Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6e2889e-d7df-4128-87a2-97aa942dd7f4/3de72549a8341375e65cf94db306f8fc4af3a468.roa
File:                     3de72549a8341375e65cf94db306f8fc4af3a468.roa (raw, json)
Hash identifier:          XhaRmfMlgRgvQ8p/U5l7X5Pw4bgyWANfXYzvipmuGug=
Subject key identifier:   E8:D0:AE:FA:A4:48:4C:3E:40:64:D7:52:5F:29:86:E1:57:C0:FA:20
Certificate issuer:       /CN=57219f78d566e162a57018833fb256200a65949f
Certificate serial:       225EDF
Authority key identifier: 2A:AD:A1:B1:EE:72:B3:63:3E:A9:F7:A4:DA:16:FB:7F:41:A6:6D:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/57219f78d566e162a57018833fb256200a65949f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6e2889e-d7df-4128-87a2-97aa942dd7f4/3de72549a8341375e65cf94db306f8fc4af3a468.roa
Signing time:             Fri 25 Aug 2023 22:42:30 +0000
ROA not before:           Thu 24 Aug 2023 22:42:30 +0000
ROA not after:            Mon 25 Aug 2025 22:42:30 +0000
asID:                     27947
IP address blocks:        192.188.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2252511 (0x225edf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57219f78d566e162a57018833fb256200a65949f
        Validity
            Not Before: Aug 24 22:42:30 2023 GMT
            Not After : Aug 25 22:42:30 2025 GMT
        Subject: CN=3de72549a8341375e65cf94db306f8fc4af3a468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:aa:53:ed:23:84:39:78:3f:21:96:4c:d4:
                    bd:98:6a:51:fe:9d:62:79:8c:2c:e0:af:9b:a5:1a:
                    cb:c6:fe:cf:24:1f:83:5f:2c:d1:45:ce:e8:71:4e:
                    9e:69:f3:c0:b7:eb:80:b1:41:b3:b0:01:e4:c3:af:
                    72:05:05:bc:b8:c5:06:60:56:e2:09:c8:98:41:af:
                    22:00:5e:10:2a:4a:70:9a:c7:e0:3d:89:7c:67:ce:
                    49:d3:d3:20:f7:70:ff:aa:2d:ec:21:0b:a1:e0:69:
                    ae:38:92:a2:78:06:5a:8c:2c:8c:32:1d:29:89:ea:
                    ca:b4:21:0b:1f:43:90:9d:4b:89:47:cc:89:56:59:
                    3e:78:f4:7c:af:67:46:7d:4e:8b:26:aa:d7:51:e2:
                    1c:76:04:0b:6f:8f:74:d3:2f:a8:30:9f:ba:c7:06:
                    60:f3:e2:48:32:92:9c:78:97:10:94:46:64:57:87:
                    af:09:95:80:12:a0:6f:30:ea:d4:69:8e:29:ae:1c:
                    f6:69:20:78:68:e4:ed:87:bf:57:c9:0e:91:39:88:
                    8e:3f:29:83:f4:a5:fd:45:d0:89:07:35:b6:95:ef:
                    c5:6f:d4:c5:bf:7d:8d:97:3e:55:4c:5b:be:58:0d:
                    52:4f:7e:47:5b:95:c7:e1:52:e8:6c:ca:b6:3b:79:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D0:AE:FA:A4:48:4C:3E:40:64:D7:52:5F:29:86:E1:57:C0:FA:20
            X509v3 Authority Key Identifier:
                keyid:2A:AD:A1:B1:EE:72:B3:63:3E:A9:F7:A4:DA:16:FB:7F:41:A6:6D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/57219f78d566e162a57018833fb256200a65949f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6e2889e-d7df-4128-87a2-97aa942dd7f4/3de72549a8341375e65cf94db306f8fc4af3a468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6e2889e-d7df-4128-87a2-97aa942dd7f4/57219f78d566e162a57018833fb256200a65949f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:de:35:a0:c8:34:23:72:67:26:97:5e:30:d4:65:f0:94:
         97:d9:3f:61:8b:19:df:c0:a8:9f:7f:06:43:74:3c:83:c3:43:
         09:8b:78:27:fe:53:a3:3b:4b:4f:ac:0c:6f:e4:03:66:4e:57:
         e6:4f:db:e1:a1:5e:3e:43:e4:ea:bd:ee:ba:5d:c4:e8:2d:08:
         85:48:cf:74:e7:1d:89:15:cd:37:26:df:82:68:76:76:fa:d9:
         0f:06:c1:2e:d7:b5:bd:27:8e:17:fa:d2:00:19:35:39:74:16:
         a4:56:30:1d:e9:8d:7e:62:c1:de:ca:bf:61:94:1f:82:9d:ca:
         cb:9b:9e:89:a0:41:70:5e:b3:0e:eb:a7:fc:24:10:bd:a7:de:
         10:79:a8:90:c7:15:2e:9c:92:ee:af:40:c0:19:7a:2f:55:76:
         0b:31:4e:3c:f7:12:59:42:86:b4:a4:12:ac:23:c7:47:77:51:
         01:e1:fd:87:eb:d3:04:94:20:3e:14:5d:0f:ad:0f:d6:3a:7a:
         9a:bb:f8:66:94:60:73:7b:4c:e2:35:c4:f6:0f:a5:30:94:e9:
         ff:42:b6:70:97:48:d4:d1:0b:f5:e8:a9:41:ec:aa:fe:0a:b2:
         23:71:6f:8f:91:56:e7:d7:53:b3:23:59:3d:4b:fc:46:3c:82:
         0f:43:d0:6b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIl7fMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDU3
MjE5Zjc4ZDU2NmUxNjJhNTcwMTg4MzNmYjI1NjIwMGE2NTk0OWYwHhcNMjMwODI0
MjI0MjMwWhcNMjUwODI1MjI0MjMwWjAzMTEwLwYDVQQDEygzZGU3MjU0OWE4MzQx
Mzc1ZTY1Y2Y5NGRiMzA2ZjhmYzRhZjNhNDY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm0GqU+0jhDl4PyGWTNS9mGpR/p1ieYws4K+bpRrLxv7PJB+D
XyzRRc7ocU6eafPAt+uAsUGzsAHkw69yBQW8uMUGYFbiCciYQa8iAF4QKkpwmsfg
PYl8Z85J09Mg93D/qi3sIQuh4GmuOJKieAZajCyMMh0pierKtCELH0OQnUuJR8yJ
Vlk+ePR8r2dGfU6LJqrXUeIcdgQLb4900y+oMJ+6xwZg8+JIMpKceJcQlEZkV4ev
CZWAEqBvMOrUaY4prhz2aSB4aOTth79XyQ6ROYiOPymD9KX9RdCJBzW2le/Fb9TF
v32Nlz5VTFu+WA1ST35HW5XH4VLobMq2O3lcYwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOjQrvqkSEw+QGTXUl8phuFXwPogMB8GA1UdIwQYMBaAFCqtobHucrNjPqn3
pNoW+39Bpm2jMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTcyMTlm
NzhkNTY2ZTE2MmE1NzAxODgzM2ZiMjU2MjAwYTY1OTQ5Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTZlMjg4OWUtZDdkZi00MTI4LTg3YTItOTdhYTk0
MmRkN2Y0LzNkZTcyNTQ5YTgzNDEzNzVlNjVjZjk0ZGIzMDZmOGZjNGFmM2E0Njgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lNmUyODg5ZS1kN2RmLTQxMjgtODdhMi05N2Fh
OTQyZGQ3ZjQvNTcyMTlmNzhkNTY2ZTE2MmE1NzAxODgzM2ZiMjU2MjAwYTY1OTQ5
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMC8LjANBgkqhkiG9w0BAQsFAAOCAQEAXwneNaDINCNyZyaX
XjDUZfCUl9k/YYsZ38Con38GQ3Q8g8NDCYt4J/5ToztLT6wMb+QDZk5X5k/b4aFe
PkPk6r3uul3E6C0IhUjPdOcdiRXNNybfgmh2dvrZDwbBLte1vSeOF/rSABk1OXQW
pFYwHemNfmLB3sq/YZQfgp3Ky5ueiaBBcF6zDuun/CQQvafeEHmokMcVLpyS7q9A
wBl6L1V2CzFOPPcSWUKGtKQSrCPHR3dRAeH9h+vTBJQgPhRdD60P1jp6mrv4ZpRg
c3tM4jXE9g+lMJTp/0K2cJdI1NEL9eipQeyq/gqyI3Fvj5FW59dTsyNZPUv8RjyC
D0PQaw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org