Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/58ee9a893e7afd02796deebd16fa178aeb2749e2.roa
File:                     58ee9a893e7afd02796deebd16fa178aeb2749e2.roa (raw, json)
Hash identifier:          cPXRNrlQ0IVXCXOL7kBQ2IMs4H8OMb0G6caZQ7/o/Gs=
Subject key identifier:   36:BE:66:FA:B3:80:B1:CD:F5:A4:70:FC:30:72:30:69:71:2A:21:6B
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E9535
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/58ee9a893e7afd02796deebd16fa178aeb2749e2.roa
Signing time:             Thu 07 Dec 2023 13:01:52 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     64099
IP address blocks:        190.228.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3052853 (0x2e9535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=58ee9a893e7afd02796deebd16fa178aeb2749e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:33:4c:5e:70:19:09:9a:48:ce:a1:e0:24:f2:
                    a1:18:1e:7e:1c:36:26:84:f4:bb:2b:48:b1:06:a5:
                    15:16:db:02:ac:37:45:39:1b:58:6e:58:c9:bb:af:
                    74:e1:10:2e:a1:23:72:a7:87:b1:84:4d:59:16:b9:
                    e0:e3:41:0e:36:81:cd:57:a5:d8:07:0a:59:b7:66:
                    93:da:d1:38:07:88:42:97:2d:b0:e2:0c:f2:60:88:
                    f1:e0:fc:23:6b:c1:df:2d:bf:6d:13:da:d5:ac:3b:
                    1f:9a:db:bf:8f:31:be:4e:c4:f7:16:7a:9c:f2:62:
                    30:d2:b6:6a:38:da:fb:f7:2a:d0:64:d4:8e:9b:e0:
                    39:d6:e0:29:ea:12:f4:5c:f6:b0:8e:57:ed:78:ee:
                    bd:c7:d2:b7:35:e6:c2:6f:ee:48:d2:d7:75:1a:00:
                    0b:68:c9:c9:e1:73:49:e8:d4:7f:5d:0f:e5:95:f4:
                    2f:28:23:b2:e1:42:cf:91:b9:55:90:7b:9e:bd:8c:
                    00:83:1f:0f:f0:da:26:24:3f:41:49:02:66:1f:93:
                    5c:49:ad:20:45:4b:4f:14:8f:7e:5e:32:da:16:b9:
                    ad:22:34:39:c9:83:7a:4b:f1:ad:e2:a0:07:35:db:
                    cc:3a:d3:63:3c:d0:20:17:c7:d9:75:22:ca:63:aa:
                    49:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BE:66:FA:B3:80:B1:CD:F5:A4:70:FC:30:72:30:69:71:2A:21:6B
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/58ee9a893e7afd02796deebd16fa178aeb2749e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:a4:ba:79:b3:ed:2a:4a:89:3e:e2:9e:9d:00:a5:96:41:60:
         35:80:38:54:df:33:6f:52:9b:d5:2f:a4:78:9d:5c:52:2d:64:
         a1:3e:96:03:5e:88:e3:2b:3d:d4:6b:65:87:a7:ad:d4:c1:d9:
         0d:f2:b6:f6:bb:0e:59:4b:e5:f3:b0:4e:fd:e6:83:f8:9c:c1:
         fc:f7:ba:6a:59:df:33:73:97:99:52:57:0b:9d:5e:3f:b6:09:
         a9:bd:3c:9e:b1:ff:06:26:f4:75:10:8e:df:a8:17:2f:19:3c:
         da:41:b9:ef:ff:a0:cd:47:17:a4:aa:b4:f9:e9:1f:1d:0a:e0:
         0a:c2:1c:ef:5e:c4:09:78:f1:ab:a9:b9:e7:63:fa:db:6d:7d:
         26:89:5c:8f:4e:ff:99:97:fd:95:a8:be:82:37:c0:dc:b1:36:
         9b:c6:78:84:2e:c4:7c:ef:43:73:da:d3:e5:bc:6f:e8:cb:e9:
         21:04:65:23:4c:41:08:04:d1:d3:40:37:7d:df:d9:d4:ec:66:
         93:2f:f9:8e:b8:17:de:58:5e:e5:e1:b0:f0:38:0a:cb:a5:a7:
         af:b0:33:84:00:c1:53:ab:d9:17:2a:69:82:e1:0b:55:a4:a1:
         87:ff:5c:84:fc:45:88:52:70:9e:08:15:3f:2e:13:27:e8:c0:
         57:90:75:58
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDLpU1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
NzQ0MDlkMGMyYTcwYzkyMWRkNjg1ZTg2M2U5ZjAwY2IxZTI2MmEwHhcNMjMxMjA3
MTMwMDQ2WhcNMjgxMjA3MTMwMDQ2WjAzMTEwLwYDVQQDEyg1OGVlOWE4OTNlN2Fm
ZDAyNzk2ZGVlYmQxNmZhMTc4YWViMjc0OWUyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgDNMXnAZCZpIzqHgJPKhGB5+HDYmhPS7K0ixBqUVFtsCrDdF
ORtYbljJu6904RAuoSNyp4exhE1ZFrng40EONoHNV6XYBwpZt2aT2tE4B4hCly2w
4gzyYIjx4Pwja8HfLb9tE9rVrDsfmtu/jzG+TsT3Fnqc8mIw0rZqONr79yrQZNSO
m+A51uAp6hL0XPawjlfteO69x9K3NebCb+5I0td1GgALaMnJ4XNJ6NR/XQ/llfQv
KCOy4ULPkblVkHuevYwAgx8P8NomJD9BSQJmH5NcSa0gRUtPFI9+XjLaFrmtIjQ5
yYN6S/Gt4qAHNdvMOtNjPNAgF8fZdSLKY6pJHQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDa+ZvqzgLHN9aRw/DByMGlxKiFrMB8GA1UdIwQYMBaAFPuO/GhWAKtj6gJP
ow0fFdW1sMGxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzk3NDQw
OWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzU4ZWU5YTg5M2U3YWZkMDI3OTZkZWViZDE2ZmExNzhhZWIyNzQ5ZTIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvYzk3NDQwOWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7kqTANBgkqhkiG9w0BAQsFAAOCAQEAnqS6ebPtKkqJPuKe
nQCllkFgNYA4VN8zb1Kb1S+keJ1cUi1koT6WA16I4ys91Gtlh6et1MHZDfK29rsO
WUvl87BO/eaD+JzB/Pe6alnfM3OXmVJXC51eP7YJqb08nrH/Bib0dRCO36gXLxk8
2kG57/+gzUcXpKq0+ekfHQrgCsIc717ECXjxq6m552P62219Jolcj07/mZf9lai+
gjfA3LE2m8Z4hC7EfO9Dc9rT5bxv6MvpIQRlI0xBCATR00A3fd/Z1Oxmky/5jrgX
3lhe5eGw8DgKy6Wnr7AzhADBU6vZFyppguELVaShh/9chPxFiFJwnggVPy4TJ+jA
V5B1WA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org