Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/17bbe2dd8b6f5dbaf3366e50fefba89c8b499c89.roa
File:                     17bbe2dd8b6f5dbaf3366e50fefba89c8b499c89.roa (raw, json)
Hash identifier:          dibiO2oU91YS4BJcQIhkCt3VPIlX7W9OT83ncvmcV/M=
Subject key identifier:   55:92:F3:A3:F8:A7:71:5E:27:24:7A:14:AC:7D:0F:FB:FD:34:58:85
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       1E7179
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/17bbe2dd8b6f5dbaf3366e50fefba89c8b499c89.roa
Signing time:             Fri 27 Jan 2023 13:06:59 +0000
ROA not before:           Thu 26 Jan 2023 13:06:55 +0000
ROA not after:            Thu 27 Jan 2028 13:06:55 +0000
asID:                     61452
IP address blocks:        190.210.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1995129 (0x1e7179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jan 26 13:06:55 2023 GMT
            Not After : Jan 27 13:06:55 2028 GMT
        Subject: CN=17bbe2dd8b6f5dbaf3366e50fefba89c8b499c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c9:51:46:5f:c9:be:f4:c1:53:b9:86:91:cc:
                    42:bd:4a:4f:66:b8:3f:02:21:3e:ca:fd:fb:dd:0f:
                    33:d5:00:ff:db:bb:14:e2:45:f5:37:dd:29:54:57:
                    ab:32:fc:74:8f:df:36:3b:d5:40:2e:37:ff:69:00:
                    f9:99:9e:48:40:8a:4e:79:34:c2:8a:ea:df:92:e1:
                    22:23:b0:5c:37:0f:e6:bd:fd:71:09:b5:a0:1f:86:
                    9d:0f:7c:3e:d2:ea:92:45:5a:0f:96:9a:94:9d:17:
                    8b:73:b3:7c:54:18:cc:12:74:6b:02:f7:7c:22:43:
                    57:6a:4c:21:49:75:57:9e:d1:a5:37:4c:41:63:fa:
                    24:5e:46:f5:a4:9c:62:44:78:2f:85:05:76:a4:69:
                    85:a5:78:c7:da:17:eb:70:83:07:30:5c:15:a1:15:
                    f3:df:e1:2a:82:10:a0:96:10:8d:37:b1:fa:5e:1e:
                    55:f4:f9:2f:85:d1:38:a3:6c:58:f0:f3:ff:83:61:
                    5d:63:04:d8:0e:ee:43:ea:90:33:e2:85:d7:ea:15:
                    15:af:e3:3b:b6:92:e5:02:dc:42:44:9d:6b:f1:ba:
                    65:82:58:22:e7:36:a5:2e:10:e2:90:28:aa:99:7c:
                    b2:20:5a:74:f3:2c:99:93:ea:38:11:ff:b8:7c:c6:
                    ae:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:92:F3:A3:F8:A7:71:5E:27:24:7A:14:AC:7D:0F:FB:FD:34:58:85
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/17bbe2dd8b6f5dbaf3366e50fefba89c8b499c89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:2b:31:3a:09:b3:28:98:45:cc:41:38:df:9d:84:1b:29:e8:
         b7:2d:9b:91:6f:2e:e3:b5:be:5b:16:e0:b5:7f:81:59:93:e6:
         45:fc:f9:4d:2d:9c:11:bf:68:cb:8f:0b:aa:de:fb:ac:b5:7f:
         33:66:3b:13:79:65:12:ff:ae:06:f2:b2:9e:24:22:d8:da:8a:
         87:c4:11:60:bd:e1:3b:87:20:57:2f:ea:ba:37:73:88:96:19:
         bf:ea:b8:37:7f:81:25:9b:be:67:5c:fc:36:ae:9d:d6:8a:f8:
         2b:05:19:14:70:e1:93:44:28:4f:df:50:93:08:e1:97:df:11:
         3a:93:c6:21:59:dc:8f:a5:88:41:a9:68:28:61:e4:c7:10:c9:
         60:68:aa:dd:4c:9a:c2:6b:b8:f0:8a:82:70:04:24:0a:d2:31:
         1b:96:cb:7b:70:fa:eb:c9:a7:99:dc:b7:19:08:2e:f8:89:46:
         a7:e5:82:ed:1d:f8:0f:75:2f:58:b1:a5:47:01:17:84:b4:18:
         5f:c4:59:bb:b0:f2:98:7b:ca:f8:3f:05:c7:ef:29:bf:4e:d2:
         84:48:7a:07:5a:45:32:6e:3a:02:9c:73:38:d3:11:d5:6c:4f:
         cb:5c:a8:b7:1f:58:75:84:c3:7d:77:f5:74:95:e8:88:2c:00:
         1b:12:a4:6c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHnF5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
YmZjNjNjNGQyZTIyMmRmM2EwOTllMjIyNTY3ZGViOWU4OGJiMjcwHhcNMjMwMTI2
MTMwNjU1WhcNMjgwMTI3MTMwNjU1WjAzMTEwLwYDVQQDEygxN2JiZTJkZDhiNmY1
ZGJhZjMzNjZlNTBmZWZiYTg5YzhiNDk5Yzg5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiMlRRl/JvvTBU7mGkcxCvUpPZrg/AiE+yv373Q8z1QD/27sU
4kX1N90pVFerMvx0j982O9VALjf/aQD5mZ5IQIpOeTTCiurfkuEiI7BcNw/mvf1x
CbWgH4adD3w+0uqSRVoPlpqUnReLc7N8VBjMEnRrAvd8IkNXakwhSXVXntGlN0xB
Y/okXkb1pJxiRHgvhQV2pGmFpXjH2hfrcIMHMFwVoRXz3+EqghCglhCNN7H6Xh5V
9PkvhdE4o2xY8PP/g2FdYwTYDu5D6pAz4oXX6hUVr+M7tpLlAtxCRJ1r8bplglgi
5zalLhDikCiqmXyyIFp08yyZk+o4Ef+4fMauJQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFWS86P4p3FeJyR6FKx9D/v9NFiFMB8GA1UdIwQYMBaAFKbB/2GNliK3iQ+g
mDamXNI878RiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjliZmM2
M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI2ZjRmMjgtODgwYy00YmI1LTk0NDItOWVlZjkz
MjVkN2ViLzE3YmJlMmRkOGI2ZjVkYmFmMzM2NmU1MGZlZmJhODljOGI0OTljODku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjZmNGYyOC04ODBjLTRiYjUtOTQ0Mi05ZWVm
OTMyNWQ3ZWIvMjliZmM2M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7SgzANBgkqhkiG9w0BAQsFAAOCAQEAdisxOgmzKJhFzEE4
352EGynoty2bkW8u47W+WxbgtX+BWZPmRfz5TS2cEb9oy48Lqt77rLV/M2Y7E3ll
Ev+uBvKyniQi2NqKh8QRYL3hO4cgVy/qujdziJYZv+q4N3+BJZu+Z1z8Nq6d1or4
KwUZFHDhk0QoT99Qkwjhl98ROpPGIVncj6WIQaloKGHkxxDJYGiq3Uyawmu48IqC
cAQkCtIxG5bLe3D668mnmdy3GQgu+IlGp+WC7R34D3UvWLGlRwEXhLQYX8RZu7Dy
mHvK+D8Fx+8pv07ShEh6B1pFMm46ApxzONMR1WxPy1yotx9YdYTDfXf1dJXoiCwA
GxKkbA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org