Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eac9a4cb-92f6-4aa2-b8ff-49a2c6367ad8/dced20211928822d8b486f14d92096d3f34c8b0b.roa
File:                     dced20211928822d8b486f14d92096d3f34c8b0b.roa (raw, json)
Hash identifier:          FajalkK6pVWUfd1FzJPeSZM32dciZeOFsUV3MU7QDtQ=
Subject key identifier:   F4:B8:49:63:12:59:04:76:03:79:AB:BD:1F:7C:A8:E3:46:9F:7D:68
Certificate issuer:       /CN=bb0bc9a633cf9815c2e9ba979ba905b13df6519a
Certificate serial:       1A1213
Authority key identifier: FA:97:B9:E1:07:46:66:16:DD:96:B9:6C:FC:C9:D2:28:06:07:41:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb0bc9a633cf9815c2e9ba979ba905b13df6519a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eac9a4cb-92f6-4aa2-b8ff-49a2c6367ad8/dced20211928822d8b486f14d92096d3f34c8b0b.roa
Signing time:             Tue 31 Oct 2023 13:49:52 +0000
ROA not before:           Tue 31 Oct 2023 13:49:52 +0000
ROA not after:            Fri 31 Oct 2025 13:49:52 +0000
asID:                     270106
IP address blocks:        191.241.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708563 (0x1a1213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb0bc9a633cf9815c2e9ba979ba905b13df6519a
        Validity
            Not Before: Oct 31 13:49:52 2023 GMT
            Not After : Oct 31 13:49:52 2025 GMT
        Subject: CN=dced20211928822d8b486f14d92096d3f34c8b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2f:92:16:8f:1a:15:e6:03:fa:95:db:5f:52:
                    22:e7:30:ea:bc:36:0d:52:74:04:52:80:90:84:9e:
                    a1:d9:7f:0f:58:7f:b4:08:38:7b:53:84:12:eb:29:
                    f3:77:05:88:18:28:95:6c:f2:8d:71:f6:73:b5:6e:
                    05:61:da:80:9a:02:b7:2a:3e:eb:5b:0c:3e:98:39:
                    28:9f:62:75:69:a9:a3:a8:46:3f:a4:39:72:41:e1:
                    0c:1c:e3:b4:c9:9e:68:e7:0c:c7:f8:bb:60:98:a0:
                    11:de:01:75:5a:bd:f7:81:14:35:7e:eb:bf:94:c2:
                    ed:61:aa:0b:02:2d:ce:84:2d:93:2d:36:f8:2e:c8:
                    ce:d7:06:59:f1:97:11:e3:32:5d:31:4e:cd:16:e6:
                    33:94:c5:bc:8a:33:fa:3c:1c:6b:9c:04:a3:72:82:
                    fa:ee:5b:4b:ae:d7:a5:fb:91:d9:f2:3c:cd:51:62:
                    6d:67:99:0a:30:26:03:6f:e4:2c:2e:bd:61:93:01:
                    ec:10:71:ad:91:59:d0:c9:01:c6:d8:a1:e7:32:b2:
                    0e:5f:b3:12:84:62:b9:6c:a1:8f:c9:91:5c:70:2d:
                    74:fa:65:e0:08:49:b5:4d:7e:d7:cd:6d:bf:a7:77:
                    7e:72:8d:30:c7:57:8e:43:a2:15:5b:67:c5:02:3c:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B8:49:63:12:59:04:76:03:79:AB:BD:1F:7C:A8:E3:46:9F:7D:68
            X509v3 Authority Key Identifier:
