Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a370194-1d5c-460f-9b20-b1d88ead4e77/faa6522134e25679f20359bcf3a8636737ebac9a.roa
File:                     faa6522134e25679f20359bcf3a8636737ebac9a.roa (raw, json)
Hash identifier:          VFZkAVXFrOhJgqURrVdW/oyiOfZjooBhNqUszVKYkZg=
Subject key identifier:   48:47:59:F3:AB:13:1F:42:14:D5:7E:74:15:23:3C:32:80:74:CC:B8
Certificate issuer:       /CN=f84e0f4f21dac65238183b89155b8f48a9b0455c
Certificate serial:       26B6B6
Authority key identifier: B0:93:38:83:3E:34:A6:C0:8C:5F:89:BD:BA:77:B2:5D:76:30:8E:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f84e0f4f21dac65238183b89155b8f48a9b0455c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a370194-1d5c-460f-9b20-b1d88ead4e77/faa6522134e25679f20359bcf3a8636737ebac9a.roa
Signing time:             Tue 23 Jan 2024 07:30:11 +0000
ROA not before:           Tue 23 Jan 2024 07:30:11 +0000
ROA not after:            Thu 22 Jan 2026 07:30:11 +0000
asID:                     263243
IP address blocks:        190.107.80.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2537142 (0x26b6b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84e0f4f21dac65238183b89155b8f48a9b0455c
        Validity
            Not Before: Jan 23 07:30:11 2024 GMT
            Not After : Jan 22 07:30:11 2026 GMT
        Subject: CN=faa6522134e25679f20359bcf3a8636737ebac9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:61:5b:b6:20:d1:d5:65:03:00:97:b1:98:
                    77:82:0d:6c:f7:81:70:e4:74:0b:fd:cf:03:6b:37:
                    56:3b:42:36:a4:0b:cc:dc:a8:d7:01:f8:34:ea:f7:
                    54:bc:97:bc:61:eb:0d:a0:b1:09:0c:45:96:30:2d:
                    3d:32:e6:79:20:6a:64:a5:98:48:68:09:11:10:d2:
                    b6:f0:aa:10:87:7a:63:7e:a1:af:52:aa:00:4e:32:
                    9a:a1:eb:b3:04:3d:fd:91:af:d2:c3:23:2d:19:61:
                    60:1f:d2:c3:d6:40:24:89:98:27:75:5a:f7:3a:5c:
                    72:fa:ca:d0:e7:2e:ea:22:bf:ee:27:c0:06:d0:00:
                    fd:3e:e7:54:d7:ab:e8:27:99:9b:ef:66:c4:17:15:
                    19:d8:d2:d7:45:1b:24:22:b4:40:d8:65:c2:46:84:
                    eb:d1:25:02:72:5c:cf:b2:7e:49:f9:d0:2d:f3:b8:
                    a8:cc:e5:f6:82:1d:fc:d6:3c:f6:40:0e:f2:22:e9:
                    f0:ce:e7:f2:85:79:3f:21:75:a4:6b:90:86:0a:b8:
                    a5:c2:c3:4d:6e:1b:c1:02:eb:13:9d:4f:e3:6a:04:
                    37:9d:31:64:d0:3a:c1:be:69:f9:be:3b:df:0a:50:
                    61:03:65:f2:7b:36:e1:6a:2b:50:b9:7c:73:9a:6d:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:47:59:F3:AB:13:1F:42:14:D5:7E:74:15:23:3C:32:80:74:CC:B8
            X509v3 Authority Key Identifier:
                keyid:B0:93:38:83:3E:34:A6:C0:8C:5F:89:BD:BA:77:B2:5D:76:30:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f84e0f4f21dac65238183b89155b8f48a9b0455c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a370194-1d5c-460f-9b20-b1d88ead4e77/faa6522134e25679f20359bcf3a8636737ebac9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a370194-1d5c-460f-9b20-b1d88ead4e77/f84e0f4f21dac65238183b89155b8f48a9b0455c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:54:d0:ef:d9:32:c6:ed:29:80:82:16:ff:c3:c2:5e:fb:9e:
         62:28:db:1d:97:0b:c9:09:b1:2d:6a:f9:04:f2:b5:9a:aa:86:
         d3:60:d8:fe:dd:d6:b0:e3:46:8f:5c:9b:d5:0e:31:39:9f:79:
         b2:8c:ba:c4:a5:cc:40:c8:85:b8:2c:48:fb:f0:f7:48:1c:45:
         f6:4e:9f:12:75:e4:7a:19:90:f3:e0:50:2b:c4:31:91:e6:2c:
         4c:9b:41:d4:b8:f1:32:28:b6:e4:67:1e:41:42:0b:57:fc:36:
         d5:59:00:58:03:ea:9d:fd:cf:c3:a5:6e:83:d5:8c:90:9a:14:
         31:e8:9c:ee:1f:1f:b7:8b:b9:63:7c:b4:59:19:65:ae:4d:d2:
         fc:b1:8a:05:a8:be:76:a9:f9:3f:13:12:e7:b1:43:11:f8:de:
         f0:60:ed:93:7c:d4:62:7e:75:92:6b:79:c4:a5:ee:ac:9e:e6:
         50:1a:03:60:31:14:45:33:be:ca:e8:61:f0:7c:11:8d:37:8c:
         5e:0e:e6:86:02:79:f1:36:4b:dd:58:04:23:69:9c:8f:d8:f7:
         5c:a4:12:45:ed:35:0c:9e:c0:9b:6a:ec:a6:e1:e6:87:15:5f:
         7d:2a:ad:7a:92:8c:bf:09:0f:80:10:d1:2d:e5:4a:84:35:d5:
         d3:2b:9c:b9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJra2MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY4
NGUwZjRmMjFkYWM2NTIzODE4M2I4OTE1NWI4ZjQ4YTliMDQ1NWMwHhcNMjQwMTIz
MDczMDExWhcNMjYwMTIyMDczMDExWjAzMTEwLwYDVQQDEyhmYWE2NTIyMTM0ZTI1
Njc5ZjIwMzU5YmNmM2E4NjM2NzM3ZWJhYzlhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAreVhW7Yg0dVlAwCXsZh3gg1s94Fw5HQL/c8DazdWO0I2pAvM
3KjXAfg06vdUvJe8YesNoLEJDEWWMC09MuZ5IGpkpZhIaAkRENK28KoQh3pjfqGv
UqoATjKaoeuzBD39ka/SwyMtGWFgH9LD1kAkiZgndVr3Olxy+srQ5y7qIr/uJ8AG
0AD9PudU16voJ5mb72bEFxUZ2NLXRRskIrRA2GXCRoTr0SUCclzPsn5J+dAt87io
zOX2gh381jz2QA7yIunwzufyhXk/IXWka5CGCrilwsNNbhvBAusTnU/jagQ3nTFk
0DrBvmn5vjvfClBhA2XyezbhaitQuXxzmm3J1wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEhHWfOrEx9CFNV+dBUjPDKAdMy4MB8GA1UdIwQYMBaAFLCTOIM+NKbAjF+J
vbp3sl12MI5ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZjg0ZTBm
NGYyMWRhYzY1MjM4MTgzYjg5MTU1YjhmNDhhOWIwNDU1Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMGEzNzAxOTQtMWQ1Yy00NjBmLTliMjAtYjFkODhl
YWQ0ZTc3L2ZhYTY1MjIxMzRlMjU2NzlmMjAzNTliY2YzYTg2MzY3MzdlYmFjOWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wYTM3MDE5NC0xZDVjLTQ2MGYtOWIyMC1iMWQ4
OGVhZDRlNzcvZjg0ZTBmNGYyMWRhYzY1MjM4MTgzYjg5MTU1YjhmNDhhOWIwNDU1
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA75rUDANBgkqhkiG9w0BAQsFAAOCAQEAAVTQ79kyxu0pgIIW
/8PCXvueYijbHZcLyQmxLWr5BPK1mqqG02DY/t3WsONGj1yb1Q4xOZ95soy6xKXM
QMiFuCxI+/D3SBxF9k6fEnXkehmQ8+BQK8QxkeYsTJtB1LjxMii25GceQUILV/w2
1VkAWAPqnf3Pw6Vug9WMkJoUMeic7h8ft4u5Y3y0WRllrk3S/LGKBai+dqn5PxMS
57FDEfje8GDtk3zUYn51kmt5xKXurJ7mUBoDYDEURTO+yuhh8HwRjTeMXg7mhgJ5
8TZL3VgEI2mcj9j3XKQSRe01DJ7Am2rspuHmhxVffSqtepKMvwkPgBDRLeVKhDXV
0yucuQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org