Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/048525ce76e65a37d13f6ac18f1ea0a2da72ee68.roa
File:                     048525ce76e65a37d13f6ac18f1ea0a2da72ee68.roa (raw, json)
Hash identifier:          qtoLdTNrLqUffMtS7ODHcp2cjq78kAEhkfbyZ52d2Zo=
Subject key identifier:   60:BB:60:9C:4C:E0:1C:78:48:D9:87:A4:6E:16:7E:79:59:76:13:26
Certificate issuer:       /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial:       2A1794
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/048525ce76e65a37d13f6ac18f1ea0a2da72ee68.roa
Signing time:             Tue 30 Jan 2024 15:01:15 +0000
ROA not before:           Tue 30 Jan 2024 15:00:49 +0000
ROA not after:            Tue 30 Jan 2029 15:00:49 +0000
asID:                     263834
IP address blocks:        190.110.229.0/24 maxlen: 24
                          190.110.230.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2758548 (0x2a1794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
        Validity
            Not Before: Jan 30 15:00:49 2024 GMT
            Not After : Jan 30 15:00:49 2029 GMT
        Subject: CN=048525ce76e65a37d13f6ac18f1ea0a2da72ee68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e0:25:18:77:a2:49:cd:16:c9:4a:de:a8:e2:
                    e4:44:ce:37:8e:3e:ed:15:ca:18:dd:75:3f:5b:06:
                    da:5b:c7:bf:df:1d:7b:8a:a4:37:fb:52:5b:64:42:
                    8a:70:fc:25:60:82:2d:38:07:02:6f:35:c2:29:d4:
                    cd:c4:11:17:9e:67:ab:42:77:d0:4e:52:08:6d:8a:
                    4b:1d:39:1e:a6:eb:f1:fb:71:5b:53:8f:5b:da:24:
                    e9:4d:7a:27:f6:d9:6f:af:79:0e:9b:7d:41:e3:fc:
                    d8:5d:41:0c:50:cd:3f:23:01:8e:8a:1c:f8:9f:df:
                    6d:67:bc:60:05:bc:d7:2b:7d:a4:cb:70:b3:bc:4e:
                    5a:3a:5b:f0:76:77:4e:d2:c8:de:b7:dd:c5:4f:e3:
                    7c:eb:bb:77:a5:7c:5a:87:23:54:92:21:f8:5b:8d:
                    c2:7e:7e:09:d4:c8:3b:1b:19:6b:1c:27:1e:7e:72:
                    83:c8:df:e6:b6:af:c5:a0:ac:fa:0e:3e:22:42:6a:
                    f0:18:04:1c:21:77:e8:53:40:53:2e:a2:4c:fe:fe:
                    56:bc:91:64:25:ab:62:15:0a:88:59:51:f9:e9:d8:
                    b1:04:ae:ef:7f:66:3c:66:ea:8f:4b:1b:03:ca:ec:
                    41:e1:2b:1d:c1:d7:31:01:e7:0c:1c:c5:32:b2:a5:
                    54:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BB:60:9C:4C:E0:1C:78:48:D9:87:A4:6E:16:7E:79:59:76:13:26
            X509v3 Authority Key Identifier:
                keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/048525ce76e65a37d13f6ac18f1ea0a2da72ee68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.229.0-190.110.231.255

