Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/4738d201518af2c104cd649c6a203d3955a63026.roa
File:                     4738d201518af2c104cd649c6a203d3955a63026.roa (raw, json)
Hash identifier:          8SbhrjyuwzXTnPmRSOUen4i2G3bfm67olHkAFoAIf10=
Subject key identifier:   B4:F2:72:2B:EA:1F:67:F5:2B:75:C8:85:AC:1C:B7:80:84:B2:29:DF
Certificate issuer:       /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial:       21C025
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/4738d201518af2c104cd649c6a203d3955a63026.roa
Signing time:             Fri 09 Jun 2023 18:33:58 +0000
ROA not before:           Thu 08 Jun 2023 18:33:57 +0000
ROA not after:            Mon 09 Jun 2025 18:33:57 +0000
asID:                     19429
IP address blocks:        186.28.0.0/16 maxlen: 24
                          190.27.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211877 (0x21c025)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Validity
            Not Before: Jun  8 18:33:57 2023 GMT
            Not After : Jun  9 18:33:57 2025 GMT
        Subject: CN=4738d201518af2c104cd649c6a203d3955a63026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:0c:c9:5e:c1:62:a1:ca:d1:4b:74:b0:14:
                    2a:ee:d6:59:27:8c:66:90:10:54:6f:4c:96:09:dc:
                    84:5e:e8:0a:8d:98:ea:5c:aa:77:94:74:26:ce:59:
                    6a:2c:84:06:ba:2b:bb:58:98:8c:cf:db:3e:cd:80:
                    7e:63:6d:a9:4d:4c:e3:a4:95:31:6d:34:1e:ea:2f:
                    ee:f5:21:2b:bc:04:bd:c2:db:37:c9:a8:0b:4e:db:
                    c3:86:4d:23:61:f5:8c:a4:e1:97:44:5b:35:6b:23:
                    be:7d:f5:94:c3:33:e6:dd:81:b3:7b:9c:39:05:09:
                    c2:76:0e:43:a6:3f:70:16:57:99:1d:3b:ce:0b:1b:
                    c3:dd:41:50:f7:fd:ce:7a:e7:85:cf:1a:36:94:54:
                    58:a5:97:3f:17:bd:30:9d:4b:7f:05:c7:0c:46:a2:
                    81:e6:5f:c7:f4:93:96:44:5b:5d:85:b7:53:0d:94:
                    cf:b1:c6:65:36:f0:b0:70:d1:51:a7:11:94:be:78:
                    2e:48:7b:d7:f7:fb:7f:5b:f0:9d:1e:79:8a:35:d6:
                    a0:2b:41:5d:95:e4:ad:29:7a:31:b2:76:ed:4a:1d:
                    03:ce:20:12:1d:c5:0d:7f:db:33:e8:10:cb:c1:13:
                    b9:0b:d2:ef:cb:a6:54:4c:3c:be:3e:3f:5a:4b:b1:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F2:72:2B:EA:1F:67:F5:2B:75:C8:85:AC:1C:B7:80:84:B2:29:DF
            X509v3 Authority Key Identifier:
                keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/4738d201518af2c104cd649c6a203d3955a63026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.28.0.0/16
