Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/49f17a4fe80f445bffb148dc92fa9b94caeb57ad.roa
File:                     49f17a4fe80f445bffb148dc92fa9b94caeb57ad.roa (raw, json)
Hash identifier:          EHkdquFWZrCCiSJKH/dHQPp0H0+mbyDqHz+2bUnyRqg=
Subject key identifier:   44:C3:82:35:63:77:98:B7:6D:48:6A:F3:44:D4:62:E2:A6:5C:A8:E2
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       24EB66
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/49f17a4fe80f445bffb148dc92fa9b94caeb57ad.roa
Signing time:             Fri 12 May 2023 17:07:45 +0000
ROA not before:           Thu 11 May 2023 17:07:36 +0000
ROA not after:            Mon 12 May 2025 17:07:36 +0000
asID:                     10620
IP address blocks:        190.143.64.0/18 maxlen: 24
                          190.144.177.0/24 maxlen: 24
                          190.144.128.0/18 maxlen: 24
                          190.144.196.0/24 maxlen: 24
                          190.144.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2419558 (0x24eb66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: May 11 17:07:36 2023 GMT
            Not After : May 12 17:07:36 2025 GMT
        Subject: CN=49f17a4fe80f445bffb148dc92fa9b94caeb57ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7c:f1:d7:b4:48:2b:47:42:48:28:ef:17:28:
                    15:c1:dc:4d:c4:66:35:ea:72:30:43:cc:54:67:5f:
                    f0:c6:da:c1:8b:66:88:61:95:d1:e9:12:a2:15:cb:
                    4a:a8:75:23:d9:a9:78:02:3a:98:3d:8a:d1:7d:90:
                    4f:1f:79:c5:02:00:02:59:98:dc:aa:6f:91:ae:32:
                    f4:42:9d:97:b4:4a:51:e3:2c:c2:be:b6:d4:52:de:
                    e9:c7:a1:09:cc:b9:99:62:ac:87:e1:1f:39:a4:dc:
                    fd:66:1d:4d:da:b1:be:12:18:96:1a:84:e3:2d:2e:
                    03:c6:1f:04:37:4e:d1:e8:ca:69:e9:77:19:90:8c:
                    12:c4:5a:6e:d6:9f:00:e7:9f:e7:8e:df:37:58:48:
                    7d:30:d6:5f:b1:f2:d3:9a:f0:8f:7b:c4:91:eb:54:
                    8c:b4:cf:17:a9:08:89:12:39:26:78:b6:ff:ea:e1:
                    2b:6b:b7:25:73:66:ae:af:c4:30:6d:ce:2c:8f:b4:
                    74:b9:72:86:9b:3b:49:cc:94:e3:a5:7d:0a:4c:3c:
                    19:84:c6:a8:f7:fb:7e:bc:74:94:55:dd:8e:9b:44:
                    c1:f7:5b:4e:e0:16:f5:cd:0d:23:cb:01:70:23:6c:
                    da:f7:57:3f:97:ee:99:0a:37:84:8f:a6:9b:46:43:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C3:82:35:63:77:98:B7:6D:48:6A:F3:44:D4:62:E2:A6:5C:A8:E2
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/49f17a4fe80f445bffb148dc92fa9b94caeb57ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.64.0/18
                  190.144.128.0-190.144.223.255

    Signature Algorithm: sha256WithRSAEncryption
         7a:13:22:dc:e1:96:97:1c:82:c7:cd:15:3b:ca:0d:ec:79:da:
         f8:08:60:19:6e:6f:bd:45:ac:cf:bc:6c:f9:76:2e:0b:57:74:
         6d:46:aa:be:60:c6:92:76:91:3f:4f:cb:05:44:b7:11:fd:6c:
         3c:b3:7a:bd:d9:44:71:8e:c5:25:36:61:de:5b:99:e2:6e:97:
         f3:8f:0f:3e:f4:5a:5c:f8:34:81:8f:e5:47:fd:fe:cb:2f:f0:
         b5:4e:b8:90:42:b6:01:51:37:e3:b4:19:03:4f:a8:68:25:6d:
         41:c8:8a:79:bb:72:e6:f8:b8:9b:6e:2d:5f:11:28:e6:11:ae:
         57:66:d2:89:10:f9:97:13:aa:88:7a:3c:8a:58:57:8f:8b:bb:
         df:e5:8b:0c:8e:fd:fd:f7:eb:c3:5f:71:cc:72:4c:99:27:c1:
         07:7f:0b:7b:e9:e4:6e:0e:4c:b2:17:fc:3d:c9:55:ed:86:8c:
         4c:b5:f7:f2:67:61:f8:3e:71:a8:92:67:89:c7:08:35:2c:c6:
         cf:a0:17:fa:10:81:01:e0:8c:6e:80:39:98:7c:7c:0d:56:00:
         a8:a7:4b:e1:ba:c7:40:05:c2:46:81:be:12:38:47:18:03:a0:
         6e:d2:98:84:db:ec:d8:15:e9:de:68:e4:3c:15:fe:66:a5:1e:
         d6:0a:dd:ce
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDJOtmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjMwNTEx
MTcwNzM2WhcNMjUwNTEyMTcwNzM2WjAzMTEwLwYDVQQDEyg0OWYxN2E0ZmU4MGY0
NDViZmZiMTQ4ZGM5MmZhOWI5NGNhZWI1N2FkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm3zx17RIK0dCSCjvFygVwdxNxGY16nIwQ8xUZ1/wxtrBi2aI
YZXR6RKiFctKqHUj2al4AjqYPYrRfZBPH3nFAgACWZjcqm+RrjL0Qp2XtEpR4yzC
vrbUUt7px6EJzLmZYqyH4R85pNz9Zh1N2rG+EhiWGoTjLS4Dxh8EN07R6Mpp6XcZ
kIwSxFpu1p8A55/njt83WEh9MNZfsfLTmvCPe8SR61SMtM8XqQiJEjkmeLb/6uEr
a7clc2aur8Qwbc4sj7R0uXKGmztJzJTjpX0KTDwZhMao9/t+vHSUVd2Om0TB91tO
4Bb1zQ0jywFwI2za91c/l+6ZCjeEj6abRkPhswIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFETDgjVjd5i3bUhq80TUYuKmXKjiMB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzQ5ZjE3YTRmZTgwZjQ0NWJmZmIxNDhkYzkyZmE5Yjk0Y2FlYjU3YWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFAMEBr6PQDAMAwQHvpCAAwQFvpDAMA0GCSqGSIb3DQEBCwUAA4IB
AQB6EyLc4ZaXHILHzRU7yg3sedr4CGAZbm+9RazPvGz5di4LV3RtRqq+YMaSdpE/
T8sFRLcR/Ww8s3q92URxjsUlNmHeW5nibpfzjw8+9Fpc+DSBj+VH/f7LL/C1TriQ
QrYBUTfjtBkDT6hoJW1ByIp5u3Lm+Libbi1fESjmEa5XZtKJEPmXE6qIejyKWFeP
i7vf5YsMjv399+vDX3HMckyZJ8EHfwt76eRuDkyyF/w9yVXthoxMtffyZ2H4PnGo
kmeJxwg1LMbPoBf6EIEB4IxugDmYfHwNVgCop0vhusdABcJGgb4SOEcYA6Bu0piE
2+zYFeneaOQ8Ff5mpR7WCt3O
-----END CERTIFICATE-----
Generated at Sun Mar 17 19:24:31 2024 by rpki-client on console-ams.rpki-client.org