Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54b5eddc-0643-4c81-820f-a7d7fdb6b65e/2b229996d56cff6d5f5f29250eb8115905b9c8c4.roa
File:                     2b229996d56cff6d5f5f29250eb8115905b9c8c4.roa (raw, json)
Hash identifier:          SpEFgnf3lRk6+/oWSfXihTrs5LCXt4wheX1x9T054lY=
Subject key identifier:   4F:9F:7E:67:4B:04:43:23:FF:76:EE:B9:AA:E5:F1:FA:FB:E8:56:96
Certificate issuer:       /CN=f5777046979fbf5283208f5b440f2983da70cea4
Certificate serial:       1F3615
Authority key identifier: 74:29:C1:52:6B:C5:64:80:31:AD:BA:12:73:CF:35:85:F9:F0:FC:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5777046979fbf5283208f5b440f2983da70cea4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54b5eddc-0643-4c81-820f-a7d7fdb6b65e/2b229996d56cff6d5f5f29250eb8115905b9c8c4.roa
Signing time:             Fri 24 Mar 2023 08:30:16 +0000
ROA not before:           Thu 23 Mar 2023 08:30:16 +0000
ROA not after:            Sat 22 Mar 2025 08:30:16 +0000
asID:                     28096
IP address blocks:        190.9.57.0/24 maxlen: 24
                          190.9.58.0/23 maxlen: 24
                          190.9.59.0/24 maxlen: 24
                          190.9.60.0/22 maxlen: 24
                          190.9.61.0/24 maxlen: 24
                          190.9.62.0/23 maxlen: 24
                          190.9.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2045461 (0x1f3615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5777046979fbf5283208f5b440f2983da70cea4
        Validity
            Not Before: Mar 23 08:30:16 2023 GMT
            Not After : Mar 22 08:30:16 2025 GMT
        Subject: CN=2b229996d56cff6d5f5f29250eb8115905b9c8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:38:80:30:b1:c8:8b:17:17:1c:88:a5:29:5f:
                    aa:ea:7f:42:5c:4c:76:a0:66:26:e1:58:d9:9f:d1:
                    21:26:dc:28:2e:52:87:c7:48:b5:a3:d7:ac:8b:5a:
                    c8:94:2d:5e:75:06:ee:14:1d:8c:a4:e9:f3:ea:ce:
                    a1:93:97:26:23:87:11:14:25:99:2d:9a:a4:8b:d1:
                    a6:e9:1b:a4:1f:8e:0a:8a:09:4c:0a:68:3e:83:23:
                    11:2d:91:03:a0:7d:fc:9e:c3:06:71:41:9a:45:ff:
                    3d:90:24:3e:65:6e:f7:13:c7:b8:76:a8:e1:25:9c:
                    4e:6a:ff:f4:8a:82:1e:d6:41:db:e7:92:ee:ca:42:
                    c7:5b:70:51:bf:0e:70:6b:f7:14:cc:e9:ff:dd:a1:
                    53:8e:23:c5:ed:9a:f7:08:f4:e2:1c:a2:c4:8c:e4:
                    36:72:1e:ea:8e:54:34:4c:7c:f7:af:93:be:77:0c:
                    60:5e:f5:13:3c:51:de:00:cc:09:ea:28:49:37:0d:
                    76:95:6f:57:34:32:d7:5d:ec:39:41:1b:3d:44:f7:
                    a7:d4:07:b6:d7:f9:27:78:3f:29:e8:21:be:0d:60:
                    b6:96:46:b6:64:5d:de:23:d3:23:20:35:43:75:0a:
                    ae:f1:42:ba:e7:28:14:e3:61:16:a5:bf:76:d8:75:
                    57:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9F:7E:67:4B:04:43:23:FF:76:EE:B9:AA:E5:F1:FA:FB:E8:56:96
            X509v3 Authority Key Identifier:
                keyid:74:29:C1:52:6B:C5:64:80:31:AD:BA:12:73:CF:35:85:F9:F0:FC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f5777046979fbf5283208f5b440f2983da70cea4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54b5eddc-0643-4c81-820f-a7d7fdb6b65e/2b229996d56cff6d5f5f29250eb8115905b9c8c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54b5eddc-0643-4c81-820f-a7d7fdb6b65e/f5777046979fbf5283208f5b440f2983da70cea4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.57.0-190.9.63.255

    Signature Algorithm: sha256WithRSAEncryption
         88:bd:56:ec:b9:fb:d2:f2:d8:ac:36:fb:62:de:5e:7a:7d:de:
         f1:5c:71:a3:c5:00:87:bf:09:83:8b:0e:e1:69:7c:8e:f1:14:
         42:cb:fc:60:24:c9:73:06:9a:1c:ec:ba:2d:ef:9f:b8:f7:b8:
         2f:b9:45:38:e7:52:1e:bd:19:c3:e1:f0:5b:ad:75:56:9a:ed:
         c6:4d:78:88:80:c3:a4:5d:73:93:28:68:37:1e:a2:26:a3:d2:
         48:7b:09:84:81:d7:0a:40:a5:f8:45:13:4f:9c:87:16:76:ad:
         f8:4b:c2:b3:7a:1c:78:fe:5b:8c:34:c6:dd:d7:73:29:cd:51:
         36:db:e5:f7:37:bb:83:b6:c0:2b:09:d6:69:d7:2a:43:47:31:
         80:e9:c2:e1:a2:58:cb:b9:cc:e7:08:a0:3c:62:6c:4f:25:ec:
         aa:bb:90:7a:d5:fb:a2:84:68:a8:58:b8:5e:04:c8:16:32:28:
         61:a0:b0:dd:3c:d0:94:eb:22:e9:2d:bf:a5:df:b2:c8:b7:b3:
         30:cd:44:45:4c:2f:7f:59:5d:18:ca:b4:a4:cb:5d:76:ef:a9:
         d3:80:9f:5d:5c:71:d6:af:de:f3:10:4e:23:9c:87:c9:9d:10:
         5e:b3:3e:f1:4a:0e:d8:5c:1b:f9:88:bc:5b:e3:d2:cb:80:57:
         11:37:0e:1a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDHzYVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY1
Nzc3MDQ2OTc5ZmJmNTI4MzIwOGY1YjQ0MGYyOTgzZGE3MGNlYTQwHhcNMjMwMzIz
MDgzMDE2WhcNMjUwMzIyMDgzMDE2WjAzMTEwLwYDVQQDEygyYjIyOTk5NmQ1NmNm
ZjZkNWY1ZjI5MjUwZWI4MTE1OTA1YjljOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkDiAMLHIixcXHIilKV+q6n9CXEx2oGYm4VjZn9EhJtwoLlKH
x0i1o9esi1rIlC1edQbuFB2MpOnz6s6hk5cmI4cRFCWZLZqki9Gm6RukH44KiglM
Cmg+gyMRLZEDoH38nsMGcUGaRf89kCQ+ZW73E8e4dqjhJZxOav/0ioIe1kHb55Lu
ykLHW3BRvw5wa/cUzOn/3aFTjiPF7Zr3CPTiHKLEjOQ2ch7qjlQ0THz3r5O+dwxg
XvUTPFHeAMwJ6ihJNw12lW9XNDLXXew5QRs9RPen1Ae21/kneD8p6CG+DWC2lka2
ZF3eI9MjIDVDdQqu8UK65ygU42EWpb922HVXNwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFE+ffmdLBEMj/3buuarl8fr76FaWMB8GA1UdIwQYMBaAFHQpwVJrxWSAMa26
EnPPNYX58Pw+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjU3Nzcw
NDY5NzlmYmY1MjgzMjA4ZjViNDQwZjI5ODNkYTcwY2VhNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTRiNWVkZGMtMDY0My00YzgxLTgyMGYtYTdkN2Zk
YjZiNjVlLzJiMjI5OTk2ZDU2Y2ZmNmQ1ZjVmMjkyNTBlYjgxMTU5MDViOWM4YzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NGI1ZWRkYy0wNjQzLTRjODEtODIwZi1hN2Q3
ZmRiNmI2NWUvZjU3NzcwNDY5NzlmYmY1MjgzMjA4ZjViNDQwZjI5ODNkYTcwY2Vh
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAvgk5AwQGvgkAMA0GCSqGSIb3DQEBCwUAA4IBAQCIvVbs
ufvS8tisNvti3l56fd7xXHGjxQCHvwmDiw7haXyO8RRCy/xgJMlzBpoc7Lot75+4
97gvuUU451IevRnD4fBbrXVWmu3GTXiIgMOkXXOTKGg3HqImo9JIewmEgdcKQKX4
RRNPnIcWdq34S8Kzehx4/luMNMbd13MpzVE22+X3N7uDtsArCdZp1ypDRzGA6cLh
oljLucznCKA8YmxPJeyqu5B61fuihGioWLheBMgWMihhoLDdPNCU6yLpLb+l37LI
t7MwzURFTC9/WV0YyrSky11276nTgJ9dXHHWr97zEE4jnIfJnRBesz7xSg7YXBv5
iLxb49LLgFcRNw4a
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org