Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/33f147095e51506736578d609d8b2e204e627163.roa
File:                     33f147095e51506736578d609d8b2e204e627163.roa (raw, json)
Hash identifier:          WZgMj62VHstDra4UEZV/cwLck/8gRxBd/Mizo7QqNlU=
Subject key identifier:   86:D5:C7:A1:BA:D7:4F:7A:1E:D5:A2:5A:64:48:8A:BD:6E:AE:59:CE
Certificate issuer:       /CN=1c19bb58bf30a6b5633338f01c9003f7c46c52e6
Certificate serial:       227305
Authority key identifier: D8:D1:38:88:F9:CA:FE:3A:32:13:BE:AD:07:4E:F1:CB:36:16:9A:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/33f147095e51506736578d609d8b2e204e627163.roa
Signing time:             Fri 01 Mar 2024 08:30:11 +0000
ROA not before:           Fri 01 Mar 2024 08:30:11 +0000
ROA not after:            Sun 01 Mar 2026 08:30:11 +0000
asID:                     269949
IP address blocks:        190.83.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257669 (0x227305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c19bb58bf30a6b5633338f01c9003f7c46c52e6
        Validity
            Not Before: Mar  1 08:30:11 2024 GMT
            Not After : Mar  1 08:30:11 2026 GMT
        Subject: CN=33f147095e51506736578d609d8b2e204e627163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3d:d3:32:d8:51:9c:d5:8d:9a:34:9f:e7:be:
                    78:65:fc:1e:96:c2:85:bf:eb:36:42:40:48:59:18:
                    e6:d5:23:00:f5:93:12:07:ba:01:02:7e:77:ed:cb:
                    e7:d5:df:f9:3c:a5:4b:ff:85:49:a7:c9:92:86:b5:
                    0d:fe:79:a6:78:f4:ac:38:c0:18:93:eb:b7:f6:5d:
                    e7:81:fe:3e:2d:27:e5:88:15:95:68:f7:d5:fe:39:
                    07:6a:dd:b4:bc:a8:be:f7:04:10:5f:36:be:ea:cd:
                    c7:c7:de:88:5a:84:5a:c4:1a:d7:82:b8:45:cd:4a:
                    3e:53:74:9a:4c:40:cc:ed:4f:b8:f4:6a:4e:15:77:
                    44:be:b5:1a:0b:2f:4d:cd:07:05:c1:fb:24:f0:e9:
                    71:9c:f8:42:9f:8c:f7:5f:83:d8:e1:d7:10:cb:4d:
                    f9:47:fa:69:d0:53:a0:30:e6:09:26:78:92:0d:4f:
                    8b:2d:94:31:14:00:51:b2:f4:20:94:47:7f:e8:43:
                    46:70:5e:33:5d:22:c9:71:6e:20:96:b6:19:8b:db:
                    74:89:59:e9:1a:29:34:ce:b9:cb:89:31:34:d6:45:
                    01:83:e5:fe:59:c6:82:71:da:69:3b:1e:84:68:58:
                    4d:3b:8f:98:25:3f:90:46:0d:41:cb:da:6d:29:5e:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D5:C7:A1:BA:D7:4F:7A:1E:D5:A2:5A:64:48:8A:BD:6E:AE:59:CE
            X509v3 Authority Key Identifier:
                keyid:D8:D1:38:88:F9:CA:FE:3A:32:13:BE:AD:07:4E:F1:CB:36:16:9A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/33f147095e51506736578d609d8b2e204e627163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:73:b9:15:1c:35:e4:75:0e:fa:f4:a9:55:07:d7:c7:a8:75:
         67:89:44:d3:f2:84:7a:be:54:6c:db:e3:60:bf:21:43:d1:37:
         24:b1:7a:41:71:f2:b0:38:47:f5:63:23:c6:1a:fd:38:4c:07:
         46:14:32:3a:f4:01:83:9c:57:e8:85:93:ce:9e:77:bb:5e:91:
         07:8a:3e:e4:2e:4d:5d:a2:d0:8e:5d:42:8d:ee:73:8c:fa:7e:
         14:09:9e:17:db:b3:01:13:fc:6f:94:2c:69:a3:ec:8e:56:9a:
         1d:12:bf:82:2f:d4:ad:57:d5:68:ab:c9:34:95:69:29:47:87:
         3d:0c:f4:a6:21:6e:28:00:0f:88:c8:1d:5b:aa:5e:72:19:42:
         cb:da:60:ef:90:b8:89:f8:23:e9:2d:75:51:0d:61:83:02:18:
         24:96:f4:6e:c6:99:26:51:0a:3e:93:03:fc:18:3d:79:d7:b2:
         cb:8f:d9:45:bd:b2:77:27:c9:fc:cc:9a:97:eb:04:46:3c:d8:
         8a:d7:35:ba:35:a7:69:d0:4e:bd:09:be:00:f8:4c:20:50:d1:
         15:92:67:46:f9:82:62:b8:a9:96:96:4c:8b:d4:15:e2:82:27:
         80:b2:ae:a4:7f:ca:4d:ad:45:e6:ed:a8:e8:7a:74:a6:d7:2e:
         fe:54:da:b3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDInMFMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFj
MTliYjU4YmYzMGE2YjU2MzMzMzhmMDFjOTAwM2Y3YzQ2YzUyZTYwHhcNMjQwMzAx
MDgzMDExWhcNMjYwMzAxMDgzMDExWjAzMTEwLwYDVQQDEygzM2YxNDcwOTVlNTE1
MDY3MzY1NzhkNjA5ZDhiMmUyMDRlNjI3MTYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoD3TMthRnNWNmjSf5754ZfwelsKFv+s2QkBIWRjm1SMA9ZMS
B7oBAn537cvn1d/5PKVL/4VJp8mShrUN/nmmePSsOMAYk+u39l3ngf4+LSfliBWV
aPfV/jkHat20vKi+9wQQXza+6s3Hx96IWoRaxBrXgrhFzUo+U3SaTEDM7U+49GpO
FXdEvrUaCy9NzQcFwfsk8OlxnPhCn4z3X4PY4dcQy035R/pp0FOgMOYJJniSDU+L
LZQxFABRsvQglEd/6ENGcF4zXSLJcW4glrYZi9t0iVnpGik0zrnLiTE01kUBg+X+
WcaCcdppOx6EaFhNO4+YJT+QRg1By9ptKV6PhwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIbVx6G61096HtWiWmRIir1urlnOMB8GA1UdIwQYMBaAFNjROIj5yv46MhO+
rQdO8cs2FpqoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWMxOWJi
NThiZjMwYTZiNTYzMzMzOGYwMWM5MDAzZjdjNDZjNTJlNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvM2ZjMzgwMjYtNmI5ZC00OTE5LTgwNDctNGQ2OTNi
YThlY2M0LzMzZjE0NzA5NWU1MTUwNjczNjU3OGQ2MDlkOGIyZTIwNGU2MjcxNjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zZmMzODAyNi02YjlkLTQ5MTktODA0Ny00ZDY5
M2JhOGVjYzQvMWMxOWJiNThiZjMwYTZiNTYzMzMzOGYwMWM5MDAzZjdjNDZjNTJl
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5TfDANBgkqhkiG9w0BAQsFAAOCAQEAEnO5FRw15HUO+vSp
VQfXx6h1Z4lE0/KEer5UbNvjYL8hQ9E3JLF6QXHysDhH9WMjxhr9OEwHRhQyOvQB
g5xX6IWTzp53u16RB4o+5C5NXaLQjl1Cje5zjPp+FAmeF9uzARP8b5QsaaPsjlaa
HRK/gi/UrVfVaKvJNJVpKUeHPQz0piFuKAAPiMgdW6pechlCy9pg75C4ifgj6S11
UQ1hgwIYJJb0bsaZJlEKPpMD/Bg9edeyy4/ZRb2ydyfJ/Myal+sERjzYitc1ujWn
adBOvQm+APhMIFDRFZJnRvmCYriplpZMi9QV4oIngLKupH/KTa1F5u2o6Hp0ptcu
/lTasw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org