                  190.27.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         e8:df:aa:51:b5:2a:01:8a:9f:58:06:8b:12:d4:33:6e:e8:6f:
         7c:a9:52:cd:98:6b:98:14:73:80:57:34:da:4b:e1:0d:35:2e:
         40:84:21:86:c2:34:e6:8d:bd:03:3d:e6:a7:e7:2d:1e:e8:35:
         84:4b:e3:66:09:c5:b3:7f:d3:24:45:8d:54:d9:0d:96:ee:b6:
         dc:60:95:c5:34:65:fc:c1:29:4a:5c:cf:cf:1f:75:e1:35:6b:
         16:d5:25:7d:d0:57:0f:53:db:fb:a3:76:d9:14:18:65:f3:38:
         dc:7e:1f:27:ab:01:a3:95:bb:4f:e1:af:55:6e:8f:f4:ae:bf:
         3b:00:18:39:1d:ca:30:fa:03:0e:b2:9e:09:a7:2d:23:a4:fd:
         8a:2c:be:17:08:9f:00:15:2d:0b:b2:cc:b3:40:2c:03:ee:7c:
         4b:a5:3e:1d:e7:ef:7f:73:ed:eb:3f:22:0f:dc:38:d2:f2:f1:
         9f:3a:35:55:17:39:e1:cd:fa:f2:24:39:f7:f5:50:6d:68:4b:
         a2:17:e8:5f:d6:47:61:bd:cc:9b:71:07:be:4e:65:24:8d:c9:
         b7:50:93:5c:b6:ea:6b:dc:1e:fb:cd:81:3a:2a:54:d4:95:ce:
         10:6a:e9:9e:e7:34:ef:72:e0:7b:82:a7:7f:bb:e1:67:63:bd:
         84:3d:64:66
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIDIcAlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
NTUxOTdmNTkwZmYyOThiNTJhYjM1OGRhMDhhMGZkYmZlNmE4ODMwHhcNMjMwNjA4
MTgzMzU3WhcNMjUwNjA5MTgzMzU3WjAzMTEwLwYDVQQDEyg0NzM4ZDIwMTUxOGFm
MmMxMDRjZDY0OWM2YTIwM2QzOTU1YTYzMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq4sMyV7BYqHK0Ut0sBQq7tZZJ4xmkBBUb0yWCdyEXugKjZjq
XKp3lHQmzllqLIQGuiu7WJiMz9s+zYB+Y22pTUzjpJUxbTQe6i/u9SErvAS9wts3
yagLTtvDhk0jYfWMpOGXRFs1ayO+ffWUwzPm3YGze5w5BQnCdg5Dpj9wFleZHTvO
CxvD3UFQ9/3OeueFzxo2lFRYpZc/F70wnUt/BccMRqKB5l/H9JOWRFtdhbdTDZTP
scZlNvCwcNFRpxGUvnguSHvX9/t/W/CdHnmKNdagK0FdleStKXoxsnbtSh0DziAS
HcUNf9sz6BDLwRO5C9Lvy6ZUTDy+Pj9aS7EC9QIDAQABo4ICXzCCAlswHQYDVR0O
BBYEFLTycivqH2f1K3XIhawct4CEsinfMB8GA1UdIwQYMBaAFDzc0eVbXZoW/XX/
IxD889OGilrKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzg1NTE5
N2Y1OTBmZjI5OGI1MmFiMzU4ZGEwOGEwZmRiZmU2YTg4My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTMyYzQyNDAtY2VlYS00NzBlLTk2NGMtNzRkOWJj
MWUzODBhLzQ3MzhkMjAxNTE4YWYyYzEwNGNkNjQ5YzZhMjAzZDM5NTVhNjMwMjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMzJjNDI0MC1jZWVhLTQ3MGUtOTY0Yy03NGQ5
YmMxZTM4MGEvNzg1NTE5N2Y1OTBmZjI5OGI1MmFiMzU4ZGEwOGEwZmRiZmU2YTg4
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAjBggrBgEFBQcBBwEB/wQU
MBIwEAQCAAEwCgMDALocAwMAvhswDQYJKoZIhvcNAQELBQADggEBAOjfqlG1KgGK
n1gGixLUM27ob3ypUs2Ya5gUc4BXNNpL4Q01LkCEIYbCNOaNvQM95qfnLR7oNYRL
42YJxbN/0yRFjVTZDZbuttxglcU0ZfzBKUpcz88fdeE1axbVJX3QVw9T2/ujdtkU
GGXzONx+HyerAaOVu0/hr1Vuj/SuvzsAGDkdyjD6Aw6yngmnLSOk/YosvhcInwAV
LQuyzLNALAPufEulPh3n739z7es/Ig/cONLy8Z86NVUXOeHN+vIkOff1UG1oS6IX
6F/WR2G9zJtxB75OZSSNybdQk1y26mvcHvvNgToqVNSVzhBq6Z7nNO9y4HuCp3+7
4WdjvYQ9ZGY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org