Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/fb56cb0a91fca49278d1a09f7956db6157365672.roa
File:                     fb56cb0a91fca49278d1a09f7956db6157365672.roa (raw, json)
Hash identifier:          h++8Twaa+YPqQmsMY740Ltnsj7vwpLfHzL38wRVm17w=
Subject key identifier:   8C:EE:AB:D5:F9:35:0D:78:3A:0B:8D:F3:CC:56:B0:9B:15:6E:58:B0
Certificate issuer:       /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial:       1FB695
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/fb56cb0a91fca49278d1a09f7956db6157365672.roa
Signing time:             Fri 26 May 2023 08:30:10 +0000
ROA not before:           Thu 25 May 2023 08:30:10 +0000
ROA not after:            Sat 24 May 2025 08:30:10 +0000
asID:                     271842
IP address blocks:        201.218.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078357 (0x1fb695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Validity
            Not Before: May 25 08:30:10 2023 GMT
            Not After : May 24 08:30:10 2025 GMT
        Subject: CN=fb56cb0a91fca49278d1a09f7956db6157365672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:16:c3:6f:ac:a9:76:37:59:d4:cf:f8:4b:
                    22:64:42:c4:8c:9e:0a:1f:eb:d2:8a:d7:1e:48:9c:
                    a9:13:13:35:3a:33:1a:79:ae:23:d6:0b:fd:40:45:
                    23:6e:2d:b8:df:85:13:d8:b7:46:35:98:ab:90:14:
                    73:18:5e:3a:9b:b1:85:cc:fd:bb:53:b7:c4:f0:b5:
                    a1:71:1e:77:d4:29:f5:a5:9b:48:4c:a5:b5:8a:fa:
                    d9:1d:33:74:df:0f:05:16:a7:e9:23:8c:f3:ee:df:
                    40:e0:8e:d5:46:d0:a8:11:3a:b9:a0:5e:51:28:4d:
                    87:a3:d1:05:fe:d3:cf:18:cd:b8:5d:f2:95:21:ca:
                    32:40:e5:e8:f8:b2:6e:1e:6d:6f:2e:0a:07:24:46:
                    0d:27:7a:1d:0b:8b:a1:ba:01:8e:14:b6:d8:8b:66:
                    dd:67:62:f3:fb:f2:45:29:4a:a2:7f:b8:ea:ad:03:
                    e8:a4:51:8d:d9:fb:94:9b:79:89:42:c1:30:10:92:
                    a0:9a:52:8a:52:22:69:01:b7:4e:8b:e2:07:bb:4a:
                    1e:60:2b:3b:04:fd:b9:21:1c:b4:e5:6a:3e:df:83:
                    9c:b5:49:95:f4:29:eb:47:e6:5c:d5:80:c4:de:07:
                    5c:59:a5:9a:ea:0d:4c:f7:fd:03:93:ad:41:9d:f8:
                    6e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EE:AB:D5:F9:35:0D:78:3A:0B:8D:F3:CC:56:B0:9B:15:6E:58:B0
            X509v3 Authority Key Identifier:
                keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/fb56cb0a91fca49278d1a09f7956db6157365672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:e3:93:f1:8d:80:b8:29:d8:7c:26:c9:0e:01:13:ad:72:1a:
         28:ea:85:35:b3:7a:a9:c6:18:85:a5:c4:5f:96:80:ae:a0:db:
         5b:b6:52:55:19:35:5e:7d:99:1d:b6:32:92:ee:86:00:cc:ef:
         2f:9e:b2:df:ef:26:42:3e:4e:23:3b:c7:47:1c:37:b3:21:79:
         1e:7b:89:7c:af:aa:f8:96:1f:2d:bb:ab:9c:35:e0:b8:31:9b:
         e9:6e:3e:09:c7:6e:f6:59:34:1c:59:6a:ba:f8:46:96:73:9f:
         97:89:cb:cf:89:13:32:57:36:0e:cd:9d:82:aa:ff:31:d1:22:
         3e:ba:0a:3b:0c:bb:ad:28:63:85:2c:7e:43:1b:6d:13:5e:a6:
         67:6a:8b:c1:cb:12:2e:aa:ea:70:83:a6:c4:4d:c2:32:04:78:
         aa:bd:83:37:58:f7:03:59:bb:52:03:41:4c:d2:77:9e:0c:5c:
         06:e1:00:7a:33:41:38:27:d3:fe:94:ff:35:e0:d1:0c:bd:17:
         0c:b3:c2:32:4b:fb:4e:9e:9f:f2:99:6c:a1:2d:5c:85:9e:c2:
         e9:98:df:3a:cb:ab:ee:df:da:65:82:ce:cd:1b:13:ea:95:d6:
         d3:1d:54:25:0a:22:0c:97:30:9a:6e:59:55:27:cd:c8:ae:f3:
         d5:7d:df:0b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDH7aVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
MzI2MjNiMzNlMDRmYWRjMWFmODBmY2NmNmQxMmFhYmJjZmJmYTUwHhcNMjMwNTI1
MDgzMDEwWhcNMjUwNTI0MDgzMDEwWjAzMTEwLwYDVQQDEyhmYjU2Y2IwYTkxZmNh
NDkyNzhkMWEwOWY3OTU2ZGI2MTU3MzY1NjcyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjJ0Ww2+sqXY3WdTP+EsiZELEjJ4KH+vSitceSJypExM1OjMa
ea4j1gv9QEUjbi2434UT2LdGNZirkBRzGF46m7GFzP27U7fE8LWhcR531Cn1pZtI
TKW1ivrZHTN03w8FFqfpI4zz7t9A4I7VRtCoETq5oF5RKE2Ho9EF/tPPGM24XfKV
IcoyQOXo+LJuHm1vLgoHJEYNJ3odC4uhugGOFLbYi2bdZ2Lz+/JFKUqif7jqrQPo
pFGN2fuUm3mJQsEwEJKgmlKKUiJpAbdOi+IHu0oeYCs7BP25IRy05Wo+34OctUmV
9CnrR+Zc1YDE3gdcWaWa6g1M9/0Dk61BnfhuSQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIzuq9X5NQ14OguN88xWsJsVbliwMB8GA1UdIwQYMBaAFH49PYRaISZ7nH72
VKhTBe2GfukbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWQzMjYy
M2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZhNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTc3ZDNkMzUtYmJlYy00Y2FkLWEwYzUtMDYwN2Ey
OWUxZjBmL2ZiNTZjYjBhOTFmY2E0OTI3OGQxYTA5Zjc5NTZkYjYxNTczNjU2NzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85NzdkM2QzNS1iYmVjLTRjYWQtYTBjNS0wNjA3
YTI5ZTFmMGYvNWQzMjYyM2IzM2UwNGZhZGMxYWY4MGZjY2Y2ZDEyYWFiYmNmYmZh
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMnajDANBgkqhkiG9w0BAQsFAAOCAQEAP+OT8Y2AuCnYfCbJ
DgETrXIaKOqFNbN6qcYYhaXEX5aArqDbW7ZSVRk1Xn2ZHbYyku6GAMzvL56y3+8m
Qj5OIzvHRxw3syF5HnuJfK+q+JYfLburnDXguDGb6W4+Ccdu9lk0HFlquvhGlnOf
l4nLz4kTMlc2Ds2dgqr/MdEiProKOwy7rShjhSx+QxttE16mZ2qLwcsSLqrqcIOm
xE3CMgR4qr2DN1j3A1m7UgNBTNJ3ngxcBuEAejNBOCfT/pT/NeDRDL0XDLPCMkv7
Tp6f8plsoS1chZ7C6ZjfOsur7t/aZYLOzRsT6pXW0x1UJQoiDJcwmm5ZVSfNyK7z
1X3fCw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org