Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/7334a95570ee81537d0e64f871eb3b4226fdb302.roa
File:                     7334a95570ee81537d0e64f871eb3b4226fdb302.roa (raw, json)
Hash identifier:          j8IG42W49+AmbNlWA+iWB9zJ05NaRy1AHRG20h1Tpaw=
Subject key identifier:   EE:E9:96:59:34:C7:62:B1:8E:40:49:9E:E1:49:99:DC:CC:46:F8:BD
Certificate issuer:       /CN=a3e78c1484e71c4beb14c4af115739b15109a6f9
Certificate serial:       1C4EEF
Authority key identifier: ED:CB:4F:3B:87:0F:78:FA:D5:A9:7B:9E:12:F4:06:91:B9:5C:CE:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e78c1484e71c4beb14c4af115739b15109a6f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/7334a95570ee81537d0e64f871eb3b4226fdb302.roa
Signing time:             Wed 13 Dec 2023 16:29:04 +0000
ROA not before:           Wed 13 Dec 2023 16:29:04 +0000
ROA not after:            Sat 13 Dec 2025 16:29:04 +0000
asID:                     273080
IP address blocks:        201.222.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855215 (0x1c4eef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e78c1484e71c4beb14c4af115739b15109a6f9
        Validity
            Not Before: Dec 13 16:29:04 2023 GMT
            Not After : Dec 13 16:29:04 2025 GMT
        Subject: CN=7334a95570ee81537d0e64f871eb3b4226fdb302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:ac:61:ab:51:dd:70:a6:ef:2e:a6:5d:16:
                    33:ba:29:fa:7b:df:62:e7:1d:76:51:4c:12:54:16:
                    d1:d4:52:58:12:92:a6:a3:9e:17:fe:54:8e:77:b5:
                    e4:67:d7:ae:ff:8e:f1:12:66:e4:7f:a3:64:22:6e:
                    29:36:cf:60:c6:3a:78:1d:51:fd:1d:96:8d:3b:a6:
                    1e:23:d4:1d:3f:cd:ce:b8:47:1b:46:67:20:a4:27:
                    af:08:df:fc:56:80:70:9b:87:e3:0a:3e:32:78:a3:
                    af:ea:8e:9e:a3:30:c1:ce:b5:dc:ac:64:0a:05:43:
                    9c:92:a8:8a:38:7c:9b:bc:95:39:e9:3c:f8:20:38:
                    ea:d8:98:f7:92:20:35:06:db:55:8d:f9:08:c7:af:
                    53:f8:ca:a5:ea:b9:d4:1e:c2:04:c0:8c:37:9f:8d:
                    a9:44:4f:4c:e9:79:03:58:1d:41:a8:f2:48:44:82:
                    20:b0:29:15:8f:6b:02:0c:4d:5e:f5:4c:18:fa:4f:
                    ae:fb:66:c3:98:46:01:45:24:40:d1:6d:8e:e6:56:
                    f9:87:1e:39:64:bc:6d:c1:96:90:d8:2c:03:95:28:
                    19:c7:3f:df:41:61:b3:f1:5f:14:ce:08:5b:03:5f:
                    da:65:81:5d:b4:61:8f:6f:0e:b8:1a:b1:0b:08:40:
                    a1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E9:96:59:34:C7:62:B1:8E:40:49:9E:E1:49:99:DC:CC:46:F8:BD
            X509v3 Authority Key Identifier:
