Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/2a16041cc35796563a7e54aedb740147bba37e96.roa
File:                     2a16041cc35796563a7e54aedb740147bba37e96.roa (raw, json)
Hash identifier:          5CA389QBxeuGcz4EkVM6eTHrSYVjW2Hpu2wEaJJNdMs=
Subject key identifier:   98:34:90:44:A2:4B:E8:BC:85:73:4C:5E:F5:77:8F:B6:4F:1F:C3:D1
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       27A9B9
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/2a16041cc35796563a7e54aedb740147bba37e96.roa
Signing time:             Tue 02 Jan 2024 19:56:05 +0000
ROA not before:           Tue 02 Jan 2024 19:56:05 +0000
ROA not after:            Fri 02 Jan 2026 19:56:05 +0000
asID:                     262212
IP address blocks:        2800:68:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2599353 (0x27a9b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Jan  2 19:56:05 2024 GMT
            Not After : Jan  2 19:56:05 2026 GMT
        Subject: CN=2a16041cc35796563a7e54aedb740147bba37e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3d:31:42:3f:a9:84:e7:47:61:cb:80:e9:2a:
                    f4:b5:f3:9d:f5:ea:97:6f:d5:68:1c:fd:98:20:f8:
                    7e:3b:c3:30:34:58:b2:75:01:80:90:01:82:82:2b:
                    27:40:96:25:18:51:82:f1:9e:f4:e9:8a:3f:f1:f5:
                    62:76:6c:09:25:31:dd:6f:60:23:0b:8f:11:3a:3e:
                    ce:93:fc:c4:5b:c7:42:04:77:b6:2f:35:41:6c:86:
                    5f:2c:9e:8c:f9:58:ed:47:3e:65:b2:fe:5e:54:43:
                    a6:af:e3:f6:7f:8c:3e:98:3c:75:19:c3:0f:8b:eb:
                    41:29:2e:23:b8:1a:c5:05:bb:e5:0b:67:1f:18:96:
                    cb:c4:50:b9:e6:66:5c:4a:8d:01:24:13:db:f5:2e:
                    e7:7e:df:e6:55:b0:88:dc:46:3f:77:dc:6b:f2:62:
                    d3:ca:61:36:42:27:5c:40:5c:8a:0d:e5:04:53:cb:
                    c1:0d:ba:61:e1:42:46:e6:ce:e8:bc:02:92:bb:13:
                    ea:a8:f7:f1:b3:90:62:f0:1a:97:3d:0f:01:f7:7d:
                    4d:f5:17:62:cc:74:58:16:39:d7:94:7b:bc:59:82:
                    8c:3a:79:7c:c7:64:c5:86:3f:00:b8:2e:49:e4:93:
                    cf:9c:3e:21:5a:7a:dc:d6:76:1d:14:2b:f2:9b:34:
                    74:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:34:90:44:A2:4B:E8:BC:85:73:4C:5E:F5:77:8F:B6:4F:1F:C3:D1
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/2a16041cc35796563a7e54aedb740147bba37e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:e8:fb:de:ea:84:79:9f:14:3b:0b:de:e7:fa:a3:84:36:7b:
         50:64:b3:74:be:46:de:17:5a:90:93:ad:b3:11:6b:ae:89:04:
         9b:5c:a2:54:b5:92:3c:64:66:2e:e8:1f:8b:bf:cd:27:6a:72:
         e0:11:60:55:61:61:5a:f7:5f:80:1c:cd:f7:ae:43:91:16:65:
         be:71:59:1e:c5:8f:95:21:1e:5c:16:af:b3:09:5f:18:c3:c7:
         1f:aa:7f:c6:31:c5:56:63:21:db:09:33:18:44:3e:8e:7a:e9:
         eb:2e:da:38:92:1d:af:ba:bb:1c:3f:39:56:b7:62:a4:26:86:
         69:ce:50:a0:e6:eb:61:01:b5:8d:42:ce:65:53:36:8f:93:94:
         33:11:ea:fe:e5:e2:ec:03:92:0d:19:15:ce:cd:e4:c5:6b:fa:
         dc:26:a1:8f:46:c2:07:ca:9e:b3:c2:1b:63:92:57:3e:f2:93:
         75:ad:a1:ba:d0:26:6c:1e:6f:11:9c:b2:31:99:f4:1b:3d:e5:
         8c:d5:e4:0a:94:a0:5e:6d:b0:3e:70:2a:85:b8:00:c2:45:98:
         38:7a:51:37:1c:0d:ab:14:90:f6:af:4d:1c:a8:89:81:44:b8:
         ff:69:ee:a6:30:55:51:0a:40:67:29:0f:35:cb:df:73:35:89:
         f3:81:fe:f0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDJ6m5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA1
YWU2OWQyZjExMWM3OTQxNjVhMDFhODY1ZmUxODdiODgzMTIyN2QwHhcNMjQwMTAy
MTk1NjA1WhcNMjYwMTAyMTk1NjA1WjAzMTEwLwYDVQQDEygyYTE2MDQxY2MzNTc5
NjU2M2E3ZTU0YWVkYjc0MDE0N2JiYTM3ZTk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiz0xQj+phOdHYcuA6Sr0tfOd9eqXb9VoHP2YIPh+O8MwNFiy
dQGAkAGCgisnQJYlGFGC8Z706Yo/8fVidmwJJTHdb2AjC48ROj7Ok/zEW8dCBHe2
LzVBbIZfLJ6M+VjtRz5lsv5eVEOmr+P2f4w+mDx1GcMPi+tBKS4juBrFBbvlC2cf
GJbLxFC55mZcSo0BJBPb9S7nft/mVbCI3EY/d9xr8mLTymE2QidcQFyKDeUEU8vB
Dbph4UJG5s7ovAKSuxPqqPfxs5Bi8BqXPQ8B931N9RdizHRYFjnXlHu8WYKMOnl8
x2TFhj8AuC5J5JPPnD4hWnrc1nYdFCvymzR0FQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFJg0kESiS+i8hXNMXvV3j7ZPH8PRMB8GA1UdIwQYMBaAFIIUXtq2WB5z5L1U
YAk+zsl2C8SfMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMDVhZTY5
ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOGM3OTRiZDAtN2Q5NC00NDVmLTgyMzMtMTIwMGM5
YzZmMmVjLzJhMTYwNDFjYzM1Nzk2NTYzYTdlNTRhZWRiNzQwMTQ3YmJhMzdlOTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy84Yzc5NGJkMC03ZDk0LTQ0NWYtODIzMy0xMjAw
YzljNmYyZWMvMDVhZTY5ZDJmMTExYzc5NDE2NWEwMWE4NjVmZTE4N2I4ODMxMjI3
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgAAGgAETANBgkqhkiG9w0BAQsFAAOCAQEAbej73uqEeZ8U
Owve5/qjhDZ7UGSzdL5G3hdakJOtsxFrrokEm1yiVLWSPGRmLugfi7/NJ2py4BFg
VWFhWvdfgBzN965DkRZlvnFZHsWPlSEeXBavswlfGMPHH6p/xjHFVmMh2wkzGEQ+
jnrp6y7aOJIdr7q7HD85VrdipCaGac5QoObrYQG1jULOZVM2j5OUMxHq/uXi7AOS
DRkVzs3kxWv63Cahj0bCB8qes8IbY5JXPvKTda2hutAmbB5vEZyyMZn0Gz3ljNXk
CpSgXm2wPnAqhbgAwkWYOHpRNxwNqxSQ9q9NHKiJgUS4/2nupjBVUQpAZykPNcvf
czWJ84H+8A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org