Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/3ea3b2c4f734fa3f0249b2411df1bcf897694606.roa
File:                     3ea3b2c4f734fa3f0249b2411df1bcf897694606.roa (raw, json)
Hash identifier:          ig98CjYr3pY2seAq3b83nVQl5/0Aw9CbcG14ywjJhko=
Subject key identifier:   58:2F:A1:FA:EE:F2:26:67:99:D2:08:63:2E:94:D9:BA:40:48:6F:6C
Certificate issuer:       /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial:       1A41D4
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/3ea3b2c4f734fa3f0249b2411df1bcf897694606.roa
Signing time:             Fri 15 Sep 2023 21:29:24 +0000
ROA not before:           Thu 14 Sep 2023 21:29:00 +0000
ROA not after:            Fri 15 Sep 2028 21:29:00 +0000
asID:                     28000
IP address blocks:        201.219.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1720788 (0x1a41d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
        Validity
            Not Before: Sep 14 21:29:00 2023 GMT
            Not After : Sep 15 21:29:00 2028 GMT
        Subject: CN=3ea3b2c4f734fa3f0249b2411df1bcf897694606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:90:09:e4:16:79:e2:2b:d9:a7:4f:cf:5d:
                    f4:7d:25:82:1d:5e:14:cc:f1:2a:e5:b3:ba:3e:16:
                    cd:03:e1:eb:70:08:fa:55:d1:53:32:2a:05:5d:03:
                    dc:8c:64:31:49:04:1d:64:96:15:a4:75:2d:e9:27:
                    b5:5c:3b:5a:36:4a:54:f6:19:8e:ca:3a:e0:df:21:
                    34:c8:1a:a1:a3:f9:da:9c:d0:b5:0f:ee:19:ce:d9:
                    6c:9a:c0:68:22:48:1a:28:f3:d6:3b:e8:5a:db:50:
                    24:50:ff:c0:5c:10:b7:24:c8:29:4d:9c:24:97:c8:
                    9c:3b:b4:e8:0d:41:1a:39:12:f4:1d:35:eb:71:60:
                    6c:a4:1a:14:d9:32:bd:98:f9:44:8d:91:7b:dc:27:
                    36:e3:f4:ec:d5:af:a0:c5:d0:a7:6d:0f:30:e6:63:
                    34:60:0e:b2:40:1a:2b:38:41:6c:c3:f3:fd:be:a5:
                    65:56:27:21:87:5f:e5:b7:b6:8f:9e:bb:49:0a:26:
                    70:0e:44:a0:72:ea:e2:a6:3e:1f:da:17:84:44:95:
                    f4:87:bf:90:e8:51:eb:65:6f:48:d0:58:a0:5c:a1:
                    cb:b3:b9:c1:bb:7e:68:4b:48:52:9b:76:83:0b:d1:
                    6c:ff:56:c7:dd:83:4f:b3:f8:8f:21:e7:9b:ea:12:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:A1:FA:EE:F2:26:67:99:D2:08:63:2E:94:D9:BA:40:48:6F:6C
            X509v3 Authority Key Identifier:
                keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/3ea3b2c4f734fa3f0249b2411df1bcf897694606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:85:51:0b:69:a1:08:86:ac:8d:29:88:7e:7c:5e:fa:8f:de:
         a7:32:a4:25:44:75:da:41:83:da:ae:98:e2:73:36:b0:67:a3:
         5c:23:43:f8:48:8d:ed:62:cd:1a:0f:df:8d:f2:00:64:60:26:
         aa:8e:d1:8a:37:18:85:02:2b:ee:8b:8f:bf:ed:fc:14:50:2d:
         4f:ea:3f:73:af:43:27:95:39:4b:6a:2b:37:de:f7:e6:e6:d2:
         45:79:62:43:44:f0:30:f9:ae:a4:b5:45:d1:8f:c4:51:4a:87:
         ce:38:c9:65:77:ca:ce:d4:77:90:55:3e:c7:aa:3b:86:c4:26:
         d2:fb:26:ca:c8:d0:2a:c7:68:e5:10:8f:49:74:f0:98:6a:92:
         ec:7b:2a:c9:36:a6:54:1a:9c:c3:12:db:54:b4:98:76:53:24:
         75:40:62:9f:40:41:13:12:88:90:8a:f2:64:94:89:18:c6:b3:
         70:b4:53:84:77:cb:74:0f:3c:35:03:ff:92:3c:54:3a:1b:1b:
         9d:25:ad:37:d5:05:1f:f9:62:f4:47:df:db:f5:6c:91:2a:7e:
         08:2a:ee:56:38:24:99:62:c2:50:cf:57:a2:99:1e:89:c2:be:
         47:e9:1f:d2:25:ea:3e:5f:6f:ad:26:39:b8:cd:5f:1e:7f:50:
         93:07:3b:87
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGkHUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDJl
YTE3MTU5NTgzMzMzOTgxNDYxNzlmZGJmMmU0ODVmZTY1MjU3NDIwHhcNMjMwOTE0
MjEyOTAwWhcNMjgwOTE1MjEyOTAwWjAzMTEwLwYDVQQDEygzZWEzYjJjNGY3MzRm
YTNmMDI0OWIyNDExZGYxYmNmODk3Njk0NjA2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlR+QCeQWeeIr2adPz130fSWCHV4UzPEq5bO6PhbNA+HrcAj6
VdFTMioFXQPcjGQxSQQdZJYVpHUt6Se1XDtaNkpU9hmOyjrg3yE0yBqho/nanNC1
D+4ZztlsmsBoIkgaKPPWO+ha21AkUP/AXBC3JMgpTZwkl8icO7ToDUEaORL0HTXr
cWBspBoU2TK9mPlEjZF73Cc24/Ts1a+gxdCnbQ8w5mM0YA6yQBorOEFsw/P9vqVl
Vichh1/lt7aPnrtJCiZwDkSgcuripj4f2heERJX0h7+Q6FHrZW9I0FigXKHLs7nB
u35oS0hSm3aDC9Fs/1bH3YNPs/iPIeeb6hL+dwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFgvofru8iZnmdIIYy6U2bpASG9sMB8GA1UdIwQYMBaAFGCEYUh8NmTYlwrD
qaF0ZoCLrci/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMmVhMTcx
NTk1ODMzMzM5ODE0NjE3OWZkYmYyZTQ4NWZlNjUyNTc0Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDliNmM1ZjUtMmZiMi00NzQ0LWI2ZTEtOTlkOTU4
OTJkMzc3LzNlYTNiMmM0ZjczNGZhM2YwMjQ5YjI0MTFkZjFiY2Y4OTc2OTQ2MDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kOWI2YzVmNS0yZmIyLTQ3NDQtYjZlMS05OWQ5
NTg5MmQzNzcvMmVhMTcxNTk1ODMzMzM5ODE0NjE3OWZkYmYyZTQ4NWZlNjUyNTc0
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsnb/DANBgkqhkiG9w0BAQsFAAOCAQEAk4VRC2mhCIasjSmI
fnxe+o/epzKkJUR12kGD2q6Y4nM2sGejXCND+EiN7WLNGg/fjfIAZGAmqo7RijcY
hQIr7ouPv+38FFAtT+o/c69DJ5U5S2orN9735ubSRXliQ0TwMPmupLVF0Y/EUUqH
zjjJZXfKztR3kFU+x6o7hsQm0vsmysjQKsdo5RCPSXTwmGqS7HsqyTamVBqcwxLb
VLSYdlMkdUBin0BBExKIkIryZJSJGMazcLRThHfLdA88NQP/kjxUOhsbnSWtN9UF
H/li9Eff2/VskSp+CCruVjgkmWLCUM9XopkeicK+R+kf0iXqPl9vrSY5uM1fHn9Q
kwc7hw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org