Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/1673734cdab8a8ed6f9c8392c35f5705ab3be60b.roa
File:                     1673734cdab8a8ed6f9c8392c35f5705ab3be60b.roa (raw, json)
Hash identifier:          GSJ7k8swwu2Hs+QN/8SBI2SY0GX0p8iHxv/u+Ie9Wo4=
Subject key identifier:   95:AC:2F:F0:28:C4:10:C1:17:50:95:9F:5E:3D:3F:52:17:69:DC:99
Certificate issuer:       /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial:       235E38
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/1673734cdab8a8ed6f9c8392c35f5705ab3be60b.roa
Signing time:             Sat 08 Jul 2023 05:09:17 +0000
ROA not before:           Fri 07 Jul 2023 05:09:16 +0000
ROA not after:            Tue 08 Jul 2025 05:09:16 +0000
asID:                     61461
IP address blocks:        190.124.29.0/24 maxlen: 24
                          190.124.30.0/23 maxlen: 23
                          190.124.30.0/24 maxlen: 24
                          190.124.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317880 (0x235e38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
        Validity
            Not Before: Jul  7 05:09:16 2023 GMT
            Not After : Jul  8 05:09:16 2025 GMT
        Subject: CN=1673734cdab8a8ed6f9c8392c35f5705ab3be60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:5e:b1:24:53:a8:4f:9f:23:56:33:f1:97:
                    6d:1d:ea:6f:11:c0:35:04:a9:e4:44:af:e6:a6:db:
                    76:1e:62:1e:c6:21:11:11:db:14:15:2b:b6:fd:51:
                    d9:a4:53:ca:59:75:ba:cd:94:cf:ce:b1:95:01:82:
                    ea:3a:d1:2b:fb:a8:bd:4b:b6:8f:01:ca:58:11:aa:
                    30:40:98:d5:f9:8f:07:b3:41:7e:d2:c2:0a:42:6f:
                    6b:76:da:ec:68:15:b8:25:4f:87:e7:5d:24:88:2f:
                    70:0a:b7:a1:8f:de:68:cc:64:dd:1e:52:7d:d3:a7:
                    d0:0a:cc:c7:45:2e:43:2b:9c:59:06:d8:5a:5b:00:
                    89:b2:3d:57:7d:f1:cd:74:0f:25:c7:3b:84:c7:7a:
                    17:64:dd:21:a4:87:08:1f:c3:85:1c:51:5d:34:31:
                    af:8e:15:a5:99:aa:38:dd:f2:7a:ad:e6:4c:4e:83:
                    88:0f:5d:2e:e3:d3:70:23:c6:54:e1:b9:d7:7d:cb:
                    d8:9d:df:0a:13:17:3f:b6:4e:2a:dd:53:60:08:71:
                    9b:ca:2b:27:90:1a:9f:c5:d3:74:e4:23:dd:62:0b:
                    00:10:7e:30:de:f3:10:54:d0:60:2f:88:3a:af:07:
                    d6:c5:e9:6f:88:7f:29:36:6a:d2:17:1c:4c:52:0f:
                    f6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AC:2F:F0:28:C4:10:C1:17:50:95:9F:5E:3D:3F:52:17:69:DC:99
            X509v3 Authority Key Identifier:
                keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/1673734cdab8a8ed6f9c8392c35f5705ab3be60b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.29.0-190.124.31.255

