Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/b4d3dddea64ec10ee5ad9fd3ce64e80d4126e598.roa
File:                     b4d3dddea64ec10ee5ad9fd3ce64e80d4126e598.roa (raw, json)
Hash identifier:          WS21S0qq2Dm1/ayF4RbAfrupRk2RQ88WSMAxIUK5Pos=
Subject key identifier:   67:E8:CF:C2:EB:47:FA:0E:73:4A:6C:D8:13:31:D7:36:CF:DC:8B:7B
Certificate issuer:       /CN=aae8cbe9904f103232c002483204f9f2ae04d026
Certificate serial:       22D40D
Authority key identifier: 9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/b4d3dddea64ec10ee5ad9fd3ce64e80d4126e598.roa
Signing time:             Tue 04 Jul 2023 21:06:49 +0000
ROA not before:           Mon 03 Jul 2023 21:06:49 +0000
ROA not after:            Fri 04 Jul 2025 21:06:49 +0000
asID:                     263238
IP address blocks:        190.9.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282509 (0x22d40d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae8cbe9904f103232c002483204f9f2ae04d026
        Validity
            Not Before: Jul  3 21:06:49 2023 GMT
            Not After : Jul  4 21:06:49 2025 GMT
        Subject: CN=b4d3dddea64ec10ee5ad9fd3ce64e80d4126e598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3d:e0:60:db:6d:d1:c2:66:57:83:b7:b3:33:
                    ea:f8:c7:e9:c8:93:f7:4e:49:7c:ed:13:32:11:8b:
                    ac:e1:06:22:a1:dc:63:db:de:f2:4e:17:f5:d3:a4:
                    35:28:3b:94:06:7e:11:bc:6e:2d:cb:24:a5:ee:81:
                    a2:83:95:4e:21:06:d4:92:90:15:c2:83:90:e5:1e:
                    42:bd:93:3f:5b:ae:a8:12:a2:f2:07:e1:bc:a4:d6:
                    47:19:d9:8a:dd:4a:ba:79:56:09:56:57:4e:43:a5:
                    14:88:e0:72:5c:ac:8b:3c:2d:1b:b6:7e:97:8b:3e:
                    e2:8c:2d:f9:a6:bd:06:f5:2d:59:a5:39:df:d6:ee:
                    02:a9:ea:3a:49:1b:5f:8d:eb:a2:a5:9c:71:96:e7:
                    63:5c:87:b6:3a:ce:3b:05:a2:0d:8d:71:2e:17:7d:
                    f5:ba:de:04:8c:07:32:b4:e7:e2:ca:40:24:58:ba:
                    f1:09:6f:98:0a:8f:1a:0a:63:e9:42:6b:6c:ba:95:
                    69:38:47:f2:1f:e6:d2:be:6c:de:fd:e1:c5:a9:23:
                    71:71:33:6a:63:6a:53:20:38:06:87:e5:a2:4f:81:
                    ae:05:2e:0a:59:05:e3:43:06:23:2a:24:68:29:e5:
                    2a:90:e3:39:a8:97:8b:25:02:ad:bf:28:9b:0d:4b:
                    3f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E8:CF:C2:EB:47:FA:0E:73:4A:6C:D8:13:31:D7:36:CF:DC:8B:7B
            X509v3 Authority Key Identifier:
                keyid:9E:21:FA:B8:72:9D:E9:86:5D:D4:D6:5F:DF:3F:B0:D3:CD:37:19:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aae8cbe9904f103232c002483204f9f2ae04d026.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/b4d3dddea64ec10ee5ad9fd3ce64e80d4126e598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dc2c07a-8c7e-47c7-ae90-ccd71487ce10/aae8cbe9904f103232c002483204f9f2ae04d026.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:7e:73:3f:74:8a:36:fe:3b:b9:0c:bd:fc:84:39:f9:6e:eb:
