Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/f58af8381f5d9bd70ecc56440227dd334d195be7.roa
File:                     f58af8381f5d9bd70ecc56440227dd334d195be7.roa (raw, json)
Hash identifier:          urQjXxLUE42hsMDWZS6kf3lKwue4UpxfgJvPxtbt3sE=
Subject key identifier:   45:BE:72:08:D3:0A:3A:08:CF:10:BF:0B:EF:93:49:6F:E8:95:34:8B
Certificate issuer:       /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial:       26E1B0
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/f58af8381f5d9bd70ecc56440227dd334d195be7.roa
Signing time:             Tue 27 Feb 2024 22:51:43 +0000
ROA not before:           Tue 27 Feb 2024 22:51:43 +0000
ROA not after:            Fri 27 Feb 2026 22:51:43 +0000
asID:                     28415
IP address blocks:        189.201.224.0/24 maxlen: 24
                          189.201.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2548144 (0x26e1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
        Validity
            Not Before: Feb 27 22:51:43 2024 GMT
            Not After : Feb 27 22:51:43 2026 GMT
        Subject: CN=f58af8381f5d9bd70ecc56440227dd334d195be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:34:6d:96:58:bd:4e:c3:d8:0a:31:c1:52:
                    f7:86:0b:28:0e:a1:f7:2f:05:6f:54:35:78:d0:2f:
                    ae:59:be:56:a3:63:d8:85:7f:bc:aa:57:7e:81:33:
                    a5:16:1a:49:d8:c5:9f:9e:18:99:65:0d:5e:09:cf:
                    b6:34:9a:53:36:a3:7c:ae:c2:2f:8e:23:8e:09:83:
                    8b:fd:d9:f9:96:ed:0c:c5:6b:09:18:0a:13:a5:c6:
                    b3:95:97:4f:fc:16:83:79:84:14:4d:ff:46:8b:11:
                    61:14:3e:ef:ac:5f:04:7f:11:6a:1a:ed:00:c3:ec:
                    e1:71:72:46:09:24:5e:51:a0:67:3d:6b:1a:e1:df:
                    e6:37:87:18:60:7d:3c:2a:e7:5b:8e:f9:65:d8:24:
                    bb:a0:18:de:33:14:9f:6c:7d:57:10:81:56:02:a0:
                    78:71:a1:b6:94:be:98:19:d0:ef:45:1a:2b:0d:37:
                    4d:9d:6a:8c:15:47:9f:70:36:7a:61:ea:3a:a9:23:
                    40:0f:5a:e4:2a:65:7c:52:4e:dc:18:e5:3e:ca:a7:
                    db:50:a9:16:68:6d:f5:85:76:1c:49:57:ba:dc:4c:
                    62:f6:28:e5:b5:8e:4c:de:ad:ea:93:9e:63:51:46:
                    c5:2e:53:b7:5f:70:ee:e7:ea:1b:71:e8:6a:28:df:
                    12:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BE:72:08:D3:0A:3A:08:CF:10:BF:0B:EF:93:49:6F:E8:95:34:8B
            X509v3 Authority Key Identifier:
                keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/f58af8381f5d9bd70ecc56440227dd334d195be7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:21:f9:b9:54:98:44:a6:ef:cd:b4:c8:5d:37:4e:02:62:80:
