Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/827f4551-af9c-4662-8b80-2faf240c7791/0017d83915c7e7e3d4de6b604a9beeacefd9952a.roa
File:                     0017d83915c7e7e3d4de6b604a9beeacefd9952a.roa (raw, json)
Hash identifier:          Y2+3dZd2yJTzy8jI5JZG4mh4HUKem31FGS8EvRu6uhk=
Subject key identifier:   62:21:17:A2:A4:A2:B4:6A:86:43:26:F4:0F:1D:B9:3C:5C:FA:C8:F7
Certificate issuer:       /CN=d08b995d743e2e05e2a00f98775012bb7b5926b3
Certificate serial:       0C317D
Authority key identifier: 02:17:A5:35:1D:A0:72:47:CE:F3:2A:56:63:B7:38:B6:D1:48:53:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d08b995d743e2e05e2a00f98775012bb7b5926b3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/827f4551-af9c-4662-8b80-2faf240c7791/0017d83915c7e7e3d4de6b604a9beeacefd9952a.roa
Signing time:             Wed 24 Mar 2021 14:44:45 +0000
ROA not before:           Wed 24 Mar 2021 14:44:43 +0000
ROA not after:            Tue 24 Mar 2026 14:44:43 +0000
asID:                     61513
IP address blocks:        201.131.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 799101 (0xc317d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08b995d743e2e05e2a00f98775012bb7b5926b3
        Validity
            Not Before: Mar 24 14:44:43 2021 GMT
            Not After : Mar 24 14:44:43 2026 GMT
        Subject: CN=0017d83915c7e7e3d4de6b604a9beeacefd9952a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6e:3f:d3:a9:17:ca:ac:09:5b:0c:9b:27:66:
                    53:98:85:d0:c7:1d:83:bf:4d:de:5c:73:16:dc:55:
                    45:62:d3:81:a5:31:6a:44:77:85:0b:da:86:0c:5a:
                    57:bb:3f:df:c5:5e:02:a2:59:90:ee:2f:8d:1f:15:
                    05:75:d2:5b:35:bc:88:cc:30:fa:4f:b7:3e:dd:1c:
                    e5:44:c7:14:64:88:fa:cf:06:03:e7:9d:3a:e0:16:
                    75:b8:7a:76:5e:c8:dc:6f:78:99:5d:20:15:3c:fa:
                    ec:df:e6:69:dc:10:ec:96:a5:bf:dd:8a:46:6b:01:
                    82:32:52:20:8b:7f:b8:4c:ce:fc:04:40:ce:81:3a:
                    f5:0f:8f:17:8b:07:77:41:af:88:fa:ba:9d:90:73:
                    a9:e0:b0:77:d3:88:28:6e:ee:00:aa:e5:60:38:bc:
                    75:d0:3a:e8:75:0c:82:76:8d:00:a8:8c:9e:11:4e:
                    71:9e:cd:77:62:82:0b:42:f2:ae:2c:70:4a:84:b5:
                    f0:4e:74:27:aa:9f:ea:c9:64:d0:44:f0:e6:24:d1:
                    5c:79:46:0b:53:9c:bc:e5:cd:85:7e:36:f8:9a:0f:
                    1c:8d:f2:a9:57:4a:b0:ef:e7:cd:21:26:7b:eb:82:
                    29:83:11:be:50:ff:25:f7:14:b4:e9:b9:3a:a2:7a:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:21:17:A2:A4:A2:B4:6A:86:43:26:F4:0F:1D:B9:3C:5C:FA:C8:F7
            X509v3 Authority Key Identifier:
