Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/453b143ff9e22c68f403a02e54cdea57ff4bae01.roa
File:                     453b143ff9e22c68f403a02e54cdea57ff4bae01.roa (raw, json)
Hash identifier:          q0ZlBRwpojQ6luzvo1cDm7QXyiiUwnVJ6wa7A3VJ+jM=
Subject key identifier:   12:DB:7C:C1:F9:DC:94:B0:79:42:23:D2:D0:8E:FC:7F:CD:E7:C7:8F
Certificate issuer:       /CN=5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2
Certificate serial:       612B
Authority key identifier: 5F:8C:67:63:71:E5:A8:C8:CA:7A:33:15:D7:E9:73:D0:07:D9:8A:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/453b143ff9e22c68f403a02e54cdea57ff4bae01.roa
Signing time:             Tue 09 May 2023 14:43:09 +0000
ROA not before:           Mon 08 May 2023 14:43:09 +0000
ROA not after:            Fri 09 May 2025 14:43:09 +0000
asID:                     272140
IP address blocks:        190.103.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24875 (0x612b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2
        Validity
            Not Before: May  8 14:43:09 2023 GMT
            Not After : May  9 14:43:09 2025 GMT
        Subject: CN=453b143ff9e22c68f403a02e54cdea57ff4bae01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:0b:aa:b5:d3:28:11:21:77:31:09:37:d9:
                    5e:0b:c4:23:84:7f:9a:17:cd:ef:fa:1e:3f:76:7b:
                    6a:3c:58:79:31:45:f9:96:61:74:72:38:57:ee:ae:
                    74:e7:dd:22:58:47:80:34:4e:95:f6:55:4e:c7:aa:
                    a0:74:4c:7c:f1:c9:ae:7f:b1:f0:12:ce:36:b9:79:
                    07:75:e0:fc:0e:88:5d:1e:9f:a5:0e:08:f7:32:77:
                    7c:d6:3f:eb:94:54:03:f9:2d:01:05:6d:8e:4c:d2:
                    4e:20:36:04:34:f4:45:cb:33:d7:c0:b5:b6:a3:89:
                    bb:f7:fe:73:82:55:bc:35:4d:ba:79:1f:fe:da:48:
                    1b:07:a9:71:79:4f:05:36:4e:b4:0a:a1:23:71:f1:
                    3e:ef:fb:cd:9f:82:5d:2a:96:60:86:05:ec:45:89:
                    d4:6c:cc:ab:d3:26:83:a9:54:09:53:2a:2a:40:32:
                    64:bb:87:46:f0:29:b0:77:1c:6d:89:68:9a:4a:fa:
                    75:f4:83:43:8b:c6:f9:d8:1e:57:f1:ca:6c:f9:e7:
                    ab:25:fd:ce:3c:f0:fb:7b:9d:31:b7:aa:fa:67:c9:
                    c7:16:2d:c7:4a:90:13:59:c8:00:53:24:a9:74:44:
                    41:5d:e7:9f:7a:87:4c:dc:fe:75:79:25:c4:b1:00:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DB:7C:C1:F9:DC:94:B0:79:42:23:D2:D0:8E:FC:7F:CD:E7:C7:8F
            X509v3 Authority Key Identifier:
                keyid:5F:8C:67:63:71:E5:A8:C8:CA:7A:33:15:D7:E9:73:D0:07:D9:8A:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/453b143ff9e22c68f403a02e54cdea57ff4bae01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ec:2d:cb:1e:06:59:75:e1:32:e4:74:7f:fd:27:44:94:7c:
         9a:ff:1e:c6:e2:b2:6a:91:6c:0e:7e:c3:22:ca:21:0d:28:41:
         a8:51:d1:7e:9f:34:89:dc:1c:f0:ae:a2:86:29:fb:10:c7:ae:
         a6:3b:42:65:0e:5d:27:ff:c5:ba:fc:6e:81:a9:a3:c6:3b:58:
         90:1a:24:ec:d2:c5:45:46:7d:71:95:bd:a8:30:1a:66:c3:70:
         27:1d:5d:83:ee:81:07:ca:23:78:2b:cd:37:70:27:cb:06:c7:
         68:31:b3:f5:74:be:be:9d:80:a8:9c:3a:c5:79:90:ca:a7:6e:
         81:37:55:d6:a7:6c:18:2a:75:99:f0:33:6a:54:a5:cb:49:ff:
         67:bf:20:2f:13:f0:01:6d:d4:4b:83:41:d4:89:e1:42:cd:90:
         ad:4d:09:c6:9b:bd:66:64:42:b5:4f:f0:1d:e2:bd:97:de:dd:
         a5:84:6d:e1:0f:f5:64:01:1b:4b:6f:ea:e0:29:ad:02:95:04:
         06:ce:04:97:e0:ba:f8:7f:d7:1f:9f:cb:51:1c:d4:63:35:b5:
         09:a1:96:a6:28:fe:98:97:e1:bf:6a:31:5d:7b:68:af:65:74:
         01:e8:6f:44:b5:39:92:3c:90:4d:d2:54:4f:54:a9:be:de:0d:
         8c:06:e9:0a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICYSswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNWNh
MGFjODZiZWJiOGJkOGU1OWNlZDZhMmQ5ZDYzNTRlNGVlODhlMjAeFw0yMzA1MDgx
NDQzMDlaFw0yNTA1MDkxNDQzMDlaMDMxMTAvBgNVBAMTKDQ1M2IxNDNmZjllMjJj
NjhmNDAzYTAyZTU0Y2RlYTU3ZmY0YmFlMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCheAuqtdMoESF3MQk32V4LxCOEf5oXze/6Hj92e2o8WHkxRfmW
YXRyOFfurnTn3SJYR4A0TpX2VU7HqqB0THzxya5/sfASzja5eQd14PwOiF0en6UO
CPcyd3zWP+uUVAP5LQEFbY5M0k4gNgQ09EXLM9fAtbajibv3/nOCVbw1Tbp5H/7a
SBsHqXF5TwU2TrQKoSNx8T7v+82fgl0qlmCGBexFidRszKvTJoOpVAlTKipAMmS7
h0bwKbB3HG2JaJpK+nX0g0OLxvnYHlfxymz556sl/c488Pt7nTG3qvpnyccWLcdK
kBNZyABTJKl0REFd5596h0zc/nV5JcSxAAE3AgMBAAGjggJbMIICVzAdBgNVHQ4E
FgQUEtt8wfnclLB5QiPS0I78f83nx48wHwYDVR0jBBgwFoAUX4xnY3HlqMjKejMV
1+lz0AfZiq8wDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS81Y2EwYWM4
NmJlYmI4YmQ4ZTU5Y2VkNmEyZDlkNjM1NGU0ZWU4OGUyLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy80NzQyMTU5ZS1lOWJlLTRjMzMtODllZi00YTU0YmJi
Y2YxZTYvNDUzYjE0M2ZmOWUyMmM2OGY0MDNhMDJlNTRjZGVhNTdmZjRiYWUwMS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzQ3NDIxNTllLWU5YmUtNGMzMy04OWVmLTRhNTRi
YmJjZjFlNi81Y2EwYWM4NmJlYmI4YmQ4ZTU5Y2VkNmEyZDlkNjM1NGU0ZWU4OGUy
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAvme/MA0GCSqGSIb3DQEBCwUAA4IBAQAT7C3LHgZZdeEy5HR/
/SdElHya/x7G4rJqkWwOfsMiyiENKEGoUdF+nzSJ3BzwrqKGKfsQx66mO0JlDl0n
/8W6/G6BqaPGO1iQGiTs0sVFRn1xlb2oMBpmw3AnHV2D7oEHyiN4K803cCfLBsdo
MbP1dL6+nYConDrFeZDKp26BN1XWp2wYKnWZ8DNqVKXLSf9nvyAvE/ABbdRLg0HU
ieFCzZCtTQnGm71mZEK1T/Ad4r2X3t2lhG3hD/VkARtLb+rgKa0ClQQGzgSX4Lr4
f9cfn8tRHNRjNbUJoZamKP6Yl+G/ajFde2ivZXQB6G9EtTmSPJBN0lRPVKm+3g2M
BukK
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org