Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/91721cf80d5ff9716b0d2a4c37c92ffc532d0fc2.roa
File:                     91721cf80d5ff9716b0d2a4c37c92ffc532d0fc2.roa (raw, json)
Hash identifier:          9R2A1iwWdPh589KXm4vU6vVUd4Czp2CZ+X/aOSru8z4=
Subject key identifier:   F2:E4:43:2D:86:64:56:26:86:63:77:DC:F7:25:9A:27:3D:38:CD:67
Certificate issuer:       /CN=cc3aa122dfd9e78c282ee13cf25302c07b4c605f
Certificate serial:       2199C7
Authority key identifier: D4:35:7D:8B:E1:0A:D4:A3:22:1E:6B:85:FA:32:35:A2:68:5D:C7:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/91721cf80d5ff9716b0d2a4c37c92ffc532d0fc2.roa
Signing time:             Mon 03 Jul 2023 12:00:49 +0000
ROA not before:           Sun 02 Jul 2023 12:00:49 +0000
ROA not after:            Thu 03 Jul 2025 12:00:49 +0000
asID:                     27754
IP address blocks:        190.3.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202055 (0x2199c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3aa122dfd9e78c282ee13cf25302c07b4c605f
        Validity
            Not Before: Jul  2 12:00:49 2023 GMT
            Not After : Jul  3 12:00:49 2025 GMT
        Subject: CN=91721cf80d5ff9716b0d2a4c37c92ffc532d0fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:de:b9:b5:9f:00:21:04:98:b2:a1:4f:bf:99:
                    be:6d:f2:ff:69:a1:aa:31:4c:d3:7b:35:07:23:fa:
                    3b:c6:b4:93:91:a7:24:f9:71:b0:29:92:9a:29:32:
                    2a:e0:ce:43:a8:18:aa:1c:cd:2d:9f:b3:8c:2b:0a:
                    a5:bc:24:63:ea:52:cf:99:52:b3:71:21:0c:78:6e:
                    8b:35:a0:b1:ab:a7:38:72:28:a7:5e:ac:86:34:7e:
                    6b:23:d4:e9:1e:bf:7b:a9:bf:a4:fb:4d:5e:76:ab:
                    fe:65:5a:07:1d:0e:24:d8:fa:ef:60:e3:ea:49:62:
                    71:1b:b3:95:b3:44:20:14:d9:4a:9b:02:6a:fb:bc:
                    6c:f4:e8:b4:b1:1f:3d:3d:2c:63:2b:cc:7a:9b:0f:
                    8a:b3:63:d2:63:45:93:f5:0b:bf:c0:46:1b:d9:58:
                    21:14:37:97:cf:54:d8:4b:47:d2:61:45:a4:2e:6b:
                    ae:39:ec:ef:bc:94:b3:72:ee:86:e1:5c:95:6c:ea:
                    c5:72:69:f3:91:ba:e3:78:32:5e:8c:cd:e7:c6:fb:
                    32:f9:ed:21:d1:39:83:61:1e:54:e9:e1:50:1e:b5:
                    06:f7:b0:c7:50:12:71:de:e1:c7:57:b8:30:85:df:
                    da:fc:cc:6c:2e:35:de:fe:4a:e0:47:61:86:f7:db:
                    9f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E4:43:2D:86:64:56:26:86:63:77:DC:F7:25:9A:27:3D:38:CD:67
            X509v3 Authority Key Identifier:
                keyid:D4:35:7D:8B:E1:0A:D4:A3:22:1E:6B:85:FA:32:35:A2:68:5D:C7:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/91721cf80d5ff9716b0d2a4c37c92ffc532d0fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:d9:6d:ec:4e:53:05:58:4b:b6:fb:23:06:64:36:4a:dc:4d:
         4c:44:19:f9:bf:eb:5a:b7:1e:9a:e9:e6:98:bb:3e:87:04:71:
         70:c2:6e:a0:0a:eb:0c:bd:5d:98:ef:34:1a:ff:a9:f1:15:04:
         b5:97:3e:94:60:c6:f2:88:35:b8:eb:ea:8b:28:bf:57:a5:09:
         94:6d:1d:88:1d:f0:28:a1:9a:57:4c:ce:f1:a7:73:87:49:f6:
         af:82:02:49:90:a3:5b:fc:d5:19:d9:27:93:38:a9:18:24:18:
         72:85:57:f7:56:94:71:6e:2e:dd:4a:40:a0:c6:22:52:9b:4b:
         0b:09:af:49:10:10:fd:6f:43:a9:88:cd:c9:63:cc:db:48:26:
         1c:a1:ea:ec:6a:73:48:f9:34:f0:50:af:be:59:6d:f8:12:fd:
         3e:5a:be:e1:e1:f3:26:5e:1d:d0:f5:89:4d:a1:34:94:fe:d6:
         68:74:de:e8:93:e8:7d:1b:88:49:7d:d3:06:6d:23:16:ab:78:
         9c:9c:23:cb:ec:a1:0c:28:4f:d2:59:ca:55:96:3f:22:bb:dd:
         b7:84:07:2f:33:5b:c0:c7:e8:48:cb:6c:0b:2b:ba:f5:18:e0:
         df:18:ad:d8:11:63:f9:fe:28:33:2d:72:76:fd:8d:5e:e7:51:
         d1:fa:5e:31
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIZnHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNj
M2FhMTIyZGZkOWU3OGMyODJlZTEzY2YyNTMwMmMwN2I0YzYwNWYwHhcNMjMwNzAy
MTIwMDQ5WhcNMjUwNzAzMTIwMDQ5WjAzMTEwLwYDVQQDEyg5MTcyMWNmODBkNWZm
OTcxNmIwZDJhNGMzN2M5MmZmYzUzMmQwZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAht65tZ8AIQSYsqFPv5m+bfL/aaGqMUzTezUHI/o7xrSTkack
+XGwKZKaKTIq4M5DqBiqHM0tn7OMKwqlvCRj6lLPmVKzcSEMeG6LNaCxq6c4ciin
XqyGNH5rI9TpHr97qb+k+01edqv+ZVoHHQ4k2PrvYOPqSWJxG7OVs0QgFNlKmwJq
+7xs9Oi0sR89PSxjK8x6mw+Ks2PSY0WT9Qu/wEYb2VghFDeXz1TYS0fSYUWkLmuu
OezvvJSzcu6G4VyVbOrFcmnzkbrjeDJejM3nxvsy+e0h0TmDYR5U6eFQHrUG97DH
UBJx3uHHV7gwhd/a/MxsLjXe/krgR2GG99ufdQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPLkQy2GZFYmhmN33Pclmic9OM1nMB8GA1UdIwQYMBaAFNQ1fYvhCtSjIh5r
hfoyNaJoXccpMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2MzYWEx
MjJkZmQ5ZTc4YzI4MmVlMTNjZjI1MzAyYzA3YjRjNjA1Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTU3M2Y3YWUtOTkwNC00ZTZmLWE0MjAtNzUzZDlj
Y2NmMTFjLzkxNzIxY2Y4MGQ1ZmY5NzE2YjBkMmE0YzM3YzkyZmZjNTMyZDBmYzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NTczZjdhZS05OTA0LTRlNmYtYTQyMC03NTNk
OWNjY2YxMWMvY2MzYWExMjJkZmQ5ZTc4YzI4MmVlMTNjZjI1MzAyYzA3YjRjNjA1
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL4DFjANBgkqhkiG9w0BAQsFAAOCAQEAMtlt7E5TBVhLtvsj
BmQ2StxNTEQZ+b/rWrcemunmmLs+hwRxcMJuoArrDL1dmO80Gv+p8RUEtZc+lGDG
8og1uOvqiyi/V6UJlG0diB3wKKGaV0zO8adzh0n2r4ICSZCjW/zVGdknkzipGCQY
coVX91aUcW4u3UpAoMYiUptLCwmvSRAQ/W9DqYjNyWPM20gmHKHq7GpzSPk08FCv
vllt+BL9Plq+4eHzJl4d0PWJTaE0lP7WaHTe6JPofRuISX3TBm0jFqt4nJwjy+yh
DChP0lnKVZY/Irvdt4QHLzNbwMfoSMtsCyu69Rjg3xit2BFj+f4oMy1ydv2NXudR
0fpeMQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:34 2023 by rpki-client on console-ams.rpki-client.org