Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/5801f4a876b6490619603e15790e4df77e4f1c7c.roa
File:                     5801f4a876b6490619603e15790e4df77e4f1c7c.roa (raw, json)
Hash identifier:          XnFlydMCpfjicKIE34CrP361VtdotmtLOcXzjEOIgyo=
Subject key identifier:   08:38:0D:BF:94:F4:76:90:61:A3:C6:31:CE:89:74:9E:7A:38:EB:AC
Certificate issuer:       /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial:       0C38EA
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/5801f4a876b6490619603e15790e4df77e4f1c7c.roa
Signing time:             Thu 05 Oct 2023 10:19:00 +0000
ROA not before:           Wed 04 Oct 2023 10:19:00 +0000
ROA not after:            Sun 05 Oct 2025 10:19:00 +0000
asID:                     272150
IP address blocks:        192.141.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801002 (0xc38ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
        Validity
            Not Before: Oct  4 10:19:00 2023 GMT
            Not After : Oct  5 10:19:00 2025 GMT
        Subject: CN=5801f4a876b6490619603e15790e4df77e4f1c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:b4:53:18:da:45:3a:15:39:0e:5a:b4:23:
                    31:ce:dd:78:0b:7e:1e:e3:75:0f:3a:ca:ec:3b:76:
                    85:ff:f0:01:f4:64:ff:c7:0c:dd:99:57:a9:29:76:
                    49:6f:57:53:98:6a:fe:bf:18:6f:7c:2d:12:b9:10:
                    13:a5:c7:13:8a:0a:78:d3:cd:c3:51:37:f3:cc:ef:
                    c1:4f:48:a4:d3:27:91:1c:dd:90:57:fb:e1:bb:7c:
                    8d:aa:5c:14:63:0a:c7:99:25:14:d5:d6:c2:94:91:
                    79:e9:3e:6c:00:c2:d4:21:06:45:f8:70:d0:3a:a1:
                    93:f8:77:3e:54:db:07:a8:b9:95:43:a2:a1:8d:13:
                    08:83:9f:fd:1d:56:b8:b7:45:4d:9f:ec:42:5a:d2:
                    48:08:6f:18:86:4c:55:c3:58:e0:3d:da:7e:28:1e:
                    4d:41:48:0b:cb:36:8e:83:a1:61:73:10:46:b5:33:
                    35:3c:18:3a:3c:bc:36:0b:28:be:54:2d:da:70:a7:
                    ad:97:81:25:ff:1e:ec:53:d8:e4:6f:38:0c:bb:dc:
                    68:cc:80:18:6c:3b:1a:bc:55:d1:5a:bc:e4:61:1d:
                    5b:98:2a:81:01:00:6b:c1:a6:71:7b:a7:58:eb:bf:
                    c1:f9:d9:cb:09:22:e4:eb:dc:4b:6c:b0:5e:be:5b:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:38:0D:BF:94:F4:76:90:61:A3:C6:31:CE:89:74:9E:7A:38:EB:AC
            X509v3 Authority Key Identifier:
                keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/5801f4a876b6490619603e15790e4df77e4f1c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:ff:44:c9:3a:3a:7e:1d:34:63:5e:74:f2:c5:d5:5e:f4:23:
         95:bd:2e:2d:2d:0b:b2:a7:8c:5e:25:46:73:eb:41:36:78:49:
         73:fe:cc:8f:a2:ad:3e:a2:c8:13:8b:fe:eb:7e:40:a4:c0:69:
         15:35:b7:7e:41:f5:2e:90:7e:84:ed:a6:c8:c2:0d:56:c5:b5:
         7e:e5:2a:29:28:2e:90:53:f0:d5:99:35:2d:92:d4:de:66:bf:
         99:2a:a8:41:c0:57:f8:da:a6:ff:0a:6e:fa:c3:6c:82:54:d5:
         e9:b2:48:6f:29:61:e0:22:6f:8e:6b:ac:71:92:8f:75:83:90:
         5c:fe:d1:ec:7d:73:22:96:5f:25:e6:67:28:53:38:c0:55:9d:
         d4:ab:c3:91:f1:3a:63:41:ba:0f:da:bb:8e:ea:af:f3:cd:8a:
         bc:79:c3:63:22:81:ed:9a:9b:88:62:51:75:5a:12:a4:80:06:
         81:76:f3:1e:01:eb:a7:9a:15:ba:47:4d:fa:f1:20:10:c0:56:
         f0:6a:c9:96:2a:77:b8:b4:9d:d8:e7:2a:20:63:ba:1d:7d:b3:
         6d:98:1c:05:5f:ae:1c:38:f5:33:4e:e6:f0:5f:0e:fd:b2:4c:
         65:cf:58:ec:8e:ca:3f:9c:af:b7:ad:5d:a0:bf:b1:51:3b:b4:
         fc:7e:e8:ea
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDDjqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
M2NhYjg4ODdiODBhMWJlYWZiMjNmNDU1ZDdkODQ1OGM4YzFjNWEwHhcNMjMxMDA0
MTAxOTAwWhcNMjUxMDA1MTAxOTAwWjAzMTEwLwYDVQQDEyg1ODAxZjRhODc2YjY0
OTA2MTk2MDNlMTU3OTBlNGRmNzdlNGYxYzdjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAne+0UxjaRToVOQ5atCMxzt14C34e43UPOsrsO3aF//AB9GT/
xwzdmVepKXZJb1dTmGr+vxhvfC0SuRATpccTigp4083DUTfzzO/BT0ik0yeRHN2Q
V/vhu3yNqlwUYwrHmSUU1dbClJF56T5sAMLUIQZF+HDQOqGT+Hc+VNsHqLmVQ6Kh
jRMIg5/9HVa4t0VNn+xCWtJICG8YhkxVw1jgPdp+KB5NQUgLyzaOg6FhcxBGtTM1
PBg6PLw2Cyi+VC3acKetl4El/x7sU9jkbzgMu9xozIAYbDsavFXRWrzkYR1bmCqB
AQBrwaZxe6dY67/B+dnLCSLk69xLbLBevltrTwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAg4Db+U9HaQYaPGMc6JdJ56OOusMB8GA1UdIwQYMBaAFEBqfmLR5HcP4GGq
m2KC6PCzaQFaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDYzY2Fi
ODg4N2I4MGExYmVhZmIyM2Y0NTVkN2Q4NDU4YzhjMWM1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTEzNGFhMGQtMzQ5Ny00ZTUxLThhNTgtNTJlYTgz
YzgxMTY5LzU4MDFmNGE4NzZiNjQ5MDYxOTYwM2UxNTc5MGU0ZGY3N2U0ZjFjN2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMTM0YWEwZC0zNDk3LTRlNTEtOGE1OC01MmVh
ODNjODExNjkvNDYzY2FiODg4N2I4MGExYmVhZmIyM2Y0NTVkN2Q4NDU4YzhjMWM1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAsCNFDANBgkqhkiG9w0BAQsFAAOCAQEAcP9EyTo6fh00Y150
8sXVXvQjlb0uLS0LsqeMXiVGc+tBNnhJc/7Mj6KtPqLIE4v+635ApMBpFTW3fkH1
LpB+hO2myMINVsW1fuUqKSgukFPw1Zk1LZLU3ma/mSqoQcBX+Nqm/wpu+sNsglTV
6bJIbylh4CJvjmuscZKPdYOQXP7R7H1zIpZfJeZnKFM4wFWd1KvDkfE6Y0G6D9q7
juqv882KvHnDYyKB7ZqbiGJRdVoSpIAGgXbzHgHrp5oVukdN+vEgEMBW8GrJlip3
uLSd2OcqIGO6HX2zbZgcBV+uHDj1M07m8F8O/bJMZc9Y7I7KP5yvt61doL+xUTu0
/H7o6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:37 2024 by rpki-client on console-ams.rpki-client.org