Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/64cc8df58e95f9ba31144fe0566d87946372cd1a.roa
File:                     64cc8df58e95f9ba31144fe0566d87946372cd1a.roa (raw, json)
Hash identifier:          DkY3mZUtNC4AKmG2PatRRrncZ39RnxZh2ZKESWXqWuU=
Subject key identifier:   16:8C:04:A2:B2:13:4F:E5:87:23:A8:86:24:0A:A2:3D:16:34:CB:D7
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E5796
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/64cc8df58e95f9ba31144fe0566d87946372cd1a.roa
Signing time:             Thu 07 Dec 2023 13:01:13 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     27813
IP address blocks:        190.30.242.0/24 maxlen: 24
                          190.227.182.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3037078 (0x2e5796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=64cc8df58e95f9ba31144fe0566d87946372cd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:89:f9:ef:50:92:6b:79:19:e3:dc:56:dd:84:
                    21:88:b3:07:7a:ce:da:b4:7c:61:34:19:5c:33:ef:
                    be:9f:82:b9:b1:c5:92:d9:f5:b8:10:51:d0:9b:db:
                    0c:20:63:01:14:e7:62:96:0d:8c:4b:29:51:75:97:
                    61:04:13:e5:36:a9:a8:48:19:06:0d:32:3b:4d:d7:
                    3f:40:18:58:0c:5a:cc:43:62:6b:3c:88:e7:ef:f3:
                    3e:99:23:40:46:2d:f0:29:e8:ac:7a:0c:02:16:30:
                    7b:56:42:8d:0a:b5:bf:2c:e5:c3:c8:95:d8:b8:2c:
                    af:10:b8:07:1f:eb:8f:22:b8:f2:5f:82:0d:2d:65:
                    b5:4f:af:e9:1e:54:5b:a3:e8:cc:5f:35:c2:e7:e8:
                    32:c2:f2:57:0b:01:e1:82:ed:ef:2a:90:c7:f2:19:
                    ff:05:3b:7f:e2:73:c3:68:76:0c:dc:cf:08:af:63:
                    4d:ba:22:42:e3:72:ef:e3:49:b7:8f:32:63:1f:95:
                    aa:ee:67:83:41:b8:4f:74:b4:f5:5f:09:ce:be:d1:
                    ec:49:c9:63:37:6e:38:62:e0:b2:53:24:17:1b:ff:
                    c5:4f:c6:b7:75:30:9b:99:b9:9a:12:16:ab:fe:b1:
                    d1:f6:07:88:71:81:fe:bf:6a:89:71:16:3b:40:50:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8C:04:A2:B2:13:4F:E5:87:23:A8:86:24:0A:A2:3D:16:34:CB:D7
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/64cc8df58e95f9ba31144fe0566d87946372cd1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.30.242.0/24
                  190.227.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:11:ba:19:f7:f3:7a:2a:c8:a2:3b:74:61:4c:d0:c4:57:dd:
         9c:bc:f7:44:8f:49:b8:6d:50:84:c2:29:65:e6:ad:af:33:6d:
         85:f8:e0:52:76:24:b3:36:02:5d:51:17:49:d9:04:7a:d9:02:
         ec:87:f4:0a:90:2a:06:42:6b:c0:2b:0d:34:b1:c1:1a:f3:81:
         5b:3d:f5:e2:9d:21:1a:b7:3b:a7:ae:8b:77:96:58:a0:0e:6b:
         98:2e:d5:be:0b:2e:8b:33:13:ae:c4:86:dd:5e:23:9d:1a:0e:
         cf:44:36:83:6b:6e:25:9f:38:31:5e:e7:9f:25:8d:87:b8:38:
         4f:6a:ab:be:e4:fe:e6:aa:8c:1e:69:2a:10:fa:20:d3:23:26:
         95:7b:e5:95:fd:7e:a0:d1:7f:89:75:43:86:db:8c:d6:60:26:
         c9:55:5a:46:71:45:a3:96:2e:8d:c5:b2:c1:12:7e:4c:cd:44:
         0d:8f:9c:b3:4b:e6:a9:90:3d:83:e9:5b:dd:ae:41:c4:3a:91:
         ce:96:14:5f:87:c6:19:e1:17:92:c6:70:40:51:24:38:8a:46:
         24:be:57:09:b0:5c:1d:d0:73:25:61:a0:28:5a:d5:0c:29:58:
         7d:f3:6b:77:be:6e:b6:74:c8:69:9c:d5:c3:3c:20:45:79:32:
         44:e9:76:cb
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDLleWMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM5
NzQ0MDlkMGMyYTcwYzkyMWRkNjg1ZTg2M2U5ZjAwY2IxZTI2MmEwHhcNMjMxMjA3
MTMwMDQ2WhcNMjgxMjA3MTMwMDQ2WjAzMTEwLwYDVQQDEyg2NGNjOGRmNThlOTVm
OWJhMzExNDRmZTA1NjZkODc5NDYzNzJjZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx4n571CSa3kZ49xW3YQhiLMHes7atHxhNBlcM+++n4K5scWS
2fW4EFHQm9sMIGMBFOdilg2MSylRdZdhBBPlNqmoSBkGDTI7Tdc/QBhYDFrMQ2Jr
PIjn7/M+mSNARi3wKeisegwCFjB7VkKNCrW/LOXDyJXYuCyvELgHH+uPIrjyX4IN
LWW1T6/pHlRbo+jMXzXC5+gywvJXCwHhgu3vKpDH8hn/BTt/4nPDaHYM3M8Ir2NN
uiJC43Lv40m3jzJjH5Wq7meDQbhPdLT1XwnOvtHsScljN244YuCyUyQXG//FT8a3
dTCbmbmaEhar/rHR9geIcYH+v2qJcRY7QFAeYQIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFBaMBKKyE0/lhyOohiQKoj0WNMvXMB8GA1UdIwQYMBaAFPuO/GhWAKtj6gJP
ow0fFdW1sMGxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzk3NDQw
OWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYyYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3LzY0Y2M4ZGY1OGU5NWY5YmEzMTE0NGZlMDU2NmQ4Nzk0NjM3MmNkMWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvYzk3NDQwOWQwYzJhNzBjOTIxZGQ2ODVlODYzZTlmMDBjYjFlMjYy
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAL4e8gMEAb7jtjANBgkqhkiG9w0BAQsFAAOCAQEAuxG6Gffz
eirIojt0YUzQxFfdnLz3RI9JuG1QhMIpZeatrzNthfjgUnYkszYCXVEXSdkEetkC
7If0CpAqBkJrwCsNNLHBGvOBWz314p0hGrc7p66Ld5ZYoA5rmC7VvgsuizMTrsSG
3V4jnRoOz0Q2g2tuJZ84MV7nnyWNh7g4T2qrvuT+5qqMHmkqEPog0yMmlXvllf1+
oNF/iXVDhtuM1mAmyVVaRnFFo5YujcWywRJ+TM1EDY+cs0vmqZA9g+lb3a5BxDqR
zpYUX4fGGeEXksZwQFEkOIpGJL5XCbBcHdBzJWGgKFrVDClYffNrd75utnTIaZzV
wzwgRXkyROl2yw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org