                keyid:ED:CB:4F:3B:87:0F:78:FA:D5:A9:7B:9E:12:F4:06:91:B9:5C:CE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e78c1484e71c4beb14c4af115739b15109a6f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/7334a95570ee81537d0e64f871eb3b4226fdb302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/a3e78c1484e71c4beb14c4af115739b15109a6f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:1a:34:0e:05:b8:4b:30:b0:ea:92:c8:40:a2:ce:3b:97:56:
         47:64:14:b5:c7:d4:2f:05:7a:b3:ca:c3:c2:11:1e:8e:dd:22:
         93:3c:5f:63:74:c5:8f:d5:7b:3f:5c:f2:f3:83:a8:48:40:63:
         8f:79:d6:d7:63:1c:a3:78:8d:4a:c9:e9:80:d1:2a:36:4c:9a:
         8c:53:5c:46:68:3a:30:e2:f2:49:18:ed:a9:60:31:28:17:26:
         e7:0f:54:b6:49:c1:66:62:e5:b2:c7:5b:bd:db:67:4c:ab:f8:
         59:65:fc:92:13:a8:da:8c:da:2d:79:41:e0:cd:75:1e:58:ef:
         a0:3e:7b:eb:ce:cc:82:64:85:2d:2a:b0:36:4c:dc:b4:ae:f1:
         47:bd:ce:25:50:1d:24:de:f9:96:45:8e:07:33:c5:39:b0:8a:
         f2:36:dc:2a:73:3c:87:00:12:84:64:07:c4:f3:28:ff:e2:25:
         df:76:eb:fa:4e:00:1d:9f:19:c3:ed:9a:43:97:dd:af:9c:25:
         b4:e7:65:dd:8f:80:15:7c:82:46:39:82:70:dc:a2:72:56:6e:
         ed:8e:bc:5f:c5:f0:dc:e8:f7:00:48:7e:5d:cd:3f:b6:04:f9:
         e0:2f:c1:ff:d6:28:c2:b3:c7:a2:40:1e:63:32:a2:14:ce:ca:
         84:bd:28:33
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHE7vMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGEz
ZTc4YzE0ODRlNzFjNGJlYjE0YzRhZjExNTczOWIxNTEwOWE2ZjkwHhcNMjMxMjEz
MTYyOTA0WhcNMjUxMjEzMTYyOTA0WjAzMTEwLwYDVQQDEyg3MzM0YTk1NTcwZWU4
MTUzN2QwZTY0Zjg3MWViM2I0MjI2ZmRiMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlcCsYatR3XCm7y6mXRYzuin6e99i5x12UUwSVBbR1FJYEpKm
o54X/lSOd7XkZ9eu/47xEmbkf6NkIm4pNs9gxjp4HVH9HZaNO6YeI9QdP83OuEcb
RmcgpCevCN/8VoBwm4fjCj4yeKOv6o6eozDBzrXcrGQKBUOckqiKOHybvJU56Tz4
IDjq2Jj3kiA1BttVjfkIx69T+Mql6rnUHsIEwIw3n42pRE9M6XkDWB1BqPJIRIIg
sCkVj2sCDE1e9UwY+k+u+2bDmEYBRSRA0W2O5lb5hx45ZLxtwZaQ2CwDlSgZxz/f
QWGz8V8UzghbA1/aZYFdtGGPbw64GrELCECh5wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFO7pllk0x2KxjkBJnuFJmdzMRvi9MB8GA1UdIwQYMBaAFO3LTzuHD3j61al7
nhL0BpG5XM4EMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTNlNzhj
MTQ4NGU3MWM0YmViMTRjNGFmMTE1NzM5YjE1MTA5YTZmOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTlhNjgyZDctYjVmYi00MWM1LWE5OGMtZThmY2Fi
MmYxZmE1LzczMzRhOTU1NzBlZTgxNTM3ZDBlNjRmODcxZWIzYjQyMjZmZGIzMDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81OWE2ODJkNy1iNWZiLTQxYzUtYTk4Yy1lOGZj
YWIyZjFmYTUvYTNlNzhjMTQ4NGU3MWM0YmViMTRjNGFmMTE1NzM5YjE1MTA5YTZm
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMneKDANBgkqhkiG9w0BAQsFAAOCAQEADBo0DgW4SzCw6pLI
QKLOO5dWR2QUtcfULwV6s8rDwhEejt0ikzxfY3TFj9V7P1zy84OoSEBjj3nW12Mc
o3iNSsnpgNEqNkyajFNcRmg6MOLySRjtqWAxKBcm5w9UtknBZmLlssdbvdtnTKv4
WWX8khOo2ozaLXlB4M11HljvoD57687MgmSFLSqwNkzctK7xR73OJVAdJN75lkWO
BzPFObCK8jbcKnM8hwAShGQHxPMo/+Il33br+k4AHZ8Zw+2aQ5fdr5wltOdl3Y+A
FXyCRjmCcNyiclZu7Y68X8Xw3Oj3AEh+Xc0/tgT54C/B/9YowrPHokAeYzKiFM7K
hL0oMw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org