Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/5128a9add3bd75fea858256a6dd4ea7a2c24f25c.roa
File:                     5128a9add3bd75fea858256a6dd4ea7a2c24f25c.roa (raw, json)
Hash identifier:          kC5ZQOaJi9wqN0fMUyQz6TmlPRepkG3QvDZZajHd+EU=
Subject key identifier:   B8:F6:99:D5:3A:90:99:C1:18:1F:50:81:D6:94:68:76:13:B5:D4:F0
Certificate issuer:       /CN=5dbe213308e1f657ad90814bcb8813d9fd9c8c4c
Certificate serial:       03B8F7
Authority key identifier: 3B:90:04:1A:AC:83:67:A2:CE:39:A6:10:AF:03:79:B5:70:EA:BB:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/5128a9add3bd75fea858256a6dd4ea7a2c24f25c.roa
Signing time:             Fri 06 Oct 2023 12:39:30 +0000
ROA not before:           Thu 05 Oct 2023 12:39:30 +0000
ROA not after:            Mon 06 Oct 2025 12:39:30 +0000
asID:                     263809
IP address blocks:        191.97.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243959 (0x3b8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dbe213308e1f657ad90814bcb8813d9fd9c8c4c
        Validity
            Not Before: Oct  5 12:39:30 2023 GMT
            Not After : Oct  6 12:39:30 2025 GMT
        Subject: CN=5128a9add3bd75fea858256a6dd4ea7a2c24f25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:76:cf:70:04:70:79:87:0e:88:22:e5:33:28:
                    a8:10:ba:ce:db:b4:ab:0d:4d:96:33:86:2a:f5:58:
                    3f:2d:34:88:aa:71:9e:17:5f:9e:ec:8e:2f:ae:0f:
                    3c:84:72:57:22:86:6e:ca:89:cf:c0:fd:e7:a1:57:
                    5c:3d:94:12:98:3a:84:f0:68:63:11:4c:71:1f:20:
                    17:bb:8a:af:8c:e8:41:72:2e:0d:cd:66:b4:ee:88:
                    2d:94:9c:fa:73:27:83:b2:ac:d6:52:65:b0:1d:72:
                    29:ae:f8:89:f4:c4:ba:67:bc:40:45:22:a0:c1:23:
                    5a:93:96:ce:fe:4a:d1:1e:3f:0a:0e:0a:37:ff:11:
                    dc:50:28:9a:eb:9a:94:94:82:8f:aa:e8:6d:15:7b:
                    95:0e:3a:e1:98:88:f6:ca:23:09:20:57:52:6c:80:
                    67:08:40:2e:08:80:f8:dd:5a:a5:e3:06:11:7f:a6:
                    57:66:51:83:5a:16:55:e2:fa:1a:7a:dd:80:e7:26:
                    c0:61:99:91:1e:a0:6c:c2:67:b2:79:54:80:9e:fa:
                    d8:01:dc:83:d0:fd:85:c1:58:a4:c8:4f:e8:d4:57:
                    32:36:52:0b:ef:56:e4:0f:2e:09:21:9c:2d:00:0b:
                    b6:12:70:ea:aa:a4:e2:a1:1e:36:db:9f:9c:65:ae:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F6:99:D5:3A:90:99:C1:18:1F:50:81:D6:94:68:76:13:B5:D4:F0
            X509v3 Authority Key Identifier:
                keyid:3B:90:04:1A:AC:83:67:A2:CE:39:A6:10:AF:03:79:B5:70:EA:BB:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/5128a9add3bd75fea858256a6dd4ea7a2c24f25c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:e2:d6:fd:bd:78:f4:3b:5b:f7:e6:76:af:3d:19:63:94:2a:
         2b:54:43:4e:c3:c5:21:5d:77:58:51:34:9a:3f:14:13:c5:ac:
         8f:cd:bf:fd:a3:ac:f5:20:ba:da:64:88:3f:9c:e1:71:e9:df:
         10:e7:0b:e2:7f:bb:6e:94:83:56:d8:f6:05:52:11:57:62:ce:
         ce:26:65:f6:be:7d:4b:1b:d3:b9:2f:02:1c:0a:53:6d:b9:db:
         12:a4:89:e8:0a:24:a5:3d:01:aa:71:13:e2:99:cf:aa:1e:e0:
         a8:b6:7d:e8:a2:93:29:49:18:b7:8e:4a:a5:30:ce:ed:93:f7:
         c1:7d:38:21:a9:f0:97:48:f0:fe:92:da:10:48:6a:74:98:bf:
         0d:64:3e:23:c3:cd:93:3c:0a:ad:11:7e:8a:f6:9b:42:34:2f:
         47:1f:c1:35:6f:12:8d:93:1c:88:77:db:a6:8b:e0:49:51:d9:
         8a:e7:ba:c1:54:ac:4e:f5:70:61:19:aa:5a:0a:ea:8d:75:a7:
         13:0a:e2:ee:d0:08:7c:dd:ba:73:4f:56:34:6e:73:0c:18:2b:
         b9:f2:cd:91:36:0e:c0:80:88:71:20:62:70:6b:b7:20:97:78:
         da:b5:cf:08:03:7b:e5:aa:2b:3b:d2:9d:ea:77:f6:72:80:d1:
         cf:c3:91:85
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDA7j3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVk
YmUyMTMzMDhlMWY2NTdhZDkwODE0YmNiODgxM2Q5ZmQ5YzhjNGMwHhcNMjMxMDA1
MTIzOTMwWhcNMjUxMDA2MTIzOTMwWjAzMTEwLwYDVQQDEyg1MTI4YTlhZGQzYmQ3
NWZlYTg1ODI1NmE2ZGQ0ZWE3YTJjMjRmMjVjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjXbPcARweYcOiCLlMyioELrO27SrDU2WM4Yq9Vg/LTSIqnGe
F1+e7I4vrg88hHJXIoZuyonPwP3noVdcPZQSmDqE8GhjEUxxHyAXu4qvjOhBci4N
zWa07ogtlJz6cyeDsqzWUmWwHXIprviJ9MS6Z7xARSKgwSNak5bO/krRHj8KDgo3
/xHcUCia65qUlIKPquhtFXuVDjrhmIj2yiMJIFdSbIBnCEAuCID43Vql4wYRf6ZX
ZlGDWhZV4voaet2A5ybAYZmRHqBswmeyeVSAnvrYAdyD0P2FwVikyE/o1FcyNlIL
71bkDy4JIZwtAAu2EnDqqqTioR4225+cZa45ywIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLj2mdU6kJnBGB9QgdaUaHYTtdTwMB8GA1UdIwQYMBaAFDuQBBqsg2eizjmm
EK8DebVw6rsvMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWRiZTIx
MzMwOGUxZjY1N2FkOTA4MTRiY2I4ODEzZDlmZDljOGM0Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjE2MWY4ZmUtZmVkNC00MzQ1LWI3YjgtZDIwZmVl
MjU5NmU1LzUxMjhhOWFkZDNiZDc1ZmVhODU4MjU2YTZkZDRlYTdhMmMyNGYyNWMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iMTYxZjhmZS1mZWQ0LTQzNDUtYjdiOC1kMjBm
ZWUyNTk2ZTUvNWRiZTIxMzMwOGUxZjY1N2FkOTA4MTRiY2I4ODEzZDlmZDljOGM0
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL9hYTANBgkqhkiG9w0BAQsFAAOCAQEAgOLW/b149Dtb9+Z2
rz0ZY5QqK1RDTsPFIV13WFE0mj8UE8Wsj82//aOs9SC62mSIP5zhcenfEOcL4n+7
bpSDVtj2BVIRV2LOziZl9r59SxvTuS8CHApTbbnbEqSJ6AokpT0BqnET4pnPqh7g
qLZ96KKTKUkYt45KpTDO7ZP3wX04Ianwl0jw/pLaEEhqdJi/DWQ+I8PNkzwKrRF+
ivabQjQvRx/BNW8SjZMciHfbpovgSVHZiue6wVSsTvVwYRmqWgrqjXWnEwri7tAI
fN26c09WNG5zDBgrufLNkTYOwICIcSBicGu3IJd42rXPCAN75aorO9Kd6nf2coDR
z8ORhQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org