Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/539b8494-f826-4178-8b76-2ffe97373ef7/79999f2cf5964d25ff6b7974c82775b24752d272.roa
File:                     79999f2cf5964d25ff6b7974c82775b24752d272.roa (raw, json)
Hash identifier:          vZovMhRPlFReLsw/EnUk65/1s/ZqezrmVycVNvoFaiY=
Subject key identifier:   C8:08:B6:D4:94:90:64:A6:90:D9:E1:63:E5:BA:DC:13:CD:55:8E:78
Certificate issuer:       /CN=61ea6ac6314c234138b3aad8fa2c76a5b7d47ece
Certificate serial:       0DC65C
Authority key identifier: 2D:9E:C7:20:B2:BB:98:79:67:D0:DE:5D:AF:DF:DC:2E:DB:D2:DE:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61ea6ac6314c234138b3aad8fa2c76a5b7d47ece.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/539b8494-f826-4178-8b76-2ffe97373ef7/79999f2cf5964d25ff6b7974c82775b24752d272.roa
Signing time:             Wed 24 Mar 2021 14:38:14 +0000
ROA not before:           Wed 24 Mar 2021 14:38:14 +0000
ROA not after:            Tue 24 Mar 2026 14:38:14 +0000
asID:                     262221
IP address blocks:        190.106.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902748 (0xdc65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ea6ac6314c234138b3aad8fa2c76a5b7d47ece
        Validity
            Not Before: Mar 24 14:38:14 2021 GMT
            Not After : Mar 24 14:38:14 2026 GMT
        Subject: CN=79999f2cf5964d25ff6b7974c82775b24752d272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4c:f7:ac:98:3e:72:4b:df:72:9b:71:52:2d:
                    23:e2:b2:14:2c:75:81:dc:2c:80:82:50:2d:f3:f8:
                    20:88:7c:08:15:a5:0c:9a:45:8a:97:0a:9e:8c:89:
                    c8:de:f7:fb:d5:10:fe:08:2f:e8:c7:31:65:15:d2:
                    61:75:37:6a:4f:32:0a:2a:7d:25:fc:5f:3f:07:09:
                    a4:c9:f6:c4:15:0d:d2:4e:f6:52:df:d0:09:09:35:
                    19:80:e4:66:57:a2:c7:ca:8b:f8:03:3f:78:b1:b8:
                    84:e4:aa:ba:1b:01:8b:6a:b0:bb:10:a2:c7:92:bf:
                    f7:79:47:54:5d:6a:61:6a:40:1f:54:68:88:32:26:
                    a6:37:04:3d:6c:57:0f:09:44:55:c0:e3:b5:5b:91:
                    e7:3b:ef:52:5d:b1:d8:6a:2d:37:b3:41:82:6f:84:
                    32:60:f2:77:74:b9:32:bb:73:eb:fa:ae:0e:eb:ed:
                    47:e1:67:b2:05:b7:f7:0b:c4:39:ae:b3:3a:83:a9:
                    c0:3e:b5:cf:e1:52:e1:05:2c:7c:f4:67:73:21:90:
                    41:07:1d:60:1c:80:9b:23:fa:10:6a:1e:8a:da:6e:
                    0c:43:43:bb:38:1a:f6:1e:b0:e0:c5:87:8d:bf:e8:
                    0d:3e:c3:eb:64:40:fe:19:6c:95:31:36:26:0d:6a:
                    80:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:08:B6:D4:94:90:64:A6:90:D9:E1:63:E5:BA:DC:13:CD:55:8E:78
            X509v3 Authority Key Identifier:
