Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/dee41d959d77a38b9588bfae4b68e30bcd78451f.roa
File:                     dee41d959d77a38b9588bfae4b68e30bcd78451f.roa (raw, json)
Hash identifier:          oN52ne3deXOdajgXLPAp1tCPGNIiLnomiLD4ZXCVwr0=
Subject key identifier:   9D:06:81:DB:A8:FF:52:E3:3F:FA:D4:58:8F:A1:4F:0F:5A:F0:F1:8D
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       28EFFF
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/dee41d959d77a38b9588bfae4b68e30bcd78451f.roa
Signing time:             Wed 07 Jun 2023 12:44:19 +0000
ROA not before:           Tue 06 Jun 2023 12:44:19 +0000
ROA not after:            Sat 07 Jun 2025 12:44:19 +0000
asID:                     263230
IP address blocks:        190.136.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2682879 (0x28efff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Jun  6 12:44:19 2023 GMT
            Not After : Jun  7 12:44:19 2025 GMT
        Subject: CN=dee41d959d77a38b9588bfae4b68e30bcd78451f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2f:c2:a0:d2:cc:d5:f8:6f:a0:02:86:fe:27:
                    12:3a:38:fa:51:09:a9:23:1a:d6:8a:6f:4f:e6:fc:
                    41:1e:1c:73:6c:14:bf:29:23:6d:80:ad:91:07:fb:
                    f0:c7:1a:be:16:03:7c:52:8b:1b:a8:e1:d4:46:77:
                    34:34:96:1f:8f:31:3e:44:19:4b:4a:84:bf:69:1f:
                    9e:00:cd:f1:4a:fa:ab:13:60:46:51:c4:4e:28:6e:
                    44:4e:c8:85:a5:67:6e:3b:1b:4a:a4:c4:1e:72:a1:
                    03:d7:08:3b:3c:0b:09:b8:1f:56:ce:16:68:18:2e:
                    74:55:de:6a:99:c5:f6:9c:b9:0b:b9:76:67:a8:5d:
                    32:2b:37:be:91:ec:42:c4:9c:b4:9c:68:84:f6:48:
                    2a:10:ab:0b:0e:c2:28:be:24:19:e6:f0:ba:8c:c6:
                    0a:cd:7d:a4:ce:40:58:05:ff:a2:09:c7:43:13:cd:
                    88:df:34:2b:e8:ab:70:42:7c:55:bd:a5:02:08:16:
                    52:a9:bd:02:92:da:d2:b6:c9:8c:df:f7:4a:8d:b5:
                    ad:ab:1e:1c:e5:26:07:e9:e6:ca:8e:1f:2f:39:a5:
                    f0:94:58:17:5a:d2:07:d0:8b:ae:99:d4:d1:bd:fb:
                    4f:65:01:1e:5d:e8:a1:8b:a3:bf:19:17:7f:1a:ac:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:06:81:DB:A8:FF:52:E3:3F:FA:D4:58:8F:A1:4F:0F:5A:F0:F1:8D
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/dee41d959d77a38b9588bfae4b68e30bcd78451f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.136.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:2a:f3:4e:cd:80:f9:30:8d:4e:d9:18:ca:eb:b0:b6:be:9e:
         b2:a0:8d:01:9b:9c:23:92:5d:62:04:5e:ca:08:52:8f:98:49:
         9a:71:fe:8b:7b:3f:ec:f6:b3:e4:27:46:0f:f8:42:8a:44:e6:
         63:01:6d:e5:24:b0:9e:bb:11:42:bb:05:d0:e5:39:ee:2d:ab:
         b1:a4:9a:77:5d:6a:41:44:17:c5:61:45:54:f7:38:2f:6d:90:
         d8:18:5b:96:5c:3d:36:d5:fc:78:90:29:e6:71:bb:94:e1:e8:
         f7:94:04:68:8f:8e:48:03:81:b1:90:c8:1c:62:22:30:84:ef:
         51:83:c3:88:f4:fe:02:35:78:c8:f6:f5:86:4a:fb:b3:d6:a7:
         20:05:40:d6:0c:a2:29:0c:48:00:de:f2:e6:e9:2b:a1:e3:81:
         7d:e9:ed:60:b2:5d:70:e5:21:df:01:d6:87:4f:95:ad:a4:6a:
         0d:b9:aa:32:31:93:a6:cc:d0:4e:9e:b8:76:af:97:d8:2c:21:
         c0:64:82:da:06:20:45:87:02:df:87:c1:ad:51:21:7c:65:2c:
         85:2c:3b:20:30:5e:aa:f6:aa:c7:fe:b0:59:40:a4:7e:a7:6a:
         a7:a9:94:22:1a:7f:d1:d4:87:28:64:b9:64:03:51:b2:91:1e:
         e6:ed:ef:bb
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKO//MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ5
M2E0NDRkMDYxZmM0ZDkxNGRjNTZkODAzMWE5YzQ1NzRjYTU3YWQwHhcNMjMwNjA2
MTI0NDE5WhcNMjUwNjA3MTI0NDE5WjAzMTEwLwYDVQQDEyhkZWU0MWQ5NTlkNzdh
MzhiOTU4OGJmYWU0YjY4ZTMwYmNkNzg0NTFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAny/CoNLM1fhvoAKG/icSOjj6UQmpIxrWim9P5vxBHhxzbBS/
KSNtgK2RB/vwxxq+FgN8UosbqOHURnc0NJYfjzE+RBlLSoS/aR+eAM3xSvqrE2BG
UcROKG5ETsiFpWduOxtKpMQecqED1wg7PAsJuB9WzhZoGC50Vd5qmcX2nLkLuXZn
qF0yKze+kexCxJy0nGiE9kgqEKsLDsIoviQZ5vC6jMYKzX2kzkBYBf+iCcdDE82I
3zQr6KtwQnxVvaUCCBZSqb0CktrStsmM3/dKjbWtqx4c5SYH6ebKjh8vOaXwlFgX
WtIH0IuumdTRvftPZQEeXeihi6O/GRd/Gqw4JwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ0Ggduo/1LjP/rUWI+hTw9a8PGNMB8GA1UdIwQYMBaAFMmcjKrH/3v04XrK
8I/d1uVu/M2tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDkzYTQ0
NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTMyYjIwOTctZWEwOC00NzgwLWI5NGYtMDNjMzM4
YjVhYTU3L2RlZTQxZDk1OWQ3N2EzOGI5NTg4YmZhZTRiNjhlMzBiY2Q3ODQ1MWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MzJiMjA5Ny1lYTA4LTQ3ODAtYjk0Zi0wM2Mz
MzhiNWFhNTcvZDkzYTQ0NGQwNjFmYzRkOTE0ZGM1NmQ4MDMxYTljNDU3NGNhNTdh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL6IBjANBgkqhkiG9w0BAQsFAAOCAQEAbirzTs2A+TCNTtkY
yuuwtr6esqCNAZucI5JdYgReyghSj5hJmnH+i3s/7Paz5CdGD/hCikTmYwFt5SSw
nrsRQrsF0OU57i2rsaSad11qQUQXxWFFVPc4L22Q2Bhbllw9NtX8eJAp5nG7lOHo
95QEaI+OSAOBsZDIHGIiMITvUYPDiPT+AjV4yPb1hkr7s9anIAVA1gyiKQxIAN7y
5ukroeOBfentYLJdcOUh3wHWh0+VraRqDbmqMjGTpszQTp64dq+X2CwhwGSC2gYg
RYcC34fBrVEhfGUshSw7IDBeqvaqx/6wWUCkfqdqp6mUIhp/0dSHKGS5ZANRspEe
5u3vuw==
-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org