                keyid:02:17:A5:35:1D:A0:72:47:CE:F3:2A:56:63:B7:38:B6:D1:48:53:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d08b995d743e2e05e2a00f98775012bb7b5926b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/827f4551-af9c-4662-8b80-2faf240c7791/0017d83915c7e7e3d4de6b604a9beeacefd9952a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/827f4551-af9c-4662-8b80-2faf240c7791/d08b995d743e2e05e2a00f98775012bb7b5926b3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:f9:da:44:4e:61:56:f9:1a:33:c4:de:cf:47:d5:45:fd:16:
         0e:11:24:97:79:ac:7a:7e:81:82:b7:dd:a7:3a:0a:af:2f:13:
         af:ec:eb:d2:f7:11:2b:72:17:94:51:ca:d9:b3:88:fd:3e:5c:
         bc:2b:11:77:fe:b3:99:d5:ac:0b:24:49:55:f9:e4:73:b9:22:
         60:03:86:0d:98:e7:da:e3:27:55:a2:08:3e:e4:02:fd:9c:26:
         6d:c9:fb:65:5b:f0:29:61:eb:89:6f:58:05:71:f1:64:51:ef:
         06:0e:3a:54:b1:aa:f9:35:8c:a5:f5:c9:79:e2:9f:44:de:94:
         d7:ca:f1:a7:2e:0e:53:70:82:da:c5:fb:11:a5:99:40:4f:cb:
         67:b0:34:9d:40:89:33:46:5b:ac:73:d8:c8:4c:68:0c:3b:3a:
         38:fc:73:38:b6:f4:c4:68:f6:83:67:91:f6:8a:64:d4:00:67:
         99:19:8f:10:ab:16:c9:65:7c:46:98:b1:4b:b3:81:f9:a2:7f:
         27:c5:29:3b:11:52:67:a1:d2:59:5f:95:b9:8f:e3:f1:f0:9f:
         c1:4a:49:d2:64:28:b3:0f:41:7d:82:dc:0c:80:91:82:a1:c1:
         b3:8c:e6:22:f2:b4:0b:e5:34:24:95:12:15:fd:b7:d7:4a:77:
         69:72:78:68
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDDF9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQw
OGI5OTVkNzQzZTJlMDVlMmEwMGY5ODc3NTAxMmJiN2I1OTI2YjMwHhcNMjEwMzI0
MTQ0NDQzWhcNMjYwMzI0MTQ0NDQzWjAzMTEwLwYDVQQDEygwMDE3ZDgzOTE1Yzdl
N2UzZDRkZTZiNjA0YTliZWVhY2VmZDk5NTJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqm4/06kXyqwJWwybJ2ZTmIXQxx2Dv03eXHMW3FVFYtOBpTFq
RHeFC9qGDFpXuz/fxV4ColmQ7i+NHxUFddJbNbyIzDD6T7c+3RzlRMcUZIj6zwYD
55064BZ1uHp2Xsjcb3iZXSAVPPrs3+Zp3BDslqW/3YpGawGCMlIgi3+4TM78BEDO
gTr1D48Xiwd3Qa+I+rqdkHOp4LB304gobu4AquVgOLx10DrodQyCdo0AqIyeEU5x
ns13YoILQvKuLHBKhLXwTnQnqp/qyWTQRPDmJNFceUYLU5y85c2Ffjb4mg8cjfKp
V0qw7+fNISZ764IpgxG+UP8l9xS06bk6onpyPQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGIhF6KkorRqhkMm9A8duTxc+sj3MB8GA1UdIwQYMBaAFAIXpTUdoHJHzvMq
VmO3OLbRSFPOMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDA4Yjk5
NWQ3NDNlMmUwNWUyYTAwZjk4Nzc1MDEyYmI3YjU5MjZiMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvODI3ZjQ1NTEtYWY5Yy00NjYyLThiODAtMmZhZjI0
MGM3NzkxLzAwMTdkODM5MTVjN2U3ZTNkNGRlNmI2MDRhOWJlZWFjZWZkOTk1MmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84MjdmNDU1MS1hZjljLTQ2NjItOGI4MC0yZmFm
MjQwYzc3OTEvZDA4Yjk5NWQ3NDNlMmUwNWUyYTAwZjk4Nzc1MDEyYmI3YjU5MjZi
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMmDQjANBgkqhkiG9w0BAQsFAAOCAQEAJ/naRE5hVvkaM8Te
z0fVRf0WDhEkl3msen6BgrfdpzoKry8Tr+zr0vcRK3IXlFHK2bOI/T5cvCsRd/6z
mdWsCyRJVfnkc7kiYAOGDZjn2uMnVaIIPuQC/Zwmbcn7ZVvwKWHriW9YBXHxZFHv
Bg46VLGq+TWMpfXJeeKfRN6U18rxpy4OU3CC2sX7EaWZQE/LZ7A0nUCJM0ZbrHPY
yExoDDs6OPxzOLb0xGj2g2eR9opk1ABnmRmPEKsWyWV8RpixS7OB+aJ/J8UpOxFS
Z6HSWV+VuY/j8fCfwUpJ0mQosw9BfYLcDICRgqHBs4zmIvK0C+U0JJUSFf2310p3
aXJ4aA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org