Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/ebe67177a5c74981e1c15dbde0c3d4cd4d525742.roa
File:                     ebe67177a5c74981e1c15dbde0c3d4cd4d525742.roa (raw, json)
Hash identifier:          3XOqMJeVycXQordZPV/D/Z5IuXlhROHyzxRUJOZSxW4=
Subject key identifier:   D9:8E:F2:A5:72:04:74:AF:E7:54:DE:66:BE:75:EF:E0:27:BD:24:2F
Certificate issuer:       /CN=acea05e36ade234a2b21796624db8f7c07355124
Certificate serial:       0D353C
Authority key identifier: 7A:75:A3:F8:25:83:24:1F:B3:1B:5E:CC:7F:61:3D:5C:FF:E9:97:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acea05e36ade234a2b21796624db8f7c07355124.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/ebe67177a5c74981e1c15dbde0c3d4cd4d525742.roa
Signing time:             Wed 24 Mar 2021 14:33:39 +0000
ROA not before:           Wed 24 Mar 2021 14:33:39 +0000
ROA not after:            Tue 24 Mar 2026 14:33:39 +0000
asID:                     40676
IP address blocks:        192.141.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865596 (0xd353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acea05e36ade234a2b21796624db8f7c07355124
        Validity
            Not Before: Mar 24 14:33:39 2021 GMT
            Not After : Mar 24 14:33:39 2026 GMT
        Subject: CN=ebe67177a5c74981e1c15dbde0c3d4cd4d525742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e7:56:76:ef:5a:7e:b0:62:35:c1:19:74:69:
                    5d:52:6e:48:17:60:b0:64:47:29:de:6f:24:58:20:
                    4b:b5:9c:ba:70:f3:41:c0:30:0c:14:38:5d:57:b1:
                    36:8c:4c:a2:3f:49:79:6f:d5:4b:0d:01:cc:9a:12:
                    e8:ca:64:9f:31:a9:15:96:0c:30:fc:a5:9e:57:1e:
                    b3:82:31:f1:71:2a:03:51:1c:14:33:ca:3b:9d:c0:
                    9a:85:e2:47:5e:be:08:d1:75:d6:d1:73:b9:e1:ab:
                    67:53:6b:f0:49:a8:b1:7e:86:99:88:65:53:98:1d:
                    99:37:b8:f9:f1:41:b3:81:6d:65:27:33:90:ea:16:
                    5b:f5:fc:bb:c4:0f:1e:6f:af:dd:7c:ca:1e:45:03:
                    f1:49:ec:4f:4e:0b:67:bb:db:40:53:c3:d1:b7:d7:
                    49:ba:d9:d1:63:02:4d:05:06:b8:61:f7:78:cb:98:
                    2e:59:af:b7:a7:32:8a:24:c0:e7:97:dd:0a:4b:18:
                    c3:df:be:84:8a:78:a5:a2:04:8f:8f:e9:d9:8a:79:
                    1f:f5:a9:29:25:10:2a:d0:48:0d:15:ae:31:4d:a9:
                    33:6f:cf:20:16:09:b7:cf:83:53:23:55:a8:a2:41:
                    1b:dc:9f:e2:18:7f:f9:cd:30:36:41:1a:c4:51:69:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8E:F2:A5:72:04:74:AF:E7:54:DE:66:BE:75:EF:E0:27:BD:24:2F
            X509v3 Authority Key Identifier:
                keyid:7A:75:A3:F8:25:83:24:1F:B3:1B:5E:CC:7F:61:3D:5C:FF:E9:97:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acea05e36ade234a2b21796624db8f7c07355124.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/ebe67177a5c74981e1c15dbde0c3d4cd4d525742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aae69840-7ed2-42a4-a0d0-df468c29db65/acea05e36ade234a2b21796624db8f7c07355124.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:dc:42:7f:db:42:2a:19:4b:a1:ea:7a:b1:f9:71:18:22:5d:
         24:5f:63:c3:49:da:92:f0:97:66:f1:8b:40:da:4c:3b:3a:6a:
         7e:58:6b:61:f0:8f:de:fd:00:e1:be:cb:7a:25:e9:be:11:7f:
         63:3f:d1:18:30:7f:cc:2e:6a:9f:b4:b9:15:35:5c:70:0a:5f:
         c8:56:7e:5d:5e:70:63:14:9e:4e:d4:e6:1d:29:3e:d8:c8:d7:
         52:39:57:87:43:21:45:ab:19:dd:8a:60:f1:84:45:2b:c2:24:
         a2:37:fc:69:b5:0e:24:84:e1:04:b2:eb:0e:e4:4c:e0:34:a6:
         1c:a9:66:be:0d:1d:55:41:3d:3b:31:46:ee:85:bd:de:f0:d1:
         19:06:45:47:18:f3:d1:9e:8f:30:86:72:2a:d2:c4:2f:ba:08:
         9f:e5:a2:32:45:79:e6:6d:11:79:13:43:b1:b8:a3:d2:2a:88:
         49:85:91:f0:61:02:7c:1a:04:8e:a0:43:f4:9a:a8:c8:38:e0:
         70:b2:2f:a1:f7:8d:c6:6f:9b:e5:0d:b7:3a:1c:f5:f8:14:78:
         03:a8:20:fb:1f:3f:a3:c6:44:ae:15:33:76:52:32:19:be:90:
         1c:06:2f:43:82:cd:7b:63:57:72:d6:37:07:e4:37:a0:f1:2b:
         8c:c5:9f:88
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDTU8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFj
ZWEwNWUzNmFkZTIzNGEyYjIxNzk2NjI0ZGI4ZjdjMDczNTUxMjQwHhcNMjEwMzI0
MTQzMzM5WhcNMjYwMzI0MTQzMzM5WjAzMTEwLwYDVQQDEyhlYmU2NzE3N2E1Yzc0
OTgxZTFjMTVkYmRlMGMzZDRjZDRkNTI1NzQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApedWdu9afrBiNcEZdGldUm5IF2CwZEcp3m8kWCBLtZy6cPNB
wDAMFDhdV7E2jEyiP0l5b9VLDQHMmhLoymSfMakVlgww/KWeVx6zgjHxcSoDURwU
M8o7ncCaheJHXr4I0XXW0XO54atnU2vwSaixfoaZiGVTmB2ZN7j58UGzgW1lJzOQ
6hZb9fy7xA8eb6/dfMoeRQPxSexPTgtnu9tAU8PRt9dJutnRYwJNBQa4Yfd4y5gu
Wa+3pzKKJMDnl90KSxjD376EinilogSPj+nZinkf9akpJRAq0EgNFa4xTakzb88g
Fgm3z4NTI1WookEb3J/iGH/5zTA2QRrEUWlwDwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNmO8qVyBHSv51TeZr517+AnvSQvMB8GA1UdIwQYMBaAFHp1o/glgyQfsxte
zH9hPVz/6Zc1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWNlYTA1
ZTM2YWRlMjM0YTJiMjE3OTY2MjRkYjhmN2MwNzM1NTEyNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWFlNjk4NDAtN2VkMi00MmE0LWEwZDAtZGY0Njhj
MjlkYjY1L2ViZTY3MTc3YTVjNzQ5ODFlMWMxNWRiZGUwYzNkNGNkNGQ1MjU3NDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYWU2OTg0MC03ZWQyLTQyYTQtYTBkMC1kZjQ2
OGMyOWRiNjUvYWNlYTA1ZTM2YWRlMjM0YTJiMjE3OTY2MjRkYjhmN2MwNzM1NTEy
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsCNMDANBgkqhkiG9w0BAQsFAAOCAQEAbtxCf9tCKhlLoep6
sflxGCJdJF9jw0nakvCXZvGLQNpMOzpqflhrYfCP3v0A4b7LeiXpvhF/Yz/RGDB/
zC5qn7S5FTVccApfyFZ+XV5wYxSeTtTmHSk+2MjXUjlXh0MhRasZ3Ypg8YRFK8Ik
ojf8abUOJIThBLLrDuRM4DSmHKlmvg0dVUE9OzFG7oW93vDRGQZFRxjz0Z6PMIZy
KtLEL7oIn+WiMkV55m0ReRNDsbij0iqISYWR8GECfBoEjqBD9JqoyDjgcLIvofeN
xm+b5Q23Ohz1+BR4A6gg+x8/o8ZErhUzdlIyGb6QHAYvQ4LNe2NXctY3B+Q3oPEr
jMWfiA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org