Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/171d2ab9342cd45cc89d7fef513953e2f9f99ad4.roa
File:                     171d2ab9342cd45cc89d7fef513953e2f9f99ad4.roa (raw, json)
Hash identifier:          1qXUU9M1JTq4FkP6Bj9uK8hUlK0MT5Dh3cKndrOx00Q=
Subject key identifier:   F4:11:62:F6:63:79:45:40:5A:64:05:91:C4:8E:58:93:D7:F9:C2:3F
Certificate issuer:       /CN=9cb5ed986f92bf8656b1c7c33cd9fc8fc646f900
Certificate serial:       260E59
Authority key identifier: 85:34:22:22:E2:BA:96:B0:DA:DE:85:6A:1C:00:AC:49:B0:60:E9:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cb5ed986f92bf8656b1c7c33cd9fc8fc646f900.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/171d2ab9342cd45cc89d7fef513953e2f9f99ad4.roa
Signing time:             Thu 07 Mar 2024 19:07:00 +0000
ROA not before:           Thu 07 Mar 2024 19:06:59 +0000
ROA not after:            Wed 07 Mar 2029 19:06:59 +0000
asID:                     11340
IP address blocks:        190.110.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494041 (0x260e59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb5ed986f92bf8656b1c7c33cd9fc8fc646f900
        Validity
            Not Before: Mar  7 19:06:59 2024 GMT
            Not After : Mar  7 19:06:59 2029 GMT
        Subject: CN=171d2ab9342cd45cc89d7fef513953e2f9f99ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ff:88:11:d7:f7:92:1b:07:81:fb:18:6d:3e:
                    10:70:66:9f:5e:b2:99:8d:bb:98:8c:d2:1f:1d:14:
                    b7:a8:41:f9:38:56:6a:d6:d8:8f:9c:7c:4f:34:f9:
                    02:cf:9d:78:79:1f:eb:d9:62:b1:ac:d4:86:32:fc:
                    c7:55:ad:11:42:ee:bd:aa:cb:5e:70:fd:02:d8:41:
                    29:51:0c:4f:75:ad:da:79:50:3f:7b:21:8f:bb:43:
                    62:2c:2d:a8:22:42:95:e0:05:c6:7f:be:02:46:5f:
                    9b:b1:97:84:9a:88:e5:e6:10:04:9b:ff:de:6f:2a:
                    2e:40:52:d4:12:20:17:58:52:ab:27:fd:20:39:48:
                    88:e3:38:3a:2a:d8:bd:89:1e:2a:16:e1:88:58:c2:
                    5d:11:42:99:cf:01:ea:af:0b:12:36:82:87:4d:da:
                    df:3e:d9:e5:06:f1:26:a7:8c:e1:7e:98:ed:8f:54:
                    cf:10:3a:17:d0:69:34:1f:30:fa:96:a5:02:2f:6e:
                    a8:88:0c:4c:ed:83:70:aa:ee:c8:5c:76:bb:b4:ed:
                    68:fe:1c:4d:4c:68:7a:80:e8:4d:d8:b3:cf:68:be:
                    a2:21:9e:76:58:23:e2:c1:36:29:08:7e:12:f2:fd:
                    a7:1d:a8:e0:7c:a8:bd:6c:0e:3b:48:3c:d8:cb:83:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:11:62:F6:63:79:45:40:5A:64:05:91:C4:8E:58:93:D7:F9:C2:3F
            X509v3 Authority Key Identifier:
                keyid:85:34:22:22:E2:BA:96:B0:DA:DE:85:6A:1C:00:AC:49:B0:60:E9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cb5ed986f92bf8656b1c7c33cd9fc8fc646f900.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/171d2ab9342cd45cc89d7fef513953e2f9f99ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/9cb5ed986f92bf8656b1c7c33cd9fc8fc646f900.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:f0:71:a4:e5:ee:cd:0c:12:32:3e:e1:1c:ed:5b:93:42:14:
         b6:8a:36:bf:de:3f:a8:01:0f:a2:be:c8:0c:81:2d:44:b9:3c:
         a1:0c:45:a2:c9:5e:81:1f:06:be:99:3e:3d:07:0b:ff:7e:b0:
         1d:27:b2:44:84:15:3e:e0:df:e5:bb:e4:bb:16:ae:5e:88:3d:
         1c:7c:ae:e2:fb:14:72:b3:13:5e:bb:44:03:f6:4d:41:56:ba:
         0d:87:5f:40:1b:ea:26:d9:23:12:58:ef:e2:c9:be:78:90:e6:
         04:66:39:97:17:f1:67:c8:82:64:6a:4d:e0:e8:bc:54:8d:9d:
         2a:22:a1:f9:d7:58:23:bf:dd:39:7b:cb:ab:3a:d3:07:25:53:
         6a:0d:13:cf:16:64:3e:b2:c5:a1:2d:f8:55:5c:14:9a:07:b6:
         98:8a:a7:e8:44:1b:e6:81:67:65:fc:1f:ba:e9:38:89:5e:2b:
         8c:b4:e3:93:c1:2e:b6:d9:e3:b4:9a:83:0d:0b:e3:da:8d:d4:
         81:7e:81:c1:7e:81:44:e8:82:ad:22:f5:a8:c4:df:e8:2e:51:
         ad:98:81:d2:22:f4:83:6e:e8:fc:88:c3:8e:38:25:7e:01:b4:
         b7:70:91:0f:39:ac:44:75:a1:b8:cc:36:1f:54:07:49:a9:88:
         31:31:14:77
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJg5ZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlj
YjVlZDk4NmY5MmJmODY1NmIxYzdjMzNjZDlmYzhmYzY0NmY5MDAwHhcNMjQwMzA3
MTkwNjU5WhcNMjkwMzA3MTkwNjU5WjAzMTEwLwYDVQQDEygxNzFkMmFiOTM0MmNk
NDVjYzg5ZDdmZWY1MTM5NTNlMmY5Zjk5YWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArP+IEdf3khsHgfsYbT4QcGafXrKZjbuYjNIfHRS3qEH5OFZq
1tiPnHxPNPkCz514eR/r2WKxrNSGMvzHVa0RQu69qstecP0C2EEpUQxPda3aeVA/
eyGPu0NiLC2oIkKV4AXGf74CRl+bsZeEmojl5hAEm//ebyouQFLUEiAXWFKrJ/0g
OUiI4zg6Kti9iR4qFuGIWMJdEUKZzwHqrwsSNoKHTdrfPtnlBvEmp4zhfpjtj1TP
EDoX0Gk0HzD6lqUCL26oiAxM7YNwqu7IXHa7tO1o/hxNTGh6gOhN2LPPaL6iIZ52
WCPiwTYpCH4S8v2nHajgfKi9bA47SDzYy4OISQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPQRYvZjeUVAWmQFkcSOWJPX+cI/MB8GA1UdIwQYMBaAFIU0IiLiupaw2t6F
ahwArEmwYOkNMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWNiNWVk
OTg2ZjkyYmY4NjU2YjFjN2MzM2NkOWZjOGZjNjQ2ZjkwMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTQ4MWIwNTgtMzExYy00Mjk0LTg2MTktOGRkZWVm
YzVlNjBkLzE3MWQyYWI5MzQyY2Q0NWNjODlkN2ZlZjUxMzk1M2UyZjlmOTlhZDQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NDgxYjA1OC0zMTFjLTQyOTQtODYxOS04ZGRl
ZWZjNWU2MGQvOWNiNWVkOTg2ZjkyYmY4NjU2YjFjN2MzM2NkOWZjOGZjNjQ2Zjkw
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5uZDANBgkqhkiG9w0BAQsFAAOCAQEAiPBxpOXuzQwSMj7h
HO1bk0IUtoo2v94/qAEPor7IDIEtRLk8oQxFoslegR8Gvpk+PQcL/36wHSeyRIQV
PuDf5bvkuxauXog9HHyu4vsUcrMTXrtEA/ZNQVa6DYdfQBvqJtkjEljv4sm+eJDm
BGY5lxfxZ8iCZGpN4Oi8VI2dKiKh+ddYI7/dOXvLqzrTByVTag0TzxZkPrLFoS34
VVwUmge2mIqn6EQb5oFnZfwfuuk4iV4rjLTjk8EuttnjtJqDDQvj2o3UgX6BwX6B
ROiCrSL1qMTf6C5RrZiB0iL0g27o/IjDjjglfgG0t3CRDzmsRHWhuMw2H1QHSamI
MTEUdw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org