Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/c2c977a9263ebb074af08503c52f30d87ced26f3.roa
File:                     c2c977a9263ebb074af08503c52f30d87ced26f3.roa (raw, json)
Hash identifier:          D6Hh7SXh59AvseXFJLpboOErOhkYrfzHxVNE6BsnGzo=
Subject key identifier:   6F:A1:93:D2:3B:6C:A8:C6:55:A4:2F:D1:1F:26:19:AF:A9:F4:E0:AB
Certificate issuer:       /CN=59310929980be7f876d3482fedcd45ce2c4f795e
Certificate serial:       1633C7
Authority key identifier: 74:96:F1:D1:DD:AE:67:AB:DE:13:19:E9:8B:08:C8:B6:D8:9E:AA:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59310929980be7f876d3482fedcd45ce2c4f795e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/c2c977a9263ebb074af08503c52f30d87ced26f3.roa
Signing time:             Thu 08 Feb 2024 16:20:37 +0000
ROA not before:           Thu 08 Feb 2024 16:20:37 +0000
ROA not after:            Sun 08 Feb 2026 16:20:37 +0000
asID:                     6461
IP address blocks:        170.81.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1455047 (0x1633c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59310929980be7f876d3482fedcd45ce2c4f795e
        Validity
            Not Before: Feb  8 16:20:37 2024 GMT
            Not After : Feb  8 16:20:37 2026 GMT
        Subject: CN=c2c977a9263ebb074af08503c52f30d87ced26f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:40:d6:cb:b5:58:e9:87:32:4f:7e:ca:d3:
                    31:29:a9:5f:56:0c:40:71:26:0c:93:0e:3d:b6:7e:
                    12:58:7e:6c:80:ec:62:e8:31:d1:80:d2:9b:bc:9d:
                    91:d7:5d:f4:44:f2:f5:8a:df:59:d6:dd:fa:0a:f5:
                    16:20:fc:72:e5:62:3c:2e:9b:8e:db:50:c6:44:58:
                    35:27:81:a5:9a:72:03:da:1f:81:b8:13:af:e4:f0:
                    8e:c8:a6:a4:f6:87:cb:ed:d4:91:84:8f:59:66:20:
                    ab:a1:35:33:e9:18:ca:9c:a0:6d:c3:c4:6c:86:be:
                    39:42:05:ee:c4:2f:bb:dd:28:ff:43:c9:b3:f2:f6:
                    cf:e2:5c:d0:f7:cc:72:9a:e5:d6:58:05:b5:74:12:
                    36:be:c1:1d:c6:bd:54:b4:24:87:a9:3d:f8:e3:1d:
                    c2:ed:f1:c1:4d:f8:fc:e6:be:cc:52:60:3e:b2:c0:
                    e9:38:b9:15:1e:3b:01:0f:e3:93:2c:e6:a9:77:c7:
                    8b:6d:26:b1:53:43:65:41:29:bf:d0:88:51:0a:b8:
                    1e:55:d1:6c:8b:5d:c8:27:06:17:b0:9c:d6:da:58:
                    89:49:d2:a5:b0:ca:3e:2e:df:6f:3e:39:fa:23:6e:
                    36:a5:9f:f2:26:48:1e:5f:78:10:62:e4:b9:c2:ac:
                    61:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A1:93:D2:3B:6C:A8:C6:55:A4:2F:D1:1F:26:19:AF:A9:F4:E0:AB
            X509v3 Authority Key Identifier:
                keyid:74:96:F1:D1:DD:AE:67:AB:DE:13:19:E9:8B:08:C8:B6:D8:9E:AA:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/59310929980be7f876d3482fedcd45ce2c4f795e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/c2c977a9263ebb074af08503c52f30d87ced26f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6f69f51a-f522-4ee0-bceb-414c877ad20b/59310929980be7f876d3482fedcd45ce2c4f795e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:bd:fc:16:99:31:bc:02:9c:01:ef:2c:95:e7:b4:6d:41:dc:
         a4:ea:22:86:f3:62:11:ea:31:90:ef:a3:ea:95:e3:fc:d8:aa:
         01:03:65:05:84:eb:7a:74:76:3b:f7:54:0a:08:eb:e8:87:98:
         96:a6:69:9d:62:47:39:3f:f6:54:01:ac:23:6f:71:f6:47:91:
         2e:f7:1f:5e:24:39:dc:17:ee:8e:cf:63:94:c0:73:90:85:ef:
         fb:c8:1b:2a:53:a3:3f:f8:5b:7f:05:c9:13:07:f4:4b:9b:7e:
         63:61:b8:40:b4:97:f8:bf:fa:23:b4:b9:a2:cc:7d:e4:ca:b1:
         3d:a2:38:67:47:fe:f2:db:30:38:2a:2d:5e:05:f3:ec:bb:8e:
         29:cd:59:bb:be:70:df:8c:a9:f9:92:2f:8d:e9:38:da:a2:18:
         f2:a6:e2:70:13:e0:24:ea:59:e4:6d:f2:77:2e:1e:18:68:50:
         c4:4d:65:76:02:a7:f3:d6:34:2e:0b:de:18:7f:8e:7e:d9:86:
         07:7f:9b:32:46:bd:e7:e6:7b:4f:46:90:0b:28:9d:15:d3:11:
         14:95:82:79:ed:51:e1:f6:05:7c:aa:ae:40:b6:61:c2:82:b4:
         47:7a:c5:f0:10:a2:8c:41:3e:fa:cc:cf:ca:4f:d7:4b:ca:25:
         d3:74:05:83
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFjPHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU5
MzEwOTI5OTgwYmU3Zjg3NmQzNDgyZmVkY2Q0NWNlMmM0Zjc5NWUwHhcNMjQwMjA4
MTYyMDM3WhcNMjYwMjA4MTYyMDM3WjAzMTEwLwYDVQQDEyhjMmM5NzdhOTI2M2Vi
YjA3NGFmMDg1MDNjNTJmMzBkODdjZWQyNmYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAz+FA1su1WOmHMk9+ytMxKalfVgxAcSYMkw49tn4SWH5sgOxi
6DHRgNKbvJ2R1130RPL1it9Z1t36CvUWIPxy5WI8LpuO21DGRFg1J4GlmnID2h+B
uBOv5PCOyKak9ofL7dSRhI9ZZiCroTUz6RjKnKBtw8Rshr45QgXuxC+73Sj/Q8mz
8vbP4lzQ98xymuXWWAW1dBI2vsEdxr1UtCSHqT344x3C7fHBTfj85r7MUmA+ssDp
OLkVHjsBD+OTLOapd8eLbSaxU0NlQSm/0IhRCrgeVdFsi13IJwYXsJzW2liJSdKl
sMo+Lt9vPjn6I242pZ/yJkgeX3gQYuS5wqxhUQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG+hk9I7bKjGVaQv0R8mGa+p9OCrMB8GA1UdIwQYMBaAFHSW8dHdrmer3hMZ
6YsIyLbYnqoXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTkzMTA5
Mjk5ODBiZTdmODc2ZDM0ODJmZWRjZDQ1Y2UyYzRmNzk1ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmY2OWY1MWEtZjUyMi00ZWUwLWJjZWItNDE0Yzg3
N2FkMjBiL2MyYzk3N2E5MjYzZWJiMDc0YWYwODUwM2M1MmYzMGQ4N2NlZDI2ZjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZjY5ZjUxYS1mNTIyLTRlZTAtYmNlYi00MTRj
ODc3YWQyMGIvNTkzMTA5Mjk5ODBiZTdmODc2ZDM0ODJmZWRjZDQ1Y2UyYzRmNzk1
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKpRxjANBgkqhkiG9w0BAQsFAAOCAQEAFL38FpkxvAKcAe8s
lee0bUHcpOoihvNiEeoxkO+j6pXj/NiqAQNlBYTrenR2O/dUCgjr6IeYlqZpnWJH
OT/2VAGsI29x9keRLvcfXiQ53Bfujs9jlMBzkIXv+8gbKlOjP/hbfwXJEwf0S5t+
Y2G4QLSX+L/6I7S5osx95MqxPaI4Z0f+8tswOCotXgXz7LuOKc1Zu75w34yp+ZIv
jek42qIY8qbicBPgJOpZ5G3ydy4eGGhQxE1ldgKn89Y0LgveGH+OftmGB3+bMka9
5+Z7T0aQCyidFdMRFJWCee1R4fYFfKquQLZhwoK0R3rF8BCijEE++szPyk/XS8ol
03QFgw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org