Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3c45a85daae59cc88d9b41dd581860f7ad59fcb0.roa
File:                     3c45a85daae59cc88d9b41dd581860f7ad59fcb0.roa (raw, json)
Hash identifier:          b0fhaKh9Kg8wUmnmWgdPcCSFnIXPUDH/BRFA5u62eZY=
Subject key identifier:   3B:5E:BB:88:44:28:00:04:C3:FC:8A:1D:BE:3E:A3:F2:84:D3:50:31
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       039537
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3c45a85daae59cc88d9b41dd581860f7ad59fcb0.roa
Signing time:             Tue 11 Jul 2023 13:00:54 +0000
ROA not before:           Mon 10 Jul 2023 13:00:54 +0000
ROA not after:            Fri 11 Jul 2025 13:00:54 +0000
asID:                     16629
IP address blocks:        190.20.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234807 (0x39537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 13:00:54 2023 GMT
            Not After : Jul 11 13:00:54 2025 GMT
        Subject: CN=3c45a85daae59cc88d9b41dd581860f7ad59fcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0f:7b:cf:35:6c:a0:68:f3:2f:87:b0:c9:a5:
                    48:a2:3c:a4:63:a9:21:9e:6f:ca:64:46:77:62:e4:
                    f1:e6:ea:1b:9b:ca:25:94:59:46:72:e6:4f:d2:bf:
                    83:ae:ba:33:52:cd:6c:e2:92:07:bd:ea:e0:6c:bf:
                    7c:7b:39:36:9f:e8:f8:7b:73:98:e2:7e:88:f6:f9:
                    16:ca:07:3a:11:74:b4:19:9c:f8:f7:0d:07:fb:3b:
                    e6:fe:73:37:9b:53:bb:4e:df:8e:8b:08:7c:6d:10:
                    13:46:c6:8a:d9:1c:48:d2:b3:8a:64:da:76:51:9b:
                    1c:95:8a:27:41:53:9d:c8:c7:2f:08:0e:dd:bf:00:
                    cf:a9:9b:20:e8:3c:ba:dc:d9:ff:80:33:a5:f1:25:
                    ca:65:18:27:5a:7b:bb:9c:5b:44:ba:e6:02:e0:b2:
                    f3:56:24:2b:21:7a:fc:b7:16:7d:c6:e5:ec:6b:47:
                    11:81:3b:2e:e8:03:de:9a:c6:44:18:c8:52:9f:8d:
                    a1:89:d9:e8:a4:ff:44:b2:4c:85:57:f0:44:94:f5:
                    a3:fe:b1:bb:98:01:e4:d6:99:ba:83:58:4a:82:14:
                    27:5a:64:ea:b5:2d:73:3a:81:f8:e0:18:c8:65:c5:
                    24:0d:2c:93:cb:b7:2a:41:b2:ac:ce:9d:c9:b7:60:
                    e0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5E:BB:88:44:28:00:04:C3:FC:8A:1D:BE:3E:A3:F2:84:D3:50:31
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/3c45a85daae59cc88d9b41dd581860f7ad59fcb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.20.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:74:d4:ed:7e:12:77:6e:56:df:4b:49:71:f7:05:b7:c7:d1:
         56:88:6e:ab:18:cb:b0:35:f0:38:79:8e:31:ae:b0:ba:aa:4c:
         2d:09:7d:88:a6:94:13:85:0e:bc:f1:78:6f:5e:9f:41:70:bd:
         56:90:62:98:4f:f2:59:2b:93:0c:3c:89:8a:db:86:0e:58:0c:
         df:28:53:a7:c4:26:bd:6c:43:f2:db:de:69:3c:5c:c6:55:d2:
         49:e2:26:69:bb:e4:5c:de:c9:c1:3b:9f:3c:c6:fc:2e:fb:de:
         b4:d4:d8:4a:6f:ba:1f:ae:cc:da:0e:01:ca:60:c7:98:97:75:
         8c:f4:c7:d5:7f:d5:c2:36:6b:4a:80:6e:90:e9:fa:99:07:55:
         2a:10:4b:20:b7:07:0f:4e:a1:3e:e2:03:81:34:b3:5e:3f:9d:
         83:3c:18:81:18:0a:5a:40:35:fa:08:20:b8:2d:fa:40:1e:5f:
         a8:5f:e2:f4:71:23:7d:47:a2:16:01:b7:e8:38:d9:d4:95:65:
         1f:65:c3:21:a5:2c:8c:38:28:cb:ae:8e:59:6f:20:89:00:76:
         70:96:a7:f6:64:9e:5a:e2:35:47:a6:99:81:c9:3b:dc:17:3d:
         e0:0a:b0:dc:ec:08:ea:96:93:c7:eb:4f:7c:39:66:db:c0:c8:
         c5:e2:d1:46
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDA5U3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzEw
MTMwMDU0WhcNMjUwNzExMTMwMDU0WjAzMTEwLwYDVQQDEygzYzQ1YTg1ZGFhZTU5
Y2M4OGQ5YjQxZGQ1ODE4NjBmN2FkNTlmY2IwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzA97zzVsoGjzL4ewyaVIojykY6khnm/KZEZ3YuTx5uobm8ol
lFlGcuZP0r+DrrozUs1s4pIHvergbL98ezk2n+j4e3OY4n6I9vkWygc6EXS0GZz4
9w0H+zvm/nM3m1O7Tt+Oiwh8bRATRsaK2RxI0rOKZNp2UZsclYonQVOdyMcvCA7d
vwDPqZsg6Dy63Nn/gDOl8SXKZRgnWnu7nFtEuuYC4LLzViQrIXr8txZ9xuXsa0cR
gTsu6APemsZEGMhSn42hidnopP9EskyFV/BElPWj/rG7mAHk1pm6g1hKghQnWmTq
tS1zOoH44BjIZcUkDSyTy7cqQbKszp3Jt2DglQIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFDteu4hEKAAEw/yKHb4+o/KE01AxMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5LzNjNDVhODVkYWFlNTljYzg4ZDliNDFkZDU4MTg2MGY3YWQ1OWZjYjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAL4UMA0GCSqGSIb3DQEBCwUAA4IBAQAXdNTtfhJ3blbfS0lx
9wW3x9FWiG6rGMuwNfA4eY4xrrC6qkwtCX2IppQThQ688XhvXp9BcL1WkGKYT/JZ
K5MMPImK24YOWAzfKFOnxCa9bEPy295pPFzGVdJJ4iZpu+Rc3snBO588xvwu+960
1NhKb7ofrszaDgHKYMeYl3WM9MfVf9XCNmtKgG6Q6fqZB1UqEEsgtwcPTqE+4gOB
NLNeP52DPBiBGApaQDX6CCC4LfpAHl+oX+L0cSN9R6IWAbfoONnUlWUfZcMhpSyM
OCjLro5ZbyCJAHZwlqf2ZJ5a4jVHppmByTvcFz3gCrDc7AjqlpPH6098OWbbwMjF
4tFG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-ams.rpki-client.org