Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/003b7beb0ad732ab70bc1e7c7f433b61937944ad.roa
File:                     003b7beb0ad732ab70bc1e7c7f433b61937944ad.roa (raw, json)
Hash identifier:          e8MSYbKNldCbqaSFZaAX7wd1vIQV1GDLoK7YuCnTXE4=
Subject key identifier:   2E:3D:29:62:37:D3:C2:DA:9B:D2:A8:35:4E:F2:AE:64:E5:BD:40:ED
Certificate issuer:       /CN=30d20bef67088f83626615a8accfbafffad06334
Certificate serial:       091351
Authority key identifier: 93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/003b7beb0ad732ab70bc1e7c7f433b61937944ad.roa
Signing time:             Fri 28 Oct 2022 16:43:47 +0000
ROA not before:           Thu 27 Oct 2022 16:39:06 +0000
ROA not after:            Mon 28 Oct 2024 16:39:06 +0000
asID:                     262234
IP address blocks:        190.124.164.0/24 maxlen: 24
                          190.185.113.0/24 maxlen: 24
                          190.185.114.0/24 maxlen: 24
                          190.185.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594769 (0x91351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30d20bef67088f83626615a8accfbafffad06334
        Validity
            Not Before: Oct 27 16:39:06 2022 GMT
            Not After : Oct 28 16:39:06 2024 GMT
        Subject: CN=003b7beb0ad732ab70bc1e7c7f433b61937944ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:02:ac:38:db:23:1a:82:4c:46:42:57:1c:
                    49:54:10:f0:05:68:e6:e8:2b:3c:97:0c:5b:04:97:
                    58:d0:db:ab:f3:fd:0c:b2:4a:ae:2e:39:b7:4a:2c:
                    64:c4:df:cc:92:ac:ce:13:ad:fb:7b:d5:b2:a3:35:
                    05:fa:a9:36:0f:00:7f:4f:bc:59:ca:c7:a2:71:af:
                    e1:5f:8c:c9:67:b9:b5:f2:4a:7f:8b:52:d3:30:1a:
                    97:70:71:54:e9:2d:9a:1a:c9:8b:43:66:8c:4b:d8:
                    c6:f3:c1:d3:07:21:5f:02:77:78:7d:39:26:d4:22:
                    29:8d:a6:b2:a1:3b:18:57:51:dd:6d:74:e3:3f:7b:
                    75:d4:b8:a7:15:6f:fb:94:73:ea:60:9b:5c:35:7d:
                    08:91:03:a2:c7:e0:ec:b0:59:15:2c:d0:af:2d:d2:
                    ee:b0:f9:ff:67:fe:44:3b:ce:86:8e:e3:3e:dc:51:
                    d6:c1:40:da:58:e5:27:f1:8d:3a:17:68:3c:13:5d:
                    ca:fd:e1:d3:be:25:04:35:7c:34:60:9a:1c:cf:92:
                    7a:6d:c0:44:90:09:2a:fb:cb:97:69:dc:87:aa:7d:
                    fa:57:08:6f:8b:a6:7e:14:c1:d4:74:9e:da:f7:11:
                    2a:09:2f:08:19:27:49:6f:a7:2d:58:44:03:a3:54:
                    98:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3D:29:62:37:D3:C2:DA:9B:D2:A8:35:4E:F2:AE:64:E5:BD:40:ED
            X509v3 Authority Key Identifier:
                keyid:93:34:E0:2D:E2:00:5A:1A:43:BC:FF:4D:2E:E0:88:0E:23:B1:E1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30d20bef67088f83626615a8accfbafffad06334.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/003b7beb0ad732ab70bc1e7c7f433b61937944ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/563fcf80-91b5-4da6-a3ea-7bb84a0e83ed/30d20bef67088f83626615a8accfbafffad06334.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.164.0/24