         aa:bd:0d:7d:96:50:9e:b4:65:72:56:f7:aa:91:f5:9a:42:66:
         30:f2:34:df:4b:28:bb:88:8d:62:22:1f:53:6b:f1:8b:f6:f3:
         e9:80:d1:92:f2:28:3f:4f:5a:10:be:5d:53:d5:df:ac:58:d5:
         1c:9d:47:a4:87:5b:10:7e:17:af:32:e9:1d:cb:a0:5f:d8:0f:
         d3:55:a3:4e:e4:ae:b1:d1:c9:bd:49:d4:ce:77:0b:8e:a6:b3:
         e7:9e:1c:df:53:64:6f:d2:b7:bf:ea:7f:94:ed:cf:e8:09:d3:
         73:26:69:61:8e:77:83:51:15:1d:81:fe:2d:a8:d1:72:45:51:
         f6:1f:4b:24:66:f1:fb:2f:10:20:70:22:de:27:2d:38:a7:31:
         07:cc:c9:eb:42:c9:00:b8:5f:83:34:2b:66:4d:43:3b:ed:c4:
         02:d3:93:0d:4c:7a:8c:1d:f5:77:5e:7f:03:02:11:20:24:3d:
         c0:cd:0e:49:08:99:82:fc:3a:a4:08:e0:dd:f5:50:9f:74:f0:
         31:d6:16:6a:c5:de:7d:8e:04:90:fe:0c:68:7e:09:68:cf:ca:
         9c:50:69:48:3f:ba:d2:bd:dd:0f:fb:47:e3:4e:51:2f:6d:9a:
         43:ac:16:ef
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDItQNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFh
ZThjYmU5OTA0ZjEwMzIzMmMwMDI0ODMyMDRmOWYyYWUwNGQwMjYwHhcNMjMwNzAz
MjEwNjQ5WhcNMjUwNzA0MjEwNjQ5WjAzMTEwLwYDVQQDEyhiNGQzZGRkZWE2NGVj
MTBlZTVhZDlmZDNjZTY0ZTgwZDQxMjZlNTk4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArj3gYNtt0cJmV4O3szPq+MfpyJP3Tkl87RMyEYus4QYiodxj
297yThf106Q1KDuUBn4RvG4tyySl7oGig5VOIQbUkpAVwoOQ5R5CvZM/W66oEqLy
B+G8pNZHGdmK3Uq6eVYJVldOQ6UUiOByXKyLPC0btn6Xiz7ijC35pr0G9S1ZpTnf
1u4Cqeo6SRtfjeuipZxxludjXIe2Os47BaINjXEuF331ut4EjAcytOfiykAkWLrx
CW+YCo8aCmPpQmtsupVpOEfyH+bSvmze/eHFqSNxcTNqY2pTIDgGh+WiT4GuBS4K
WQXjQwYjKiRoKeUqkOM5qJeLJQKtvyibDUs/SwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGfoz8LrR/oOc0ps2BMx1zbP3It7MB8GA1UdIwQYMBaAFJ4h+rhynemGXdTW
X98/sNPNNxk0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWFlOGNi
ZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAyNi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNGRjMmMwN2EtOGM3ZS00N2M3LWFlOTAtY2NkNzE0
ODdjZTEwL2I0ZDNkZGRlYTY0ZWMxMGVlNWFkOWZkM2NlNjRlODBkNDEyNmU1OTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy80ZGMyYzA3YS04YzdlLTQ3YzctYWU5MC1jY2Q3
MTQ4N2NlMTAvYWFlOGNiZTk5MDRmMTAzMjMyYzAwMjQ4MzIwNGY5ZjJhZTA0ZDAy
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL4JtjANBgkqhkiG9w0BAQsFAAOCAQEAh35zP3SKNv47uQy9
/IQ5+W7rqr0NfZZQnrRlclb3qpH1mkJmMPI030sou4iNYiIfU2vxi/bz6YDRkvIo
P09aEL5dU9XfrFjVHJ1HpIdbEH4XrzLpHcugX9gP01WjTuSusdHJvUnUzncLjqaz
554c31Nkb9K3v+p/lO3P6AnTcyZpYY53g1EVHYH+LajRckVR9h9LJGbx+y8QIHAi
3ictOKcxB8zJ60LJALhfgzQrZk1DO+3EAtOTDUx6jB31d15/AwIRICQ9wM0OSQiZ
gvw6pAjg3fVQn3TwMdYWasXefY4EkP4MaH4JaM/KnFBpSD+60r3dD/tH405RL22a
Q6wW7w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org