:c7:31:a9:0e:cc:c4:56:
         e7:e9:72:04:bc:e5:be:e6:0c:94:12:18:b3:0c:9f:a5:d6:a4:
         dc:de:41:1f:67:76:c5:90:f4:85:2c:38:56:56:41:de:37:1d:
         77:c2:d6:48:d5:58:77:7c:ba:0c:15:87:b5:be:18:2c:b6:68:
         6b:92:01:61:9a:c0:27:8e:b3:5b:68:f8:ae:4f:5f:80:be:50:
         85:ec:28:4e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAP4OMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl
NDJlNWE0MzJlMDgzY2VhODU1MGUwNWIyNTE2Y2NhMTc3NjE5MjMwHhcNMjMwNjA1
MjA0MTI2WhcNMjUwNjA2MjA0MTI2WjAzMTEwLwYDVQQDEyg0MDQzZjA5Y2M1ZTE2
NmQ1MGE2MTA2ODk4ODFhNjM1ZmU2OTc5ZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjHmNJZpU+jmT0LRC+/ZTCWi/4m+n7pJGlyd38NnWx+Z2GBub
8VsCHK7ru3n1kTxo2n6oykfkPmPrh36tZdTs21MaxBb2ogRh1YVLmR0gfehQHDa5
c0DKGiM20KkohNPVQdKaR9MUYqlbPxzxN8qRZytQBKZLyCeHUwAEKfEAo/NfoWJp
S6LyX/xmkULGB8m3e8ZtpCibzog6WBGayIGmBiWLUXAsik83mXMUFgfns0lBIW4L
N17Jab641OYCmj9Jbwcv66UD57yMk2UhDj7x1mbybGZog2f2h5ErfAai1+xK889u
pamB9PLvArSNtSvuGMOt7Ur2S+SCl/uPQgkEKwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFHNibbtFTSjy3cyuNAOsoIW+FBasMB8GA1UdIwQYMBaAFKd/A4WtDLqWdldJ
394D6pgTOhcLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZWU0MmU1
YTQzMmUwODNjZWE4NTUwZTA1YjI1MTZjY2ExNzc2MTkyMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTExOGMwYWUtM2M5NS00OTBkLTlhMjUtNDZkMDhk
YzIyOTk0LzQwNDNmMDljYzVlMTY2ZDUwYTYxMDY4OTg4MWE2MzVmZTY5NzlkZjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MTE4YzBhZS0zYzk1LTQ5MGQtOWEyNS00NmQw
OGRjMjI5OTQvZWU0MmU1YTQzMmUwODNjZWE4NTUwZTA1YjI1MTZjY2ExNzc2MTky
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMBk/jANBgkqhkiG9w0BAQsFAAOCAQEAJOjDeEcUpyOLMsWY
9j2sMgEv9E+RidWnSDMtBahX1l+6aRUe77H+KvZWf0d3wUebu/CSjnoNVM4Q81h0
wXLeUMjg53KZd+CSgAt9xx8hpn11bCUp0NvUPafrV3LcRU1Xtw6tOImtURrgByyt
AACagMNq+dfbkVvyFY9ZHo9huhDCO29DicOhN74TVpq4A7vHZT4z+s8JqnT40DQU
rF049ZcaIIO2jPMAOl0dTJDHMakOzMRW5+lyBLzlvuYMlBIYswyfpdak3N5BH2d2
xZD0hSw4VlZB3jcdd8LWSNVYd3y6DBWHtb4YLLZoa5IBYZrAJ46zW2j4rk9fgL5Q
hewoTg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org