Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/3b23dd89711a4f8eca56cd71ed41313af9c90ae2.roa
File:                     3b23dd89711a4f8eca56cd71ed41313af9c90ae2.roa (raw, json)
Hash identifier:          81KG61J0WHuHREMFhz0GfEUQLaemzYBDUPPZ7H0Hxsc=
Subject key identifier:   1A:77:95:92:7D:54:00:8B:E5:77:52:D6:10:88:4D:50:6F:37:05:3D
Certificate issuer:       /CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
Certificate serial:       01091A
Authority key identifier: 95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/3b23dd89711a4f8eca56cd71ed41313af9c90ae2.roa
Signing time:             Sun 14 May 2023 15:35:20 +0000
ROA not before:           Sat 13 May 2023 15:35:20 +0000
ROA not after:            Wed 14 May 2025 15:35:20 +0000
asID:                     271968
IP address blocks:        190.110.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67866 (0x1091a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
        Validity
            Not Before: May 13 15:35:20 2023 GMT
            Not After : May 14 15:35:20 2025 GMT
        Subject: CN=3b23dd89711a4f8eca56cd71ed41313af9c90ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4f:f5:5f:32:66:ee:5a:89:54:60:fb:60:b5:
                    2a:67:ca:9e:ca:42:87:ff:dd:4b:4e:78:c6:84:86:
                    5d:71:4a:dc:78:15:73:31:40:8f:b6:39:67:df:c2:
                    4f:5b:d4:02:a3:6d:6e:19:bc:72:eb:7d:42:db:ef:
                    24:3b:87:cd:88:ac:6d:15:73:b7:36:38:81:bb:9e:
                    1a:dc:40:a8:b2:84:2f:85:14:da:84:31:5b:7e:81:
                    cc:40:04:86:b3:3f:42:e6:22:26:e1:25:c5:fb:e9:
                    7c:71:dc:30:b8:3e:8d:3b:fc:57:be:77:ba:60:4b:
                    7b:0a:c7:1c:8b:5c:71:66:1d:89:2a:1b:74:97:e6:
                    35:f6:be:f2:27:56:06:75:20:fe:e7:23:8e:a9:47:
                    67:6c:fb:75:04:2b:c9:b4:14:bc:a1:89:99:88:46:
                    83:31:44:02:d4:61:20:06:b1:f8:bf:df:a6:90:bf:
                    3f:fd:1c:89:c5:b2:3e:14:de:d7:2a:8f:18:ee:03:
                    76:3a:a1:df:59:22:ef:e1:5b:34:9a:48:18:a5:e1:
                    b0:95:c2:c6:d8:a4:56:f7:41:10:d8:77:62:a3:b8:
                    99:88:51:c2:5c:c0:dc:17:ea:50:2d:56:a0:30:09:
                    70:af:aa:88:f5:08:14:f7:dc:ed:b4:13:80:4e:e8:
                    dd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:77:95:92:7D:54:00:8B:E5:77:52:D6:10:88:4D:50:6F:37:05:3D
            X509v3 Authority Key Identifier:
                keyid:95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/3b23dd89711a4f8eca56cd71ed41313af9c90ae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:93:f4:af:e2:de:34:de:0c:7e:7b:ee:92:13:20:46:4a:f8:
