Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ab4024c7-60fb-4f48-963e-2d1377b61304/c3f21f65b41313a1afc2fb149913a6f9dadaf231.roa
File:                     c3f21f65b41313a1afc2fb149913a6f9dadaf231.roa (raw, json)
Hash identifier:          ZgT+5XKFTpsapemXFUIwccw9Y3Ko2Ll+BjNfEnxa0Fo=
Subject key identifier:   D2:58:42:C1:C5:48:2D:21:19:49:61:73:7F:88:EA:5E:D2:C5:71:20
Certificate issuer:       /CN=d7316fc96d2d5973d8887515fc14f7342915f202
Certificate serial:       1AD1
Authority key identifier: 38:60:AD:1F:CA:BD:33:D9:08:79:B2:60:85:5A:6E:FD:67:74:80:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d7316fc96d2d5973d8887515fc14f7342915f202.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ab4024c7-60fb-4f48-963e-2d1377b61304/c3f21f65b41313a1afc2fb149913a6f9dadaf231.roa
Signing time:             Fri 13 Aug 2021 20:57:07 +0000
ROA not before:           Fri 13 Aug 2021 03:00:00 +0000
ROA not after:            Sun 13 Aug 2023 03:00:00 +0000
asID:                     52327
IP address blocks:        190.111.177.0/24 maxlen: 24
                          201.77.2.0/23 maxlen: 24
                          2803:a1e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6865 (0x1ad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7316fc96d2d5973d8887515fc14f7342915f202
        Validity
            Not Before: Aug 13 03:00:00 2021 GMT
            Not After : Aug 13 03:00:00 2023 GMT
        Subject: CN=c3f21f65b41313a1afc2fb149913a6f9dadaf231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:c5:9e:6d:de:4c:b4:ad:cc:f1:df:7a:15:
                    e1:a4:07:76:41:00:7d:7a:75:54:f7:14:2c:91:80:
                    64:6a:06:8e:fd:58:c8:67:9d:6f:a6:21:fe:ca:f5:
                    16:07:b9:45:d6:1b:5f:17:e6:eb:90:9b:51:cd:9c:
                    36:5a:64:98:94:8d:10:e3:68:46:7c:35:3c:e3:e3:
                    a3:ad:c6:9c:12:1d:9d:ea:08:9d:1b:5c:28:5e:2f:
                    5f:82:b2:ca:45:e8:70:2d:e5:3d:09:3c:57:e8:93:
                    9f:9e:da:7e:47:9b:ad:ba:fa:4e:1a:e6:58:d0:b1:
                    91:98:3e:bd:e2:3e:f4:f1:29:97:26:69:0d:86:a4:
                    a4:e2:e0:c2:a4:7c:93:52:37:6b:09:ba:45:0f:f5:
                    d6:3b:8f:9a:c5:77:46:47:98:6f:69:4d:52:59:b8:
                    e5:4f:49:02:e1:3b:dd:51:92:a2:93:4e:ed:a1:3e:
                    16:4a:e5:fb:97:c4:da:8b:c2:55:8c:27:aa:d3:dd:
                    8c:3a:2c:97:5b:81:60:6b:61:56:48:2e:f4:df:50:
                    b4:65:9e:d2:f8:c0:3b:03:a7:f5:30:1e:cd:ae:9b:
                    c6:61:28:e1:56:70:a3:ad:9f:93:0d:a8:d8:c0:77:
                    64:a7:88:4c:e9:a4:19:8e:c0:ea:ab:b2:63:57:62:
                    7b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:58:42:C1:C5:48:2D:21:19:49:61:73:7F:88:EA:5E:D2:C5:71:20
            X509v3 Authority Key Identifier:
