Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/41522fa7bc678ca0db721f95b8ac970eb29f52cb.roa
File:                     41522fa7bc678ca0db721f95b8ac970eb29f52cb.roa (raw, json)
Hash identifier:          gcb78O/SP0zVl0K03RNygrFiMErSm2HnPBG5cFFRzHc=
Subject key identifier:   79:20:5D:10:34:F6:9C:F4:B1:4E:ED:33:91:3B:6B:56:EF:1E:DD:FD
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1FAEA5
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/41522fa7bc678ca0db721f95b8ac970eb29f52cb.roa
Signing time:             Thu 19 Jan 2023 10:58:51 +0000
ROA not before:           Wed 05 May 2021 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        190.90.0.0/21 maxlen: 21
                          190.90.8.0/21 maxlen: 21
                          190.90.16.0/21 maxlen: 21
                          190.90.24.0/24 maxlen: 24
                          190.90.28.0/22 maxlen: 24
                          190.90.33.0/24 maxlen: 24
                          190.90.34.0/24 maxlen: 24
                          190.90.36.0/22 maxlen: 24
                          190.90.208.0/21 maxlen: 24
                          190.90.252.0/24 maxlen: 24
                          190.90.240.0/24 maxlen: 24
                          190.90.76.0/24 maxlen: 24
                          190.90.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2076325 (0x1faea5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: May  5 03:00:00 2021 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=41522fa7bc678ca0db721f95b8ac970eb29f52cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:f9:64:b6:a1:11:ba:ff:1c:28:12:86:c1:
                    19:4e:c4:e4:5d:be:3c:ea:60:c3:cd:ef:95:6c:2d:
                    92:a1:9b:16:cd:5c:98:8c:f5:51:13:e7:db:91:ce:
                    9c:db:d8:39:b0:cc:20:7c:60:75:17:b3:4a:cb:e8:
                    2a:21:78:1f:d9:87:d3:32:8f:b2:e9:52:5e:c6:1b:
                    e3:aa:d5:60:05:aa:30:a5:95:15:20:42:d2:0f:0b:
                    f6:ea:d8:06:cb:e8:f7:7c:8e:5d:3a:3d:fb:cb:d3:
                    b4:63:b5:73:9e:af:32:20:e8:dd:aa:07:50:e4:85:
                    93:8b:a8:f1:8c:1e:2f:65:2d:c1:9d:7e:af:ab:43:
                    19:67:76:b3:e4:64:ad:bb:6c:7f:02:c7:bd:39:d8:
                    ef:fb:af:ad:cb:26:49:de:01:f8:dc:8c:50:20:72:
                    c3:1e:38:6f:71:4b:be:15:56:37:7f:29:b3:de:d0:
                    03:69:d6:0a:3c:8a:a4:11:1b:b7:a9:61:1c:0e:2f:
                    d2:a8:fd:03:68:cf:94:c3:09:52:4d:e4:41:dc:23:
                    70:90:90:77:16:db:f8:86:d7:1d:d8:ed:86:71:5e:
                    aa:c2:a4:d5:62:0f:d7:21:8a:df:81:ec:17:de:4b:
                    43:56:7a:8e:ee:7d:cc:3a:02:75:da:74:17:49:b4:
                    33:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:20:5D:10:34:F6:9C:F4:B1:4E:ED:33:91:3B:6B:56:EF:1E:DD:FD
