Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/a7e6539e84ff7a404d63cef15370ea935b5dc548.roa
File:                     a7e6539e84ff7a404d63cef15370ea935b5dc548.roa (raw, json)
Hash identifier:          lx18b04EdR4j3vsn37yqtE44cBFskRu5gBy0e96un4U=
Subject key identifier:   59:8A:25:60:35:CE:60:FB:0E:83:1B:31:EE:A9:E6:2C:B8:CF:CC:61
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EA67F
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/a7e6539e84ff7a404d63cef15370ea935b5dc548.roa
Signing time:             Wed 24 Mar 2021 14:37:45 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960127 (0xea67f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=a7e6539e84ff7a404d63cef15370ea935b5dc548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:a5:d2:df:d4:8f:f9:65:40:61:68:1f:f5:
                    cf:91:c2:8d:58:cc:ef:19:ca:16:95:29:51:54:61:
                    8d:06:e1:d2:00:91:8c:b9:41:34:dd:47:92:92:85:
                    12:a4:26:73:1c:70:3d:51:4e:14:27:15:02:69:d9:
                    3f:ea:7e:4d:d0:dc:f3:c6:b7:2d:b7:9a:67:93:e2:
                    c4:e0:43:40:3d:be:0c:e5:80:20:15:35:f8:5b:a3:
                    aa:eb:f8:5b:d6:5e:55:6f:b8:a0:7f:99:f0:03:eb:
                    a3:2c:d5:82:9f:70:32:c3:91:d5:e2:00:9a:7f:27:
                    fc:cc:dc:b9:78:9b:49:cd:3e:e6:fe:1d:df:d1:8d:
                    8d:f5:a1:71:79:60:95:0a:58:ec:f2:cf:e4:ed:ee:
                    c8:e4:d4:e3:36:bd:b7:ff:3c:cc:15:74:cf:93:ef:
                    0b:12:6c:9e:63:15:18:ea:cc:a0:04:30:03:50:60:
                    8b:75:6d:e2:0d:46:15:f2:36:34:cb:5b:7c:a2:3a:
                    ce:1f:c4:1e:0e:af:13:5c:23:4e:b8:66:e8:9b:eb:
                    69:74:11:4f:bd:ab:8f:af:f2:76:3e:50:83:c9:b5:
                    9a:0c:5b:15:00:6e:6f:cb:17:9d:6d:19:96:e8:5a:
                    63:c2:fc:f8:6a:a3:b2:c0:6b:55:76:ab:84:26:1e:
                    b0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8A:25:60:35:CE:60:FB:0E:83:1B:31:EE:A9:E6:2C:B8:CF:CC:61
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/a7e6539e84ff7a404d63cef15370ea935b5dc548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:a8:25:e9:b2:0e:cf:00:db:98:b4:e0:76:57:1f:10:61:06:
         f1:67:df:cd:37:0f:72:c8:41:1f:80:6a:be:cb:a4:f2:ff:4e:
         19:31:e1:53:f8:19:15:d9:58:ed:e5:eb:9d:ec:93:fa:e4:9e:
         fd:79:a0:66:aa:e3:72:f5:71:a6:a7:d4:a0:c6:c3:db:02:e1:
         7b:04:15:aa:92:87:b5:35:92:f8:ac:0f:1c:d3:a8:7b:73:31:
         b9:ed:a5:a3:6e:a6:4e:17:b5:65:df:9d:ab:0b:89:03:57:42:
         ca:bc:d2:da:5b:49:fd:1d:d7:d6:90:eb:63:24:84:4b:aa:ad:
         fe:81:cf:fe:43:b6:da:cd:8e:fc:0a:47:7a:f9:49:c5:87:f3:
         ac:59:53:1a:ce:e9:39:bc:5a:75:9d:1b:7b:9d:cb:00:fb:01:
         20:b3:03:50:bd:f4:07:6d:04:85:b9:be:85:8f:ae:47:93:87:
         96:9a:44:e6:5c:da:c6:f4:44:f7:bd:68:e3:89:ba:c3:8a:00:
         07:ac:20:99:b3:61:56:4a:ec:cc:6c:8d:af:1d:63:9c:c8:1a:
         41:ea:40:92:f1:b5:ba:0b:95:e0:12:ef:90:55:92:57:f1:74:
         f3:7d:f1:b0:31:cd:a4:cb:f7:38:be:27:e1:43:d7:48:ed:d1:
         6f:6e:09:19
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDqZ/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhh
M2RiNGY2OWI5MjQ0MWE1OTMwY2VmNGY1NDJhZTBjNDNlNGQ4Y2YwHhcNMjEwMzI0
MTQzNzQxWhcNMjYwMzI0MTQzNzQxWjAzMTEwLwYDVQQDEyhhN2U2NTM5ZTg0ZmY3
YTQwNGQ2M2NlZjE1MzcwZWE5MzViNWRjNTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwxGl0t/Uj/llQGFoH/XPkcKNWMzvGcoWlSlRVGGNBuHSAJGM
uUE03UeSkoUSpCZzHHA9UU4UJxUCadk/6n5N0Nzzxrctt5pnk+LE4ENAPb4M5YAg
FTX4W6Oq6/hb1l5Vb7igf5nwA+ujLNWCn3Ayw5HV4gCafyf8zNy5eJtJzT7m/h3f
0Y2N9aFxeWCVCljs8s/k7e7I5NTjNr23/zzMFXTPk+8LEmyeYxUY6sygBDADUGCL
dW3iDUYV8jY0y1t8ojrOH8QeDq8TXCNOuGbom+tpdBFPvauPr/J2PlCDybWaDFsV
AG5vyxedbRmW6Fpjwvz4aqOywGtVdquEJh6woQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFmKJWA1zmD7DoMbMe6p5iy4z8xhMB8GA1UdIwQYMBaAFHYiKXGymVZjfZfU
AQzFxRybG4SeMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGEzZGI0
ZjY5YjkyNDQxYTU5MzBjZWY0ZjU0MmFlMGM0M2U0ZDhjZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTg2NWEwNzQtYWMzMS00Y2Y3LTlhOTItNWZhOTM0
ZGJkNmVkL2E3ZTY1MzllODRmZjdhNDA0ZDYzY2VmMTUzNzBlYTkzNWI1ZGM1NDgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xODY1YTA3NC1hYzMxLTRjZjctOWE5Mi01ZmE5
MzRkYmQ2ZWQvOGEzZGI0ZjY5YjkyNDQxYTU5MzBjZWY0ZjU0MmFlMGM0M2U0ZDhj
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dozANBgkqhkiG9w0BAQsFAAOCAQEAQagl6bIOzwDbmLTg
dlcfEGEG8WffzTcPcshBH4Bqvsuk8v9OGTHhU/gZFdlY7eXrneyT+uSe/XmgZqrj
cvVxpqfUoMbD2wLhewQVqpKHtTWS+KwPHNOoe3Mxue2lo26mThe1Zd+dqwuJA1dC
yrzS2ltJ/R3X1pDrYySES6qt/oHP/kO22s2O/ApHevlJxYfzrFlTGs7pObxadZ0b
e53LAPsBILMDUL30B20Ehbm+hY+uR5OHlppE5lzaxvRE971o44m6w4oAB6wgmbNh
VkrszGyNrx1jnMgaQepAkvG1uguV4BLvkFWSV/F0833xsDHNpMv3OL4n4UPXSO3R
b24JGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org