Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/24095a5028e5e0e0c6620579924349c990cd5528.roa
File:                     24095a5028e5e0e0c6620579924349c990cd5528.roa (raw, json)
Hash identifier:          zhvILxP5Fn1YGNSWIxR4AuHhO1+V3n94zNh1JUSHUO0=
Subject key identifier:   5A:50:25:E2:CE:E5:28:6F:3E:57:83:16:C8:F9:40:BD:29:E7:40:59
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       0E7529
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/24095a5028e5e0e0c6620579924349c990cd5528.roa
Signing time:             Wed 24 Mar 2021 14:38:32 +0000
ROA not before:           Wed 24 Mar 2021 14:38:31 +0000
ROA not after:            Tue 24 Mar 2026 14:38:31 +0000
asID:                     14420
IP address blocks:        190.214.251.0/24 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947497 (0xe7529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 14:38:31 2021 GMT
            Not After : Mar 24 14:38:31 2026 GMT
        Subject: CN=24095a5028e5e0e0c6620579924349c990cd5528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:67:29:f8:bf:4a:e4:4b:f9:f1:1d:9c:3f:
                    3e:7d:fa:0a:ed:cb:7d:4e:39:c6:52:b4:c6:eb:fb:
                    31:ab:d3:e1:84:95:47:12:30:40:bf:fb:09:07:7a:
                    8c:0e:e5:3a:76:12:af:21:bc:c6:bd:af:86:bf:42:
                    f9:9a:c0:35:4d:57:94:97:ec:3b:36:16:0b:58:e2:
                    ba:59:11:37:7d:ac:dd:c0:8d:5b:9a:94:d5:60:65:
                    69:1b:97:7d:cc:2b:b6:ce:91:4b:d6:14:bf:2b:73:
                    51:a5:6a:67:8a:90:32:4f:59:4c:84:f2:1f:d3:f1:
                    7e:4b:00:93:24:ff:57:80:61:e9:30:c9:de:c1:a8:
                    e3:0a:c4:a2:a9:35:19:c2:cd:20:ad:45:49:6d:ca:
                    15:d0:06:91:87:e3:d0:b9:31:1e:1c:a7:38:f0:2f:
                    91:f3:74:11:07:cc:c9:d2:74:34:05:e7:3a:7f:ed:
                    8f:e8:7b:aa:d4:4a:21:c7:44:6e:10:52:5f:31:85:
                    8d:41:0b:5e:d7:bc:aa:3c:6d:d3:0a:12:9e:45:da:
                    8e:17:f5:46:b3:a0:bb:b1:71:88:37:b9:11:59:48:
                    1b:63:21:1d:7e:26:cb:f6:13:1b:d3:b5:32:52:a4:
                    32:6d:a8:c9:a0:66:5b:87:ec:23:ee:16:ad:b0:2d:
                    b5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:50:25:E2:CE:E5:28:6F:3E:57:83:16:C8:F9:40:BD:29:E7:40:59
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/24095a5028e5e0e0c6620579924349c990cd5528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.214.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:4f:50:b5:cc:a6:eb:70:af:84:1e:42:18:81:b5:c0:1b:9e:
         83:44:46:12:5f:11:ed:5b:05:ed:00:7c:09:c7:0e:7b:53:23:
         af:0b:6d:2e:82:7f:7a:1c:15:0a:80:10:38:ea:ff:e8:03:f2:
         df:4f:b5:67:f6:fd:5d:57:63:f5:24:56:d8:4f:9b:22:6f:bf:
         e5:d9:0c:cf:e6:97:b6:7e:f1:06:bd:14:49:d6:a8:52:06:ef:
         8b:09:5b:c3:14:7b:6e:b4:23:0d:bd:51:5f:88:93:86:50:19:
         bf:ea:a6:9e:7e:2f:c9:24:7f:4f:8b:10:60:68:3d:98:d6:55:
         24:b2:32:89:27:da:92:10:92:eb:31:c4:85:fa:57:c3:70:53:
         ff:c6:76:fb:6f:18:a0:6f:34:7d:4f:da:dc:0a:2e:11:ab:e9:
         10:a9:1a:6c:7b:bb:3e:ab:1f:36:b8:c5:aa:8c:77:68:81:11:
         73:8f:5b:fc:19:c1:a7:fa:ed:0c:f3:59:6c:8c:9b:4c:05:9e:
         93:07:1f:a8:8d:0a:07:c3:81:c3:77:cc:34:cf:f0:c9:ba:5b:
         c6:20:b0:ce:dd:3a:f1:4b:e9:4a:7e:d0:87:82:54:b4:2e:23:
         ed:82:65:cd:ad:cf:be:da:e9:24:30:42:d8:ef:c5:39:23:44:
         a1:cf:01:29
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDnUpMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
NTllMWUzMzE3NzA0NTc1ZjJjMGI3NTBlZTczYjE2NmEzOWNkMzcwHhcNMjEwMzI0
MTQzODMxWhcNMjYwMzI0MTQzODMxWjAzMTEwLwYDVQQDEygyNDA5NWE1MDI4ZTVl
MGUwYzY2MjA1Nzk5MjQzNDljOTkwY2Q1NTI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAupxnKfi/SuRL+fEdnD8+ffoK7ct9TjnGUrTG6/sxq9PhhJVH
EjBAv/sJB3qMDuU6dhKvIbzGva+Gv0L5msA1TVeUl+w7NhYLWOK6WRE3fazdwI1b
mpTVYGVpG5d9zCu2zpFL1hS/K3NRpWpnipAyT1lMhPIf0/F+SwCTJP9XgGHpMMne
wajjCsSiqTUZws0grUVJbcoV0AaRh+PQuTEeHKc48C+R83QRB8zJ0nQ0Bec6f+2P
6Huq1Eohx0RuEFJfMYWNQQte17yqPG3TChKeRdqOF/VGs6C7sXGIN7kRWUgbYyEd
fibL9hMb07UyUqQybajJoGZbh+wj7hatsC21TQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFpQJeLO5ShvPleDFsj5QL0p50BZMB8GA1UdIwQYMBaAFIDwxydPgiTR6Xbz
gObvMs8Q+J3TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTA1OWUx
ZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2QzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWNhNzEzZjUtNmNhYy00ODZlLWEwMTYtYTNlOGIz
MWJmMDI5LzI0MDk1YTUwMjhlNWUwZTBjNjYyMDU3OTkyNDM0OWM5OTBjZDU1Mjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hY2E3MTNmNS02Y2FjLTQ4NmUtYTAxNi1hM2U4
YjMxYmYwMjkvMTA1OWUxZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2Qz
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7W+zANBgkqhkiG9w0BAQsFAAOCAQEAT09Qtcym63CvhB5C
GIG1wBueg0RGEl8R7VsF7QB8CccOe1MjrwttLoJ/ehwVCoAQOOr/6APy30+1Z/b9
XVdj9SRW2E+bIm+/5dkMz+aXtn7xBr0USdaoUgbviwlbwxR7brQjDb1RX4iThlAZ
v+qmnn4vySR/T4sQYGg9mNZVJLIyiSfakhCS6zHEhfpXw3BT/8Z2+28YoG80fU/a
3AouEavpEKkabHu7PqsfNrjFqox3aIERc49b/BnBp/rtDPNZbIybTAWekwcfqI0K
B8OBw3fMNM/wybpbxiCwzt068UvpSn7Qh4JUtC4j7YJlza3PvtrpJDBC2O/FOSNE
oc8BKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org