Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/58a9d1276f7c54824e0c4598fca4a0f2405321a0.roa
File:                     58a9d1276f7c54824e0c4598fca4a0f2405321a0.roa (raw, json)
Hash identifier:          Mi+q+lIXLY1jsznHxoFLdJzurFI3ZDm75GR56g7rRk0=
Subject key identifier:   1F:D4:98:19:43:A6:44:3B:26:8C:D2:EB:E9:DE:26:46:8E:E9:4E:B3
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       1D6971
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/58a9d1276f7c54824e0c4598fca4a0f2405321a0.roa
Signing time:             Mon 01 Aug 2022 16:12:04 +0000
ROA not before:           Tue 27 Apr 2021 03:00:00 +0000
ROA not after:            Thu 27 Apr 2023 03:00:00 +0000
asID:                     14080
IP address blocks:        190.144.192.0/19 maxlen: 19
                          181.49.224.0/19 maxlen: 29
                          186.85.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927537 (0x1d6971)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Apr 27 03:00:00 2021 GMT
            Not After : Apr 27 03:00:00 2023 GMT
        Subject: CN=58a9d1276f7c54824e0c4598fca4a0f2405321a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:eb:da:58:53:6c:0e:7f:45:d7:2f:d9:31:
                    74:cc:ba:4a:38:4c:23:09:55:dc:64:62:57:43:5a:
                    8b:90:a3:61:7d:65:f4:5b:90:ea:3c:10:8d:81:57:
                    24:50:ad:41:3a:5e:15:7e:4b:ab:ff:0a:e5:17:ca:
                    b1:e7:3d:c8:fe:6c:99:87:1f:92:cf:4e:13:ab:25:
                    ab:61:2e:79:fa:6d:9d:9e:b5:5c:21:6f:b5:be:e6:
                    6b:02:e2:8e:df:4e:f2:c2:71:b4:9a:67:34:f4:51:
                    15:61:d4:14:69:5b:39:76:49:4d:3b:8c:35:7c:b2:
                    85:a1:2f:16:fe:75:5b:4d:20:00:d8:cb:5e:07:cf:
                    82:85:a4:05:13:0a:46:c0:f1:06:3b:d8:20:cf:85:
                    16:e0:44:72:c3:ee:53:ee:94:1d:b5:95:e2:50:0f:
                    98:a9:dd:6f:36:ce:4c:c5:97:e9:d6:d4:35:8b:ce:
                    17:71:2a:84:b2:dc:14:72:d0:6f:63:22:b8:81:ae:
                    08:32:db:98:a5:7d:e3:25:eb:85:52:46:54:6f:d6:
                    fd:67:cf:a3:3d:ad:77:63:c8:c7:ca:dc:01:ae:6e:
                    a5:f4:f4:19:9a:e3:43:01:ea:03:dc:d9:41:07:3b:
                    fa:03:1f:50:58:c0:b2:41:44:de:fb:04:28:f4:37:
                    e3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D4:98:19:43:A6:44:3B:26:8C:D2:EB:E9:DE:26:46:8E:E9:4E:B3
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/58a9d1276f7c54824e0c4598fca4a0f2405321a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.49.224.0/19
                  186.85.72.0/22
                  190.144.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         10:82:17:5f:b6:ba:31:c9:53:08:ec:bc:3b:7f:8c:b3:16:a1:
         24:09:d9:4f:e7:6f:5a:61:99:3a:b2:67:e9:5d:e7:c3:5a:a4:
         05:3a:96:84:8f:9c:ee:a4:84:8b:ce:bf:dc:13:47:ac:71:8a:
         0e:0f:c0:64:75:59:5f:10:fe:93:b4:ef:05:78:84:36:3c:3a:
         a0:1b:db:9e:57:78:ef:95:a1:20:49:28:ee:bc:1b:6d:fb:94:
         04:16:ff:e3:2e:a5:2f:63:75:da:e1:62:0a:d1:53:9d:97:5c:
         95:4b:8e:16:5a:c3:89:83:c3:a3:f1:3e:f0:57:6c:c2:86:dd:
         fb:41:b6:b3:d6:ae:ea:46:38:93:16:6e:4c:3b:88:cd:cf:da:
         a1:b9:ae:eb:f6:1d:50:6f:58:13:e4:c5:8c:e5:ec:e0:cf:df:
         f7:a7:4b:2b:c9:96:63:88:db:ad:e4:e1:7c:d3:49:a8:2e:01:
         b4:0c:3e:fb:42:26:61:7c:0d:4a:be:1a:f0:3f:6e:24:cc:f7:
         4f:c5:af:da:68:46:4e:c0:7d:d9:11:81:fb:e4:bc:6e:12:2c:
         8f:0b:55:6d:cf:03:f4:eb:2f:15:34:be:88:3c:4e:45:56:81:
         6a:40:92:65:f0:de:46:38:98:37:33:bf:f8:01:00:f5:eb:57:
         de:a5:b8:e7
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIDHWlxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjEwNDI3
MDMwMDAwWhcNMjMwNDI3MDMwMDAwWjAzMTEwLwYDVQQDEyg1OGE5ZDEyNzZmN2M1
NDgyNGUwYzQ1OThmY2E0YTBmMjQwNTMyMWEwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArgPr2lhTbA5/Rdcv2TF0zLpKOEwjCVXcZGJXQ1qLkKNhfWX0
W5DqPBCNgVckUK1BOl4Vfkur/wrlF8qx5z3I/myZhx+Sz04TqyWrYS55+m2dnrVc
IW+1vuZrAuKO307ywnG0mmc09FEVYdQUaVs5dklNO4w1fLKFoS8W/nVbTSAA2Mte
B8+ChaQFEwpGwPEGO9ggz4UW4ERyw+5T7pQdtZXiUA+Yqd1vNs5MxZfp1tQ1i84X
cSqEstwUctBvYyK4ga4IMtuYpX3jJeuFUkZUb9b9Z8+jPa13Y8jHytwBrm6l9PQZ
muNDAeoD3NlBBzv6Ax9QWMCyQUTe+wQo9DfjyQIDAQABo4ICZzCCAmMwHQYDVR0O
BBYEFB/UmBlDpkQ7JozS6+neJkaO6U6zMB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzU4YTlkMTI3NmY3YzU0ODI0ZTBjNDU5OGZjYTRhMGYyNDA1MzIxYTAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQc
MBowGAQCAAEwEgMEBbUx4AMEArpVSAMEBb6QwDANBgkqhkiG9w0BAQsFAAOCAQEA
EIIXX7a6MclTCOy8O3+MsxahJAnZT+dvWmGZOrJn6V3nw1qkBTqWhI+c7qSEi86/
3BNHrHGKDg/AZHVZXxD+k7TvBXiENjw6oBvbnld475WhIEko7rwbbfuUBBb/4y6l
L2N12uFiCtFTnZdclUuOFlrDiYPDo/E+8Fdswobd+0G2s9au6kY4kxZuTDuIzc/a
obmu6/YdUG9YE+TFjOXs4M/f96dLK8mWY4jbreThfNNJqC4BtAw++0ImYXwNSr4a
8D9uJMz3T8Wv2mhGTsB92RGB++S8bhIsjwtVbc8D9OsvFTS+iDxORVaBakCSZfDe
RjiYNzO/+AEA9etX3qW45w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org