                keyid:FA:97:B9:E1:07:46:66:16:DD:96:B9:6C:FC:C9:D2:28:06:07:41:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb0bc9a633cf9815c2e9ba979ba905b13df6519a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eac9a4cb-92f6-4aa2-b8ff-49a2c6367ad8/dced20211928822d8b486f14d92096d3f34c8b0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eac9a4cb-92f6-4aa2-b8ff-49a2c6367ad8/bb0bc9a633cf9815c2e9ba979ba905b13df6519a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.241.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:4d:72:70:19:f7:bf:87:1b:07:af:36:09:f2:ec:9c:0e:46:
         7f:4a:98:9a:aa:1c:8c:ac:8a:de:21:f6:2d:98:97:61:dc:cd:
         a8:26:8f:02:e2:db:45:30:6a:e7:2e:56:0f:28:09:37:46:36:
         61:1f:56:0f:ab:35:16:7e:4a:54:7d:c3:37:09:32:58:fb:d5:
         70:57:5c:e7:94:68:8b:38:74:12:a0:aa:b5:49:e0:7f:e4:10:
         75:a3:90:c2:43:66:d7:dc:0d:87:91:20:72:6a:19:ba:fe:b5:
         61:ab:68:cb:38:e6:21:64:1d:b4:33:ed:88:be:89:81:05:f4:
         8c:d0:31:85:2a:c5:bb:95:0d:0a:20:56:df:40:ca:7c:79:9b:
         13:31:57:ea:eb:4b:c3:6e:8c:28:45:90:d5:92:e4:35:20:94:
         1e:eb:2b:3f:e5:15:86:a5:fc:f4:56:5c:7b:12:c7:ab:c4:27:
         05:8d:c5:d6:a5:82:5b:7e:f8:eb:f8:66:1c:0d:d9:8f:54:99:
         09:86:5d:e6:0e:25:8b:a8:66:64:15:51:6c:f0:5e:f2:aa:42:
         e4:e5:fd:7a:45:41:7c:9f:8b:bd:c0:1a:96:38:79:f5:c1:59:
         8a:d5:2c:57:58:24:db:67:48:21:a1:11:fa:16:e6:4a:73:3d:
         5b:90:35:bd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGhITMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJi
MGJjOWE2MzNjZjk4MTVjMmU5YmE5NzliYTkwNWIxM2RmNjUxOWEwHhcNMjMxMDMx
MTM0OTUyWhcNMjUxMDMxMTM0OTUyWjAzMTEwLwYDVQQDEyhkY2VkMjAyMTE5Mjg4
MjJkOGI0ODZmMTRkOTIwOTZkM2YzNGM4YjBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5y+SFo8aFeYD+pXbX1Ii5zDqvDYNUnQEUoCQhJ6h2X8PWH+0
CDh7U4QS6ynzdwWIGCiVbPKNcfZztW4FYdqAmgK3Kj7rWww+mDkon2J1aamjqEY/
pDlyQeEMHOO0yZ5o5wzH+LtgmKAR3gF1Wr33gRQ1fuu/lMLtYaoLAi3OhC2TLTb4
LsjO1wZZ8ZcR4zJdMU7NFuYzlMW8ijP6PBxrnASjcoL67ltLrtel+5HZ8jzNUWJt
Z5kKMCYDb+QsLr1hkwHsEHGtkVnQyQHG2KHnMrIOX7MShGK5bKGPyZFccC10+mXg
CEm1TX7XzW2/p3d+co0wx1eOQ6IVW2fFAjwP+QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPS4SWMSWQR2A3mrvR98qONGn31oMB8GA1UdIwQYMBaAFPqXueEHRmYW3Za5
bPzJ0igGB0HzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYmIwYmM5
YTYzM2NmOTgxNWMyZTliYTk3OWJhOTA1YjEzZGY2NTE5YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWFjOWE0Y2ItOTJmNi00YWEyLWI4ZmYtNDlhMmM2
MzY3YWQ4L2RjZWQyMDIxMTkyODgyMmQ4YjQ4NmYxNGQ5MjA5NmQzZjM0YzhiMGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYWM5YTRjYi05MmY2LTRhYTItYjhmZi00OWEy
YzYzNjdhZDgvYmIwYmM5YTYzM2NmOTgxNWMyZTliYTk3OWJhOTA1YjEzZGY2NTE5
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr/xjDANBgkqhkiG9w0BAQsFAAOCAQEAXU1ycBn3v4cbB682
CfLsnA5Gf0qYmqocjKyK3iH2LZiXYdzNqCaPAuLbRTBq5y5WDygJN0Y2YR9WD6s1
Fn5KVH3DNwkyWPvVcFdc55Roizh0EqCqtUngf+QQdaOQwkNm19wNh5EgcmoZuv61
YatoyzjmIWQdtDPtiL6JgQX0jNAxhSrFu5UNCiBW30DKfHmbEzFX6utLw26MKEWQ
1ZLkNSCUHusrP+UVhqX89FZcexLHq8QnBY3F1qWCW3746/hmHA3Zj1SZCYZd5g4l
i6hmZBVRbPBe8qpC5OX9ekVBfJ+LvcAaljh59cFZitUsV1gk22dIIaER+hbmSnM9
W5A1vQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org