Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/eb575a8d0c44216f17d8942cc6ebc0b84230fabc.roa
File:                     eb575a8d0c44216f17d8942cc6ebc0b84230fabc.roa (raw, json)
Hash identifier:          4Qo06euyGQs1qu4SPUW7ESImIVLPkaL/Fngz3w4QZdA=
Subject key identifier:   E3:0C:F1:92:7F:99:47:AB:06:95:11:A1:A2:85:E4:02:13:18:F8:47
Certificate issuer:       /CN=819e92973b36aa90cd88dd3d3aee9b75bde9a5dc
Certificate serial:       132F6A
Authority key identifier: 6F:2B:0B:C9:D4:DC:CB:B7:20:4C:A2:45:3C:37:0D:C8:3E:33:D6:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/819e92973b36aa90cd88dd3d3aee9b75bde9a5dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/eb575a8d0c44216f17d8942cc6ebc0b84230fabc.roa
Signing time:             Sun 07 May 2023 17:22:43 +0000
ROA not before:           Sat 06 May 2023 17:22:43 +0000
ROA not after:            Wed 07 May 2025 17:22:43 +0000
asID:                     269986
IP address blocks:        201.49.128.0/22 maxlen: 24
                          2803:5ee0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257322 (0x132f6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819e92973b36aa90cd88dd3d3aee9b75bde9a5dc
        Validity
            Not Before: May  6 17:22:43 2023 GMT
            Not After : May  7 17:22:43 2025 GMT
        Subject: CN=eb575a8d0c44216f17d8942cc6ebc0b84230fabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:df:89:e4:b5:c1:ed:6e:ef:0f:24:d2:2b:
                    bf:07:98:9e:b1:a8:d2:06:e3:0b:9e:f6:67:e7:18:
                    88:30:8d:1e:20:e1:23:6b:89:a0:fe:36:74:62:2a:
                    ed:3e:eb:f9:8c:e4:ae:78:45:26:e0:12:e9:d8:ef:
                    77:f6:98:d3:cd:4e:24:f8:a8:42:c4:90:69:85:0d:
                    e0:c8:ec:d3:f6:b8:b6:cc:32:de:f7:eb:33:e1:61:
                    dc:a4:3f:79:77:47:f8:bb:47:02:b6:e6:38:91:87:
                    de:51:8f:56:64:5c:e3:76:b0:e6:0b:0c:bf:76:1b:
                    58:e8:49:cb:dd:b7:ee:e9:af:43:5a:f4:25:ab:94:
                    7e:da:bb:e4:cc:2f:16:ea:ce:35:a1:cf:a2:d9:d7:
                    ac:03:e6:0c:5c:fc:7e:97:9d:1a:71:4e:c1:e9:b8:
                    ce:d8:04:74:d9:ed:89:6b:05:6a:f4:ba:0a:ac:5d:
                    0a:d1:bd:a9:44:7d:b3:c5:b4:9e:7c:3f:21:ab:7e:
                    4a:45:c4:c3:b8:06:73:ce:da:7f:eb:cd:14:ce:82:
                    5c:15:d1:df:c0:a5:3c:a6:b0:c7:c5:44:10:1d:f8:
                    4d:9d:7a:f1:14:8c:73:45:13:f2:47:d6:43:a7:28:
                    f2:c9:62:e4:64:99:eb:15:f8:e4:dc:2e:7e:d8:2c:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:0C:F1:92:7F:99:47:AB:06:95:11:A1:A2:85:E4:02:13:18:F8:47
            X509v3 Authority Key Identifier:
                keyid:6F:2B:0B:C9:D4:DC:CB:B7:20:4C:A2:45:3C:37:0D:C8:3E:33:D6:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/819e92973b36aa90cd88dd3d3aee9b75bde9a5dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/eb575a8d0c44216f17d8942cc6ebc0b84230fabc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ee9c2f01-af18-4839-9f33-1a304a7ee88c/819e92973b36aa90cd88dd3d3aee9b75bde9a5dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.128.0/22
