Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/dac59aa8e1cb2a117ae7b7aeb536596c5d7edf2a.roa
File:                     dac59aa8e1cb2a117ae7b7aeb536596c5d7edf2a.roa (raw, json)
Hash identifier:          QRrgdviVENIuByhHBm+kx9svQBxcF8wkZM4fq33G9s4=
Subject key identifier:   6F:B0:FB:49:B8:C9:CA:FF:8E:DC:78:3E:C8:44:45:EF:F7:13:97:5E
Certificate issuer:       /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial:       0C277E
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/dac59aa8e1cb2a117ae7b7aeb536596c5d7edf2a.roa
Signing time:             Thu 05 Oct 2023 10:13:35 +0000
ROA not before:           Wed 04 Oct 2023 10:13:35 +0000
ROA not after:            Sun 05 Oct 2025 10:13:35 +0000
asID:                     272150
IP address blocks:        192.141.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796542 (0xc277e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
        Validity
            Not Before: Oct  4 10:13:35 2023 GMT
            Not After : Oct  5 10:13:35 2025 GMT
        Subject: CN=dac59aa8e1cb2a117ae7b7aeb536596c5d7edf2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:97:c2:b2:69:63:cb:5d:91:5c:0f:71:ed:8d:
                    28:a4:41:d4:02:9f:4f:1a:67:34:63:7c:07:eb:da:
                    14:90:ae:b3:d0:b3:88:52:51:5d:42:40:27:93:94:
                    16:91:18:46:04:1c:b6:5f:ab:2e:7a:8e:2a:5d:14:
                    36:42:4d:76:95:8a:f3:df:24:95:29:e5:bd:77:f0:
                    9d:30:45:64:39:c0:2e:a9:29:3d:7e:52:ea:26:35:
                    f0:dc:50:bd:38:9d:95:1a:be:4d:99:01:81:06:a9:
                    e5:18:6b:17:42:ac:d1:a7:de:1b:e2:c9:81:5e:e8:
                    bc:67:af:9c:ac:98:79:05:fe:a8:87:6d:65:6d:59:
                    d4:31:0f:90:d6:4a:18:2d:49:43:f5:2a:ec:5c:5e:
                    45:f5:9b:ee:b7:9d:54:2c:19:ff:db:5f:eb:cc:b7:
                    91:6c:d2:53:33:aa:8d:6e:43:79:1c:e6:6a:cf:04:
                    56:45:17:cd:68:20:4d:aa:bd:ad:d0:79:8c:04:09:
                    88:03:00:27:53:5a:4c:cc:55:e3:50:9b:45:76:1c:
                    be:5d:16:59:44:dc:98:b0:ee:89:a4:64:54:49:36:
                    2b:85:47:82:4c:36:44:c5:90:16:65:87:d3:f2:6e:
                    bf:e2:5c:5b:24:ca:28:7b:33:2f:89:ef:cc:28:21:
                    d5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B0:FB:49:B8:C9:CA:FF:8E:DC:78:3E:C8:44:45:EF:F7:13:97:5E
            X509v3 Authority Key Identifier:
                keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/dac59aa8e1cb2a117ae7b7aeb536596c5d7edf2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:56:cc:ff:2b:36:80:ec:e4:ab:59:87:51:cc:b1:fd:ce:51:
         eb:92:84:b1:60:07:95:0b:14:24:35:4b:4e:a7:12:2e:26:8b:
         3a:b4:c7:ef:d4:74:1c:a1:82:55:42:0b:f8:79:2d:d5:d7:cd:
         ae:a8:fc:01:d5:0d:e6:ae:a8:75:23:b3:73:6a:7e:d2:31:38:
         32:da:58:4b:0c:d9:04:85:2c:ec:df:14:f2:ea:f3:c3:50:dd:
         5b:92:ac:9d:26:16:0b:37:09:c1:4c:7f:c9:1b:89:ad:0e:7e:
         43:e3:fc:2b:48:05:7c:d5:92:85:24:de:15:e9:52:d0:b8:3e:
         06:76:f3:58:6b:b5:4b:41:1c:b1:31:8d:cc:55:9a:a6:90:7b:
         08:53:31:82:26:83:b1:ab:0b:47:b1:65:b3:2f:1e:ad:4f:ca:
         f3:2e:b0:d3:9d:05:69:d7:02:67:8c:7a:13:80:b8:66:0f:8f:
         b8:89:3a:16:25:ee:08:ec:1e:58:e4:a2:e7:de:dc:24:d7:db:
         7a:3c:83:ff:6a:65:18:9a:97:9f:74:aa:2f:ef:01:d7:52:e8:
         bc:47:30:9b:c6:54:7c:9c:63:30:58:d9:0f:d4:dd:2a:2e:3a:
         31:fc:7f:77:16:9f:f5:0d:73:ce:44:6d:a7:5b:ae:8c:93:1b:
         b4:89:56:5a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDCd+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
M2NhYjg4ODdiODBhMWJlYWZiMjNmNDU1ZDdkODQ1OGM4YzFjNWEwHhcNMjMxMDA0
MTAxMzM1WhcNMjUxMDA1MTAxMzM1WjAzMTEwLwYDVQQDEyhkYWM1OWFhOGUxY2Iy
YTExN2FlN2I3YWViNTM2NTk2YzVkN2VkZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhJfCsmljy12RXA9x7Y0opEHUAp9PGmc0Y3wH69oUkK6z0LOI
UlFdQkAnk5QWkRhGBBy2X6sueo4qXRQ2Qk12lYrz3ySVKeW9d/CdMEVkOcAuqSk9
flLqJjXw3FC9OJ2VGr5NmQGBBqnlGGsXQqzRp94b4smBXui8Z6+crJh5Bf6oh21l
bVnUMQ+Q1koYLUlD9SrsXF5F9Zvut51ULBn/21/rzLeRbNJTM6qNbkN5HOZqzwRW
RRfNaCBNqr2t0HmMBAmIAwAnU1pMzFXjUJtFdhy+XRZZRNyYsO6JpGRUSTYrhUeC
TDZExZAWZYfT8m6/4lxbJMooezMvie/MKCHVFwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG+w+0m4ycr/jtx4PshERe/3E5deMB8GA1UdIwQYMBaAFEBqfmLR5HcP4GGq
m2KC6PCzaQFaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDYzY2Fi
ODg4N2I4MGExYmVhZmIyM2Y0NTVkN2Q4NDU4YzhjMWM1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTEzNGFhMGQtMzQ5Ny00ZTUxLThhNTgtNTJlYTgz
YzgxMTY5L2RhYzU5YWE4ZTFjYjJhMTE3YWU3YjdhZWI1MzY1OTZjNWQ3ZWRmMmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMTM0YWEwZC0zNDk3LTRlNTEtOGE1OC01MmVh
ODNjODExNjkvNDYzY2FiODg4N2I4MGExYmVhZmIyM2Y0NTVkN2Q4NDU4YzhjMWM1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMCNFTANBgkqhkiG9w0BAQsFAAOCAQEAP1bM/ys2gOzkq1mH
Ucyx/c5R65KEsWAHlQsUJDVLTqcSLiaLOrTH79R0HKGCVUIL+Hkt1dfNrqj8AdUN
5q6odSOzc2p+0jE4MtpYSwzZBIUs7N8U8urzw1DdW5KsnSYWCzcJwUx/yRuJrQ5+
Q+P8K0gFfNWShSTeFelS0Lg+BnbzWGu1S0EcsTGNzFWappB7CFMxgiaDsasLR7Fl
sy8erU/K8y6w050FadcCZ4x6E4C4Zg+PuIk6FiXuCOweWOSi597cJNfbejyD/2pl
GJqXn3SqL+8B11LovEcwm8ZUfJxjMFjZD9TdKi46Mfx/dxaf9Q1zzkRtp1uujJMb
tIlWWg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org