Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08f08d4b-d918-4c45-9df4-a13d7789153c/360aad66beda77a1cee9aeaa9e49b86a24a6f9f3.roa
File:                     360aad66beda77a1cee9aeaa9e49b86a24a6f9f3.roa (raw, json)
Hash identifier:          mH0q9y5m/+FlU6OQMgv9PNkh3DSxna5OdZvs5/cedHU=
Subject key identifier:   57:B7:F5:56:1B:46:E2:7C:CF:2A:45:B9:F6:1D:6C:D4:D8:AF:87:69
Certificate issuer:       /CN=6c71ac3d2906f78e7983d8c070095dde94b2ccd7
Certificate serial:       CCBA
Authority key identifier: 3B:48:64:E8:69:4B:A1:DB:F8:A7:F2:44:76:B4:B8:AF:4F:AB:40:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c71ac3d2906f78e7983d8c070095dde94b2ccd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08f08d4b-d918-4c45-9df4-a13d7789153c/360aad66beda77a1cee9aeaa9e49b86a24a6f9f3.roa
Signing time:             Wed 24 Mar 2021 14:42:03 +0000
ROA not before:           Wed 24 Mar 2021 14:42:03 +0000
ROA not after:            Tue 24 Mar 2026 14:42:03 +0000
asID:                     28049
IP address blocks:        190.121.192.0/24 maxlen: 24
                          190.121.193.0/24 maxlen: 24
                          190.121.194.0/24 maxlen: 24
                          190.121.195.0/24 maxlen: 24
                          190.121.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52410 (0xccba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c71ac3d2906f78e7983d8c070095dde94b2ccd7
        Validity
            Not Before: Mar 24 14:42:03 2021 GMT
            Not After : Mar 24 14:42:03 2026 GMT
        Subject: CN=360aad66beda77a1cee9aeaa9e49b86a24a6f9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:04:3d:4e:e9:79:03:c5:3e:5a:9e:48:7e:
                    75:61:a7:ac:67:7b:d8:9e:51:e7:06:b1:58:c7:6c:
                    54:0a:8d:d0:ce:53:21:17:00:59:41:d7:2e:65:36:
                    a8:9e:34:27:7b:92:f4:c6:ae:8c:38:51:bc:2a:b8:
                    25:74:fa:fe:0b:1c:fb:8d:c4:43:b7:7d:c0:17:0d:
                    04:75:a5:ef:08:4d:28:4b:33:85:fa:e4:97:1b:58:
                    aa:ee:f4:38:f2:cc:21:d5:f6:2d:81:86:c0:6b:0f:
                    3a:88:d1:54:bd:af:39:7d:2e:e8:7e:c5:b0:02:b5:
                    48:86:ad:60:51:ac:f2:74:fc:4f:67:67:82:db:e5:
                    ed:30:0d:c5:2d:ad:db:0f:03:5b:e2:1b:cf:06:41:
                    6f:64:7f:be:83:50:d5:56:c6:c2:8d:ad:08:db:39:
                    50:e4:7d:cb:04:68:4c:57:89:ab:ae:e2:67:34:0a:
                    67:68:8f:4f:dd:4d:85:40:6b:d2:47:a5:2d:38:af:
                    15:c7:54:b8:33:83:dc:71:f7:b9:9e:11:17:16:d1:
                    97:de:fb:a0:ec:27:06:14:ec:5d:f4:d4:ea:ad:3f:
                    22:c5:a1:db:75:b1:19:67:14:f1:ab:18:b0:c8:8a:
                    66:fa:32:13:1e:19:78:1c:16:0e:48:e5:6f:02:ab:
                    4c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B7:F5:56:1B:46:E2:7C:CF:2A:45:B9:F6:1D:6C:D4:D8:AF:87:69
            X509v3 Authority Key Identifier:
                keyid:3B:48:64:E8:69:4B:A1:DB:F8:A7:F2:44:76:B4:B8:AF:4F:AB:40:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c71ac3d2906f78e7983d8c070095dde94b2ccd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08f08d4b-d918-4c45-9df4-a13d7789153c/360aad66beda77a1cee9aeaa9e49b86a24a6f9f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08f08d4b-d918-4c45-9df4-a13d7789153c/6c71ac3d2906f78e7983d8c070095dde94b2ccd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.192.0-190.121.196.255

    Signature Algorithm: sha256WithRSAEncryption
         70:ea:57:c6:f9:1a:91:9a:6e:29:f6:9a:1d:21:7e:37:0d:77:
         eb:fa:11:af:70:ba:cd:2d:cf:6d:e4:4b:77:88:86:ce:7b:a8:
         e4:42:55:58:0f:d8:e8:d8:59:9a:23:3e:30:41:59:0f:4d:8e:
         3c:e8:3c:68:b2:42:6d:5a:22:6b:92:3c:51:5a:65:41:fe:79:
         d4:c5:a5:e3:6b:d2:a4:f3:97:c6:ab:e0:12:86:2f:ef:6a:94:
         d9:1f:b8:04:5b:53:de:73:c3:bd:8d:d7:16:45:c8:7a:8e:96:
         27:c3:d5:b7:a4:9e:91:e8:ad:f5:95:b1:f4:82:d9:84:1b:8f:
         94:56:aa:89:0a:9f:d5:d1:76:90:5c:bf:f5:1c:6e:0f:97:ec:
         7d:76:37:bd:cd:ea:9a:5b:c6:f4:93:99:30:bb:19:64:33:2b:
         35:14:cc:04:43:87:19:ca:b1:01:23:ea:b2:cd:ed:bf:58:48:
         8e:2b:b9:b7:a0:fc:5f:f5:37:d1:63:40:fa:61:4d:cb:07:d6:
         ea:d8:2f:09:bb:1b:3e:5c:71:71:c6:cb:88:fc:ae:fc:27:66:
         7f:f9:82:9c:5a:3b:63:1b:ba:91:bf:e9:7d:a9:8c:18:9b:6a:
         be:56:23:9e:26:5c:f1:eb:fd:7d:e3:eb:d7:8e:b5:32:3f:6f:
         72:56:f4:5c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDAMy6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
NzFhYzNkMjkwNmY3OGU3OTgzZDhjMDcwMDk1ZGRlOTRiMmNjZDcwHhcNMjEwMzI0
MTQ0MjAzWhcNMjYwMzI0MTQ0MjAzWjAzMTEwLwYDVQQDEygzNjBhYWQ2NmJlZGE3
N2ExY2VlOWFlYWE5ZTQ5Yjg2YTI0YTZmOWYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqukEPU7peQPFPlqeSH51YaesZ3vYnlHnBrFYx2xUCo3QzlMh
FwBZQdcuZTaonjQne5L0xq6MOFG8KrgldPr+Cxz7jcRDt33AFw0EdaXvCE0oSzOF
+uSXG1iq7vQ48swh1fYtgYbAaw86iNFUva85fS7ofsWwArVIhq1gUazydPxPZ2eC
2+XtMA3FLa3bDwNb4hvPBkFvZH++g1DVVsbCja0I2zlQ5H3LBGhMV4mrruJnNApn
aI9P3U2FQGvSR6UtOK8Vx1S4M4Pccfe5nhEXFtGX3vug7CcGFOxd9NTqrT8ixaHb
dbEZZxTxqxiwyIpm+jITHhl4HBYOSOVvAqtMlQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFFe39VYbRuJ8zypFufYdbNTYr4dpMB8GA1UdIwQYMBaAFDtIZOhpS6Hb+Kfy
RHa0uK9Pq0BCMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmM3MWFj
M2QyOTA2Zjc4ZTc5ODNkOGMwNzAwOTVkZGU5NGIyY2NkNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDhmMDhkNGItZDkxOC00YzQ1LTlkZjQtYTEzZDc3
ODkxNTNjLzM2MGFhZDY2YmVkYTc3YTFjZWU5YWVhYTllNDliODZhMjRhNmY5ZjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wOGYwOGQ0Yi1kOTE4LTRjNDUtOWRmNC1hMTNk
Nzc4OTE1M2MvNmM3MWFjM2QyOTA2Zjc4ZTc5ODNkOGMwNzAwOTVkZGU5NGIyY2Nk
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQGvnnAAwQAvnnEMA0GCSqGSIb3DQEBCwUAA4IBAQBw6lfG
+RqRmm4p9podIX43DXfr+hGvcLrNLc9t5Et3iIbOe6jkQlVYD9jo2FmaIz4wQVkP
TY486DxoskJtWiJrkjxRWmVB/nnUxaXja9Kk85fGq+AShi/vapTZH7gEW1Pec8O9
jdcWRch6jpYnw9W3pJ6R6K31lbH0gtmEG4+UVqqJCp/V0XaQXL/1HG4Pl+x9dje9
zeqaW8b0k5kwuxlkMys1FMwEQ4cZyrEBI+qyze2/WEiOK7m3oPxf9TfRY0D6YU3L
B9bq2C8Juxs+XHFxxsuI/K78J2Z/+YKcWjtjG7qRv+l9qYwYm2q+ViOeJlzx6/19
4+vXjrUyP29yVvRc
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org