Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a428779c-c004-417f-bd63-1d8b23515880/3288d4a69f81402347b10d7566078ebb1b2166aa.roa
File:                     3288d4a69f81402347b10d7566078ebb1b2166aa.roa (raw, json)
Hash identifier:          t4L4SH2en/89dPlqePQ4Jr5d49S3m1uVMTIZnyvtUlM=
Subject key identifier:   72:36:AC:81:68:B3:40:7D:40:DA:21:CA:74:B7:C8:DD:23:09:7A:20
Certificate issuer:       /CN=8802cc5f8fc5702399f516d9fa511059fb1842fd
Certificate serial:       1F5C7D
Authority key identifier: FE:42:6C:A1:E0:06:18:BF:4C:54:CD:71:B0:76:39:1C:7A:E6:FE:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8802cc5f8fc5702399f516d9fa511059fb1842fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a428779c-c004-417f-bd63-1d8b23515880/3288d4a69f81402347b10d7566078ebb1b2166aa.roa
Signing time:             Tue 23 May 2023 19:03:05 +0000
ROA not before:           Mon 22 May 2023 19:03:04 +0000
ROA not after:            Tue 23 May 2028 19:03:04 +0000
asID:                     64200
IP address blocks:        190.99.80.0/24 maxlen: 24
                          190.99.81.0/24 maxlen: 24
                          190.99.83.0/24 maxlen: 24
                          190.99.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055293 (0x1f5c7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8802cc5f8fc5702399f516d9fa511059fb1842fd
        Validity
            Not Before: May 22 19:03:04 2023 GMT
            Not After : May 23 19:03:04 2028 GMT
        Subject: CN=3288d4a69f81402347b10d7566078ebb1b2166aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7b:85:e6:08:f5:36:07:c4:94:50:82:70:bc:
                    e2:aa:ea:1a:e6:b3:ad:5c:6c:04:4e:19:16:34:5e:
                    74:27:80:81:9a:57:23:03:02:01:6b:d8:89:28:2c:
                    be:d5:61:75:d0:b4:17:1a:38:8e:36:0c:41:4f:ee:
                    d3:59:a8:db:93:db:c1:44:76:7c:12:4e:d6:f9:13:
                    dd:49:41:e9:7a:4c:6c:56:3e:9c:8e:45:cc:52:46:
                    9f:dc:29:b1:65:a4:e1:8d:73:d3:11:ab:f4:f7:65:
                    f1:ec:46:94:e5:68:44:87:69:c3:1e:86:48:d7:d5:
                    d1:80:2d:22:1e:bb:c4:b6:72:1a:1b:ef:34:34:4d:
                    ef:e1:a7:0d:f4:1a:9a:78:1d:bd:7f:07:29:2a:da:
                    7a:dc:3b:d5:8b:cc:25:d3:26:4f:8d:ba:17:e4:40:
                    71:5a:ab:b3:f4:ef:56:af:fc:ee:5f:5d:74:f3:d5:
                    2a:31:37:6d:2f:1e:56:42:ee:04:a4:c7:69:87:9e:
                    c5:8f:f6:6d:4a:b5:f2:4f:f1:bb:73:3a:f3:68:63:
                    3b:71:6d:07:9f:8b:e9:91:d3:5c:d6:d6:0e:e6:25:
                    63:bf:8e:70:eb:df:06:e7:dd:98:a2:92:b7:76:cd:
                    37:ce:d0:bf:59:28:09:2a:eb:84:c0:e6:fa:bc:ec:
                    99:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:36:AC:81:68:B3:40:7D:40:DA:21:CA:74:B7:C8:DD:23:09:7A:20
            X509v3 Authority Key Identifier:
                keyid:FE:42:6C:A1:E0:06:18:BF:4C:54:CD:71:B0:76:39:1C:7A:E6:FE:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8802cc5f8fc5702399f516d9fa511059fb1842fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a428779c-c004-417f-bd63-1d8b23515880/3288d4a69f81402347b10d7566078ebb1b2166aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a428779c-c004-417f-bd63-1d8b23515880/8802cc5f8fc5702399f516d9fa511059fb1842fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.80.0/23
                  190.99.83.0-190.99.87.255

    Signature Algorithm: sha256WithRSAEncryption
         75:12:b4:eb:4a:d2:af:65:46:a1:ef:6a:cf:01:6a:e4:01:84:
         c9:0f:79:5e:4c:5b:6f:b2:8e:60:69:4f:6b:d7:7d:b3:be:c4:
         fa:ef:99:00:c4:7c:36:9b:87:6f:65:4d:d4:f6:3c:fc:d9:bf:
         91:97:8c:a3:1a:11:23:bd:fa:6e:59:db:1d:27:6b:d3:10:85:
         45:5b:62:26:1e:0f:c3:f6:32:95:1d:1c:54:a1:12:fd:d4:1b:
         07:fd:38:7b:5b:23:84:8e:ec:4f:39:37:04:a0:cf:04:fd:71:
         04:0a:aa:e1:b6:2b:bf:c6:82:a9:a0:63:a5:6b:ef:e8:c3:95:
         5b:26:2f:2c:5a:d4:15:e9:fc:10:07:20:ef:69:cc:cf:29:c5:
         30:16:1e:6a:1e:0f:7f:56:4b:ca:27:bd:1d:fa:e0:93:c1:d7:
         fa:bc:34:a8:b7:a9:59:61:ee:75:80:35:8b:ba:bb:8b:90:f9:
         4d:dd:f9:7c:00:da:c7:32:8d:be:14:5c:6c:62:97:1e:2b:a4:
         5e:ec:c6:76:7e:f4:8c:74:e9:c6:95:f6:bf:5b:f7:2c:c9:bf:
         32:37:0a:a2:2f:dd:e3:81:0e:e8:3f:78:20:ab:aa:fa:34:67:
         fe:93:c0:70:8a:0e:c0:0c:a7:1e:45:c0:bf:d6:c4:4e:2f:ee:
         55:df:39:ca
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDH1x9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
MDJjYzVmOGZjNTcwMjM5OWY1MTZkOWZhNTExMDU5ZmIxODQyZmQwHhcNMjMwNTIy
MTkwMzA0WhcNMjgwNTIzMTkwMzA0WjAzMTEwLwYDVQQDEygzMjg4ZDRhNjlmODE0
MDIzNDdiMTBkNzU2NjA3OGViYjFiMjE2NmFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi3uF5gj1NgfElFCCcLziquoa5rOtXGwEThkWNF50J4CBmlcj
AwIBa9iJKCy+1WF10LQXGjiONgxBT+7TWajbk9vBRHZ8Ek7W+RPdSUHpekxsVj6c
jkXMUkaf3CmxZaThjXPTEav092Xx7EaU5WhEh2nDHoZI19XRgC0iHrvEtnIaG+80
NE3v4acN9BqaeB29fwcpKtp63DvVi8wl0yZPjboX5EBxWquz9O9Wr/zuX11089Uq
MTdtLx5WQu4EpMdph57Fj/ZtSrXyT/G7czrzaGM7cW0Hn4vpkdNc1tYO5iVjv45w
698G592YopK3ds03ztC/WSgJKuuEwOb6vOyZYQIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFHI2rIFos0B9QNohynS3yN0jCXogMB8GA1UdIwQYMBaAFP5CbKHgBhi/TFTN
cbB2ORx65v7vMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODgwMmNj
NWY4ZmM1NzAyMzk5ZjUxNmQ5ZmE1MTEwNTlmYjE4NDJmZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTQyODc3OWMtYzAwNC00MTdmLWJkNjMtMWQ4YjIz
NTE1ODgwLzMyODhkNGE2OWY4MTQwMjM0N2IxMGQ3NTY2MDc4ZWJiMWIyMTY2YWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNDI4Nzc5Yy1jMDA0LTQxN2YtYmQ2My0xZDhi
MjM1MTU4ODAvODgwMmNjNWY4ZmM1NzAyMzk5ZjUxNmQ5ZmE1MTEwNTlmYjE4NDJm
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFAMEAb5jUDAMAwQAvmNTAwQDvmNQMA0GCSqGSIb3DQEBCwUAA4IB
AQB1ErTrStKvZUah72rPAWrkAYTJD3leTFtvso5gaU9r132zvsT675kAxHw2m4dv
ZU3U9jz82b+Rl4yjGhEjvfpuWdsdJ2vTEIVFW2ImHg/D9jKVHRxUoRL91BsH/Th7
WyOEjuxPOTcEoM8E/XEECqrhtiu/xoKpoGOla+/ow5VbJi8sWtQV6fwQByDvaczP
KcUwFh5qHg9/VkvKJ70d+uCTwdf6vDSot6lZYe51gDWLuruLkPlN3fl8ANrHMo2+
FFxsYpceK6Re7MZ2fvSMdOnGlfa/W/csyb8yNwqiL93jgQ7oP3ggq6r6NGf+k8Bw
ig7ADKceRcC/1sROL+5V3znK
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org