    Signature Algorithm: sha256WithRSAEncryption
         20:09:e8:5a:88:81:d8:ec:8e:ec:e2:24:e0:35:ae:3c:bd:c0:
         4b:38:e2:78:49:6b:cb:27:d3:38:e7:86:91:16:07:6b:1b:72:
         9b:3a:31:2e:22:a0:c7:69:e0:a1:56:ba:9a:e6:00:df:51:c9:
         64:0f:ff:dd:09:97:bc:de:3c:37:9b:bb:7f:bc:0c:2f:f9:61:
         01:fa:b1:22:20:cd:46:be:54:77:eb:34:6a:2b:e0:c7:f5:13:
         d8:f9:4d:53:06:04:59:17:77:d2:4f:c7:a9:9c:11:61:23:1e:
         ff:72:6b:fe:89:d5:66:f2:d0:53:a4:dc:53:ec:4a:2e:d8:49:
         6f:39:9e:5d:14:73:96:b6:81:6d:57:b8:b6:51:80:75:34:b3:
         76:3a:5b:47:94:f2:40:9e:dc:ac:14:73:8a:69:b0:09:32:3d:
         2e:be:6a:e3:96:2f:84:8d:1c:fe:8e:a4:a4:13:ff:83:af:f9:
         7c:83:f7:fc:c3:59:c2:1a:f0:53:30:2a:33:15:d0:d9:1f:14:
         27:db:ad:17:0f:d7:8c:cb:14:48:da:79:49:98:9d:b4:cc:f7:
         4e:bf:be:fb:37:07:84:ae:69:63:73:35:a1:79:29:83:a3:48:
         70:34:af:01:e6:79:06:ce:a4:1c:84:d4:04:6c:56:34:88:ea:
         87:a1:0b:8d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDKheUMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDUy
OWQyOGE1NzY5YWYxZTE5ODdhYWRhNTJkNGQ5YWMzYmVjMzliNjgwHhcNMjQwMTMw
MTUwMDQ5WhcNMjkwMTMwMTUwMDQ5WjAzMTEwLwYDVQQDEygwNDg1MjVjZTc2ZTY1
YTM3ZDEzZjZhYzE4ZjFlYTBhMmRhNzJlZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh+AlGHeiSc0WyUreqOLkRM43jj7tFcoY3XU/WwbaW8e/3x17
iqQ3+1JbZEKKcPwlYIItOAcCbzXCKdTNxBEXnmerQnfQTlIIbYpLHTkepuvx+3Fb
U49b2iTpTXon9tlvr3kOm31B4/zYXUEMUM0/IwGOihz4n99tZ7xgBbzXK32ky3Cz
vE5aOlvwdndO0sjet93FT+N867t3pXxahyNUkiH4W43Cfn4J1Mg7GxlrHCcefnKD
yN/mtq/FoKz6Dj4iQmrwGAQcIXfoU0BTLqJM/v5WvJFkJatiFQqIWVH56dixBK7v
f2Y8ZuqPSxsDyuxB4SsdwdcxAecMHMUysqVUeQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFGC7YJxM4Bx4SNmHpG4WfnlZdhMmMB8GA1UdIwQYMBaAFEN2esi5xEbkE92i
tcmFOhdopOHFMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNTI5ZDI4
YTU3NjlhZjFlMTk4N2FhZGE1MmQ0ZDlhYzNiZWMzOWI2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzgyODMwNDctODgzNC00M2Q1LTgyZjctNGQ5Mzhl
NjA1NzFlLzA0ODUyNWNlNzZlNjVhMzdkMTNmNmFjMThmMWVhMGEyZGE3MmVlNjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zODI4MzA0Ny04ODM0LTQzZDUtODJmNy00ZDkz
OGU2MDU3MWUvNTI5ZDI4YTU3NjlhZjFlMTk4N2FhZGE1MmQ0ZDlhYzNiZWMzOWI2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAvm7lAwQDvm7gMA0GCSqGSIb3DQEBCwUAA4IBAQAgCeha
iIHY7I7s4iTgNa48vcBLOOJ4SWvLJ9M454aRFgdrG3KbOjEuIqDHaeChVrqa5gDf
UclkD//dCZe83jw3m7t/vAwv+WEB+rEiIM1GvlR36zRqK+DH9RPY+U1TBgRZF3fS
T8epnBFhIx7/cmv+idVm8tBTpNxT7Eou2ElvOZ5dFHOWtoFtV7i2UYB1NLN2OltH
lPJAntysFHOKabAJMj0uvmrjli+EjRz+jqSkE/+Dr/l8g/f8w1nCGvBTMCozFdDZ
HxQn260XD9eMyxRI2nlJmJ20zPdOv777NweErmljczWheSmDo0hwNK8B5nkGzqQc
hNQEbFY0iOqHoQuN
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org