                keyid:2D:9E:C7:20:B2:BB:98:79:67:D0:DE:5D:AF:DF:DC:2E:DB:D2:DE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61ea6ac6314c234138b3aad8fa2c76a5b7d47ece.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/539b8494-f826-4178-8b76-2ffe97373ef7/79999f2cf5964d25ff6b7974c82775b24752d272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/539b8494-f826-4178-8b76-2ffe97373ef7/61ea6ac6314c234138b3aad8fa2c76a5b7d47ece.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:89:6a:fe:26:0a:a8:de:f1:d9:2c:8c:2c:2a:de:66:1b:7f:
         43:ce:03:e9:a6:52:52:19:39:00:05:15:35:a0:80:aa:aa:28:
         40:28:50:3a:ea:69:47:67:f8:87:1b:6c:aa:e3:8b:64:9f:ac:
         0f:7a:20:e7:c6:cb:01:fd:d3:95:16:a0:5f:d3:ac:4b:77:9d:
         76:e4:4e:24:69:d6:05:86:14:43:29:9c:cd:b1:6f:d1:27:18:
         6f:70:48:fa:92:2d:1a:fe:1b:1c:ae:85:0e:a0:7b:47:6a:39:
         50:f2:b6:bb:9f:65:15:df:41:0a:ed:aa:76:a1:e2:42:59:2a:
         60:d8:fd:c8:c0:09:5b:c9:30:d0:d5:ed:3f:de:63:bf:d7:ac:
         f6:67:2a:0f:8b:0c:78:04:d1:07:be:4b:33:38:ee:3a:c3:ce:
         59:e9:db:9f:7d:63:be:8b:8f:e5:1f:7c:fd:21:3e:55:b4:e3:
         fe:02:a3:b6:28:58:91:92:a1:07:bb:e8:0c:8d:5d:47:33:b0:
         49:87:1c:7e:80:09:91:db:df:23:88:bc:fd:e1:2e:fa:ca:c2:
         93:1e:ab:d7:8e:62:2b:35:82:a8:6f:96:70:bb:13:cc:c5:63:
         b1:1a:00:55:0f:7d:fb:6a:7d:54:5a:54:d7:5a:bc:82:2f:a6:
         c5:eb:70:c4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDcZcMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYx
ZWE2YWM2MzE0YzIzNDEzOGIzYWFkOGZhMmM3NmE1YjdkNDdlY2UwHhcNMjEwMzI0
MTQzODE0WhcNMjYwMzI0MTQzODE0WjAzMTEwLwYDVQQDEyg3OTk5OWYyY2Y1OTY0
ZDI1ZmY2Yjc5NzRjODI3NzViMjQ3NTJkMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgEz3rJg+ckvfcptxUi0j4rIULHWB3CyAglAt8/ggiHwIFaUM
mkWKlwqejInI3vf71RD+CC/oxzFlFdJhdTdqTzIKKn0l/F8/BwmkyfbEFQ3STvZS
39AJCTUZgORmV6LHyov4Az94sbiE5Kq6GwGLarC7EKLHkr/3eUdUXWphakAfVGiI
MiamNwQ9bFcPCURVwOO1W5HnO+9SXbHYai03s0GCb4QyYPJ3dLkyu3Pr+q4O6+1H
4WeyBbf3C8Q5rrM6g6nAPrXP4VLhBSx89GdzIZBBBx1gHICbI/oQah6K2m4MQ0O7
OBr2HrDgxYeNv+gNPsPrZED+GWyVMTYmDWqA7QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMgIttSUkGSmkNnhY+W63BPNVY54MB8GA1UdIwQYMBaAFC2exyCyu5h5Z9De
Xa/f3C7b0t60MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjFlYTZh
YzYzMTRjMjM0MTM4YjNhYWQ4ZmEyYzc2YTViN2Q0N2VjZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTM5Yjg0OTQtZjgyNi00MTc4LThiNzYtMmZmZTk3
MzczZWY3Lzc5OTk5ZjJjZjU5NjRkMjVmZjZiNzk3NGM4Mjc3NWIyNDc1MmQyNzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzliODQ5NC1mODI2LTQxNzgtOGI3Ni0yZmZl
OTczNzNlZjcvNjFlYTZhYzYzMTRjMjM0MTM4YjNhYWQ4ZmEyYzc2YTViN2Q0N2Vj
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA75qcDANBgkqhkiG9w0BAQsFAAOCAQEAZolq/iYKqN7x2SyM
LCreZht/Q84D6aZSUhk5AAUVNaCAqqooQChQOuppR2f4hxtsquOLZJ+sD3og58bL
Af3TlRagX9OsS3edduROJGnWBYYUQymczbFv0ScYb3BI+pItGv4bHK6FDqB7R2o5
UPK2u59lFd9BCu2qdqHiQlkqYNj9yMAJW8kw0NXtP95jv9es9mcqD4sMeATRB75L
MzjuOsPOWenbn31jvouP5R98/SE+VbTj/gKjtihYkZKhB7voDI1dRzOwSYccfoAJ
kdvfI4i8/eEu+srCkx6r145iKzWCqG+WcLsTzMVjsRoAVQ99+2p9VFpU11q8gi+m
xetwxA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org