                keyid:38:60:AD:1F:CA:BD:33:D9:08:79:B2:60:85:5A:6E:FD:67:74:80:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d7316fc96d2d5973d8887515fc14f7342915f202.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ab4024c7-60fb-4f48-963e-2d1377b61304/c3f21f65b41313a1afc2fb149913a6f9dadaf231.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ab4024c7-60fb-4f48-963e-2d1377b61304/d7316fc96d2d5973d8887515fc14f7342915f202.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.177.0/24
                  201.77.2.0/23
                IPv6:
                  2803:a1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:8c:23:da:ca:6e:17:52:6a:f4:b7:34:13:0a:29:de:9d:52:
         0b:a6:c0:37:2a:80:57:82:61:ea:10:51:d3:25:50:04:49:24:
         95:7b:2f:ae:41:3c:be:e2:86:0f:5f:56:21:a7:35:84:89:f8:
         ea:b9:44:15:fa:6e:f3:29:c3:a2:08:6a:24:5d:bf:87:28:ef:
         ab:02:dd:2a:91:9a:ce:3e:5e:16:9a:d3:91:f4:86:5d:e6:bf:
         87:61:8c:60:6d:60:ce:09:e1:7f:0f:5a:8b:ef:ae:1d:40:6d:
         92:e8:48:45:24:3a:56:2a:25:69:0a:79:22:6b:4e:64:bd:4d:
         65:10:20:e0:e0:aa:af:56:01:e8:da:7f:57:da:05:b3:23:21:
         20:f8:0a:5c:3e:83:1a:9f:d3:48:19:79:33:64:20:ed:b5:bd:
         5d:ac:56:40:e7:5f:a3:f1:2d:db:42:4a:58:07:b9:39:eb:9f:
         51:57:7e:24:22:db:46:06:04:34:5f:10:29:a6:35:55:4f:a3:
         f9:99:1b:46:63:c5:80:59:57:97:0f:de:ae:b2:21:44:87:0b:
         71:7b:33:f0:6e:b4:f6:82:c3:a0:b8:d2:0f:66:47:6a:ff:76:
         62:37:c6:49:3a:71:d9:9e:dc:83:09:1b:eb:93:6f:aa:23:06:
         7b:25:33:85
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgICGtEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZDcz
MTZmYzk2ZDJkNTk3M2Q4ODg3NTE1ZmMxNGY3MzQyOTE1ZjIwMjAeFw0yMTA4MTMw
MzAwMDBaFw0yMzA4MTMwMzAwMDBaMDMxMTAvBgNVBAMTKGMzZjIxZjY1YjQxMzEz
YTFhZmMyZmIxNDk5MTNhNmY5ZGFkYWYyMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCy98Webd5MtK3M8d96FeGkB3ZBAH16dVT3FCyRgGRqBo79WMhn
nW+mIf7K9RYHuUXWG18X5uuQm1HNnDZaZJiUjRDjaEZ8NTzj46OtxpwSHZ3qCJ0b
XCheL1+CsspF6HAt5T0JPFfok5+e2n5Hm626+k4a5ljQsZGYPr3iPvTxKZcmaQ2G
pKTi4MKkfJNSN2sJukUP9dY7j5rFd0ZHmG9pTVJZuOVPSQLhO91RkqKTTu2hPhZK
5fuXxNqLwlWMJ6rT3Yw6LJdbgWBrYVZILvTfULRlntL4wDsDp/UwHs2um8ZhKOFW
cKOtn5MNqNjAd2SniEzppBmOwOqrsmNXYnsfAgMBAAGjggJwMIICbDAdBgNVHQ4E
FgQU0lhCwcVILSEZSWFzf4jqXtLFcSAwHwYDVR0jBBgwFoAUOGCtH8q9M9kIebJg
hVpu/Wd0gOEwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9kNzMxNmZj
OTZkMmQ1OTczZDg4ODc1MTVmYzE0ZjczNDI5MTVmMjAyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hYjQwMjRjNy02MGZiLTRmNDgtOTYzZS0yZDEzNzdi
NjEzMDQvYzNmMjFmNjViNDEzMTNhMWFmYzJmYjE0OTkxM2E2ZjlkYWRhZjIzMS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2FiNDAyNGM3LTYwZmItNGY0OC05NjNlLTJkMTM3
N2I2MTMwNC9kNzMxNmZjOTZkMmQ1OTczZDg4ODc1MTVmYzE0ZjczNDI5MTVmMjAy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUw
IzASBAIAATAMAwQAvm+xAwQByU0CMA0EAgACMAcDBQAoA6HgMA0GCSqGSIb3DQEB
CwUAA4IBAQCYjCPaym4XUmr0tzQTCinenVILpsA3KoBXgmHqEFHTJVAESSSVey+u
QTy+4oYPX1YhpzWEifjquUQV+m7zKcOiCGokXb+HKO+rAt0qkZrOPl4WmtOR9IZd
5r+HYYxgbWDOCeF/D1qL764dQG2S6EhFJDpWKiVpCnkia05kvU1lECDg4KqvVgHo
2n9X2gWzIyEg+ApcPoMan9NIGXkzZCDttb1drFZA51+j8S3bQkpYB7k5659RV34k
IttGBgQ0XxAppjVVT6P5mRtGY8WAWVeXD96usiFEhwtxezPwbrT2gsOguNIPZkdq
/3ZiN8ZJOnHZntyDCRvrk2+qIwZ7JTOF
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org