                IPv6:
                  2803:5ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:70:b6:9c:9b:55:af:1f:7c:f2:92:19:3d:b6:ff:ae:1a:58:
         6a:ce:94:e7:cb:47:06:94:7e:44:91:e8:b3:9b:f7:64:37:c5:
         d3:c7:e8:57:36:84:68:b8:8c:c7:ef:3d:5b:4b:c1:4b:af:ac:
         8a:84:c0:a0:13:9e:68:c4:53:11:6c:07:48:94:1e:71:2a:80:
         08:bc:5d:3b:7b:a1:31:78:95:39:33:e5:7c:bc:84:06:31:7d:
         b5:2f:bf:8c:03:90:59:28:ce:53:29:39:b7:c0:63:9d:f1:c2:
         b6:b7:a7:b5:ed:dd:cc:79:d2:81:54:c1:3e:de:38:60:a4:22:
         f7:1e:cf:34:4f:7a:1a:92:05:01:de:8b:51:a1:70:da:25:b8:
         8a:99:28:2d:9b:d2:2c:2c:f3:e4:be:9e:2d:77:a1:ec:ed:25:
         65:27:11:ff:bd:3f:f9:80:fa:9a:64:fe:0c:fb:4b:05:f1:65:
         a5:7d:6a:7c:4f:d2:b8:86:e8:bd:ef:ae:b5:0c:d4:28:65:ef:
         69:7a:f5:84:18:72:2f:fd:05:38:10:1d:62:03:94:33:67:6f:
         86:d6:2a:f7:d7:5c:ed:b9:d9:f6:a9:7e:df:ea:82:b5:df:19:
         3e:63:ff:1a:e6:28:f6:12:b2:c3:31:22:d2:5c:28:bb:ec:93:
         f3:72:be:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEy9qMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgx
OWU5Mjk3M2IzNmFhOTBjZDg4ZGQzZDNhZWU5Yjc1YmRlOWE1ZGMwHhcNMjMwNTA2
MTcyMjQzWhcNMjUwNTA3MTcyMjQzWjAzMTEwLwYDVQQDEyhlYjU3NWE4ZDBjNDQy
MTZmMTdkODk0MmNjNmViYzBiODQyMzBmYWJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwzLfieS1we1u7w8k0iu/B5iesajSBuMLnvZn5xiIMI0eIOEj
a4mg/jZ0YirtPuv5jOSueEUm4BLp2O939pjTzU4k+KhCxJBphQ3gyOzT9ri2zDLe
9+sz4WHcpD95d0f4u0cCtuY4kYfeUY9WZFzjdrDmCwy/dhtY6EnL3bfu6a9DWvQl
q5R+2rvkzC8W6s41oc+i2desA+YMXPx+l50acU7B6bjO2AR02e2JawVq9LoKrF0K
0b2pRH2zxbSefD8hq35KRcTDuAZzztp/680UzoJcFdHfwKU8prDHxUQQHfhNnXrx
FIxzRRPyR9ZDpyjyyWLkZJnrFfjk3C5+2CzB3QIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFOMM8ZJ/mUerBpURoaKF5AITGPhHMB8GA1UdIwQYMBaAFG8rC8nU3Mu3IEyi
RTw3Dcg+M9b1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODE5ZTky
OTczYjM2YWE5MGNkODhkZDNkM2FlZTliNzViZGU5YTVkYy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWU5YzJmMDEtYWYxOC00ODM5LTlmMzMtMWEzMDRh
N2VlODhjL2ViNTc1YThkMGM0NDIxNmYxN2Q4OTQyY2M2ZWJjMGI4NDIzMGZhYmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZTljMmYwMS1hZjE4LTQ4MzktOWYzMy0xYTMw
NGE3ZWU4OGMvODE5ZTkyOTczYjM2YWE5MGNkODhkZDNkM2FlZTliNzViZGU5YTVk
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAskxgDANBAIAAjAHAwUAKANe4DANBgkqhkiG9w0BAQsFAAOC
AQEAPXC2nJtVrx988pIZPbb/rhpYas6U58tHBpR+RJHos5v3ZDfF08foVzaEaLiM
x+89W0vBS6+sioTAoBOeaMRTEWwHSJQecSqACLxdO3uhMXiVOTPlfLyEBjF9tS+/
jAOQWSjOUyk5t8BjnfHCtrente3dzHnSgVTBPt44YKQi9x7PNE96GpIFAd6LUaFw
2iW4ipkoLZvSLCzz5L6eLXeh7O0lZScR/70/+YD6mmT+DPtLBfFlpX1qfE/SuIbo
ve+utQzUKGXvaXr1hBhyL/0FOBAdYgOUM2dvhtYq99dc7bnZ9ql+3+qCtd8ZPmP/
GuYo9hKywzEi0lwou+yT83K++g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org