Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/2a147be816316222e5584c7068d305443f7c0e66.roa
File:                     2a147be816316222e5584c7068d305443f7c0e66.roa (raw, json)
Hash identifier:          dB2lum/qAU9uDyCXTmkhaVHRhTLq41VbH/+PAXmtL1U=
Subject key identifier:   F6:7D:A8:06:33:31:95:A3:77:E0:B7:2F:29:1C:E4:2D:42:97:62:6E
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       248F72
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/2a147be816316222e5584c7068d305443f7c0e66.roa
Signing time:             Fri 21 Jul 2023 20:55:31 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     27989
IP address blocks:        190.216.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2396018 (0x248f72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=2a147be816316222e5584c7068d305443f7c0e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b4:1d:d4:1a:44:89:29:c4:f5:7e:47:09:9e:
                    fb:63:4a:80:61:20:e3:62:b9:9f:0b:b2:53:05:02:
                    7d:26:db:1b:c9:f9:4f:5f:fe:b0:b6:e3:2f:03:3d:
                    ba:53:3e:ff:00:1b:19:c6:6d:b1:6f:85:1d:4d:32:
                    15:a4:ff:f8:17:21:03:cc:e9:18:81:dc:b5:1c:b2:
                    80:4f:74:26:e4:0d:2d:81:9e:5d:ae:42:b8:dd:94:
                    1b:b2:52:4b:c4:32:11:6f:97:76:db:98:eb:17:25:
                    d0:28:59:f1:62:d6:4e:2e:4d:04:ec:ad:c0:5f:9a:
                    81:ef:9a:cc:0a:cf:0a:98:fd:d7:1c:17:c8:20:49:
                    fa:e4:da:ac:3c:57:b7:1a:75:38:53:7d:fa:e0:53:
                    af:d8:78:fe:fd:fd:d4:d9:f7:f6:46:11:30:ab:b5:
                    49:2f:90:6b:48:00:53:b2:f8:c7:33:44:f1:9f:10:
                    49:29:08:0b:97:08:e8:b3:fb:6d:69:74:bc:9a:af:
                    79:f4:32:3d:17:6a:e6:c9:f9:74:db:08:d6:cf:c9:
                    2b:b6:d5:27:1f:7a:d2:f8:6f:a1:6f:ab:37:2d:36:
                    d5:e3:81:e4:44:7b:dd:17:f9:18:75:77:7d:3d:68:
                    59:97:69:50:b1:e7:db:d3:dd:f7:62:a0:64:fb:02:
                    b6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7D:A8:06:33:31:95:A3:77:E0:B7:2F:29:1C:E4:2D:42:97:62:6E
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/2a147be816316222e5584c7068d305443f7c0e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:cc:81:38:70:c9:d9:bd:dc:20:4e:34:c5:e7:e3:4e:c1:a5:
         dc:2f:09:11:2d:e7:a6:31:91:08:f0:de:ff:fa:a6:81:01:28:
         e8:95:83:f4:ed:37:af:38:c9:d8:03:0b:74:f9:e0:fd:25:2d:
         01:71:f5:3a:c9:40:7e:af:33:3f:c3:f1:70:ee:a9:9d:62:6c:
         87:cb:8b:a6:e9:de:64:18:53:b0:38:38:23:49:7b:84:f0:13:
         71:dc:bb:6c:2b:75:51:0d:85:89:90:da:75:20:1d:6d:26:f5:
         e9:bc:ea:00:43:67:5a:73:2a:2e:e0:8e:6e:0f:25:43:50:63:
         05:d5:f5:08:e9:b2:2a:71:f1:bd:29:e4:1b:44:59:49:24:d6:
         a9:0c:59:e3:1c:e4:00:d2:7e:ce:36:de:11:42:47:87:69:2d:
         1b:ce:d5:e2:5d:03:f3:2a:57:9a:75:9c:7b:40:93:61:de:aa:
         76:db:4b:63:8c:88:ca:73:11:6b:f7:62:88:47:a6:d3:86:b2:
         39:d0:2b:a7:b7:20:89:52:92:e1:c0:d7:f6:6f:97:10:8b:b3:
         eb:51:69:16:cb:00:8a:14:fc:d6:15:58:d6:34:72:de:1a:c2:
         a2:59:f9:f2:6d:2d:58:c4:75:a5:4e:1c:ba:18:1e:a0:6a:65:
         6c:37:83:fe
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJI9yMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc5
N2ZiYzZjZGRhMmYzNjYxYjJhMzM1MDYwY2I4NGQ4MDg3MDY2NTkwHhcNMjMwNzIw
MjA1NDU3WhcNMjUwNzIxMjA1NDU3WjAzMTEwLwYDVQQDEygyYTE0N2JlODE2MzE2
MjIyZTU1ODRjNzA2OGQzMDU0NDNmN2MwZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgrQd1BpEiSnE9X5HCZ77Y0qAYSDjYrmfC7JTBQJ9JtsbyflP
X/6wtuMvAz26Uz7/ABsZxm2xb4UdTTIVpP/4FyEDzOkYgdy1HLKAT3Qm5A0tgZ5d
rkK43ZQbslJLxDIRb5d225jrFyXQKFnxYtZOLk0E7K3AX5qB75rMCs8KmP3XHBfI
IEn65NqsPFe3GnU4U3364FOv2Hj+/f3U2ff2RhEwq7VJL5BrSABTsvjHM0TxnxBJ
KQgLlwjos/ttaXS8mq959DI9F2rmyfl02wjWz8krttUnH3rS+G+hb6s3LTbV44Hk
RHvdF/kYdXd9PWhZl2lQsefb0933YqBk+wK2JQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPZ9qAYzMZWjd+C3Lykc5C1Cl2JuMB8GA1UdIwQYMBaAFCtidz8C0hsm2p0G
Y2LQrCl1X2lJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzk3ZmJj
NmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTI3ZTQwOTUtMmY0NS00ZWM5LThmNzUtZTc5OTM4
NWZiYWQwLzJhMTQ3YmU4MTYzMTYyMjJlNTU4NGM3MDY4ZDMwNTQ0M2Y3YzBlNjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMjdlNDA5NS0yZjQ1LTRlYzktOGY3NS1lNzk5
Mzg1ZmJhZDAvNzk3ZmJjNmNkZGEyZjM2NjFiMmEzMzUwNjBjYjg0ZDgwODcwNjY1
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7YxDANBgkqhkiG9w0BAQsFAAOCAQEAOsyBOHDJ2b3cIE40
xefjTsGl3C8JES3npjGRCPDe//qmgQEo6JWD9O03rzjJ2AMLdPng/SUtAXH1OslA
fq8zP8PxcO6pnWJsh8uLpuneZBhTsDg4I0l7hPATcdy7bCt1UQ2FiZDadSAdbSb1
6bzqAENnWnMqLuCObg8lQ1BjBdX1COmyKnHxvSnkG0RZSSTWqQxZ4xzkANJ+zjbe
EUJHh2ktG87V4l0D8ypXmnWce0CTYd6qdttLY4yIynMRa/diiEem04ayOdArp7cg
iVKS4cDX9m+XEIuz61FpFssAihT81hVY1jRy3hrColn58m0tWMR1pU4cuhgeoGpl
bDeD/g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org