Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58f2e428-896b-4d05-b2ae-4e8513a719d0/c9cd631dca14c15842e0c03aaeb25135480b0591.roa
File:                     c9cd631dca14c15842e0c03aaeb25135480b0591.roa (raw, json)
Hash identifier:          +w7PKEzxVaO20JM8vAjSy0FUQ09aY5Nu0qUlwTbnwE4=
Subject key identifier:   0A:F6:9C:60:D4:79:D3:92:8A:7B:F1:DF:E7:64:25:68:5D:05:A9:EE
Certificate issuer:       /CN=e800187477ec6f8da6658c6ca970d7556672d876
Certificate serial:       BD47
Authority key identifier: F2:87:77:55:3A:A1:E0:1E:10:3D:EA:A9:71:D7:C4:47:0E:11:D2:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e800187477ec6f8da6658c6ca970d7556672d876.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58f2e428-896b-4d05-b2ae-4e8513a719d0/c9cd631dca14c15842e0c03aaeb25135480b0591.roa
Signing time:             Fri 14 Oct 2022 17:32:41 +0000
ROA not before:           Thu 13 Oct 2022 17:32:33 +0000
ROA not after:            Mon 14 Oct 2024 17:32:33 +0000
asID:                     270029
IP address blocks:        179.109.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48455 (0xbd47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e800187477ec6f8da6658c6ca970d7556672d876
        Validity
            Not Before: Oct 13 17:32:33 2022 GMT
            Not After : Oct 14 17:32:33 2024 GMT
        Subject: CN=c9cd631dca14c15842e0c03aaeb25135480b0591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:24:1e:6f:4f:e9:e1:11:cb:cd:4d:29:07:
                    e2:3e:fb:ba:8a:36:7f:f7:a5:25:b5:76:6f:78:23:
                    e1:6a:dd:66:00:d3:1c:ce:2c:4c:d1:bd:39:c8:8d:
                    b9:c9:15:29:80:18:0c:9a:fd:84:25:9d:aa:09:3c:
                    79:9e:b7:98:10:7b:c1:6e:5c:63:5d:3a:30:d8:ab:
                    b5:63:a4:5a:15:d7:7a:f5:7d:54:38:38:dd:69:26:
                    11:9e:0b:d1:59:7e:67:c3:1d:d6:10:62:8d:f7:71:
                    99:da:ab:b1:29:e4:7d:c2:70:50:2e:9e:36:ce:d8:
                    d1:b3:a3:85:77:70:c8:b4:3c:05:ad:dd:13:33:ee:
                    14:03:6a:ae:e8:55:54:d2:10:9d:43:d5:88:68:d9:
                    fc:00:f4:54:a7:7d:9f:c3:41:cb:e8:9c:e4:ef:6b:
                    65:4f:6a:5b:10:23:de:7c:2d:b6:00:1f:cd:84:b2:
                    77:6b:b9:a9:e4:49:25:03:f4:ea:72:f9:7f:66:cd:
                    1f:d1:08:4a:eb:d7:0e:f9:af:86:9e:63:55:57:54:
                    fe:1b:a1:d0:d2:c6:a3:49:09:c9:53:92:1a:d1:7b:
                    36:7c:96:46:0d:87:cd:79:a6:b2:16:4a:34:01:50:
                    a9:c1:57:e9:cf:9a:dc:65:95:9d:2f:ac:78:e1:07:
                    9e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F6:9C:60:D4:79:D3:92:8A:7B:F1:DF:E7:64:25:68:5D:05:A9:EE
            X509v3 Authority Key Identifier:
                keyid:F2:87:77:55:3A:A1:E0:1E:10:3D:EA:A9:71:D7:C4:47:0E:11:D2:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e800187477ec6f8da6658c6ca970d7556672d876.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58f2e428-896b-4d05-b2ae-4e8513a719d0/c9cd631dca14c15842e0c03aaeb25135480b0591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58f2e428-896b-4d05-b2ae-4e8513a719d0/e800187477ec6f8da6658c6ca970d7556672d876.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:34:35:8c:e6:be:13:26:55:a0:04:ee:63:c1:6d:3a:29:62:
         d8:3b:14:92:18:cc:ec:8a:8f:16:86:dd:d9:b1:84:0d:2f:b2:
         a5:4a:ff:65:45:b5:59:5d:9b:64:1d:7e:a6:5a:be:4b:97:a1:
         72:43:91:7f:c6:ad:7f:f3:9c:ed:07:c9:5d:81:c7:88:60:2a:
         26:ee:b7:d2:d9:a3:78:82:82:0c:47:47:a9:79:89:50:ec:ee:
         ad:43:e5:3e:0a:11:22:a8:89:bc:c1:84:63:d0:13:9f:f3:57:
         d5:01:f5:20:15:20:48:8f:b7:1c:22:bd:34:a8:f8:25:46:1e:
         fc:da:5d:84:91:2b:9c:5a:5f:d5:5d:d8:64:b1:e2:75:f7:9f:
         b1:aa:df:1a:91:6d:4a:9b:76:44:c9:eb:40:9e:29:a0:5c:1a:
         b1:1e:0a:44:eb:e0:68:85:99:b1:4f:a7:48:7f:0a:25:f2:28:
         a4:ed:4a:54:06:79:72:0c:91:88:4f:ba:b9:d3:c5:02:14:60:
         16:95:4b:78:d7:55:f0:ab:08:3c:68:ba:0e:ee:67:5c:6a:15:
         c1:0a:f0:c7:7f:c4:18:1c:32:8a:ab:5e:c5:62:4b:f1:41:54:
         df:7e:b6:8e:62:0f:1e:99:39:e2:c5:99:3f:a5:49:01:bd:97:
         df:f3:0f:2a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAL1HMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4
MDAxODc0NzdlYzZmOGRhNjY1OGM2Y2E5NzBkNzU1NjY3MmQ4NzYwHhcNMjIxMDEz
MTczMjMzWhcNMjQxMDE0MTczMjMzWjAzMTEwLwYDVQQDEyhjOWNkNjMxZGNhMTRj
MTU4NDJlMGMwM2FhZWIyNTEzNTQ4MGIwNTkxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtwUkHm9P6eERy81NKQfiPvu6ijZ/96UltXZveCPhat1mANMc
zixM0b05yI25yRUpgBgMmv2EJZ2qCTx5nreYEHvBblxjXTow2Ku1Y6RaFdd69X1U
ODjdaSYRngvRWX5nwx3WEGKN93GZ2quxKeR9wnBQLp42ztjRs6OFd3DItDwFrd0T
M+4UA2qu6FVU0hCdQ9WIaNn8APRUp32fw0HL6Jzk72tlT2pbECPefC22AB/NhLJ3
a7mp5EklA/Tqcvl/Zs0f0QhK69cO+a+GnmNVV1T+G6HQ0sajSQnJU5Ia0Xs2fJZG
DYfNeaayFko0AVCpwVfpz5rcZZWdL6x44QeegwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAr2nGDUedOSinvx3+dkJWhdBanuMB8GA1UdIwQYMBaAFPKHd1U6oeAeED3q
qXHXxEcOEdK9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTgwMDE4
NzQ3N2VjNmY4ZGE2NjU4YzZjYTk3MGQ3NTU2NjcyZDg3Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNThmMmU0MjgtODk2Yi00ZDA1LWIyYWUtNGU4NTEz
YTcxOWQwL2M5Y2Q2MzFkY2ExNGMxNTg0MmUwYzAzYWFlYjI1MTM1NDgwYjA1OTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OGYyZTQyOC04OTZiLTRkMDUtYjJhZS00ZTg1
MTNhNzE5ZDAvZTgwMDE4NzQ3N2VjNmY4ZGE2NjU4YzZjYTk3MGQ3NTU2NjcyZDg3
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEArNtZDANBgkqhkiG9w0BAQsFAAOCAQEAFjQ1jOa+EyZVoATu
Y8FtOili2DsUkhjM7IqPFobd2bGEDS+ypUr/ZUW1WV2bZB1+plq+S5ehckORf8at
f/Oc7QfJXYHHiGAqJu630tmjeIKCDEdHqXmJUOzurUPlPgoRIqiJvMGEY9ATn/NX
1QH1IBUgSI+3HCK9NKj4JUYe/NpdhJErnFpf1V3YZLHidfefsarfGpFtSpt2RMnr
QJ4poFwasR4KROvgaIWZsU+nSH8KJfIopO1KVAZ5cgyRiE+6udPFAhRgFpVLeNdV
8KsIPGi6Du5nXGoVwQrwx3/EGBwyiqtexWJL8UFU3362jmIPHpk54sWZP6VJAb2X
3/MPKg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org