Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/cc3c27ae77cb72757d9c42f4939607dce8e12e8c.roa
File:                     cc3c27ae77cb72757d9c42f4939607dce8e12e8c.roa (raw, json)
Hash identifier:          MvUGN6vkc6a5ss5PS0/VdcoQhKgp56G4pn3ouA0qy7E=
Subject key identifier:   C1:F5:18:86:BB:78:AD:3D:21:B7:A5:C3:7D:6B:A6:B6:96:53:BB:5A
Certificate issuer:       /CN=d3e258591b81b726517d993ac9db01b629da36e1
Certificate serial:       1B75
Authority key identifier: DC:D2:6F:F6:04:03:AC:E4:61:17:DE:3E:E9:9E:E7:9C:1F:53:DB:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3e258591b81b726517d993ac9db01b629da36e1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/cc3c27ae77cb72757d9c42f4939607dce8e12e8c.roa
Signing time:             Fri 10 Dec 2021 11:37:19 +0000
ROA not before:           Fri 10 Dec 2021 03:00:00 +0000
ROA not after:            Sun 10 Dec 2023 03:00:00 +0000
asID:                     271853
IP address blocks:        192.140.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7029 (0x1b75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e258591b81b726517d993ac9db01b629da36e1
        Validity
            Not Before: Dec 10 03:00:00 2021 GMT
            Not After : Dec 10 03:00:00 2023 GMT
        Subject: CN=cc3c27ae77cb72757d9c42f4939607dce8e12e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:1c:44:29:7a:4d:c5:4a:76:d7:b3:f1:d2:
                    86:07:6d:78:17:32:84:77:17:b1:38:47:8d:90:38:
                    a2:08:c8:3e:8b:b6:be:c8:ef:07:69:e1:83:e8:3d:
                    af:86:a8:02:72:fe:9d:08:eb:76:c7:71:b3:29:c2:
                    31:9a:ca:1a:05:d9:9b:eb:b8:c2:5e:e3:36:b0:7c:
                    ac:80:ed:32:b3:42:64:5d:b3:b9:7c:79:4f:43:f4:
                    9e:c5:27:d2:4e:df:90:2c:77:c4:0f:1c:05:fe:c9:
                    81:a0:88:9e:48:bb:98:cd:e9:15:56:3d:9d:e5:1b:
                    f0:59:ea:46:74:88:c3:40:99:5f:37:c5:1e:d9:46:
                    2e:e4:c9:1d:8e:88:c0:bf:f7:cc:f9:f3:2b:ab:a0:
                    81:32:cb:06:c9:04:64:02:10:c7:ac:39:64:c0:59:
                    e1:93:2c:29:c4:59:ee:5b:e5:db:32:53:17:19:97:
                    94:0e:2b:8d:83:c7:ec:5a:29:1a:70:01:e2:27:c8:
                    5e:bb:c7:9d:b8:66:26:10:23:e7:04:9b:2d:7a:78:
                    3f:bf:13:aa:35:25:8a:75:84:50:34:f0:e7:03:5c:
                    d0:ff:62:d8:44:17:ea:bc:59:e1:56:b0:16:cc:2c:
                    0a:95:c3:51:75:1b:f9:1f:04:1e:cf:9f:ae:e2:f4:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F5:18:86:BB:78:AD:3D:21:B7:A5:C3:7D:6B:A6:B6:96:53:BB:5A
            X509v3 Authority Key Identifier:
                keyid:DC:D2:6F:F6:04:03:AC:E4:61:17:DE:3E:E9:9E:E7:9C:1F:53:DB:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3e258591b81b726517d993ac9db01b629da36e1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/cc3c27ae77cb72757d9c42f4939607dce8e12e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8fdddf1-a318-4388-82c4-b98b858f9088/d3e258591b81b726517d993ac9db01b629da36e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f6:0a:84:78:10:e4:d7:b0:11:ad:89:f0:39:d9:b3:cc:06:
         dd:50:01:c7:22:c8:80:fc:07:27:f7:18:32:e4:66:1b:68:b4:
         55:76:13:24:30:ec:21:3a:46:de:27:df:24:90:95:a3:90:1d:
         f8:95:9c:e0:31:67:3b:8b:10:bf:ba:1f:b8:93:c8:99:db:70:
         dd:f7:9f:76:8f:96:ec:e2:06:e8:d2:71:8d:05:d6:1f:fe:d9:
         cb:b4:b8:2f:96:62:55:89:91:67:5f:d4:d1:78:fe:53:05:a6:
         cb:30:92:84:3e:ea:35:89:4c:6f:b5:28:aa:ec:48:73:89:cb:
         46:fd:80:d8:23:8e:b8:2a:f2:fe:16:dd:36:d0:b1:96:76:69:
         6b:f3:83:f2:86:6b:7d:89:5d:78:31:12:c1:fb:2e:12:36:dc:
         8f:89:ce:dd:78:03:96:f2:42:ad:8d:3d:51:d4:1e:99:c2:01:
         41:08:d4:a1:66:82:d1:d8:c1:8b:36:8a:fe:d3:6a:47:a6:d7:
         48:4d:bb:e7:c9:74:68:ba:76:9e:5b:32:05:12:bc:d4:a0:f1:
         0d:b7:d0:8c:f9:b5:fc:7d:cb:cb:9c:00:96:24:05:d6:5e:ab:
         b1:d8:20:fe:a9:f8:af:a7:5c:e3:87:78:b0:bf:cf:f4:e9:bc:
         b1:0c:0a:8e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICG3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZDNl
MjU4NTkxYjgxYjcyNjUxN2Q5OTNhYzlkYjAxYjYyOWRhMzZlMTAeFw0yMTEyMTAw
MzAwMDBaFw0yMzEyMTAwMzAwMDBaMDMxMTAvBgNVBAMTKGNjM2MyN2FlNzdjYjcy
NzU3ZDljNDJmNDkzOTYwN2RjZThlMTJlOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyThxEKXpNxUp217Px0oYHbXgXMoR3F7E4R42QOKIIyD6Ltr7I
7wdp4YPoPa+GqAJy/p0I63bHcbMpwjGayhoF2ZvruMJe4zawfKyA7TKzQmRds7l8
eU9D9J7FJ9JO35Asd8QPHAX+yYGgiJ5Iu5jN6RVWPZ3lG/BZ6kZ0iMNAmV83xR7Z
Ri7kyR2OiMC/98z58yuroIEyywbJBGQCEMesOWTAWeGTLCnEWe5b5dsyUxcZl5QO
K42Dx+xaKRpwAeInyF67x524ZiYQI+cEmy16eD+/E6o1JYp1hFA08OcDXND/YthE
F+q8WeFWsBbMLAqVw1F1G/kfBB7Pn67i9OZPAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUwfUYhrt4rT0ht6XDfWumtpZTu1owHwYDVR0jBBgwFoAU3NJv9gQDrORhF94+
6Z7nnB9T24QwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9kM2UyNTg1
OTFiODFiNzI2NTE3ZDk5M2FjOWRiMDFiNjI5ZGEzNmUxLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9mOGZkZGRmMS1hMzE4LTQzODgtODJjNC1iOThiODU4
ZjkwODgvY2MzYzI3YWU3N2NiNzI3NTdkOWM0MmY0OTM5NjA3ZGNlOGUxMmU4Yy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2Y4ZmRkZGYxLWEzMTgtNDM4OC04MmM0LWI5OGI4
NThmOTA4OC9kM2UyNTg1OTFiODFiNzI2NTE3ZDk5M2FjOWRiMDFiNjI5ZGEzNmUx
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAwIw/MA0GCSqGSIb3DQEBCwUAA4IBAQCE9gqEeBDk17ARrYnw
OdmzzAbdUAHHIsiA/Acn9xgy5GYbaLRVdhMkMOwhOkbeJ98kkJWjkB34lZzgMWc7
ixC/uh+4k8iZ23Dd9592j5bs4gbo0nGNBdYf/tnLtLgvlmJViZFnX9TReP5TBabL
MJKEPuo1iUxvtSiq7EhzictG/YDYI464KvL+Ft020LGWdmlr84Pyhmt9iV14MRLB
+y4SNtyPic7deAOW8kKtjT1R1B6ZwgFBCNShZoLR2MGLNor+02pHptdITbvnyXRo
unaeWzIFErzUoPENt9CM+bX8fcvLnACWJAXWXqux2CD+qfivp1zjh3iwv8/06byx
DAqO
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org