Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/5696e463621c69171f157dc8aa2c25b26710b4dc.roa
File:                     5696e463621c69171f157dc8aa2c25b26710b4dc.roa (raw, json)
Hash identifier:          //0VYmEl1N68oEq420otQ71EsM9Kml9DSi577q5WtLE=
Subject key identifier:   C2:B3:81:5E:77:0B:04:B0:FD:DE:39:3E:34:F2:47:0E:4B:7C:18:3E
Certificate issuer:       /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial:       1454AA
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/5696e463621c69171f157dc8aa2c25b26710b4dc.roa
Signing time:             Tue 17 Oct 2023 17:19:47 +0000
ROA not before:           Mon 16 Oct 2023 17:19:47 +0000
ROA not after:            Fri 17 Oct 2025 17:19:47 +0000
asID:                     52362
IP address blocks:        190.104.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1332394 (0x1454aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
        Validity
            Not Before: Oct 16 17:19:47 2023 GMT
            Not After : Oct 17 17:19:47 2025 GMT
        Subject: CN=5696e463621c69171f157dc8aa2c25b26710b4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f2:a5:7a:0a:c2:a3:48:ba:47:9d:54:81:ae:
                    b4:48:b6:9a:33:76:24:2a:c7:b1:7b:c8:b1:f9:99:
                    00:a8:e3:34:4b:4e:dc:b1:c4:4a:1c:d0:cd:f1:e8:
                    70:e9:90:d0:89:7f:a8:ea:35:44:b9:8b:8e:5a:80:
                    02:4b:d8:ac:8d:f3:2a:d0:fe:7c:39:bc:20:93:09:
                    78:ba:5d:c3:fa:16:9c:f3:1e:d3:c2:52:57:a9:c9:
                    80:e4:06:9c:5a:af:e1:40:03:4d:2b:7a:f7:2e:de:
                    99:45:fe:c5:18:c3:e3:47:a0:44:32:bc:de:ed:f2:
                    fc:47:51:dc:63:a2:c3:49:fc:a7:2b:c5:1d:51:df:
                    43:d5:07:14:37:87:23:17:c8:c2:51:f0:02:58:e3:
                    9f:20:b9:a6:e2:5f:d9:6b:1a:2f:e7:e0:12:8a:8b:
                    a0:d4:0b:ed:14:c4:43:e8:22:65:ea:57:6c:0f:34:
                    de:2d:7d:b7:c9:77:4a:0f:8b:03:11:68:64:62:1a:
                    28:b2:a9:6f:a0:13:10:ab:75:25:a6:3d:0b:6e:e5:
                    c2:97:c8:25:26:bb:fa:6d:48:5d:9d:56:23:4f:d8:
                    78:fa:17:36:90:9f:a1:44:d4:84:8b:f2:29:9d:3a:
                    8a:da:9e:41:bf:56:ff:9e:8b:08:ab:9b:21:99:f2:
                    62:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B3:81:5E:77:0B:04:B0:FD:DE:39:3E:34:F2:47:0E:4B:7C:18:3E
            X509v3 Authority Key Identifier:
                keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/5696e463621c69171f157dc8aa2c25b26710b4dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:02:5d:09:37:32:5e:bf:66:f7:24:ec:40:a3:fb:0b:02:96:
         42:23:ce:54:bb:0d:fb:1b:c7:10:6a:ff:4b:d0:a0:84:e6:6c:
         e9:f6:ec:f5:d8:03:88:9b:91:98:0d:a6:ad:bb:5a:eb:8b:9f:
         69:c6:5b:d1:42:56:f0:04:86:42:e6:e8:8f:c5:c3:2e:18:c0:
         39:93:59:c7:8f:e6:02:54:92:0f:f8:02:9c:1d:cb:cb:19:04:
         da:12:a0:80:40:57:e7:a0:57:b1:be:dc:7a:c7:16:37:b3:7a:
         3b:5c:12:41:39:03:58:5d:4e:92:f0:ba:ec:06:88:1f:c0:0b:
         1d:f2:51:88:42:c1:76:ea:9a:92:a9:7b:17:ee:44:f2:b9:34:
         86:2a:b5:8a:fa:52:96:e3:80:fd:56:5f:2e:d6:0c:03:93:2a:
         bf:3c:e7:ef:81:04:1b:c0:aa:ca:16:9b:a7:7b:ab:0c:0c:f3:
         84:13:c8:47:56:7b:d8:cb:ca:99:74:57:45:a1:f7:a1:93:00:
         ed:10:73:28:ff:96:4f:36:8b:dd:24:56:59:af:55:5b:da:a0:
         42:7b:a2:c0:94:f6:93:0b:ad:82:f8:60:ad:37:e9:b9:22:57:
         7e:1d:dd:30:4f:ea:14:04:c3:49:66:5b:b3:d3:93:62:25:94:
         6b:88:67:94
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFFSqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh
YzVlYTE2YWQwN2QyOWQyZDI5ZGI4ZmJkNWIzODkzNTcxYmI2MzEwHhcNMjMxMDE2
MTcxOTQ3WhcNMjUxMDE3MTcxOTQ3WjAzMTEwLwYDVQQDEyg1Njk2ZTQ2MzYyMWM2
OTE3MWYxNTdkYzhhYTJjMjViMjY3MTBiNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApvKlegrCo0i6R51Uga60SLaaM3YkKsexe8ix+ZkAqOM0S07c
scRKHNDN8ehw6ZDQiX+o6jVEuYuOWoACS9isjfMq0P58Obwgkwl4ul3D+hac8x7T
wlJXqcmA5AacWq/hQANNK3r3Lt6ZRf7FGMPjR6BEMrze7fL8R1HcY6LDSfynK8Ud
Ud9D1QcUN4cjF8jCUfACWOOfILmm4l/Zaxov5+ASioug1AvtFMRD6CJl6ldsDzTe
LX23yXdKD4sDEWhkYhoosqlvoBMQq3Ulpj0LbuXCl8glJrv6bUhdnVYjT9h4+hc2
kJ+hRNSEi/IpnTqK2p5Bv1b/nosIq5shmfJiKQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMKzgV53CwSw/d45PjTyRw5LfBg+MB8GA1UdIwQYMBaAFDrG5K+IVuzPEeu+
ylyOUFpcGREmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGFjNWVh
MTZhZDA3ZDI5ZDJkMjlkYjhmYmQ1YjM4OTM1NzFiYjYzMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTJjNWE0NGMtZjIzZi00NDg4LTk3NmUtZjNiN2Q3
ODI4ZWJkLzU2OTZlNDYzNjIxYzY5MTcxZjE1N2RjOGFhMmMyNWIyNjcxMGI0ZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xMmM1YTQ0Yy1mMjNmLTQ0ODgtOTc2ZS1mM2I3
ZDc4MjhlYmQvNGFjNWVhMTZhZDA3ZDI5ZDJkMjlkYjhmYmQ1YjM4OTM1NzFiYjYz
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5oczANBgkqhkiG9w0BAQsFAAOCAQEAKAJdCTcyXr9m9yTs
QKP7CwKWQiPOVLsN+xvHEGr/S9CghOZs6fbs9dgDiJuRmA2mrbta64ufacZb0UJW
8ASGQuboj8XDLhjAOZNZx4/mAlSSD/gCnB3LyxkE2hKggEBX56BXsb7cescWN7N6
O1wSQTkDWF1OkvC67AaIH8ALHfJRiELBduqakql7F+5E8rk0hiq1ivpSluOA/VZf
LtYMA5Mqvzzn74EEG8Cqyhabp3urDAzzhBPIR1Z72MvKmXRXRaH3oZMA7RBzKP+W
TzaL3SRWWa9VW9qgQnuiwJT2kwutgvhgrTfpuSJXfh3dME/qFATDSWZbs9OTYiWU
a4hnlA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org