Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/95ec38ee4eb2f0a4dd2768a3321dbcd1a1b3b780.roa
File:                     95ec38ee4eb2f0a4dd2768a3321dbcd1a1b3b780.roa (raw, json)
Hash identifier:          ulZESX5AWEezECtCtPFS8IzYTK7YcT+N1XWnp0ohmlA=
Subject key identifier:   9E:42:1B:2C:DC:A4:D9:02:E0:26:AF:E1:A5:44:09:DB:06:C4:61:07
Certificate issuer:       /CN=6991426f0c0c7ac92da1d5129c9ec711a2a38a3a
Certificate serial:       1FA0BD
Authority key identifier: 55:7C:2D:2E:8D:B1:AA:A7:A7:7D:B1:29:5D:09:4A:92:0C:0D:CD:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/95ec38ee4eb2f0a4dd2768a3321dbcd1a1b3b780.roa
Signing time:             Thu 11 May 2023 08:33:21 +0000
ROA not before:           Wed 10 May 2023 08:33:21 +0000
ROA not after:            Fri 09 May 2025 08:33:21 +0000
asID:                     52242
IP address blocks:        190.181.128.0/23 maxlen: 24
                          190.181.135.0/24 maxlen: 24
                          190.181.141.0/24 maxlen: 24
                          190.181.153.0/24 maxlen: 24
                          190.181.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072765 (0x1fa0bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6991426f0c0c7ac92da1d5129c9ec711a2a38a3a
        Validity
            Not Before: May 10 08:33:21 2023 GMT
            Not After : May  9 08:33:21 2025 GMT
        Subject: CN=95ec38ee4eb2f0a4dd2768a3321dbcd1a1b3b780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:12:55:af:29:08:f8:21:56:9d:10:7f:44:be:
                    2c:8c:57:c6:47:da:65:7f:40:93:b8:68:a8:e2:97:
                    3c:db:22:a2:b5:c8:8d:05:35:31:0e:69:b3:0d:37:
                    9d:1d:bd:f1:8e:99:ef:d8:4b:f2:8b:4a:5d:3e:c8:
                    98:5a:cf:b6:79:40:eb:17:21:1a:9d:43:8f:8d:e4:
                    3a:2b:c0:17:71:8e:57:a5:5f:8c:f3:33:43:7a:fc:
                    a2:b0:5d:12:27:57:22:f5:4c:64:20:f3:fe:08:06:
                    91:db:9a:77:0d:80:22:81:3b:38:56:b1:e6:ac:e1:
                    0d:1f:f7:66:44:0c:a5:56:74:8d:6c:84:ad:79:7c:
                    a0:b7:60:f6:d8:f4:66:f1:0d:9f:bf:ea:ac:ce:39:
                    1a:1f:cc:02:a0:6f:6c:18:cd:32:71:e9:89:4c:32:
                    fa:a8:05:3e:7c:72:a2:1a:bc:77:8b:c8:a5:a8:0c:
                    f4:78:12:15:ed:7c:0d:aa:05:74:8d:b2:65:88:4d:
                    5a:b4:c3:51:8a:ec:55:79:bc:d9:b4:a4:31:c0:aa:
                    da:e8:1a:42:35:e7:f6:c7:43:fa:0a:7e:6a:88:0b:
                    f0:7a:13:b7:01:23:2c:85:35:3b:31:69:15:88:cc:
                    1b:a7:3f:62:2b:78:a9:b2:71:bd:f4:1c:03:5e:f1:
                    32:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:42:1B:2C:DC:A4:D9:02:E0:26:AF:E1:A5:44:09:DB:06:C4:61:07
            X509v3 Authority Key Identifier:
                keyid:55:7C:2D:2E:8D:B1:AA:A7:A7:7D:B1:29:5D:09:4A:92:0C:0D:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/95ec38ee4eb2f0a4dd2768a3321dbcd1a1b3b780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.181.128.0/23
