Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/38e4f4398ffda1fa8ac219e06852d29ddcd292a5.roa
File:                     38e4f4398ffda1fa8ac219e06852d29ddcd292a5.roa (raw, json)
Hash identifier:          hRJOEzsjpCij3PNaldfYrKAlDOD9yF/E6ni0qRjuUyc=
Subject key identifier:   BB:16:03:A4:BA:27:FD:C4:BB:40:07:F0:89:91:38:F0:53:01:FA:24
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       0DBE3C
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/38e4f4398ffda1fa8ac219e06852d29ddcd292a5.roa
Signing time:             Wed 24 Mar 2021 14:35:27 +0000
ROA not before:           Wed 24 Mar 2021 14:35:25 +0000
ROA not after:            Tue 24 Mar 2026 14:35:25 +0000
asID:                     262216
IP address blocks:        190.60.175.0/24 maxlen: 24
                          200.80.8.0/24 maxlen: 24
                          200.80.9.0/24 maxlen: 24
                          200.80.22.0/24 maxlen: 24
                          200.80.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900668 (0xdbe3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Mar 24 14:35:25 2021 GMT
            Not After : Mar 24 14:35:25 2026 GMT
        Subject: CN=38e4f4398ffda1fa8ac219e06852d29ddcd292a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4c:09:a3:23:54:4d:a9:99:27:50:4a:c3:72:
                    94:b1:5c:35:62:8a:7e:08:09:74:53:dc:20:2c:43:
                    ca:60:8f:ac:d5:0c:04:e0:91:6e:8d:5b:57:22:b1:
                    be:2f:65:09:52:b3:8d:15:dd:74:9f:03:c4:0c:ab:
                    00:c7:33:bf:65:93:c3:67:1b:a8:04:2a:e2:48:54:
                    90:60:4e:7a:41:56:07:81:0f:96:3f:d6:d4:83:e2:
                    5c:ef:14:17:40:38:e8:00:87:d6:d9:1d:35:86:68:
                    b1:d1:4b:35:a3:60:d4:e1:81:33:87:ca:ef:03:cb:
                    a3:62:c6:e3:4d:56:03:81:10:13:ba:65:2d:35:75:
                    9c:ed:5d:c3:e5:5b:87:f1:02:7a:a3:d2:f9:6d:b6:
                    57:10:80:ed:21:ce:69:2c:c2:87:03:b1:19:a2:b5:
                    d8:02:c3:74:2a:f5:6a:92:a1:4e:9a:4a:bb:7b:55:
                    d2:84:04:43:97:2a:9f:7e:c4:3d:87:6b:79:1e:c0:
                    fe:66:0a:d3:93:f9:fd:0a:2d:d7:f6:31:2a:83:66:
                    02:d8:a5:7c:20:62:a6:bb:e0:ac:9b:ac:7e:ae:63:
                    d7:21:d4:eb:bb:26:f9:87:0f:db:bd:5b:77:1b:2a:
                    c3:4e:50:7c:80:eb:a2:b1:5b:30:38:f8:e3:e7:01:
                    c4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:16:03:A4:BA:27:FD:C4:BB:40:07:F0:89:91:38:F0:53:01:FA:24
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/38e4f4398ffda1fa8ac219e06852d29ddcd292a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.175.0/24
                  200.80.8.0/23
