Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/334c1f0a91d081d539639fefddf4299ef630dae5.roa
File:                     334c1f0a91d081d539639fefddf4299ef630dae5.roa (raw, json)
Hash identifier:          Ra9KfQ4PMU/m4NCGA/Qg3TBd6avlqf/PPAaxUrY7JIk=
Subject key identifier:   55:89:27:0C:78:FA:E4:2D:E9:80:C6:63:C3:80:C7:9B:03:5D:E6:9F
Certificate issuer:       /CN=1b429c72865e191f13438ce54026b95b47e06113
Certificate serial:       08322C
Authority key identifier: 62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/334c1f0a91d081d539639fefddf4299ef630dae5.roa
Signing time:             Tue 05 Sep 2023 21:22:20 +0000
ROA not before:           Mon 04 Sep 2023 21:22:19 +0000
ROA not after:            Fri 05 Sep 2025 21:22:19 +0000
asID:                     7438
IP address blocks:        189.201.226.0/24 maxlen: 24
                          189.201.228.0/24 maxlen: 24
                          189.201.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537132 (0x8322c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b429c72865e191f13438ce54026b95b47e06113
        Validity
            Not Before: Sep  4 21:22:19 2023 GMT
            Not After : Sep  5 21:22:19 2025 GMT
        Subject: CN=334c1f0a91d081d539639fefddf4299ef630dae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:23:cc:c8:8d:08:2b:ab:c8:de:b0:f9:9b:
                    65:19:e7:6c:e5:08:a4:34:ef:24:34:ed:48:cf:59:
                    8e:a7:2f:ba:de:ba:49:e8:e0:4f:34:f1:6e:75:d9:
                    8a:6f:a8:5d:b6:e3:c5:5a:a0:b3:b6:8f:d8:0e:07:
                    29:55:8a:68:f4:af:06:74:50:7c:a1:d2:c5:48:da:
                    4e:2e:6e:99:b8:2a:0e:c3:8d:12:9e:5c:ec:88:67:
                    94:01:31:d1:23:1d:e5:57:b0:79:20:22:f1:3a:75:
                    ff:10:cc:f9:d5:d9:34:75:4e:9c:4d:88:e6:e1:c2:
                    f7:3c:5b:85:a7:55:f6:c5:5e:f3:30:01:78:c8:38:
                    bd:1d:fe:d0:57:33:65:0e:d0:4f:c1:dc:f2:10:b7:
                    ed:9d:b2:b0:d4:c4:cd:b3:67:4c:4f:31:98:13:a8:
                    6a:db:36:5f:f0:7a:bb:59:cc:ee:88:aa:71:67:46:
                    9a:41:c0:9e:ba:7d:41:12:7d:6b:6e:3f:6e:8a:cf:
                    16:02:6d:63:ab:d0:9d:06:2d:d3:e2:e6:02:9f:54:
                    fb:98:6b:9c:d5:45:d3:ea:0f:88:57:82:8b:56:b2:
                    85:ea:e3:1f:72:82:e7:01:1f:cb:b8:7b:ad:d7:12:
                    a1:7f:c8:40:00:74:8c:9d:a0:cd:47:c2:21:3a:12:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:89:27:0C:78:FA:E4:2D:E9:80:C6:63:C3:80:C7:9B:03:5D:E6:9F
            X509v3 Authority Key Identifier:
                keyid:62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/334c1f0a91d081d539639fefddf4299ef630dae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/1b429c72865e191f13438ce54026b95b47e06113.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.226.0/24
