Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/7358c0929f2b2e1d4e091c8e105285383f601384.roa
File:                     7358c0929f2b2e1d4e091c8e105285383f601384.roa (raw, json)
Hash identifier:          0M1mnrtfBiSTmO+m8ppw585JYiW5uZfYMnG9TqltE2s=
Subject key identifier:   9E:A9:09:32:1F:7C:4D:51:F0:DB:00:7C:79:1E:FB:3F:60:7E:7B:EF
Certificate issuer:       /CN=1b429c72865e191f13438ce54026b95b47e06113
Certificate serial:       0825FD
Authority key identifier: 62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/7358c0929f2b2e1d4e091c8e105285383f601384.roa
Signing time:             Tue 05 Sep 2023 21:17:56 +0000
ROA not before:           Mon 04 Sep 2023 21:17:56 +0000
ROA not after:            Fri 05 Sep 2025 21:17:56 +0000
asID:                     262182
IP address blocks:        189.201.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534013 (0x825fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b429c72865e191f13438ce54026b95b47e06113
        Validity
            Not Before: Sep  4 21:17:56 2023 GMT
            Not After : Sep  5 21:17:56 2025 GMT
        Subject: CN=7358c0929f2b2e1d4e091c8e105285383f601384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:61:91:24:f1:2f:ae:5e:2f:81:37:5f:c7:08:
                    bb:ef:48:03:c7:5b:ee:a6:34:fe:37:da:06:2d:fb:
                    20:94:a5:ad:ee:74:c7:33:9f:0b:b9:62:62:39:bc:
                    b9:04:18:90:13:99:61:8a:da:46:ef:11:3d:6d:8a:
                    cc:b4:d2:79:78:33:34:15:3b:48:74:d3:50:0a:07:
                    f0:f1:b8:f7:ad:ab:37:47:04:1c:4f:c4:74:91:a1:
                    8a:64:e8:8c:70:6d:9d:4f:68:7c:25:e3:0d:eb:3f:
                    09:a5:05:1b:93:f4:20:e1:8a:75:d3:4a:ce:9d:b1:
                    89:55:3e:4e:db:06:b0:9e:91:ac:6c:c9:23:18:1f:
                    3c:54:ee:33:5e:65:77:fe:23:c4:eb:9f:7b:1c:09:
                    9c:70:63:41:05:26:3b:44:ca:2b:fa:f6:3f:53:95:
                    be:94:0f:65:89:c3:58:8a:c7:61:aa:ce:1f:b4:66:
                    3a:6f:31:3f:ef:03:19:3d:bb:6f:f7:a5:37:b2:54:
                    70:42:9a:27:6f:07:bf:53:ad:26:53:73:cf:a0:68:
                    21:23:da:a7:9a:60:2b:9c:25:5a:21:f3:1f:f0:a6:
                    e8:60:1a:b8:5a:b6:b2:0a:02:91:41:67:ee:09:0d:
                    5c:57:c9:1a:b0:3e:81:5a:a4:1d:23:b2:72:ef:df:
                    04:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A9:09:32:1F:7C:4D:51:F0:DB:00:7C:79:1E:FB:3F:60:7E:7B:EF
            X509v3 Authority Key Identifier:
                keyid:62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/7358c0929f2b2e1d4e091c8e105285383f601384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/1b429c72865e191f13438ce54026b95b47e06113.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:57:24:6b:22:c8:72:f1:a1:8d:8e:e9:d6:9e:6d:83:2d:dc:
         72:b8:43:db:ae:9a:83:c3:1e:a4:94:eb:44:01:2b:7b:a4:57:
         d2:2a:56:ae:a2:7d:49:9c:f4:23:c6:49:b4:5c:84:8d:00:95:
         7f:1f:d8:f8:11:73:1a:b5:9d:b1:60:a1:87:82:ba:df:b5:1e:
         80:2d:11:a0:8c:a2:36:44:8a:1d:eb:42:ae:a9:4b:e7:52:c0:
         44:3b:bf:0b:7d:dc:eb:14:cb:8c:8d:c7:a4:15:bf:07:14:8f:
         0d:c5:aa:03:45:d1:50:87:fb:d2:db:83:26:4e:22:df:e3:9e:
         62:8f:7f:44:c9:f1:07:95:e2:47:ac:fd:7c:c5:2a:6a:cb:c5:
         99:43:1d:31:9f:78:ce:df:27:57:6f:42:f0:82:85:9e:22:77:
         ce:f6:55:83:7d:64:7d:f8:73:f6:de:44:9e:33:85:1b:f1:56:
         08:8b:a6:13:b8:fa:0f:2d:7f:ff:ef:7e:62:3d:db:c0:cf:d6:
         2a:86:0d:92:2a:64:8b:5f:9b:54:35:5c:55:81:95:52:a7:15:
         af:7e:d8:40:e3:25:b2:f8:69:48:af:d7:a7:36:82:7f:2b:37:
         f1:cf:f9:7f:66:35:d6:9d:ac:d8:46:47:76:77:b5:8f:da:49:
         ff:15:11:db
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCCX9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFi
NDI5YzcyODY1ZTE5MWYxMzQzOGNlNTQwMjZiOTViNDdlMDYxMTMwHhcNMjMwOTA0
MjExNzU2WhcNMjUwOTA1MjExNzU2WjAzMTEwLwYDVQQDEyg3MzU4YzA5MjlmMmIy
ZTFkNGUwOTFjOGUxMDUyODUzODNmNjAxMzg0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi2GRJPEvrl4vgTdfxwi770gDx1vupjT+N9oGLfsglKWt7nTH
M58LuWJiOby5BBiQE5lhitpG7xE9bYrMtNJ5eDM0FTtIdNNQCgfw8bj3ras3RwQc
T8R0kaGKZOiMcG2dT2h8JeMN6z8JpQUbk/Qg4Yp100rOnbGJVT5O2wawnpGsbMkj
GB88VO4zXmV3/iPE6597HAmccGNBBSY7RMor+vY/U5W+lA9licNYisdhqs4ftGY6
bzE/7wMZPbtv96U3slRwQponbwe/U60mU3PPoGghI9qnmmArnCVaIfMf8KboYBq4
WrayCgKRQWfuCQ1cV8kasD6BWqQdI7Jy798E6wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ6pCTIffE1R8NsAfHke+z9gfnvvMB8GA1UdIwQYMBaAFGJYm8+XuBSafNRs
fZpkZycbWe+CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWI0Mjlj
NzI4NjVlMTkxZjEzNDM4Y2U1NDAyNmI5NWI0N2UwNjExMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOWE4MmVlM2QtYzc1Ni00YTVjLWEzNjctOTNlMjA1
ZTMzNjQ5LzczNThjMDkyOWYyYjJlMWQ0ZTA5MWM4ZTEwNTI4NTM4M2Y2MDEzODQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85YTgyZWUzZC1jNzU2LTRhNWMtYTM2Ny05M2Uy
MDVlMzM2NDkvMWI0MjljNzI4NjVlMTkxZjEzNDM4Y2U1NDAyNmI5NWI0N2UwNjEx
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL3J5TANBgkqhkiG9w0BAQsFAAOCAQEAfVckayLIcvGhjY7p
1p5tgy3ccrhD266ag8MepJTrRAEre6RX0ipWrqJ9SZz0I8ZJtFyEjQCVfx/Y+BFz
GrWdsWChh4K637UegC0RoIyiNkSKHetCrqlL51LARDu/C33c6xTLjI3HpBW/BxSP
DcWqA0XRUIf70tuDJk4i3+OeYo9/RMnxB5XiR6z9fMUqasvFmUMdMZ94zt8nV29C
8IKFniJ3zvZVg31kffhz9t5EnjOFG/FWCIumE7j6Dy1//+9+Yj3bwM/WKoYNkipk
i1+bVDVcVYGVUqcVr37YQOMlsvhpSK/XpzaCfys38c/5f2Y11p2s2EZHdne1j9pJ
/xUR2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org