                  200.80.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:4d:74:1c:c6:b5:b4:7c:e8:d5:07:2f:2c:07:77:8a:24:6f:
         4a:76:4d:1b:d7:18:c1:03:94:c2:f0:d9:18:39:a1:3d:98:f6:
         06:98:a8:81:3c:ef:ad:5f:f8:20:ae:3e:5a:b1:48:2e:0c:74:
         32:44:18:76:2a:34:05:9f:60:4f:f4:e9:34:47:5b:b1:db:55:
         3c:d3:c5:26:4d:de:02:c6:01:c0:9d:10:6f:08:85:e7:e3:4e:
         86:95:ea:e9:f6:2e:71:26:ec:2c:6a:bb:2f:1b:aa:aa:d3:75:
         87:3a:27:c3:cb:93:5c:fb:0a:d6:66:9f:23:a5:ee:44:9d:2f:
         55:19:64:f9:d0:1f:09:ae:58:b0:e1:de:ce:f0:3b:21:d6:c2:
         f8:33:bb:f7:3a:14:72:a8:f6:4e:b2:db:22:f2:fa:89:b8:89:
         fe:a1:f6:0d:05:aa:f4:03:94:fd:f8:12:15:3a:cd:c4:f8:2b:
         a7:0b:ef:81:34:04:e7:af:cf:89:ee:75:2a:b1:bb:fb:7d:50:
         74:ea:05:18:37:a5:aa:17:21:c4:12:33:ae:b7:14:f9:4b:f7:
         bb:f4:c3:2d:3d:1d:d1:76:50:37:50:a7:c5:8e:c7:39:2e:cb:
         21:e6:e3:74:8e:e1:ce:89:af:a3:4d:fd:df:d2:a9:c5:2b:01:
         9a:e3:ba:76
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDDb48MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMz
NzZjZTk3MzJhN2Y4NDM4YTg3Mjg4NjNkNDI2MjQwNThlMTgzOTAwHhcNMjEwMzI0
MTQzNTI1WhcNMjYwMzI0MTQzNTI1WjAzMTEwLwYDVQQDEygzOGU0ZjQzOThmZmRh
MWZhOGFjMjE5ZTA2ODUyZDI5ZGRjZDI5MmE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgUwJoyNUTamZJ1BKw3KUsVw1Yop+CAl0U9wgLEPKYI+s1QwE
4JFujVtXIrG+L2UJUrONFd10nwPEDKsAxzO/ZZPDZxuoBCriSFSQYE56QVYHgQ+W
P9bUg+Jc7xQXQDjoAIfW2R01hmix0Us1o2DU4YEzh8rvA8ujYsbjTVYDgRATumUt
NXWc7V3D5VuH8QJ6o9L5bbZXEIDtIc5pLMKHA7EZorXYAsN0KvVqkqFOmkq7e1XS
hARDlyqffsQ9h2t5HsD+ZgrTk/n9Ci3X9jEqg2YC2KV8IGKmu+Csm6x+rmPXIdTr
uyb5hw/bvVt3GyrDTlB8gOuisVswOPjj5wHEhQIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFLsWA6S6J/3Eu0AH8ImROPBTAfokMB8GA1UdIwQYMBaAFNGmIukxGok3TvdC
nrbrLNQWolSSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzM3NmNl
OTczMmE3Zjg0MzhhODcyODg2M2Q0MjYyNDA1OGUxODM5MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjdlMmNiY2ItNGUxZS00NDUxLWJhOWYtYjgzOWFj
YjVhNzVmLzM4ZTRmNDM5OGZmZGExZmE4YWMyMTllMDY4NTJkMjlkZGNkMjkyYTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iN2UyY2JjYi00ZTFlLTQ0NTEtYmE5Zi1iODM5
YWNiNWE3NWYvYzM3NmNlOTczMmE3Zjg0MzhhODcyODg2M2Q0MjYyNDA1OGUxODM5
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEAL48rwMEAchQCAMEAchQFjANBgkqhkiG9w0BAQsFAAOCAQEA
x010HMa1tHzo1QcvLAd3iiRvSnZNG9cYwQOUwvDZGDmhPZj2BpiogTzvrV/4IK4+
WrFILgx0MkQYdio0BZ9gT/TpNEdbsdtVPNPFJk3eAsYBwJ0QbwiF5+NOhpXq6fYu
cSbsLGq7LxuqqtN1hzonw8uTXPsK1mafI6XuRJ0vVRlk+dAfCa5YsOHezvA7IdbC
+DO79zoUcqj2TrLbIvL6ibiJ/qH2DQWq9AOU/fgSFTrNxPgrpwvvgTQE56/Pie51
KrG7+31QdOoFGDelqhchxBIzrrcU+Uv3u/TDLT0d0XZQN1CnxY7HOS7LIebjdI7h
zomvo03939KpxSsBmuO6dg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org