                  190.185.113.0-190.185.115.255

    Signature Algorithm: sha256WithRSAEncryption
         00:50:c7:88:69:72:2c:31:67:b5:79:a9:a6:1b:59:ea:98:85:
         46:72:5c:f1:f9:9c:e0:5e:fc:e6:ac:b5:84:80:be:e0:7c:bd:
         a8:b1:d9:2e:1e:3e:7d:bd:78:59:f1:d8:88:8e:1c:0d:01:0f:
         56:ec:99:46:04:89:cc:8c:af:63:d5:3c:23:83:d3:e5:f2:ba:
         f9:ae:1f:fe:bb:24:1b:98:e7:73:32:c8:95:ae:2b:d3:6d:47:
         11:31:c4:af:74:fc:a1:27:67:8d:79:fc:27:8f:ad:25:d1:dd:
         ad:ee:9e:15:da:c7:9f:60:56:20:46:9c:52:06:70:3f:1b:7e:
         b1:61:65:1e:00:e9:44:fd:ef:02:f1:e5:6f:81:ca:cf:b6:09:
         11:d9:a5:54:12:46:44:ce:73:f6:dc:28:cc:13:7f:28:36:eb:
         af:e3:dc:a7:d6:23:7c:db:35:19:aa:d9:2f:70:56:3b:46:4e:
         86:6f:7c:ca:33:60:b0:8b:a3:46:20:82:fb:1e:71:76:83:5d:
         cf:7e:50:9b:be:f7:04:7b:4e:bd:f8:8c:3e:d6:80:cd:08:7a:
         a5:ea:df:8b:0b:cf:6f:a9:77:36:57:a7:d0:d1:66:48:72:e1:
         7d:ff:a0:e8:2d:67:61:94:81:45:f7:8e:2e:1e:b7:c8:5b:e8:
         9f:04:30:70
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDCRNRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMw
ZDIwYmVmNjcwODhmODM2MjY2MTVhOGFjY2ZiYWZmZmFkMDYzMzQwHhcNMjIxMDI3
MTYzOTA2WhcNMjQxMDI4MTYzOTA2WjAzMTEwLwYDVQQDEygwMDNiN2JlYjBhZDcz
MmFiNzBiYzFlN2M3ZjQzM2I2MTkzNzk0NGFkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmJQCrDjbIxqCTEZCVxxJVBDwBWjm6Cs8lwxbBJdY0Nur8/0M
skquLjm3SixkxN/MkqzOE637e9WyozUF+qk2DwB/T7xZyseica/hX4zJZ7m18kp/
i1LTMBqXcHFU6S2aGsmLQ2aMS9jG88HTByFfAnd4fTkm1CIpjaayoTsYV1HdbXTj
P3t11LinFW/7lHPqYJtcNX0IkQOix+DssFkVLNCvLdLusPn/Z/5EO86GjuM+3FHW
wUDaWOUn8Y06F2g8E13K/eHTviUENXw0YJocz5J6bcBEkAkq+8uXadyHqn36Vwhv
i6Z+FMHUdJ7a9xEqCS8IGSdJb6ctWEQDo1SYdwIDAQABo4ICaTCCAmUwHQYDVR0O
BBYEFC49KWI308Lam9KoNU7yrmTlvUDtMB8GA1UdIwQYMBaAFJM04C3iAFoaQ7z/
TS7giA4jseFmMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzBkMjBi
ZWY2NzA4OGY4MzYyNjYxNWE4YWNjZmJhZmZmYWQwNjMzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTYzZmNmODAtOTFiNS00ZGE2LWEzZWEtN2JiODRh
MGU4M2VkLzAwM2I3YmViMGFkNzMyYWI3MGJjMWU3YzdmNDMzYjYxOTM3OTQ0YWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81NjNmY2Y4MC05MWI1LTRkYTYtYTNlYS03YmI4
NGEwZTgzZWQvMzBkMjBiZWY2NzA4OGY4MzYyNjYxNWE4YWNjZmJhZmZmYWQwNjMz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQe
MBwwGgQCAAEwFAMEAL58pDAMAwQAvrlxAwQCvrlwMA0GCSqGSIb3DQEBCwUAA4IB
AQAAUMeIaXIsMWe1eammG1nqmIVGclzx+ZzgXvzmrLWEgL7gfL2osdkuHj59vXhZ
8diIjhwNAQ9W7JlGBInMjK9j1Twjg9Pl8rr5rh/+uyQbmOdzMsiVrivTbUcRMcSv
dPyhJ2eNefwnj60l0d2t7p4V2sefYFYgRpxSBnA/G36xYWUeAOlE/e8C8eVvgcrP
tgkR2aVUEkZEznP23CjME38oNuuv49yn1iN82zUZqtkvcFY7Rk6Gb3zKM2Cwi6NG
IIL7HnF2g13PflCbvvcEe069+Iw+1oDNCHql6t+LC89vqXc2V6fQ0WZIcuF9/6Do
LWdhlIFF944uHrfIW+ifBDBw
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org