Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/c8f6f54fbda280df39656c0069160c65d02b5535.roa
File:                     c8f6f54fbda280df39656c0069160c65d02b5535.roa (raw, json)
Hash identifier:          8C7Dfs1bxxb83RDixulNYM1IQs9FxufFC3B/xtkOUsQ=
Subject key identifier:   B4:C8:5F:C3:8D:F0:34:25:65:B2:07:CF:4B:51:E3:E7:A8:2A:6C:83
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       1A1A3A
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/c8f6f54fbda280df39656c0069160c65d02b5535.roa
Signing time:             Wed 19 Oct 2022 07:30:00 +0000
ROA not before:           Tue 18 Oct 2022 07:30:00 +0000
ROA not after:            Thu 17 Oct 2024 07:30:00 +0000
asID:                     269862
IP address blocks:        201.218.158.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1710650 (0x1a1a3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: Oct 18 07:30:00 2022 GMT
            Not After : Oct 17 07:30:00 2024 GMT
        Subject: CN=c8f6f54fbda280df39656c0069160c65d02b5535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:8d:ee:5d:42:be:0a:70:1a:5a:f2:ae:6c:
                    ab:3f:18:de:35:c8:f0:5c:63:75:26:5f:78:ce:7f:
                    c9:af:ea:a3:8e:05:4a:82:eb:7d:fb:f8:68:ec:d2:
                    a4:35:0b:39:0d:e7:0f:cf:3d:31:69:1b:7e:95:96:
                    de:76:ae:04:be:4d:e3:67:02:f9:9b:09:6d:92:bc:
                    ca:42:94:ec:36:50:31:4e:47:0b:fa:a4:24:05:a9:
                    3a:12:83:86:29:0f:8a:32:18:bd:eb:c1:3a:39:f5:
                    5c:b3:4c:94:bb:5f:ba:fb:22:47:dc:d1:7b:99:c5:
                    83:7f:86:25:5f:21:f4:ac:29:86:de:63:4a:e0:d6:
                    5e:7a:07:0f:c1:52:a3:f5:94:2c:f9:b9:9e:77:52:
                    52:cb:2b:b4:0e:c3:59:e3:01:9a:31:eb:2b:c8:b8:
                    fb:34:08:24:84:8c:85:65:9b:c5:52:82:02:04:5f:
                    f8:87:1e:3f:ea:37:14:78:cf:60:2e:11:98:f4:39:
                    93:2a:38:4a:c3:a9:1c:1e:e7:a3:9b:a4:2d:fb:c9:
                    26:02:e4:49:b1:0d:1b:be:b8:f4:09:7e:1e:33:a2:
                    cb:87:08:56:b1:ab:7f:62:a4:e3:25:95:2c:89:dc:
                    10:3d:8d:82:db:7a:a0:26:16:30:75:14:3b:0f:b8:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C8:5F:C3:8D:F0:34:25:65:B2:07:CF:4B:51:E3:E7:A8:2A:6C:83
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/c8f6f54fbda280df39656c0069160c65d02b5535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:8d:71:5b:f6:6f:97:6a:fb:7d:03:e9:27:76:f9:bd:f9:d5:
         a4:95:8e:20:95:1c:40:3f:98:81:fb:e2:cd:6b:c5:63:be:f2:
         82:72:71:73:e1:a9:9b:a0:ee:81:4d:88:6b:36:c4:08:a9:09:
         28:7d:3d:72:22:60:33:57:a4:99:fc:83:30:1c:dc:0b:b5:00:
         f0:d3:73:bf:22:fb:34:b8:c4:65:fb:8e:2b:56:d0:c6:64:2d:
         ef:15:f3:11:c6:53:6b:93:c8:89:66:32:2e:55:8d:cc:50:04:
         28:71:66:fd:ab:ac:d5:a4:c8:9b:14:70:07:55:87:c1:5e:f3:
         61:e5:05:fa:3c:19:19:e1:a8:0f:43:a9:44:64:17:af:d8:4a:
         c7:55:b2:1b:9b:a8:3d:b6:ae:f9:30:e2:06:2c:30:77:28:df:
         5e:5d:bf:8b:da:3a:da:88:66:54:f8:4a:87:a8:3f:8c:6f:d1:
         7a:c9:d7:15:74:5f:88:f8:9a:bf:9f:ca:be:64:1d:5c:52:e0:
         4b:3b:b5:10:e2:88:fd:29:63:77:b6:44:36:52:c6:86:97:13:
         5e:da:e2:55:bb:f1:31:11:02:60:64:07:7f:5f:96:b0:d2:66:
         b0:0a:bc:02:18:9a:8e:88:e6:17:1a:b2:da:c5:68:a8:f4:c5:
         fc:52:5a:b9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGho6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
MzI2MjNiMzNlMDRmYWRjMWFmODBmY2NmNmQxMmFhYmJjZmJmYTUwHhcNMjIxMDE4
MDczMDAwWhcNMjQxMDE3MDczMDAwWjAzMTEwLwYDVQQDEyhjOGY2ZjU0ZmJkYTI4
MGRmMzk2NTZjMDA2OTE2MGM2NWQwMmI1NTM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp5+N7l1CvgpwGlryrmyrPxjeNcjwXGN1Jl94zn/Jr+qjjgVK
gut9+/ho7NKkNQs5DecPzz0xaRt+lZbedq4Evk3jZwL5mwltkrzKQpTsNlAxTkcL
+qQkBak6EoOGKQ+KMhi968E6OfVcs0yUu1+6+yJH3NF7mcWDf4YlXyH0rCmG3mNK
4NZeegcPwVKj9ZQs+bmed1JSyyu0DsNZ4wGaMesryLj7NAgkhIyFZZvFUoICBF/4
hx4/6jcUeM9gLhGY9DmTKjhKw6kcHuejm6Qt+8kmAuRJsQ0bvrj0CX4eM6LLhwhW
sat/YqTjJZUsidwQPY2C23qgJhYwdRQ7D7hFYwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLTIX8ON8DQlZbIHz0tR4+eoKmyDMB8GA1UdIwQYMBaAFH49PYRaISZ7nH72
VKhTBe2GfukbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQzMjYy
M2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZhNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTc3ZDNkMzUtYmJlYy00Y2FkLWEwYzUtMDYwN2Ey
OWUxZjBmL2M4ZjZmNTRmYmRhMjgwZGYzOTY1NmMwMDY5MTYwYzY1ZDAyYjU1MzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NzdkM2QzNS1iYmVjLTRjYWQtYTBjNS0wNjA3
YTI5ZTFmMGYvNWQzMjYyM2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZh
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnanjANBgkqhkiG9w0BAQsFAAOCAQEARY1xW/Zvl2r7fQPp
J3b5vfnVpJWOIJUcQD+YgfvizWvFY77ygnJxc+Gpm6DugU2IazbECKkJKH09ciJg
M1ekmfyDMBzcC7UA8NNzvyL7NLjEZfuOK1bQxmQt7xXzEcZTa5PIiWYyLlWNzFAE
KHFm/aus1aTImxRwB1WHwV7zYeUF+jwZGeGoD0OpRGQXr9hKx1WyG5uoPbau+TDi
BiwwdyjfXl2/i9o62ohmVPhKh6g/jG/ResnXFXRfiPiav5/KvmQdXFLgSzu1EOKI
/Sljd7ZENlLGhpcTXtriVbvxMRECYGQHf1+WsNJmsAq8AhiajojmFxqy2sVoqPTF
/FJauQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org