         83:30:ef:7e:67:f0:dd:b7:f4:3e:21:01:7c:48:1e:08:0b:50:
         bb:f0:1c:a6:fc:37:53:bd:83:c0:59:a5:26:dd:aa:11:5d:5b:
         2b:c2:0b:df:57:4a:26:84:86:1e:f7:3f:99:b3:f8:57:3c:c3:
         74:33:0c:97:ee:a2:3e:51:cc:95:82:c7:98:00:f4:1d:ff:2a:
         f0:48:e4:9e:cf:05:73:e7:01:14:d1:89:f8:4d:50:ed:3b:ba:
         f4:16:c1:db:a6:6a:14:f3:82:e3:8c:55:90:79:01:99:6e:ba:
         de:46:e1:24:86:2d:aa:be:6a:fe:d7:87:c2:e9:1f:f8:34:ea:
         2b:b1:5f:32:6f:f4:7a:6a:e7:a7:05:fe:63:8f:4a:98:78:1a:
         f6:22:34:26:3e:c2:75:87:1d:1f:05:c8:ea:68:a3:7b:6c:f3:
         ad:1e:96:91:b4:c4:b0:f1:12:03:e7:1a:c9:87:3b:b3:cf:91:
         d2:4d:c8:01:75:15:90:f5:bc:64:d4:d7:25:c6:6e:1d:90:96:
         e1:cd:35:9e:9b:72:d1:ac:85:d0:2e:9b:76:7c:05:30:1a:14:
         03:bb:05:dc:7c:28:76:ad:c0:5c:34:01:7f:f9:60:2a:29:9e:
         d4:c3:1f:8e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJuGwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgy
YTBmM2I4Njk5MTU3ZDAyZTJlNzA1MTM5NjlmMmU3N2I2YjlkYjUwHhcNMjQwMjI3
MjI1MTQzWhcNMjYwMjI3MjI1MTQzWjAzMTEwLwYDVQQDEyhmNThhZjgzODFmNWQ5
YmQ3MGVjYzU2NDQwMjI3ZGQzMzRkMTk1YmU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxc80bZZYvU7D2AoxwVL3hgsoDqH3LwVvVDV40C+uWb5Wo2PY
hX+8qld+gTOlFhpJ2MWfnhiZZQ1eCc+2NJpTNqN8rsIvjiOOCYOL/dn5lu0MxWsJ
GAoTpcazlZdP/BaDeYQUTf9GixFhFD7vrF8EfxFqGu0Aw+zhcXJGCSReUaBnPWsa
4d/mN4cYYH08Kudbjvll2CS7oBjeMxSfbH1XEIFWAqB4caG2lL6YGdDvRRorDTdN
nWqMFUefcDZ6Yeo6qSNAD1rkKmV8Uk7cGOU+yqfbUKkWaG31hXYcSVe63Exi9ijl
tY5M3q3qk55jUUbFLlO3X3Du5+obcehqKN8SewIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEW+cgjTCjoIzxC/C++TSW/olTSLMB8GA1UdIwQYMBaAFCbkR03yh/f55N2E
qiumstDt5OpoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODJhMGYz
Yjg2OTkxNTdkMDJlMmU3MDUxMzk2OWYyZTc3YjZiOWRiNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWFkOTllZGMtN2M0Ny00YzRkLWE0N2EtM2Y3MjYx
ZWFkMmUzL2Y1OGFmODM4MWY1ZDliZDcwZWNjNTY0NDAyMjdkZDMzNGQxOTViZTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lYWQ5OWVkYy03YzQ3LTRjNGQtYTQ3YS0zZjcy
NjFlYWQyZTMvODJhMGYzYjg2OTkxNTdkMDJlMmU3MDUxMzk2OWYyZTc3YjZiOWRi
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb3J4DANBgkqhkiG9w0BAQsFAAOCAQEATCH5uVSYRKbvzbTI
XTdOAmKAgzDvfmfw3bf0PiEBfEgeCAtQu/Acpvw3U72DwFmlJt2qEV1bK8IL31dK
JoSGHvc/mbP4VzzDdDMMl+6iPlHMlYLHmAD0Hf8q8Ejkns8Fc+cBFNGJ+E1Q7Tu6
9BbB26ZqFPOC44xVkHkBmW663kbhJIYtqr5q/teHwukf+DTqK7FfMm/0emrnpwX+
Y49KmHga9iI0Jj7CdYcdHwXI6mije2zzrR6WkbTEsPESA+cayYc7s8+R0k3IAXUV
kPW8ZNTXJcZuHZCW4c01npty0ayF0C6bdnwFMBoUA7sF3Hwodq3AXDQBf/lgKime
1MMfjg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org