Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/156462f5be2954f4ad71e9736565155b2b238e33.roa
File:                     156462f5be2954f4ad71e9736565155b2b238e33.roa (raw, json)
Hash identifier:          2e+DTiGAUU3BhoaSc/FKlPM2RF5SyM9cmL2+M6FSy4s=
Subject key identifier:   60:88:65:C9:7A:DE:9E:7B:EB:44:AE:10:E7:EC:CA:AE:84:D5:2F:34
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       271EE7
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/156462f5be2954f4ad71e9736565155b2b238e33.roa
Signing time:             Wed 08 Nov 2023 14:21:13 +0000
ROA not before:           Wed 08 Nov 2023 14:21:13 +0000
ROA not after:            Sat 08 Nov 2025 14:21:13 +0000
asID:                     262361
IP address blocks:        190.93.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2563815 (0x271ee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Nov  8 14:21:13 2023 GMT
            Not After : Nov  8 14:21:13 2025 GMT
        Subject: CN=156462f5be2954f4ad71e9736565155b2b238e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6f:8c:69:df:c2:e7:dd:73:99:e7:4e:fe:4c:
                    3e:64:4a:ec:9e:31:b9:cb:b2:80:60:d2:d5:10:6b:
                    65:34:40:c0:e5:cc:a6:16:c7:36:2d:1c:b9:94:34:
                    8e:cd:95:42:17:ba:94:f9:17:cc:ab:13:96:3a:6f:
                    61:7b:a1:7b:ce:25:5f:2a:e0:52:a2:70:42:8a:98:
                    87:f7:ca:d1:a4:08:27:e9:01:6a:0b:28:83:84:d5:
                    dd:87:d1:08:f8:01:b1:ef:5e:2b:68:96:f6:80:f5:
                    64:1a:26:fc:84:8e:57:b3:63:c7:32:cf:71:98:69:
                    0b:d5:3a:e8:8f:d7:49:6b:8a:3b:b9:2c:69:2d:38:
                    97:61:08:63:df:27:fe:df:0c:b9:1a:af:ac:95:ac:
                    b1:dc:ef:a9:a8:fb:d4:1e:00:3f:18:5d:97:53:c8:
                    d4:19:7d:66:8f:dc:f5:2f:25:92:f4:9c:4d:60:e1:
                    4d:02:23:52:7e:76:ed:ee:c5:02:9d:7d:21:31:21:
                    b4:c1:96:13:98:f3:d1:99:57:75:79:4a:78:ca:1d:
                    4e:04:e9:1f:30:e0:c8:68:68:51:44:5f:f2:6d:4c:
                    0d:e0:dc:a1:f4:8c:7d:eb:5c:65:e4:73:60:0b:13:
                    47:3e:44:51:dd:9f:27:43:70:7d:ae:0a:4c:4d:3d:
                    93:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:88:65:C9:7A:DE:9E:7B:EB:44:AE:10:E7:EC:CA:AE:84:D5:2F:34
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/156462f5be2954f4ad71e9736565155b2b238e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:24:f4:69:06:4a:83:7b:8d:ac:29:e9:b2:c3:09:78:2e:10:
         89:ae:98:91:1e:37:db:fb:27:e5:a7:1a:cf:56:aa:45:37:07:
         66:74:f7:b2:9f:aa:f5:07:d0:45:7b:4e:ac:d4:97:40:e4:f4:
         88:ae:41:6b:6b:a9:51:b9:a4:b2:3b:16:7a:b8:f5:52:6e:fb:
         49:aa:77:f3:b2:c8:03:d4:65:2b:22:6a:81:07:20:95:ac:88:
         2b:3c:50:9a:b8:95:9b:db:67:b2:83:50:a6:16:35:07:05:6d:
         21:37:ed:8b:f3:77:18:76:fb:7e:e5:f3:18:13:f2:e8:a8:4a:
         95:db:a5:f8:e3:58:cb:83:ff:bd:a6:6f:30:e8:ce:bc:52:cb:
         74:17:1a:c7:57:20:80:48:dd:c3:e0:72:be:30:3e:cc:96:73:
         cb:d2:26:de:dc:17:a5:c8:03:a8:e5:f2:13:39:07:e9:50:10:
         a7:fd:86:06:21:71:0e:31:a4:ef:a6:d2:ff:63:5f:a4:c0:47:
         9d:18:50:17:64:ed:2b:b0:4f:a4:92:27:a1:1d:c4:a4:3b:95:
         11:ac:83:e4:0d:e9:23:82:2c:80:97:1e:a6:26:8b:d4:fb:57:
         02:2e:4d:3d:23:23:99:31:71:84:e5:04:83:5c:58:a7:bb:96:
         ab:84:fe:59
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJx7nMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
ZDg1Mzc4NTI2NjIxZmJkNDk1NmVmYTEwNDc4ZjkxMmYwODA3ZGIwHhcNMjMxMTA4
MTQyMTEzWhcNMjUxMTA4MTQyMTEzWjAzMTEwLwYDVQQDEygxNTY0NjJmNWJlMjk1
NGY0YWQ3MWU5NzM2NTY1MTU1YjJiMjM4ZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0W+Mad/C591zmedO/kw+ZErsnjG5y7KAYNLVEGtlNEDA5cym
Fsc2LRy5lDSOzZVCF7qU+RfMqxOWOm9he6F7ziVfKuBSonBCipiH98rRpAgn6QFq
CyiDhNXdh9EI+AGx714raJb2gPVkGib8hI5Xs2PHMs9xmGkL1Troj9dJa4o7uSxp
LTiXYQhj3yf+3wy5Gq+slayx3O+pqPvUHgA/GF2XU8jUGX1mj9z1LyWS9JxNYOFN
AiNSfnbt7sUCnX0hMSG0wZYTmPPRmVd1eUp4yh1OBOkfMODIaGhRRF/ybUwN4Nyh
9Ix961xl5HNgCxNHPkRR3Z8nQ3B9rgpMTT2TjwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGCIZcl63p5760SuEOfsyq6E1S80MB8GA1UdIwQYMBaAFBjyWuz3sMhn/mxf
oWHl66ymOasXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTVkODUz
Nzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdkYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzE1NjQ2MmY1YmUyOTU0ZjRhZDcxZTk3MzY1NjUxNTViMmIyMzhlMzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvZTVkODUzNzg1MjY2MjFmYmQ0OTU2ZWZhMTA0NzhmOTEyZjA4MDdk
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dQDANBgkqhkiG9w0BAQsFAAOCAQEAciT0aQZKg3uNrCnp
ssMJeC4Qia6YkR432/sn5acaz1aqRTcHZnT3sp+q9QfQRXtOrNSXQOT0iK5Ba2up
UbmksjsWerj1Um77Sap387LIA9RlKyJqgQcglayIKzxQmriVm9tnsoNQphY1BwVt
ITfti/N3GHb7fuXzGBPy6KhKldul+ONYy4P/vaZvMOjOvFLLdBcax1cggEjdw+By
vjA+zJZzy9Im3twXpcgDqOXyEzkH6VAQp/2GBiFxDjGk76bS/2NfpMBHnRhQF2Tt
K7BPpJInoR3EpDuVEayD5A3pI4IsgJcepiaL1PtXAi5NPSMjmTFxhOUEg1xYp7uW
q4T+WQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org