Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/bb92e0af061e628e579931cdfd9aecbce87cf54f.roa
File:                     bb92e0af061e628e579931cdfd9aecbce87cf54f.roa (raw, json)
Hash identifier:          OgP3dBQBmZzdumVPLP8tMEzeRWAv/WmynAm/E6f/fxQ=
Subject key identifier:   62:37:95:20:58:92:55:75:88:63:1F:88:9D:E7:8E:65:CD:64:7A:61
Certificate issuer:       /CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
Certificate serial:       1A02BB
Authority key identifier: B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/bb92e0af061e628e579931cdfd9aecbce87cf54f.roa
Signing time:             Sat 02 Mar 2024 23:16:02 +0000
ROA not before:           Sat 02 Mar 2024 23:16:02 +0000
ROA not after:            Mon 02 Mar 2026 23:16:02 +0000
asID:                     265746
IP address blocks:        131.196.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704635 (0x1a02bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8fffda6ca924f9f16686182b1a4d40171f239c1
        Validity
            Not Before: Mar  2 23:16:02 2024 GMT
            Not After : Mar  2 23:16:02 2026 GMT
        Subject: CN=bb92e0af061e628e579931cdfd9aecbce87cf54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:02:f8:c1:09:80:5a:b0:fb:5e:4d:6f:30:99:
                    37:7f:a7:13:4b:81:cd:e8:77:14:12:53:ae:1a:4b:
                    d6:02:06:3f:a4:a7:89:8b:9c:60:dd:e0:b9:ea:50:
                    40:bd:5c:3f:a2:c9:5e:6e:8f:54:d4:21:47:96:79:
                    d2:53:92:aa:bb:12:de:b5:2b:fa:6a:7c:21:01:ff:
                    23:57:90:e6:bb:5c:73:b8:3c:09:09:dd:5c:2e:f6:
                    0d:54:b6:b7:49:9f:d9:17:99:03:4f:cd:07:cc:14:
                    0b:6c:4f:45:4d:13:40:f9:7c:0e:78:15:4f:48:2c:
                    61:ae:c0:24:43:8e:7b:4e:07:60:04:cb:62:14:8b:
                    a5:32:e6:fc:e5:e6:4d:74:2d:4f:6b:20:9e:bd:ee:
                    95:96:55:9f:dd:f7:ea:bd:54:02:32:4b:d3:d4:11:
                    21:65:89:57:09:e4:25:c8:b7:72:a9:7f:3f:a5:5b:
                    04:3d:4b:f0:ce:61:46:42:95:a1:d6:d9:fd:91:16:
                    6b:18:23:51:39:be:61:ef:6c:2d:21:ca:c0:a7:4a:
                    e8:86:63:4b:01:31:6e:e1:a4:9a:99:f0:85:8f:fa:
                    b4:a4:ca:af:57:c2:33:80:23:1d:0f:47:15:0e:9e:
                    4c:87:d9:78:1a:46:30:73:5e:28:10:b7:49:24:2d:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:37:95:20:58:92:55:75:88:63:1F:88:9D:E7:8E:65:CD:64:7A:61
            X509v3 Authority Key Identifier:
                keyid:B8:82:27:9C:DA:61:1B:DF:82:05:7C:05:DC:22:CA:67:16:D5:3D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fffda6ca924f9f16686182b1a4d40171f239c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/bb92e0af061e628e579931cdfd9aecbce87cf54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/796ce3eb-b721-46d0-b154-d3d47df26950/e8fffda6ca924f9f16686182b1a4d40171f239c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:bf:0b:94:19:61:47:86:b1:f2:0a:a0:9c:f6:64:cc:8a:0f:
         2a:85:ae:08:ec:29:da:b8:a3:76:2f:e2:cd:12:6f:13:6d:0d:
         0b:2c:7d:43:e1:d0:9c:87:98:5a:b7:71:2a:01:98:2a:63:00:
         75:f7:a4:a5:bf:7a:83:01:6d:b4:e8:75:e3:ae:c7:cd:cb:74:
         b3:ef:be:52:bc:d4:87:ab:45:4d:bc:69:bc:82:74:3a:78:da:
         04:66:57:c3:24:57:87:3c:9d:9a:f8:98:94:0c:35:ed:01:a5:
         6c:c7:f6:ad:d8:0a:13:5e:a9:2b:43:4b:42:9f:c9:db:9d:6f:
         03:47:c8:63:4b:4e:d6:73:21:60:f9:92:34:7f:44:3e:b8:86:
         81:09:82:d3:02:55:53:38:cf:be:22:cb:44:46:52:c1:08:62:
         dc:2e:75:23:a1:98:2c:fc:2d:dc:13:72:a6:f3:3f:d3:60:39:
         b9:70:b1:50:87:4f:c4:28:9a:83:83:17:4a:47:19:7a:4a:3d:
         86:16:d6:67:0b:df:77:53:da:b3:ca:7f:20:77:c0:be:18:9d:
         93:fc:0f:ae:bf:5f:1b:95:9a:1e:2d:65:d4:1b:55:94:7e:eb:
         7b:46:41:e1:53:38:a2:bc:c4:6b:78:5e:a4:c2:4b:71:1a:b5:
         b5:03:20:9a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGgK7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU4
ZmZmZGE2Y2E5MjRmOWYxNjY4NjE4MmIxYTRkNDAxNzFmMjM5YzEwHhcNMjQwMzAy
MjMxNjAyWhcNMjYwMzAyMjMxNjAyWjAzMTEwLwYDVQQDEyhiYjkyZTBhZjA2MWU2
MjhlNTc5OTMxY2RmZDlhZWNiY2U4N2NmNTRmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAywL4wQmAWrD7Xk1vMJk3f6cTS4HN6HcUElOuGkvWAgY/pKeJ
i5xg3eC56lBAvVw/oslebo9U1CFHlnnSU5KquxLetSv6anwhAf8jV5Dmu1xzuDwJ
Cd1cLvYNVLa3SZ/ZF5kDT80HzBQLbE9FTRNA+XwOeBVPSCxhrsAkQ457TgdgBMti
FIulMub85eZNdC1PayCeve6VllWf3ffqvVQCMkvT1BEhZYlXCeQlyLdyqX8/pVsE
PUvwzmFGQpWh1tn9kRZrGCNROb5h72wtIcrAp0rohmNLATFu4aSamfCFj/q0pMqv
V8IzgCMdD0cVDp5Mh9l4GkYwc14oELdJJC2tuQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGI3lSBYklV1iGMfiJ3njmXNZHphMB8GA1UdIwQYMBaAFLiCJ5zaYRvfggV8
BdwiymcW1T3iMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZThmZmZk
YTZjYTkyNGY5ZjE2Njg2MTgyYjFhNGQ0MDE3MWYyMzljMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzk2Y2UzZWItYjcyMS00NmQwLWIxNTQtZDNkNDdk
ZjI2OTUwL2JiOTJlMGFmMDYxZTYyOGU1Nzk5MzFjZGZkOWFlY2JjZTg3Y2Y1NGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83OTZjZTNlYi1iNzIxLTQ2ZDAtYjE1NC1kM2Q0
N2RmMjY5NTAvZThmZmZkYTZjYTkyNGY5ZjE2Njg2MTgyYjFhNGQ0MDE3MWYyMzlj
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIPEUzANBgkqhkiG9w0BAQsFAAOCAQEAGb8LlBlhR4ax8gqg
nPZkzIoPKoWuCOwp2rijdi/izRJvE20NCyx9Q+HQnIeYWrdxKgGYKmMAdfekpb96
gwFttOh1467Hzct0s+++UrzUh6tFTbxpvIJ0OnjaBGZXwyRXhzydmviYlAw17QGl
bMf2rdgKE16pK0NLQp/J251vA0fIY0tO1nMhYPmSNH9EPriGgQmC0wJVUzjPviLL
REZSwQhi3C51I6GYLPwt3BNypvM/02A5uXCxUIdPxCiag4MXSkcZeko9hhbWZwvf
d1Pas8p/IHfAvhidk/wPrr9fG5WaHi1l1BtVlH7re0ZB4VM4orzEa3hepMJLcRq1
tQMgmg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org