    Signature Algorithm: sha256WithRSAEncryption
         5b:35:f5:be:e3:c5:42:49:c9:5a:96:ca:4c:30:b3:f5:cb:9b:
         31:f6:9d:d0:17:be:2e:6c:ab:5d:f8:1a:db:b0:12:64:ca:95:
         43:1f:96:cb:f7:8e:58:d6:23:f8:02:1e:47:cb:cd:88:e8:63:
         cf:9a:90:4f:75:e1:88:59:9c:b6:b1:9d:a7:13:ca:37:94:17:
         d1:1f:31:e9:da:b8:91:e8:2c:dd:f4:c8:1a:0a:eb:76:a3:1e:
         5a:b6:c4:6f:bf:e7:ea:14:10:58:c0:bf:af:24:28:ba:b7:da:
         c2:0d:89:f7:61:f1:18:46:b1:be:2b:e2:06:65:ea:75:9a:61:
         0f:8b:dd:17:af:d6:64:b1:03:39:1a:aa:0b:a4:68:01:8d:0e:
         70:88:db:bd:d6:30:33:4e:b4:63:ab:89:15:11:e9:1b:3e:35:
         0c:b8:27:69:e5:11:28:f2:66:42:e6:d0:c6:e3:d8:7c:62:e3:
         e4:f0:77:47:f0:0d:26:fd:98:8d:8a:01:e4:56:8b:dd:ae:c5:
         83:45:33:1b:74:d1:e7:a6:bc:c3:5d:c7:9e:2f:f5:15:00:52:
         06:68:6c:9e:61:a1:92:81:1d:ce:b5:90:f1:3d:a9:c7:b4:12:
         6f:db:00:ce:32:f6:f1:c5:25:cf:57:e6:3b:ee:72:14:67:39:
         0d:9d:2c:b4
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDI144MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFi
MzJlZjNhODllMzgyZWE0Y2EwZTliMGZjNjY4MGFjNGRkODljNjgwHhcNMjMwNzA3
MDUwOTE2WhcNMjUwNzA4MDUwOTE2WjAzMTEwLwYDVQQDEygxNjczNzM0Y2RhYjhh
OGVkNmY5YzgzOTJjMzVmNTcwNWFiM2JlNjBiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4VVesSRTqE+fI1Yz8ZdtHepvEcA1BKnkRK/mptt2HmIexiER
EdsUFSu2/VHZpFPKWXW6zZTPzrGVAYLqOtEr+6i9S7aPAcpYEaowQJjV+Y8Hs0F+
0sIKQm9rdtrsaBW4JU+H510kiC9wCrehj95ozGTdHlJ906fQCszHRS5DK5xZBtha
WwCJsj1XffHNdA8lxzuEx3oXZN0hpIcIH8OFHFFdNDGvjhWlmao43fJ6reZMToOI
D10u49NwI8ZU4bnXfcvYnd8KExc/tk4q3VNgCHGbyisnkBqfxdN05CPdYgsAEH4w
3vMQVNBgL4g6rwfWxelviH8pNmrSFxxMUg/2RQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFJWsL/AoxBDBF1CVn149P1IXadyZMB8GA1UdIwQYMBaAFMGsGY88wAcWyo6U
h+hJDQs/q15VMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWIzMmVm
M2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWUzMTM4YTUtYmE4OC00MjQxLWFkZWItMzE2YTNj
YTUyNGU1LzE2NzM3MzRjZGFiOGE4ZWQ2ZjljODM5MmMzNWY1NzA1YWIzYmU2MGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZTMxMzhhNS1iYTg4LTQyNDEtYWRlYi0zMTZh
M2NhNTI0ZTUvYWIzMmVmM2E4OWUzODJlYTRjYTBlOWIwZmM2NjgwYWM0ZGQ4OWM2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAvnwdAwQFvnwAMA0GCSqGSIb3DQEBCwUAA4IBAQBbNfW+
48VCSclalspMMLP1y5sx9p3QF74ubKtd+BrbsBJkypVDH5bL945Y1iP4Ah5Hy82I
6GPPmpBPdeGIWZy2sZ2nE8o3lBfRHzHp2riR6Czd9MgaCut2ox5atsRvv+fqFBBY
wL+vJCi6t9rCDYn3YfEYRrG+K+IGZep1mmEPi90Xr9ZksQM5GqoLpGgBjQ5wiNu9
1jAzTrRjq4kVEekbPjUMuCdp5REo8mZC5tDG49h8YuPk8HdH8A0m/ZiNigHkVovd
rsWDRTMbdNHnprzDXceeL/UVAFIGaGyeYaGSgR3OtZDxPanHtBJv2wDOMvbxxSXP
V+Y77nIUZzkNnSy0
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org