Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3130342e302f32322d3234203d3e203438343635.roa
File:                     3230312e3135392e3130342e302f32322d3234203d3e203438343635.roa (raw, json)
Hash identifier:          wUKeK/mPQsZFogLSmiD2/8wow1JocWLYbLa798M6uUI=
Subject key identifier:   6E:65:97:D3:08:9F:F2:2D:3D:18:E6:6F:E5:B5:E2:98:9A:0D:8B:51
Certificate issuer:       /CN=27A336C5888011F6572981D08E87791A9EBE55D7
Certificate serial:       65401B1BEB6C1ADD19FA8C66C20CFC06366D89B4
Authority key identifier: 27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3130342e302f32322d3234203d3e203438343635.roa
Signing time:             Mon 17 Jun 2024 01:45:02 +0000
ROA not before:           Mon 17 Jun 2024 01:40:02 +0000
ROA not after:            Mon 16 Jun 2025 01:45:02 +0000
asID:                     48465
IP address blocks:        201.159.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:40:1b:1b:eb:6c:1a:dd:19:fa:8c:66:c2:0c:fc:06:36:6d:89:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A336C5888011F6572981D08E87791A9EBE55D7
        Validity
            Not Before: Jun 17 01:40:02 2024 GMT
            Not After : Jun 16 01:45:02 2025 GMT
        Subject: CN=6E6597D3089FF22D3D18E66FE5B5E2989A0D8B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:5c:d5:40:5c:12:44:fd:99:ca:86:0f:f6:
                    9a:28:12:12:d8:c7:24:8f:68:1e:c2:27:70:04:b7:
                    d1:27:c7:a2:f3:29:f6:13:5a:bd:30:5c:18:1c:5d:
                    64:36:f1:49:bf:38:2f:75:01:29:bd:ec:b8:df:eb:
                    ac:88:37:2d:5e:cb:13:3c:c6:2e:9c:2f:2c:74:f6:
                    92:16:0e:b0:22:b3:70:96:cd:6a:5a:54:00:4c:b0:
                    77:86:4d:80:06:ae:c8:f7:a3:33:71:ef:4e:10:5e:
                    df:4e:b1:96:67:9a:d5:0b:31:6c:55:2b:a2:e2:46:
                    3d:f4:3c:37:f1:22:01:14:34:08:2c:c6:c7:37:4b:
                    07:61:90:0e:31:72:07:99:8d:a3:4e:53:7a:bb:df:
                    9f:5f:35:3e:91:8c:84:d5:94:1e:32:bd:30:02:28:
                    dc:63:9f:64:cd:f9:39:ec:af:43:50:8b:a4:40:39:
                    66:1e:b8:10:0c:13:b4:e2:e2:15:1e:86:05:46:11:
                    c4:b9:fe:90:77:1e:78:2f:ed:d4:2a:3c:db:a0:93:
                    ff:01:cc:3b:8e:c6:00:54:ec:8d:4a:ea:e6:dc:57:
                    8f:f8:5b:c5:45:ec:ba:5e:24:d1:03:d7:4e:16:85:
                    81:99:d8:00:cb:21:67:23:74:a0:f5:61:c5:31:e1:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:65:97:D3:08:9F:F2:2D:3D:18:E6:6F:E5:B5:E2:98:9A:0D:8B:51
            X509v3 Authority Key Identifier:
                keyid:27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/27A336C5888011F6572981D08E87791A9EBE55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135392e3130342e302f32322d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:67:d1:03:8f:5b:8f:98:34:fd:0b:f9:ae:31:6e:80:0f:af:
         e2:87:93:07:e9:1f:f0:6b:c2:4f:3d:b5:0f:a5:5b:b0:19:84:
         34:9a:25:fd:bb:78:57:c5:b6:d0:99:4e:e0:af:63:18:79:20:
         c7:a2:a0:fe:41:8c:fc:3a:93:34:b6:d6:33:cc:49:06:1e:1f:
         f1:25:c2:80:7e:f5:56:bd:a8:84:e0:19:c2:c1:ca:cc:d4:30:
         fa:b7:32:1b:0a:95:a4:d6:e1:95:b0:ea:2a:0c:5c:df:24:91:
         de:45:aa:34:26:cd:43:9e:82:e9:88:5e:53:7e:90:e2:5b:00:
         69:c6:56:c7:91:cd:30:3a:95:b3:77:8c:2c:83:85:62:7d:c3:
         21:60:0f:48:19:c4:3f:0e:55:48:26:51:60:12:93:1f:24:a7:
         1a:d2:80:89:59:1e:b9:0a:a4:26:f8:bf:ce:64:28:7d:2d:d5:
         b5:52:74:e9:a7:85:99:47:f9:26:fb:7f:73:30:f0:0c:d4:cb:
         e6:0c:07:cb:48:4f:0b:b3:f5:56:d4:5b:4b:02:8b:38:39:fe:
         7a:23:69:ea:ec:cc:86:79:53:cc:48:33:c6:37:46:46:dc:11:
         ec:54:28:58:d2:13:85:ff:ce:5a:19:03:19:0e:ee:02:3a:aa:
         a2:15:a0:d3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZUAbG+tsGt0Z+oxmwgz8BjZtibQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdBMzM2QzU4ODgwMTFGNjU3Mjk4MUQwOEU4Nzc5MUE5
RUJFNTVENzAeFw0yNDA2MTcwMTQwMDJaFw0yNTA2MTYwMTQ1MDJaMDMxMTAvBgNV
BAMTKDZFNjU5N0QzMDg5RkYyMkQzRDE4RTY2RkU1QjVFMjk4OUEwRDhCNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrMFzVQFwSRP2ZyoYP9pooEhLY
xySPaB7CJ3AEt9Enx6LzKfYTWr0wXBgcXWQ28Um/OC91ASm97Ljf66yINy1eyxM8
xi6cLyx09pIWDrAis3CWzWpaVABMsHeGTYAGrsj3ozNx704QXt9OsZZnmtULMWxV
K6LiRj30PDfxIgEUNAgsxsc3SwdhkA4xcgeZjaNOU3q7359fNT6RjITVlB4yvTAC
KNxjn2TN+Tnsr0NQi6RAOWYeuBAME7Ti4hUehgVGEcS5/pB3Hngv7dQqPNugk/8B
zDuOxgBU7I1K6ubcV4/4W8VF7LpeJNED104WhYGZ2ADLIWcjdKD1YcUx4fdZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUbmWX0wif8i09GOZv5bXimJoNi1EwHwYDVR0j
BBgwFoAUJ6M2xYiAEfZXKYHQjod5Gp6+VdcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CQzQwRjVDNzAyMTUxODc5NzBCMUY5MDQ1NDk3OUIzNzlC
ODAzMTA4Nzg4NTI2MkE3MDUwQUVFNjdCNEE0QUUyLzAvMjdBMzM2QzU4ODgwMTFG
NjU3Mjk4MUQwOEU4Nzc5MUE5RUJFNTVENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yN0EzMzZDNTg4ODAxMUY2NTcy
OTgxRDA4RTg3NzkxQTlFQkU1NUQ3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkM0MEY1QzcwMjE1MTg3OTcwQjFGOTA0NTQ5NzlCMzc5QjgwMzEwODc4
ODUyNjJBNzA1MEFFRTY3QjRBNEFFMi8wLzMyMzAzMTJlMzEzNTM5MmUzMTMwMzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM4MzQzNjM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyZ9o
MA0GCSqGSIb3DQEBCwUAA4IBAQCIZ9EDj1uPmDT9C/muMW6AD6/ih5MH6R/wa8JP
PbUPpVuwGYQ0miX9u3hXxbbQmU7gr2MYeSDHoqD+QYz8OpM0ttYzzEkGHh/xJcKA
fvVWvaiE4BnCwcrM1DD6tzIbCpWk1uGVsOoqDFzfJJHeRao0Js1DnoLpiF5TfpDi
WwBpxlbHkc0wOpWzd4wsg4VifcMhYA9IGcQ/DlVIJlFgEpMfJKca0oCJWR65CqQm
+L/OZCh9LdW1UnTpp4WZR/km+39zMPAM1MvmDAfLSE8Ls/VW1FtLAos4Of56I2nq
7MyGeVPMSDPGN0ZG3BHsVChY0hOF/85aGQMZDu4COqqiFaDT
-----END CERTIFICATE-----
Generated at Mon Jun 17 21:59:58 2024 by rpki-client on console-fra.rpki-client.org