Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/98cafdc8d089021d1acf79931ef938e812a5a0b8.roa
File:                     98cafdc8d089021d1acf79931ef938e812a5a0b8.roa (raw, json)
Hash identifier:          YSYTlsV4Yqw6q8yvYpSXm/CY/J9i53sLX44c8q0Mllo=
Subject key identifier:   80:6F:7B:84:B0:75:09:96:FE:B1:A2:BC:52:C2:E5:0D:93:C0:C6:55
Certificate issuer:       /CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Certificate serial:       20887B
Authority key identifier: 5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/98cafdc8d089021d1acf79931ef938e812a5a0b8.roa
Signing time:             Fri 12 May 2023 17:03:32 +0000
ROA not before:           Thu 11 May 2023 17:03:30 +0000
ROA not after:            Mon 12 May 2025 17:03:30 +0000
asID:                     10620
IP address blocks:        190.126.0.0/15 maxlen: 24
                          191.156.215.0/24 maxlen: 24
                          190.130.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2132091 (0x20887b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
        Validity
            Not Before: May 11 17:03:30 2023 GMT
            Not After : May 12 17:03:30 2025 GMT
        Subject: CN=98cafdc8d089021d1acf79931ef938e812a5a0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:d2:b6:97:d3:8e:59:11:75:99:c6:fe:27:
                    fe:9c:dc:92:f9:52:c8:f4:50:0e:44:02:5f:33:16:
                    c5:c5:20:26:33:61:3f:f5:11:ed:9c:da:6e:38:c2:
                    f2:f0:52:1a:dd:41:74:30:ca:23:5d:aa:c9:bf:08:
                    e1:17:c0:d4:79:cd:66:e0:6b:2a:4b:4f:24:13:1e:
                    fe:d8:a5:38:03:0d:a9:fc:f3:f6:c0:74:fe:6f:9a:
                    8d:d2:8e:33:f3:b2:ea:37:d0:ac:88:50:02:68:3e:
                    43:89:6a:5e:26:1c:6c:47:b9:a6:79:f5:45:ce:c8:
                    3a:6f:d5:97:fd:4d:a3:0f:49:99:1e:2f:21:97:c7:
                    5f:f8:6d:37:7d:7c:4a:cf:8e:85:a1:9a:ac:25:68:
                    14:85:9d:09:45:73:87:d0:35:75:c7:8b:ae:5a:36:
                    ee:21:40:bc:ee:95:25:47:d0:72:c8:63:42:6d:cc:
                    54:e4:18:7f:50:c6:01:d4:3b:3a:02:48:72:33:d5:
                    92:79:f2:d2:b1:18:31:87:15:f8:3a:17:e7:dc:ff:
                    9d:b2:fc:7e:04:4a:5e:a1:03:26:42:99:87:8c:12:
                    79:2a:0b:89:3b:b1:8a:b7:d2:bf:dd:67:9a:73:05:
                    e4:0a:e2:25:e1:0a:f0:e9:4c:61:0e:d4:e9:e5:23:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6F:7B:84:B0:75:09:96:FE:B1:A2:BC:52:C2:E5:0D:93:C0:C6:55
            X509v3 Authority Key Identifier:
                keyid:5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/98cafdc8d089021d1acf79931ef938e812a5a0b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.126.0.0/15
                  190.130.64.0/18