                  189.201.228.0/24
                  189.201.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:69:b8:d3:d8:89:17:57:e4:9f:c2:c7:2e:ec:36:3d:1c:73:
         fe:39:1e:65:5a:a1:fc:37:6e:7c:e4:39:d2:8f:b6:04:b3:e1:
         7c:5f:8b:b9:c6:65:57:39:96:77:6b:ed:d9:c1:e3:c6:cf:9d:
         b1:cb:a3:b4:c2:6a:bf:a6:d6:9e:35:af:26:90:82:82:23:f4:
         7c:5d:b1:98:45:2b:bb:62:f1:ec:f4:92:3b:f5:a9:9e:93:09:
         c6:72:44:a5:ca:6c:2b:c2:ff:be:36:29:e0:bf:3e:e9:13:21:
         0c:5c:9a:0a:6b:c8:bf:b7:33:9c:2b:24:c0:f6:8c:1b:0e:3e:
         a7:e6:99:22:5b:36:a5:c5:4d:88:6e:d2:3d:62:cf:79:88:53:
         ac:23:73:14:40:1d:58:8e:6e:10:c5:eb:84:8e:3e:44:58:61:
         e5:c5:23:bd:63:73:91:70:5f:a5:fe:ac:87:63:4e:9c:27:40:
         06:13:34:17:fb:9e:3c:21:ea:12:58:8d:90:41:b2:74:5c:49:
         4c:8d:1c:83:72:3f:0c:18:80:72:01:64:d6:8d:7b:c6:89:98:
         77:90:4e:dd:46:d2:85:0c:b7:24:5a:ef:c7:f7:93:dd:97:5b:
         91:c0:13:c7:eb:48:7f:07:21:4b:52:a4:28:e6:85:38:9f:d9:
         ff:c1:ca:9e
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDCDIsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFi
NDI5YzcyODY1ZTE5MWYxMzQzOGNlNTQwMjZiOTViNDdlMDYxMTMwHhcNMjMwOTA0
MjEyMjE5WhcNMjUwOTA1MjEyMjE5WjAzMTEwLwYDVQQDEygzMzRjMWYwYTkxZDA4
MWQ1Mzk2MzlmZWZkZGY0Mjk5ZWY2MzBkYWU1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAvfAjzMiNCCuryN6w+ZtlGeds5QikNO8kNO1Iz1mOpy+63rpJ
6OBPNPFuddmKb6hdtuPFWqCzto/YDgcpVYpo9K8GdFB8odLFSNpOLm6ZuCoOw40S
nlzsiGeUATHRIx3lV7B5ICLxOnX/EMz51dk0dU6cTYjm4cL3PFuFp1X2xV7zMAF4
yDi9Hf7QVzNlDtBPwdzyELftnbKw1MTNs2dMTzGYE6hq2zZf8Hq7WczuiKpxZ0aa
QcCeun1BEn1rbj9uis8WAm1jq9CdBi3T4uYCn1T7mGuc1UXT6g+IV4KLVrKF6uMf
coLnAR/LuHut1xKhf8hAAHSMnaDNR8IhOhLICwIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFFWJJwx4+uQt6YDGY8OAx5sDXeafMB8GA1UdIwQYMBaAFGJYm8+XuBSafNRs
fZpkZycbWe+CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWI0Mjlj
NzI4NjVlMTkxZjEzNDM4Y2U1NDAyNmI5NWI0N2UwNjExMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWE4MmVlM2QtYzc1Ni00YTVjLWEzNjctOTNlMjA1
ZTMzNjQ5LzMzNGMxZjBhOTFkMDgxZDUzOTYzOWZlZmRkZjQyOTllZjYzMGRhZTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YTgyZWUzZC1jNzU2LTRhNWMtYTM2Ny05M2Uy
MDVlMzM2NDkvMWI0MjljNzI4NjVlMTkxZjEzNDM4Y2U1NDAyNmI5NWI0N2UwNjEx
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAL3J4gMEAL3J5AMEAL3J5jANBgkqhkiG9w0BAQsFAAOCAQEA
KWm409iJF1fkn8LHLuw2PRxz/jkeZVqh/DdufOQ50o+2BLPhfF+LucZlVzmWd2vt
2cHjxs+dscujtMJqv6bWnjWvJpCCgiP0fF2xmEUru2Lx7PSSO/WpnpMJxnJEpcps
K8L/vjYp4L8+6RMhDFyaCmvIv7cznCskwPaMGw4+p+aZIls2pcVNiG7SPWLPeYhT
rCNzFEAdWI5uEMXrhI4+RFhh5cUjvWNzkXBfpf6sh2NOnCdABhM0F/uePCHqEliN
kEGydFxJTI0cg3I/DBiAcgFk1o17xomYd5BO3UbShQy3JFrvx/eT3ZdbkcATx+tI
fwchS1KkKOaFOJ/Z/8HKng==
-----END CERTIFICATE-----
Generated at Sat Nov 25 17:40:04 2023 by rpki-client on console-fra.rpki-client.org