Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/c4f6ae658d3d314b24bfbd6138564caed0fdf6a8.roa
File:                     c4f6ae658d3d314b24bfbd6138564caed0fdf6a8.roa (raw, json)
Hash identifier:          4G4H8/ljES5QI/jt+BCygsG2gT7pBGNlHUhP7w2EfNI=
Subject key identifier:   8C:C0:C2:B6:F5:17:4B:FB:E6:E3:81:D8:BF:17:11:20:F3:C4:27:3D
Certificate issuer:       /CN=f3df8538662f3c792fbb0559315226c5b8695024
Certificate serial:       04CB14
Authority key identifier: E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/c4f6ae658d3d314b24bfbd6138564caed0fdf6a8.roa
Signing time:             Thu 19 May 2022 14:41:54 +0000
ROA not before:           Mon 14 Feb 2022 03:00:00 +0000
ROA not after:            Wed 14 Feb 2024 03:00:00 +0000
asID:                     271935
IP address blocks:        181.232.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314132 (0x4cb14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3df8538662f3c792fbb0559315226c5b8695024
        Validity
            Not Before: Feb 14 03:00:00 2022 GMT
            Not After : Feb 14 03:00:00 2024 GMT
        Subject: CN=c4f6ae658d3d314b24bfbd6138564caed0fdf6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:88:fc:70:7a:f7:49:fc:20:77:16:39:d3:
                    18:a9:3f:4a:21:99:01:a8:76:3d:0c:1a:99:e5:ea:
                    19:63:13:7e:7a:a6:0a:b1:61:28:b0:21:9d:3b:53:
                    33:95:ed:5c:f0:39:cd:0b:1c:b6:9a:07:e4:42:2d:
                    59:94:87:88:bc:ed:a0:34:0f:85:42:00:a7:29:98:
                    e6:85:52:2f:d5:56:05:fb:2d:64:c1:dd:0c:2f:9d:
                    73:9f:db:65:72:9b:8f:45:5f:65:af:38:ac:c3:df:
                    7c:9e:69:9d:8e:c7:94:f0:d7:d8:35:1e:2a:ab:98:
                    6c:72:d1:4a:e5:b8:c2:d3:50:85:86:d8:2c:e0:34:
                    26:8d:1e:cd:77:3b:71:a4:81:75:d0:3c:a0:e9:7c:
                    3f:8d:0f:de:c4:06:93:c1:19:60:3a:a2:3e:7e:53:
                    3c:7a:c5:4d:8c:35:85:69:1a:ca:6a:75:ac:ec:a2:
                    98:5b:ad:c7:cb:67:63:60:e7:21:18:4b:35:72:8b:
                    ad:91:2f:f0:59:f1:aa:ab:a5:e8:de:03:3a:9c:d0:
                    63:24:64:5f:69:83:fc:44:b4:ef:14:ae:03:56:e9:
                    44:8e:03:af:44:46:4b:98:f8:99:fe:1b:b4:6e:54:
                    b0:06:ad:0f:52:71:94:64:62:df:64:39:4c:fb:8e:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C0:C2:B6:F5:17:4B:FB:E6:E3:81:D8:BF:17:11:20:F3:C4:27:3D
            X509v3 Authority Key Identifier:
                keyid:E5:59:36:32:80:35:F5:26:9C:5A:92:03:89:A6:24:44:62:DA:AC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3df8538662f3c792fbb0559315226c5b8695024.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/c4f6ae658d3d314b24bfbd6138564caed0fdf6a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1a02b285-93ee-4c12-90af-d6289819d670/f3df8538662f3c792fbb0559315226c5b8695024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:87:0d:a7:90:1f:01:03:6a:18:47:ac:c0:59:e2:bf:b8:83:
         0a:b2:b7:93:2f:bb:13:3a:15:51:e5:54:00:1f:ec:1d:98:7f:
         ca:e4:cc:2c:35:b5:cd:ee:ec:c5:bd:3d:68:3f:9f:6c:02:34:
         61:eb:48:f1:eb:69:8a:b3:b9:6c:72:70:ce:83:87:7e:5e:a2:
         02:a6:b7:4d:f3:1c:34:e2:0c:aa:6f:05:8e:0e:46:22:e7:b4:
         7d:41:1f:8c:92:27:82:84:33:f1:fd:a3:6d:8b:b2:cf:3a:63:
         8f:90:04:c4:b5:e6:6f:05:a7:4c:41:39:bd:2a:73:ee:a1:72:
         b0:cc:7f:51:5c:59:9b:0e:0b:d1:c1:c1:d5:bc:6e:09:34:2b:
         6a:78:6a:b9:08:0e:16:77:fe:42:35:34:2c:2f:81:cd:0b:84:
         85:48:e1:14:0b:ee:97:05:f0:25:87:bf:4d:02:0a:5c:9c:90:
         f4:11:99:22:cd:d8:fe:94:28:cc:f7:14:7d:72:8e:75:73:0d:
         bc:0d:46:c7:99:ca:6d:ec:45:80:eb:69:39:98:24:dd:3b:2d:
         d1:12:5f:95:f4:72:d9:ba:d7:49:8b:20:9f:04:2c:c0:27:db:
         38:67:f3:af:29:d6:a9:f2:6e:41:51:d1:98:37:e0:e9:61:45:
         5d:e1:77:6c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBMsUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGYz
ZGY4NTM4NjYyZjNjNzkyZmJiMDU1OTMxNTIyNmM1Yjg2OTUwMjQwHhcNMjIwMjE0
MDMwMDAwWhcNMjQwMjE0MDMwMDAwWjAzMTEwLwYDVQQDEyhjNGY2YWU2NThkM2Qz
MTRiMjRiZmJkNjEzODU2NGNhZWQwZmRmNmE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp1SI/HB690n8IHcWOdMYqT9KIZkBqHY9DBqZ5eoZYxN+eqYK
sWEosCGdO1Mzle1c8DnNCxy2mgfkQi1ZlIeIvO2gNA+FQgCnKZjmhVIv1VYF+y1k
wd0ML51zn9tlcpuPRV9lrzisw998nmmdjseU8NfYNR4qq5hsctFK5bjC01CFhtgs
4DQmjR7NdztxpIF10Dyg6Xw/jQ/exAaTwRlgOqI+flM8esVNjDWFaRrKanWs7KKY
W63Hy2djYOchGEs1coutkS/wWfGqq6Xo3gM6nNBjJGRfaYP8RLTvFK4DVulEjgOv
REZLmPiZ/hu0blSwBq0PUnGUZGLfZDlM+45j6wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIzAwrb1F0v75uOB2L8XESDzxCc9MB8GA1UdIwQYMBaAFOVZNjKANfUmnFqS
A4mmJERi2qwpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjNkZjg1
Mzg2NjJmM2M3OTJmYmIwNTU5MzE1MjI2YzViODY5NTAyNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWEwMmIyODUtOTNlZS00YzEyLTkwYWYtZDYyODk4
MTlkNjcwL2M0ZjZhZTY1OGQzZDMxNGIyNGJmYmQ2MTM4NTY0Y2FlZDBmZGY2YTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xYTAyYjI4NS05M2VlLTRjMTItOTBhZi1kNjI4
OTgxOWQ2NzAvZjNkZjg1Mzg2NjJmM2M3OTJmYmIwNTU5MzE1MjI2YzViODY5NTAy
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALXovjANBgkqhkiG9w0BAQsFAAOCAQEALocNp5AfAQNqGEes
wFniv7iDCrK3ky+7EzoVUeVUAB/sHZh/yuTMLDW1ze7sxb09aD+fbAI0YetI8etp
irO5bHJwzoOHfl6iAqa3TfMcNOIMqm8Fjg5GIue0fUEfjJIngoQz8f2jbYuyzzpj
j5AExLXmbwWnTEE5vSpz7qFysMx/UVxZmw4L0cHB1bxuCTQranhquQgOFnf+QjU0
LC+BzQuEhUjhFAvulwXwJYe/TQIKXJyQ9BGZIs3Y/pQozPcUfXKOdXMNvA1Gx5nK
bexFgOtpOZgk3Tst0RJflfRy2brXSYsgnwQswCfbOGfzrynWqfJuQVHRmDfg6WFF
XeF3bA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org