Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/10e107fe12d0373f6f87cd2f3d74fba69b263e67.roa
File:                     10e107fe12d0373f6f87cd2f3d74fba69b263e67.roa (raw, json)
Hash identifier:          xmNB1ES37EFaIEsCqxGdzWMknYwHFh/3BzllMIN8rTo=
Subject key identifier:   95:65:FB:06:FB:FE:0E:58:4D:6D:91:F4:0A:CD:00:4D:A2:18:A7:CE
Certificate issuer:       /CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
Certificate serial:       CF5E
Authority key identifier: A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/10e107fe12d0373f6f87cd2f3d74fba69b263e67.roa
Signing time:             Mon 29 Mar 2021 15:30:33 +0000
ROA not before:           Fri 26 Mar 2021 03:00:00 +0000
ROA not after:            Sun 26 Mar 2023 03:00:00 +0000
asID:                     269905
IP address blocks:        190.112.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53086 (0xcf5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
        Validity
            Not Before: Mar 26 03:00:00 2021 GMT
            Not After : Mar 26 03:00:00 2023 GMT
        Subject: CN=10e107fe12d0373f6f87cd2f3d74fba69b263e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f4:0a:f4:db:59:fc:93:0b:97:30:a0:00:0a:
                    c8:c4:ae:8c:1d:b3:76:09:38:1b:04:a0:77:6f:6b:
                    cf:d4:cc:cb:40:37:a3:29:a4:ea:93:2e:41:a2:df:
                    c7:75:1d:cd:6f:f0:ef:05:43:2a:53:07:c5:d5:0b:
                    9e:19:59:67:5c:0c:b3:53:4b:e2:21:7f:be:31:58:
                    9a:dd:8b:4f:6e:5b:cc:99:ee:64:57:77:d8:c1:05:
                    a9:e9:a0:cb:49:73:c9:91:15:34:ef:3d:6e:8d:28:
                    10:cf:6c:5e:5d:a8:a8:08:08:e4:95:a3:ee:15:15:
                    40:69:a8:4c:69:fe:3f:7d:25:1d:74:ac:c5:4d:6f:
                    87:65:e0:e7:34:9f:cf:44:af:1c:49:c6:06:c6:1f:
                    20:f9:b3:17:d6:fa:c1:a7:af:8c:04:c8:2a:b2:9d:
                    a2:25:73:57:d2:25:b4:45:ad:08:31:5e:ea:ff:5c:
                    d0:1d:00:40:c5:a1:55:ab:fa:c2:9c:2f:78:47:89:
                    4e:2f:e0:01:67:fa:47:51:ca:64:29:45:33:4f:4e:
                    68:fa:5c:16:d9:ee:70:ea:39:27:fb:58:7d:e7:e1:
                    ef:af:53:0a:67:04:59:4b:44:57:03:95:53:73:da:
                    d8:99:34:12:ad:4d:95:e2:2d:7e:a9:6b:e7:9a:10:
                    c3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:65:FB:06:FB:FE:0E:58:4D:6D:91:F4:0A:CD:00:4D:A2:18:A7:CE
            X509v3 Authority Key Identifier:
                keyid:A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/10e107fe12d0373f6f87cd2f3d74fba69b263e67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:5f:5a:2a:46:9a:fb:24:b3:60:2f:9e:3d:b5:ba:fd:9d:60:
         b4:cd:d6:46:2d:fd:64:a9:b6:50:1d:ce:4c:08:75:40:64:88:
         a1:11:c4:fd:14:62:82:70:d6:3c:1f:04:6c:bd:cf:a3:56:73:
         29:12:f1:64:e2:16:29:0e:76:95:ba:f4:47:94:37:68:e6:71:
         eb:a7:ca:31:fc:78:38:74:06:46:6e:19:75:ea:71:b9:e6:e7:
         8d:44:ae:09:aa:f9:44:27:08:2e:16:c9:bc:09:98:44:a1:01:
         22:e0:07:83:16:57:ff:9c:50:f1:8f:07:e0:02:34:27:32:21:
         39:1a:18:87:02:58:ae:03:5d:ef:cc:d8:cf:59:d5:d9:5d:04:
         47:22:b9:18:ef:53:13:11:13:d8:e2:9f:aa:f6:5d:34:57:51:
         5f:f7:4d:14:32:c2:1a:7d:61:7b:6f:f9:dd:39:c4:82:8b:3b:
         28:61:22:d7:2f:b9:cd:35:f2:20:cb:d7:36:e0:41:44:59:d2:
         e6:4d:85:75:ac:9f:2b:b6:40:90:e2:6d:5b:48:32:37:18:d6:
         48:55:53:18:78:f6:ae:aa:53:ea:ce:32:4c:f2:2e:dc:53:57:
         b4:ce:ca:31:76:12:ec:ff:f3:85:eb:2a:6a:9a:c2:21:7a:17:
         d5:3e:b0:d9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAM9eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU5
NmFkMDc2MGZlNDFkZmE1N2IwZGVkMzgyZTU0ZDRhOWY4Y2JhMjUwHhcNMjEwMzI2
MDMwMDAwWhcNMjMwMzI2MDMwMDAwWjAzMTEwLwYDVQQDEygxMGUxMDdmZTEyZDAz
NzNmNmY4N2NkMmYzZDc0ZmJhNjliMjYzZTY3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjPQK9NtZ/JMLlzCgAArIxK6MHbN2CTgbBKB3b2vP1MzLQDej
KaTqky5Bot/HdR3Nb/DvBUMqUwfF1QueGVlnXAyzU0viIX++MVia3YtPblvMme5k
V3fYwQWp6aDLSXPJkRU07z1ujSgQz2xeXaioCAjklaPuFRVAaahMaf4/fSUddKzF
TW+HZeDnNJ/PRK8cScYGxh8g+bMX1vrBp6+MBMgqsp2iJXNX0iW0Ra0IMV7q/1zQ
HQBAxaFVq/rCnC94R4lOL+ABZ/pHUcpkKUUzT05o+lwW2e5w6jkn+1h95+Hvr1MK
ZwRZS0RXA5VTc9rYmTQSrU2V4i1+qWvnmhDDFQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJVl+wb7/g5YTW2R9ArNAE2iGKfOMB8GA1UdIwQYMBaAFKjXryeeX6sazAU7
CmIWTt7IJPqXMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTk2YWQw
NzYwZmU0MWRmYTU3YjBkZWQzODJlNTRkNGE5ZjhjYmEyNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNDAwMWUxN2QtYTI1ZS00ZTliLTg4M2YtYzYxNjRh
MjQ5MzU3LzEwZTEwN2ZlMTJkMDM3M2Y2Zjg3Y2QyZjNkNzRmYmE2OWIyNjNlNjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80MDAxZTE3ZC1hMjVlLTRlOWItODgzZi1jNjE2
NGEyNDkzNTcvZTk2YWQwNzYwZmU0MWRmYTU3YjBkZWQzODJlNTRkNGE5ZjhjYmEy
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5wqjANBgkqhkiG9w0BAQsFAAOCAQEAOl9aKkaa+ySzYC+e
PbW6/Z1gtM3WRi39ZKm2UB3OTAh1QGSIoRHE/RRignDWPB8EbL3Po1ZzKRLxZOIW
KQ52lbr0R5Q3aOZx66fKMfx4OHQGRm4ZdepxuebnjUSuCar5RCcILhbJvAmYRKEB
IuAHgxZX/5xQ8Y8H4AI0JzIhORoYhwJYrgNd78zYz1nV2V0ERyK5GO9TExET2OKf
qvZdNFdRX/dNFDLCGn1he2/53TnEgos7KGEi1y+5zTXyIMvXNuBBRFnS5k2Fdayf
K7ZAkOJtW0gyNxjWSFVTGHj2rqpT6s4yTPIu3FNXtM7KMXYS7P/zhesqaprCIXoX
1T6w2Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org