                  190.181.135.0/24
                  190.181.141.0/24
                  190.181.153.0/24
                  190.181.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:8c:eb:20:a7:d1:86:90:66:fb:6b:4d:98:12:45:1c:d9:ac:
         20:92:93:11:5e:e4:d8:50:2b:2e:22:82:a0:5f:6f:dd:72:a4:
         32:f9:d3:6d:c0:0e:4a:5d:50:30:d4:8c:02:8f:59:8c:8b:95:
         d5:16:0b:ea:8c:dd:f5:38:b6:f1:da:3e:40:3a:0f:03:0c:41:
         a0:d9:d6:f0:7a:fc:94:6e:e8:66:1f:ad:de:79:de:94:3b:d6:
         92:34:18:fe:01:93:4f:c4:42:f7:3b:b8:be:b1:90:7b:28:cc:
         62:31:88:04:98:48:50:69:30:51:5c:64:f3:13:ba:98:63:7a:
         1a:78:9f:cf:c7:48:8c:08:9f:49:37:be:c4:99:00:50:44:11:
         1a:c4:12:f3:68:24:cc:b3:19:37:e5:eb:d9:27:b6:29:5f:dc:
         cb:d3:ff:83:83:b3:86:52:e1:4d:ca:63:44:c2:6b:47:bd:71:
         31:e6:55:78:1f:a7:6e:eb:bf:1e:b4:92:1d:53:ab:da:d9:33:
         2c:55:4f:6e:38:91:bb:b9:91:e7:6b:36:d7:db:e2:2c:97:2e:
         8d:40:7f:9e:a4:f7:1f:8b:15:ef:e5:33:73:44:ef:17:f6:fd:
         09:14:08:26:1c:a6:77:bf:05:28:5f:f1:52:6b:a9:cb:51:f0:
         47:12:a7:d3
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIDH6C9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
OTE0MjZmMGMwYzdhYzkyZGExZDUxMjljOWVjNzExYTJhMzhhM2EwHhcNMjMwNTEw
MDgzMzIxWhcNMjUwNTA5MDgzMzIxWjAzMTEwLwYDVQQDEyg5NWVjMzhlZTRlYjJm
MGE0ZGQyNzY4YTMzMjFkYmNkMWExYjNiNzgwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1xJVrykI+CFWnRB/RL4sjFfGR9plf0CTuGio4pc82yKitciN
BTUxDmmzDTedHb3xjpnv2Evyi0pdPsiYWs+2eUDrFyEanUOPjeQ6K8AXcY5XpV+M
8zNDevyisF0SJ1ci9UxkIPP+CAaR25p3DYAigTs4VrHmrOENH/dmRAylVnSNbISt
eXygt2D22PRm8Q2fv+qszjkaH8wCoG9sGM0ycemJTDL6qAU+fHKiGrx3i8ilqAz0
eBIV7XwNqgV0jbJliE1atMNRiuxVebzZtKQxwKra6BpCNef2x0P6Cn5qiAvwehO3
ASMshTU7MWkViMwbpz9iK3ipsnG99BwDXvEycQIDAQABo4ICczCCAm8wHQYDVR0O
BBYEFJ5CGyzcpNkC4Cav4aVECdsGxGEHMB8GA1UdIwQYMBaAFFV8LS6Nsaqnp32x
KV0JSpIMDc0NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjk5MTQy
NmYwYzBjN2FjOTJkYTFkNTEyOWM5ZWM3MTFhMmEzOGEzYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGFhMDhlMjEtZmIyZC00OGI3LTgyZDktZjQxODdj
NGVhN2EwLzk1ZWMzOGVlNGViMmYwYTRkZDI3NjhhMzMyMWRiY2QxYTFiM2I3ODAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80YWEwOGUyMS1mYjJkLTQ4YjctODJkOS1mNDE4
N2M0ZWE3YTAvNjk5MTQyNmYwYzBjN2FjOTJkYTFkNTEyOWM5ZWM3MTFhMmEzOGEz
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQo
MCYwJAQCAAEwHgMEAb61gAMEAL61hwMEAL61jQMEAL61mQMEAL61ojANBgkqhkiG
9w0BAQsFAAOCAQEAQIzrIKfRhpBm+2tNmBJFHNmsIJKTEV7k2FArLiKCoF9v3XKk
MvnTbcAOSl1QMNSMAo9ZjIuV1RYL6ozd9Ti28do+QDoPAwxBoNnW8Hr8lG7oZh+t
3nnelDvWkjQY/gGTT8RC9zu4vrGQeyjMYjGIBJhIUGkwUVxk8xO6mGN6Gnifz8dI
jAifSTe+xJkAUEQRGsQS82gkzLMZN+Xr2Se2KV/cy9P/g4OzhlLhTcpjRMJrR71x
MeZVeB+nbuu/HrSSHVOr2tkzLFVPbjiRu7mR52s219viLJcujUB/nqT3H4sV7+Uz
c0TvF/b9CRQIJhymd78FKF/xUmupy1HwRxKn0w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:41 2024 by rpki-client on console-fra.rpki-client.org