                  191.156.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:88:ab:08:47:cc:c4:99:39:0f:5e:92:7f:22:cd:67:f6:e1:
         b4:aa:c5:93:8a:2a:ad:b5:8b:6e:db:c7:75:f5:48:9b:41:b2:
         b5:17:ec:e7:4c:df:e3:c0:d0:c3:cd:61:65:e0:e3:a4:65:7a:
         c2:cd:a2:a1:29:7e:b0:22:65:8b:6f:b4:60:3f:89:8b:d9:f0:
         33:f0:69:bb:a6:af:3f:ad:1c:56:de:fc:fc:fe:f2:c5:49:5a:
         58:8e:86:29:f3:12:43:86:01:40:47:3c:1f:92:7b:58:b3:64:
         1f:61:35:a5:e6:b0:9d:3a:a6:a3:4f:fd:4d:62:d9:a1:fb:78:
         f7:e5:a4:5e:00:8b:bd:87:cf:ae:59:de:35:00:71:15:1e:7e:
         1f:40:e9:2c:44:20:96:8e:42:45:ef:fe:6c:5a:4a:f3:de:8d:
         a4:c6:22:9a:1b:9e:cf:67:b5:64:f4:1a:62:04:f0:e1:fa:86:
         af:a5:7b:03:61:4e:f0:1c:26:ba:e7:bc:61:5c:31:d4:9e:d0:
         f2:51:51:7d:1b:5a:a7:94:90:0c:35:21:f7:db:c1:e1:2e:f5:
         1e:09:02:29:db:7d:ec:51:58:29:36:19:07:57:43:ba:4d:ca:
         c5:95:17:2f:9b:1b:64:01:f8:62:07:f0:7c:43:91:d1:13:6e:
         c0:15:32:3e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIDIIh7MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE2
OGFjYTk0NWU1YjRlMGZhNTc1YmJlMDNiMWFmNjUxNDZlZjBiNmYwHhcNMjMwNTEx
MTcwMzMwWhcNMjUwNTEyMTcwMzMwWjAzMTEwLwYDVQQDEyg5OGNhZmRjOGQwODkw
MjFkMWFjZjc5OTMxZWY5MzhlODEyYTVhMGI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnErStpfTjlkRdZnG/if+nNyS+VLI9FAORAJfMxbFxSAmM2E/
9RHtnNpuOMLy8FIa3UF0MMojXarJvwjhF8DUec1m4GsqS08kEx7+2KU4Aw2p/PP2
wHT+b5qN0o4z87LqN9CsiFACaD5DiWpeJhxsR7mmefVFzsg6b9WX/U2jD0mZHi8h
l8df+G03fXxKz46FoZqsJWgUhZ0JRXOH0DV1x4uuWjbuIUC87pUlR9ByyGNCbcxU
5Bh/UMYB1Ds6AkhyM9WSefLSsRgxhxX4Ohfn3P+dsvx+BEpeoQMmQpmHjBJ5KguJ
O7GKt9K/3WeacwXkCuIl4Qrw6UxhDtTp5SM9hQIDAQABo4ICZjCCAmIwHQYDVR0O
BBYEFIBve4SwdQmW/rGivFLC5Q2TwMZVMB8GA1UdIwQYMBaAFFxQ5QNp/Z+ZppL2
iLlivHesiqnLMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTY4YWNh
OTQ1ZTViNGUwZmE1NzViYmUwM2IxYWY2NTE0NmVmMGI2Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTgyMTgwNmMtMGU4Mi00MjA0LThiM2MtZGRlN2Mw
ZmM4ZDYyLzk4Y2FmZGM4ZDA4OTAyMWQxYWNmNzk5MzFlZjkzOGU4MTJhNWEwYjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODIxODA2Yy0wZTgyLTQyMDQtOGIzYy1kZGU3
YzBmYzhkNjIvYTY4YWNhOTQ1ZTViNGUwZmE1NzViYmUwM2IxYWY2NTE0NmVmMGI2
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAqBggrBgEFBQcBBwEB/wQb
MBkwFwQCAAEwEQMDAb5+AwQGvoJAAwQAv5zXMA0GCSqGSIb3DQEBCwUAA4IBAQAw
iKsIR8zEmTkPXpJ/Is1n9uG0qsWTiiqttYtu28d19UibQbK1F+znTN/jwNDDzWFl
4OOkZXrCzaKhKX6wImWLb7RgP4mL2fAz8Gm7pq8/rRxW3vz8/vLFSVpYjoYp8xJD
hgFARzwfkntYs2QfYTWl5rCdOqajT/1NYtmh+3j35aReAIu9h8+uWd41AHEVHn4f
QOksRCCWjkJF7/5sWkrz3o2kxiKaG57PZ7Vk9BpiBPDh+oavpXsDYU7wHCa657xh
XDHUntDyUVF9G1qnlJAMNSH328HhLvUeCQIp233sUVgpNhkHV0O6TcrFlRcvmxtk
AfhiB/B8Q5HRE27AFTI+
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org