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/41522fa7bc678ca0db721f95b8ac970eb29f52cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.0.0-190.90.24.255
                  190.90.28.0/22
                  190.90.33.0-190.90.34.255
                  190.90.36.0/22
                  190.90.76.0/23
                  190.90.208.0/21
                  190.90.240.0/24
                  190.90.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:a7:ec:be:c4:9b:b7:7d:74:04:1d:9d:85:4e:ec:6a:68:ef:
         b8:2f:1d:ab:60:f7:a5:fc:bd:76:a1:e5:dc:d4:60:17:b4:6b:
         ae:7f:9d:40:59:41:71:e0:8b:5d:94:4c:95:e5:4b:8d:02:37:
         b3:b1:92:bb:6a:ee:cc:36:fb:cd:8e:6b:7e:a1:ce:37:f8:f5:
         50:18:87:07:65:08:1f:a7:10:44:ac:24:90:2b:13:83:28:b5:
         dd:07:91:d7:e2:a9:10:1a:c7:27:e8:66:2a:62:e0:56:6b:07:
         72:b7:4e:81:c3:28:1f:fa:e0:0f:b8:12:a5:05:b2:09:d5:84:
         6f:6e:d2:13:e7:f4:b7:bc:3b:73:b4:64:5c:4c:6c:53:c4:a2:
         0c:c6:42:76:19:be:f7:58:cd:47:e4:b6:1b:b9:d0:b1:28:50:
         b1:a1:84:94:20:b8:89:14:f4:a7:43:a2:94:7a:40:40:c3:be:
         06:df:4d:9c:10:16:94:5d:04:e0:2e:5a:70:5b:b8:1c:da:74:
         77:38:bb:43:63:b7:61:1f:f0:94:ef:e6:00:50:fa:92:05:6d:
         03:0b:23:23:51:3d:54:4a:8b:7d:25:1a:43:b8:8f:7b:7d:4d:
         26:9e:c0:b9:07:27:ca:a5:9d:53:70:89:86:81:0d:6b:8a:1c:
         41:05:3a:1f
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIDH66lMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwNTA1
MDMwMDAwWhcNMjMwNTExMDMwMDAwWjAzMTEwLwYDVQQDEyg0MTUyMmZhN2JjNjc4
Y2EwZGI3MjFmOTViOGFjOTcwZWIyOWY1MmNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlYz5ZLahEbr/HCgShsEZTsTkXb486mDDze+VbC2SoZsWzVyY
jPVRE+fbkc6c29g5sMwgfGB1F7NKy+gqIXgf2YfTMo+y6VJexhvjqtVgBaowpZUV
IELSDwv26tgGy+j3fI5dOj37y9O0Y7Vznq8yIOjdqgdQ5IWTi6jxjB4vZS3BnX6v
q0MZZ3az5GStu2x/Ase9Odjv+6+tyyZJ3gH43IxQIHLDHjhvcUu+FVY3fymz3tAD
adYKPIqkERu3qWEcDi/SqP0DaM+UwwlSTeRB3CNwkJB3Ftv4htcd2O2GcV6qwqTV
Yg/XIYrfgewX3ktDVnqO7n3MOgJ12nQXSbQzpwIDAQABo4IClDCCApAwHQYDVR0O
BBYEFHkgXRA09pz0sU7tM5E7a1bvHt39MB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5LzQxNTIyZmE3YmM2NzhjYTBkYjcyMWY5NWI4YWM5NzBlYjI5ZjUyY2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBYBggrBgEFBQcBBwEB/wRJ
MEcwRQQCAAEwPzALAwMBvloDBAC+WhgDBAK+WhwwDAMEAL5aIQMEAL5aIgMEAr5a
JAMEAb5aTAMEA75a0AMEAL5a8AMEAL5a/DANBgkqhkiG9w0BAQsFAAOCAQEAXafs
vsSbt310BB2dhU7samjvuC8dq2D3pfy9dqHl3NRgF7Rrrn+dQFlBceCLXZRMleVL
jQI3s7GSu2ruzDb7zY5rfqHON/j1UBiHB2UIH6cQRKwkkCsTgyi13QeR1+KpEBrH
J+hmKmLgVmsHcrdOgcMoH/rgD7gSpQWyCdWEb27SE+f0t7w7c7RkXExsU8SiDMZC
dhm+91jNR+S2G7nQsShQsaGElCC4iRT0p0OilHpAQMO+Bt9NnBAWlF0E4C5acFu4
HNp0dzi7Q2O3YR/wlO/mAFD6kgVtAwsjI1E9VEqLfSUaQ7iPe31NJp7AuQcnyqWd
U3CJhoENa4ocQQU6Hw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org