Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/39af89658dd020f63395304b7dfc2d5ba57ee9f1.roa
File:                     39af89658dd020f63395304b7dfc2d5ba57ee9f1.roa (raw, json)
Hash identifier:          NBXTrJftMqJ5ALiOeGsnKLS4MnGnorqUsy0ZLold/94=
Subject key identifier:   08:42:F3:91:5C:FD:12:7C:13:68:88:40:13:2A:09:D4:05:F7:CD:50
Certificate issuer:       /CN=0cec7209b9057d239c9d724b057b75899fa702cf
Certificate serial:       0D4275
Authority key identifier: 71:95:E8:00:FE:E5:80:94:51:D8:B9:24:9B:B0:31:69:CC:89:39:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cec7209b9057d239c9d724b057b75899fa702cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/39af89658dd020f63395304b7dfc2d5ba57ee9f1.roa
Signing time:             Wed 24 Mar 2021 14:39:28 +0000
ROA not before:           Wed 24 Mar 2021 14:39:28 +0000
ROA not after:            Tue 24 Mar 2026 14:39:28 +0000
asID:                     265815
IP address blocks:        201.182.148.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868981 (0xd4275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cec7209b9057d239c9d724b057b75899fa702cf
        Validity
            Not Before: Mar 24 14:39:28 2021 GMT
            Not After : Mar 24 14:39:28 2026 GMT
        Subject: CN=39af89658dd020f63395304b7dfc2d5ba57ee9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:4b:a0:67:51:59:8e:e3:20:67:2e:73:cc:
                    01:03:eb:eb:46:17:dd:f1:a3:01:42:f1:33:3a:3d:
                    5f:51:56:d2:e8:48:01:45:ae:13:17:f9:d2:63:e7:
                    18:17:36:a8:1e:30:8d:75:f4:dc:5e:27:60:0a:f6:
                    25:e9:1b:a1:10:b6:8b:0d:dc:c2:71:75:11:ea:66:
                    87:40:45:ed:fe:fa:b7:aa:d0:6b:f8:46:55:e0:a2:
                    64:a6:11:7e:46:44:6b:ce:aa:25:97:40:7c:33:6c:
                    31:ca:89:27:87:5e:8c:72:0a:87:a8:39:3d:9e:55:
                    cc:7b:13:21:b2:75:07:d8:ae:1c:99:10:e8:b0:d5:
                    8b:52:7d:79:32:f1:fd:80:93:5e:78:cd:5c:83:02:
                    c9:4c:d8:5e:5b:a1:48:e3:0d:ca:28:da:0a:0c:cb:
                    ed:dd:5a:59:6c:9d:bc:c1:64:c9:ec:56:83:1a:e9:
                    e7:46:9d:ae:4f:57:5e:fb:02:c5:0f:e5:ca:44:7f:
                    73:62:f0:79:b9:a1:ef:09:e8:54:f9:13:7a:63:ca:
                    9d:d8:be:e9:de:41:b7:d3:ac:ad:43:71:1a:72:7a:
                    30:a5:59:21:cc:18:01:04:6d:d4:f5:05:4a:94:75:
                    d6:65:81:22:e1:fb:da:64:10:16:a3:4b:71:d9:b6:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:42:F3:91:5C:FD:12:7C:13:68:88:40:13:2A:09:D4:05:F7:CD:50
            X509v3 Authority Key Identifier:
                keyid:71:95:E8:00:FE:E5:80:94:51:D8:B9:24:9B:B0:31:69:CC:89:39:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cec7209b9057d239c9d724b057b75899fa702cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/39af89658dd020f63395304b7dfc2d5ba57ee9f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9952d27c-c910-4569-af20-901dd66595ac/0cec7209b9057d239c9d724b057b75899fa702cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:ac:ce:ac:8f:7d:5e:b2:03:16:1b:52:25:cd:6d:46:f4:ec:
         3d:5b:e2:dd:20:e9:7c:fa:88:04:64:5a:70:02:3b:0d:a4:7c:
         68:23:65:4a:e9:2d:ae:2b:ce:10:ae:ed:7d:62:8b:7f:34:1c:
         a7:63:59:a7:c2:c6:55:26:25:30:ed:23:ed:14:d6:c4:11:48:
         d4:db:ec:12:d3:8c:02:81:d5:c6:ba:47:f8:a6:44:d8:55:50:
         5f:bc:6e:1a:83:b0:29:f3:e1:65:9c:c8:86:b9:85:10:42:cb:
         07:bd:92:e4:f6:81:b8:81:e6:08:8a:7b:a6:24:d9:37:28:c9:
         b1:bf:aa:97:25:f5:4e:f9:1e:bc:f9:c5:e4:28:e9:d6:19:31:
         ee:ae:d5:00:43:34:67:f0:a3:ed:80:0e:41:98:38:96:c4:59:
         bf:4d:1d:18:be:0a:fd:fd:3b:8c:31:b9:d9:8d:33:85:04:27:
         1b:86:a4:c7:6f:49:71:45:c9:81:7e:c9:63:74:38:b3:a3:5f:
         1a:17:7e:b9:3f:78:3b:dc:c0:77:07:a1:fe:d4:cc:75:74:dd:
         a0:e8:b2:e1:53:b5:76:e5:f0:b6:0b:9a:4c:32:ba:de:05:ae:
         48:40:67:10:ac:d0:62:10:3b:67:2b:76:3c:b1:6d:af:9f:49:
         d7:9c:4c:9f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDUJ1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBj
ZWM3MjA5YjkwNTdkMjM5YzlkNzI0YjA1N2I3NTg5OWZhNzAyY2YwHhcNMjEwMzI0
MTQzOTI4WhcNMjYwMzI0MTQzOTI4WjAzMTEwLwYDVQQDEygzOWFmODk2NThkZDAy
MGY2MzM5NTMwNGI3ZGZjMmQ1YmE1N2VlOWYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0spLoGdRWY7jIGcuc8wBA+vrRhfd8aMBQvEzOj1fUVbS6EgB
Ra4TF/nSY+cYFzaoHjCNdfTcXidgCvYl6RuhELaLDdzCcXUR6maHQEXt/vq3qtBr
+EZV4KJkphF+RkRrzqoll0B8M2wxyoknh16McgqHqDk9nlXMexMhsnUH2K4cmRDo
sNWLUn15MvH9gJNeeM1cgwLJTNheW6FI4w3KKNoKDMvt3VpZbJ28wWTJ7FaDGunn
Rp2uT1de+wLFD+XKRH9zYvB5uaHvCehU+RN6Y8qd2L7p3kG306ytQ3EacnowpVkh
zBgBBG3U9QVKlHXWZYEi4fvaZBAWo0tx2bbYjQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAhC85Fc/RJ8E2iIQBMqCdQF981QMB8GA1UdIwQYMBaAFHGV6AD+5YCUUdi5
JJuwMWnMiTk2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGNlYzcy
MDliOTA1N2QyMzljOWQ3MjRiMDU3Yjc1ODk5ZmE3MDJjZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTk1MmQyN2MtYzkxMC00NTY5LWFmMjAtOTAxZGQ2
NjU5NWFjLzM5YWY4OTY1OGRkMDIwZjYzMzk1MzA0YjdkZmMyZDViYTU3ZWU5ZjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85OTUyZDI3Yy1jOTEwLTQ1NjktYWYyMC05MDFk
ZDY2NTk1YWMvMGNlYzcyMDliOTA1N2QyMzljOWQ3MjRiMDU3Yjc1ODk5ZmE3MDJj
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAcm2lDANBgkqhkiG9w0BAQsFAAOCAQEADKzOrI99XrIDFhtS
Jc1tRvTsPVvi3SDpfPqIBGRacAI7DaR8aCNlSuktrivOEK7tfWKLfzQcp2NZp8LG
VSYlMO0j7RTWxBFI1NvsEtOMAoHVxrpH+KZE2FVQX7xuGoOwKfPhZZzIhrmFEELL
B72S5PaBuIHmCIp7piTZNyjJsb+qlyX1TvkevPnF5Cjp1hkx7q7VAEM0Z/Cj7YAO
QZg4lsRZv00dGL4K/f07jDG52Y0zhQQnG4akx29JcUXJgX7JY3Q4s6NfGhd+uT94
O9zAdweh/tTMdXTdoOiy4VO1duXwtguaTDK63gWuSEBnEKzQYhA7Zyt2PLFtr59J
15xMnw==
-----END CERTIFICATE-----
Generated at Tue Oct 17 20:59:40 2023 by rpki-client on console-fra.rpki-client.org