         8d:7b:75:8e:79:42:88:31:a8:65:ee:8a:46:fc:3d:b5:be:7f:
         c6:58:b9:aa:fc:e1:f3:12:4b:e5:4b:b7:9c:5b:3e:70:ea:c3:
         c3:a3:97:ff:f3:9d:78:05:1c:2f:2c:53:b7:88:33:ad:a1:b5:
         b0:d1:40:1b:41:75:03:75:17:e6:65:92:7f:1c:78:fe:40:c6:
         9b:64:9e:48:23:ad:53:9d:7b:ba:2c:f6:78:25:87:c7:39:78:
         ec:f6:7c:de:70:62:70:7b:ac:a9:0e:aa:40:22:8c:e4:a9:8b:
         0c:13:53:27:21:17:5d:70:77:ec:74:3c:7c:40:94:50:5e:ac:
         50:8a:e6:0a:59:5b:89:37:e9:6b:a0:55:d0:6c:e6:b9:7c:81:
         c7:01:0d:a2:1f:28:8b:85:e1:01:8f:29:83:ae:10:22:4f:03:
         c4:4a:52:41:eb:13:bf:93:a7:1c:25:97:c9:0d:50:e9:b4:20:
         0c:0e:b1:6a:c3:fa:a8:4a:5d:60:d5:34:2b:81:bd:8e:5f:52:
         3f:20:b1:37:63:c5:00:4f:cc:fc:4a:e5:e7:f5:f0:20:a9:9e:
         0c:60:5d:23:6a:a6:4e:52:84:00:61:c3:1d:66:60:bd:dc:00:
         21:76:55:e8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAQkaMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk0
N2U3MGQyNGQ3YzJhYmY4ZjcwMWI0OGExZGNmMDYyMDU5YjJiYmUwHhcNMjMwNTEz
MTUzNTIwWhcNMjUwNTE0MTUzNTIwWjAzMTEwLwYDVQQDEygzYjIzZGQ4OTcxMWE0
ZjhlY2E1NmNkNzFlZDQxMzEzYWY5YzkwYWUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsE/1XzJm7lqJVGD7YLUqZ8qeykKH/91LTnjGhIZdcUrceBVz
MUCPtjln38JPW9QCo21uGbxy631C2+8kO4fNiKxtFXO3NjiBu54a3ECosoQvhRTa
hDFbfoHMQASGsz9C5iIm4SXF++l8cdwwuD6NO/xXvne6YEt7Cscci1xxZh2JKht0
l+Y19r7yJ1YGdSD+5yOOqUdnbPt1BCvJtBS8oYmZiEaDMUQC1GEgBrH4v9+mkL8/
/RyJxbI+FN7XKo8Y7gN2OqHfWSLv4Vs0mkgYpeGwlcLG2KRW90EQ2Hdio7iZiFHC
XMDcF+pQLVagMAlwr6qI9QgU99zttBOATujdZwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBp3lZJ9VACL5XdS1hCITVBvNwU9MB8GA1UdIwQYMBaAFJVYZFj/COXKpL7h
Bfo12EOK6DWoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTQ3ZTcw
ZDI0ZDdjMmFiZjhmNzAxYjQ4YTFkY2YwNjIwNTliMmJiZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMjRhZjQwNDUtYTE0YS00NjEzLWExOTItYjgzYjQw
MTQ5Y2VmLzNiMjNkZDg5NzExYTRmOGVjYTU2Y2Q3MWVkNDEzMTNhZjljOTBhZTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8yNGFmNDA0NS1hMTRhLTQ2MTMtYTE5Mi1iODNi
NDAxNDljZWYvOTQ3ZTcwZDI0ZDdjMmFiZjhmNzAxYjQ4YTFkY2YwNjIwNTliMmJi
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5uJDANBgkqhkiG9w0BAQsFAAOCAQEACpP0r+LeNN4Mfnvu
khMgRkr4jXt1jnlCiDGoZe6KRvw9tb5/xli5qvzh8xJL5Uu3nFs+cOrDw6OX//Od
eAUcLyxTt4gzraG1sNFAG0F1A3UX5mWSfxx4/kDGm2SeSCOtU517uiz2eCWHxzl4
7PZ83nBicHusqQ6qQCKM5KmLDBNTJyEXXXB37HQ8fECUUF6sUIrmCllbiTfpa6BV
0GzmuXyBxwENoh8oi4XhAY8pg64QIk8DxEpSQesTv5OnHCWXyQ1Q6bQgDA6xasP6
qEpdYNU0K4G9jl9SPyCxN2PFAE/M/Erl5/XwIKmeDGBdI2qmTlKEAGHDHWZgvdwA
IXZV6A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org