Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/60cef3c2257e9560100c6431f5d88c4e954d0f96.roa
File:                     60cef3c2257e9560100c6431f5d88c4e954d0f96.roa (raw, json)
Hash identifier:          3FALreqFEizsisxVYWs0LkRTVF7mr6deKGTDbj2ayys=
Subject key identifier:   FF:E3:B1:DD:30:54:32:FB:50:D4:6F:36:A0:1A:33:F5:A1:9F:F0:42
Certificate issuer:       /CN=444e0076eea4611dce8c3e39bffef12743fb4711
Certificate serial:       19C05E
Authority key identifier: EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/60cef3c2257e9560100c6431f5d88c4e954d0f96.roa
Signing time:             Thu 15 Jun 2023 14:43:45 +0000
ROA not before:           Wed 14 Jun 2023 14:43:45 +0000
ROA not after:            Sun 15 Jun 2025 14:43:45 +0000
asID:                     270055
IP address blocks:        189.90.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687646 (0x19c05e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444e0076eea4611dce8c3e39bffef12743fb4711
        Validity
            Not Before: Jun 14 14:43:45 2023 GMT
            Not After : Jun 15 14:43:45 2025 GMT
        Subject: CN=60cef3c2257e9560100c6431f5d88c4e954d0f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6e:39:b3:7d:c2:ec:af:74:47:e8:a1:da:11:
                    4f:6c:b3:6c:0a:9d:18:91:9c:ab:21:87:11:97:d4:
                    22:6e:ed:0e:3f:ae:e0:26:30:3a:27:9c:f8:98:6e:
                    81:6e:b8:0d:39:8b:89:02:ff:b2:f1:73:59:22:c9:
                    06:c2:ea:ce:33:85:c8:03:30:08:6b:9f:32:0a:81:
                    2d:bc:a5:af:21:9c:bc:45:76:43:bb:3d:44:0f:c5:
                    c0:a6:a1:d0:90:ba:07:1a:ee:c6:77:81:67:6c:c3:
                    e0:14:1c:a0:d6:4e:c6:a0:f5:ed:94:1a:41:c6:a4:
                    07:2d:5f:2d:5e:5e:5c:22:8f:bd:17:3d:9b:35:6e:
                    da:6c:25:dd:7c:55:20:e0:ed:21:51:b6:7e:04:26:
                    f8:ba:58:c0:7f:7e:c0:d0:bf:ff:25:3f:3f:7b:58:
                    69:83:c6:ec:f1:cd:ac:ed:00:d7:3a:0a:80:22:57:
                    ef:87:b8:b3:5f:3f:dd:ff:80:d2:09:df:f5:e6:00:
                    e7:e1:56:81:63:90:be:9c:16:92:0a:95:54:88:e1:
                    3f:84:a3:8b:b3:81:09:6a:ff:34:d8:70:2e:f2:e9:
                    0d:c1:59:a0:dd:e2:7c:d0:76:9a:96:74:cb:ae:c1:
                    66:8a:ed:a5:53:9c:d2:01:2d:6f:12:b9:28:e3:a7:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E3:B1:DD:30:54:32:FB:50:D4:6F:36:A0:1A:33:F5:A1:9F:F0:42
            X509v3 Authority Key Identifier:
                keyid:EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/60cef3c2257e9560100c6431f5d88c4e954d0f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/444e0076eea4611dce8c3e39bffef12743fb4711.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:c2:5b:e7:84:0d:28:1d:2d:52:f2:c8:88:99:4b:37:33:ae:
         c2:64:20:1b:35:6e:87:3e:7f:15:84:1e:3c:dc:31:49:49:51:
         64:a2:56:9f:02:83:d4:72:42:2f:2c:17:4d:b1:4d:ee:00:1e:
         0e:61:6c:e4:f2:5b:d7:80:bb:89:29:65:03:34:10:89:ff:51:
         44:b5:31:de:f7:ae:74:86:4a:49:e5:d0:2e:f0:2c:59:b9:10:
         56:bd:95:f5:89:b9:e1:10:61:8b:2d:74:26:f4:a6:cd:de:d5:
         9d:02:03:c3:e8:1a:dd:0e:ba:94:78:16:ce:1e:b8:59:55:08:
         2b:dc:b7:92:27:af:a0:1c:ce:f0:8e:89:2f:23:13:2a:36:9f:
         be:91:55:9e:03:ce:18:c0:0d:bf:c6:bf:01:fd:e0:6a:5a:6b:
         6f:14:54:dd:d5:91:5e:6b:c9:ad:6b:63:63:a8:0a:0c:45:90:
         7f:62:e4:e8:97:94:fa:3c:d9:69:81:e1:fc:c1:d1:94:c2:17:
         a5:f1:dc:46:c3:c2:6f:4a:48:6e:41:c5:5c:f7:90:53:9e:3d:
         17:9a:03:0d:0a:35:2f:69:78:4d:6e:78:a9:2f:34:e4:00:3f:
         52:6d:be:fc:7a:ea:7f:48:1a:4e:d1:14:a1:c8:c9:6f:72:9a:
         29:4d:48:c4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGcBeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ0
NGUwMDc2ZWVhNDYxMWRjZThjM2UzOWJmZmVmMTI3NDNmYjQ3MTEwHhcNMjMwNjE0
MTQ0MzQ1WhcNMjUwNjE1MTQ0MzQ1WjAzMTEwLwYDVQQDEyg2MGNlZjNjMjI1N2U5
NTYwMTAwYzY0MzFmNWQ4OGM0ZTk1NGQwZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm245s33C7K90R+ih2hFPbLNsCp0YkZyrIYcRl9Qibu0OP67g
JjA6J5z4mG6BbrgNOYuJAv+y8XNZIskGwurOM4XIAzAIa58yCoEtvKWvIZy8RXZD
uz1ED8XApqHQkLoHGu7Gd4FnbMPgFByg1k7GoPXtlBpBxqQHLV8tXl5cIo+9Fz2b
NW7abCXdfFUg4O0hUbZ+BCb4uljAf37A0L//JT8/e1hpg8bs8c2s7QDXOgqAIlfv
h7izXz/d/4DSCd/15gDn4VaBY5C+nBaSCpVUiOE/hKOLs4EJav802HAu8ukNwVmg
3eJ80HaalnTLrsFmiu2lU5zSAS1vErko46ddpQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFP/jsd0wVDL7UNRvNqAaM/Whn/BCMB8GA1UdIwQYMBaAFO4mgqXOG/6HI/QE
skh5IEh7GJqhMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDQ0ZTAw
NzZlZWE0NjExZGNlOGMzZTM5YmZmZWYxMjc0M2ZiNDcxMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2E1NDFiZWQtMzVjMy00NjM0LThiM2UtNGFhZGE5
MjJhYWNlLzYwY2VmM2MyMjU3ZTk1NjAxMDBjNjQzMWY1ZDg4YzRlOTU0ZDBmOTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zYTU0MWJlZC0zNWMzLTQ2MzQtOGIzZS00YWFk
YTkyMmFhY2UvNDQ0ZTAwNzZlZWE0NjExZGNlOGMzZTM5YmZmZWYxMjc0M2ZiNDcx
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL1a5zANBgkqhkiG9w0BAQsFAAOCAQEAJMJb54QNKB0tUvLI
iJlLNzOuwmQgGzVuhz5/FYQePNwxSUlRZKJWnwKD1HJCLywXTbFN7gAeDmFs5PJb
14C7iSllAzQQif9RRLUx3veudIZKSeXQLvAsWbkQVr2V9Ym54RBhiy10JvSmzd7V
nQIDw+ga3Q66lHgWzh64WVUIK9y3kievoBzO8I6JLyMTKjafvpFVngPOGMANv8a/
Af3galprbxRU3dWRXmvJrWtjY6gKDEWQf2Lk6JeU+jzZaYHh/MHRlMIXpfHcRsPC
b0pIbkHFXPeQU549F5oDDQo1L2l4TW54qS805AA/Um2+/Hrqf0gaTtEUocjJb3Ka
KU1IxA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org