Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/544f652c442b0d26c2dd901e373d1225ce56277c.roa
File:                     544f652c442b0d26c2dd901e373d1225ce56277c.roa (raw, json)
Hash identifier:          F27t/uiOjt6pR1fG3jVVhTc2a4m7vrydPgs1zeD80ig=
Subject key identifier:   87:64:06:40:42:02:E8:49:F6:97:CD:BF:66:99:89:85:36:0D:50:8F
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1F54F6
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/544f652c442b0d26c2dd901e373d1225ce56277c.roa
Signing time:             Tue 17 Jan 2023 22:58:16 +0000
ROA not before:           Sat 20 Mar 2021 14:35:22 +0000
ROA not after:            Tue 24 Mar 2026 14:35:22 +0000
asID:                     18678
IP address blocks:        190.90.0.0/16 maxlen: 16
                          179.1.72.0/24 maxlen: 24
                          2800:310::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053366 (0x1f54f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 20 14:35:22 2021 GMT
            Not After : Mar 24 14:35:22 2026 GMT
        Subject: CN=544f652c442b0d26c2dd901e373d1225ce56277c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:69:59:98:9a:45:11:7c:0a:35:27:77:56:
                    ec:c4:55:18:47:55:a8:8c:34:11:9f:c6:b1:36:00:
                    40:65:7a:06:20:5b:64:48:e1:0d:e3:cd:81:c4:60:
                    5b:63:04:4b:75:0f:15:5d:5e:36:5c:05:ae:d4:21:
                    0f:b4:64:3f:28:76:0e:3d:44:a2:0d:e0:7f:7b:cb:
                    ab:6d:de:45:f3:a7:92:20:fe:f2:b5:40:a5:f1:e6:
                    7d:f1:50:96:e5:19:e4:93:4c:94:f2:a9:ed:41:5c:
                    72:1a:e2:8d:77:a1:70:5b:94:7b:48:7a:0b:00:a5:
                    96:00:65:29:2f:b7:bd:13:b2:68:7e:3f:0f:26:ac:
                    4c:75:ca:90:80:e8:f6:b7:85:b3:91:90:ec:ed:ae:
                    c8:da:a5:a1:9e:3e:4a:b6:75:06:b1:85:c5:68:52:
                    0a:9b:cc:de:f4:3c:3c:b5:8d:8e:53:0e:ba:28:ba:
                    9f:92:01:1f:5f:dc:90:14:fc:58:94:3b:18:c6:6f:
                    b4:c2:2e:a3:c6:0d:aa:32:6e:89:f8:6d:c0:98:06:
                    73:ea:3e:6a:c1:c9:01:ed:31:4a:7d:99:a1:ae:21:
                    9f:fa:ec:da:1c:0e:b8:d0:d6:d0:2d:6a:1d:8e:c0:
                    02:1a:87:e0:15:90:8c:fa:cc:3b:7b:ee:d5:3a:54:
                    ca:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:64:06:40:42:02:E8:49:F6:97:CD:BF:66:99:89:85:36:0D:50:8F
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/544f652c442b0d26c2dd901e373d1225ce56277c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.72.0/24
                  190.90.0.0/16
                IPv6:
                  2800:310::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:a7:c7:8a:fc:7f:54:94:68:c8:6a:4e:d6:42:80:d4:02:da:
         e2:c9:26:82:88:13:d7:c2:f0:46:b9:3b:25:f5:af:ce:14:ea:
         2c:74:6b:ba:a8:bb:5a:0e:7e:5e:92:29:b2:01:1f:ee:34:35:
         9c:ed:0f:1d:36:92:8f:0f:64:98:52:ac:01:85:a0:b6:16:22:
         65:a3:17:1e:61:77:11:0c:dc:5b:17:5f:8e:fe:ca:7c:2b:a2:
         79:3c:68:56:a4:a2:0d:d0:03:6d:a4:e3:5a:10:a6:27:72:90:
         12:28:13:0b:50:d8:5c:4e:78:08:c7:bd:ee:27:03:87:08:f1:
         9b:7d:3d:e6:5d:12:e7:7f:ac:d2:29:f7:45:18:2e:1a:a5:ae:
         6d:31:df:be:85:05:63:e5:aa:7a:e6:22:d3:ea:95:29:46:3c:
         1e:78:ba:73:1e:c5:c1:37:a8:94:ff:3e:2d:36:20:76:62:e6:
         1b:37:a0:b3:12:2a:38:d9:0e:0c:9f:43:56:62:c6:42:4b:d7:
         48:95:30:76:5f:a2:ad:8c:11:a4:53:55:c3:26:7c:41:93:ad:
         7e:ec:02:ef:5f:bf:73:e7:c7:72:c6:62:dd:f7:e2:5f:99:a7:
         c0:ca:f2:03:80:a7:d7:0a:3d:00:d1:17:2a:0f:73:11:21:47:
         03:ba:28:08
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIDH1T2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjEwMzIw
MTQzNTIyWhcNMjYwMzI0MTQzNTIyWjAzMTEwLwYDVQQDEyg1NDRmNjUyYzQ0MmIw
ZDI2YzJkZDkwMWUzNzNkMTIyNWNlNTYyNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuAdpWZiaRRF8CjUnd1bsxFUYR1WojDQRn8axNgBAZXoGIFtk
SOEN482BxGBbYwRLdQ8VXV42XAWu1CEPtGQ/KHYOPUSiDeB/e8urbd5F86eSIP7y
tUCl8eZ98VCW5Rnkk0yU8qntQVxyGuKNd6FwW5R7SHoLAKWWAGUpL7e9E7Jofj8P
JqxMdcqQgOj2t4WzkZDs7a7I2qWhnj5KtnUGsYXFaFIKm8ze9Dw8tY2OUw66KLqf
kgEfX9yQFPxYlDsYxm+0wi6jxg2qMm6J+G3AmAZz6j5qwckB7TFKfZmhriGf+uza
HA640NbQLWodjsACGofgFZCM+sw7e+7VOlTKaQIDAQABo4ICbzCCAmswHQYDVR0O
BBYEFIdkBkBCAuhJ9pfNv2aZiYU2DVCPMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5LzU0NGY2NTJjNDQyYjBkMjZjMmRkOTAxZTM3M2QxMjI1Y2U1NjI3N2Mu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQk
MCIwEQQCAAEwCwMEALMBSAMDAL5aMA0EAgACMAcDBQAoAAMQMA0GCSqGSIb3DQEB
CwUAA4IBAQAjp8eK/H9UlGjIak7WQoDUAtriySaCiBPXwvBGuTsl9a/OFOosdGu6
qLtaDn5ekimyAR/uNDWc7Q8dNpKPD2SYUqwBhaC2FiJloxceYXcRDNxbF1+O/sp8
K6J5PGhWpKIN0ANtpONaEKYncpASKBMLUNhcTngIx73uJwOHCPGbfT3mXRLnf6zS
KfdFGC4apa5tMd++hQVj5ap65iLT6pUpRjweeLpzHsXBN6iU/z4tNiB2YuYbN6Cz
Eio42Q4Mn0NWYsZCS9dIlTB2X6KtjBGkU1XDJnxBk61+7ALvX79z58dyxmLd9+Jf
mafAyvIDgKfXCj0A0RcqD3MRIUcDuigI
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org