Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7a8563f-81cf-40ee-b162-3e1c9dd190a0/5dcbec218da54a4daf6b386e072c8631eeb8d0bc.roa
File:                     5dcbec218da54a4daf6b386e072c8631eeb8d0bc.roa (raw, json)
Hash identifier:          ZBLbJdPSH9zSma4j5oVFn/GIDWsKQ8r6Bhecnq07k3A=
Subject key identifier:   AB:AD:16:75:13:5E:C6:C4:7E:10:36:EC:CE:96:50:EB:E9:55:D3:4B
Certificate issuer:       /CN=e089670a2a007de8eba89876e6af810cadd9be98
Certificate serial:       0FED
Authority key identifier: A1:DB:9C:09:1A:0C:EF:0A:02:F4:DF:0B:EE:20:32:B6:65:F1:4B:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e089670a2a007de8eba89876e6af810cadd9be98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7a8563f-81cf-40ee-b162-3e1c9dd190a0/5dcbec218da54a4daf6b386e072c8631eeb8d0bc.roa
Signing time:             Thu 21 Jul 2022 18:04:51 +0000
ROA not before:           Thu 21 Jul 2022 03:00:00 +0000
ROA not after:            Sun 21 Jul 2024 03:00:00 +0000
asID:                     52292
IP address blocks:        190.211.152.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4077 (0xfed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e089670a2a007de8eba89876e6af810cadd9be98
        Validity
            Not Before: Jul 21 03:00:00 2022 GMT
            Not After : Jul 21 03:00:00 2024 GMT
        Subject: CN=5dcbec218da54a4daf6b386e072c8631eeb8d0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:45:18:86:1c:eb:f9:95:2a:12:16:6e:a5:0d:
                    06:7f:3d:2a:d9:f6:41:d4:23:43:67:cb:1c:8c:11:
                    96:89:0c:f4:93:32:4f:4c:9b:b3:2f:be:78:27:9e:
                    94:20:75:c2:9f:7b:32:9f:82:4d:df:c3:fc:bd:97:
                    5c:d9:1c:80:1d:44:7f:20:36:9f:75:b0:1a:94:e5:
                    8f:9c:d4:e0:15:5a:a8:40:51:3d:c8:de:cd:cf:72:
                    ab:cc:97:04:30:23:6b:54:74:77:18:49:39:89:8e:
                    0a:c0:7e:34:09:22:9c:28:58:80:a0:3c:6c:61:51:
                    23:94:26:52:ed:7d:6e:12:56:4b:27:9c:67:b4:f7:
                    a0:47:e2:12:46:2c:8b:85:20:ab:fb:4a:be:5b:57:
                    d0:53:52:d7:8a:1a:e6:99:42:d0:5d:f6:3f:be:60:
                    21:2b:65:c5:76:87:56:22:7f:af:d4:bf:08:d9:32:
                    76:f5:05:0d:4d:92:ff:08:8a:47:ae:0b:69:fe:cd:
                    ec:f5:75:ae:16:69:6b:c0:97:86:69:e2:94:7d:8e:
                    d1:9a:4b:ac:2d:11:11:ce:e8:66:50:72:83:3b:6c:
                    a3:d8:53:fc:36:f1:49:0d:50:22:31:10:57:5b:6f:
                    3e:b3:00:fb:6c:50:53:43:ac:3a:5f:8a:f0:e9:37:
                    16:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AD:16:75:13:5E:C6:C4:7E:10:36:EC:CE:96:50:EB:E9:55:D3:4B
            X509v3 Authority Key Identifier:
                keyid:A1:DB:9C:09:1A:0C:EF:0A:02:F4:DF:0B:EE:20:32:B6:65:F1:4B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e089670a2a007de8eba89876e6af810cadd9be98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7a8563f-81cf-40ee-b162-3e1c9dd190a0/5dcbec218da54a4daf6b386e072c8631eeb8d0bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7a8563f-81cf-40ee-b162-3e1c9dd190a0/e089670a2a007de8eba89876e6af810cadd9be98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         28:d3:ee:d9:87:a3:95:7b:ea:fc:d8:93:7d:6e:e6:34:67:c9:
         c1:b0:b3:cf:d8:2a:37:c1:05:c1:39:10:18:41:1c:de:a1:f2:
         6b:a1:e3:71:b8:55:73:df:c6:0e:d6:ae:59:a8:67:54:7f:4c:
         64:4d:36:e1:df:50:fa:41:02:74:27:f0:66:76:45:20:44:8e:
         6c:f8:21:17:79:d3:2d:b3:b2:60:df:dd:ee:37:d2:88:83:ae:
         65:a6:f7:8c:d7:58:76:02:40:8c:89:1a:5a:b7:8b:27:6e:14:
         7a:2c:66:bf:e6:2c:2e:52:11:b8:40:21:f8:2a:99:bf:46:75:
         54:00:c9:43:6e:77:d1:71:9c:f1:c2:46:97:e3:c1:be:ab:bc:
         7a:54:fa:27:db:ed:69:33:ab:60:50:4f:92:eb:c8:0f:28:1e:
         79:cc:31:d1:1e:59:13:7c:56:36:c2:6e:8a:71:a3:cc:99:14:
         b9:ce:08:c1:5a:10:7d:dd:11:28:56:49:f2:8e:88:23:24:9b:
         a5:d3:36:af:98:83:21:3d:3c:f6:70:46:92:27:2e:c0:50:7c:
         75:19:4b:1b:96:18:41:8c:77:dd:66:40:0c:ed:a5:80:89:38:
         eb:3a:16:d0:98:52:26:9e:b0:77:f3:40:b0:f3:7a:d5:35:45:
         f4:02:f5:4a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICD+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoZTA4
OTY3MGEyYTAwN2RlOGViYTg5ODc2ZTZhZjgxMGNhZGQ5YmU5ODAeFw0yMjA3MjEw
MzAwMDBaFw0yNDA3MjEwMzAwMDBaMDMxMTAvBgNVBAMTKDVkY2JlYzIxOGRhNTRh
NGRhZjZiMzg2ZTA3MmM4NjMxZWViOGQwYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCMRRiGHOv5lSoSFm6lDQZ/PSrZ9kHUI0NnyxyMEZaJDPSTMk9M
m7MvvngnnpQgdcKfezKfgk3fw/y9l1zZHIAdRH8gNp91sBqU5Y+c1OAVWqhAUT3I
3s3PcqvMlwQwI2tUdHcYSTmJjgrAfjQJIpwoWICgPGxhUSOUJlLtfW4SVksnnGe0
96BH4hJGLIuFIKv7Sr5bV9BTUteKGuaZQtBd9j++YCErZcV2h1Yif6/UvwjZMnb1
BQ1Nkv8IikeuC2n+zez1da4WaWvAl4Zp4pR9jtGaS6wtERHO6GZQcoM7bKPYU/w2
8UkNUCIxEFdbbz6zAPtsUFNDrDpfivDpNxbBAgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUq60WdRNexsR+EDbszpZQ6+lV00swHwYDVR0jBBgwFoAUoducCRoM7woC9N8L
7iAytmXxS0gwDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS9lMDg5Njcw
YTJhMDA3ZGU4ZWJhODk4NzZlNmFmODEwY2FkZDliZTk4LmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy9hN2E4NTYzZi04MWNmLTQwZWUtYjE2Mi0zZTFjOWRk
MTkwYTAvNWRjYmVjMjE4ZGE1NGE0ZGFmNmIzODZlMDcyYzg2MzFlZWI4ZDBiYy5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljL2E3YTg1NjNmLTgxY2YtNDBlZS1iMTYyLTNlMWM5
ZGQxOTBhMC9lMDg5NjcwYTJhMDA3ZGU4ZWJhODk4NzZlNmFmODEwY2FkZDliZTk4
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQDvtOYMA0GCSqGSIb3DQEBCwUAA4IBAQAo0+7Zh6OVe+r82JN9
buY0Z8nBsLPP2Co3wQXBORAYQRzeofJroeNxuFVz38YO1q5ZqGdUf0xkTTbh31D6
QQJ0J/BmdkUgRI5s+CEXedMts7Jg393uN9KIg65lpveM11h2AkCMiRpat4snbhR6
LGa/5iwuUhG4QCH4Kpm/RnVUAMlDbnfRcZzxwkaX48G+q7x6VPon2+1pM6tgUE+S
68gPKB55zDHRHlkTfFY2wm6KcaPMmRS5zgjBWhB93REoVknyjogjJJul0zavmIMh
PTz2cEaSJy7AUHx1GUsblhhBjHfdZkAM7aWAiTjrOhbQmFImnrB380Cw83rVNUX0
AvVK
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org