Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5818f23c-cae3-4ac4-b432-79bfe40ab497/1f72c7d019562d67acff5767c73e93c2f94cc5b7.roa
File:                     1f72c7d019562d67acff5767c73e93c2f94cc5b7.roa (raw, json)
Hash identifier:          1bh79zPmGq3KdFTxP8ibUgQee0HEkiEzW9mVw8TQZac=
Subject key identifier:   3E:BE:AC:2D:86:70:B0:42:40:4E:08:25:C0:E3:36:85:D6:4F:ED:C2
Certificate issuer:       /CN=a77db4a4e3f57449d87d4445aa15303ad472c017
Certificate serial:       032F2E
Authority key identifier: 81:5D:BC:55:F6:CA:7B:01:59:A8:44:71:B6:06:79:99:01:8A:42:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a77db4a4e3f57449d87d4445aa15303ad472c017.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5818f23c-cae3-4ac4-b432-79bfe40ab497/1f72c7d019562d67acff5767c73e93c2f94cc5b7.roa
Signing time:             Wed 24 Mar 2021 14:31:06 +0000
ROA not before:           Wed 24 Mar 2021 14:31:06 +0000
ROA not after:            Tue 24 Mar 2026 14:31:06 +0000
asID:                     52317
IP address blocks:        190.112.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208686 (0x32f2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a77db4a4e3f57449d87d4445aa15303ad472c017
        Validity
            Not Before: Mar 24 14:31:06 2021 GMT
            Not After : Mar 24 14:31:06 2026 GMT
        Subject: CN=1f72c7d019562d67acff5767c73e93c2f94cc5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:01:e0:95:22:0d:b8:87:e7:16:8b:01:e1:
                    e2:9f:f4:88:d3:fc:0d:02:7b:06:6a:c9:84:92:a6:
                    6e:43:c2:4b:1a:d0:18:e3:c2:e7:61:ee:64:3b:66:
                    3b:38:37:a3:6c:b2:fa:57:dd:e9:28:02:53:ff:fa:
                    70:87:4a:b8:ef:25:90:61:54:7b:35:51:31:b8:29:
                    df:ae:07:c8:01:45:de:4a:b0:1e:ea:a9:28:22:a4:
                    a7:44:fd:69:fa:38:48:ff:d9:75:3f:41:de:b4:0a:
                    94:55:f7:a5:72:0d:c8:02:09:ae:70:7c:2b:0d:e3:
                    ca:ba:52:ef:de:d2:c7:b8:81:c5:24:5d:cd:80:d0:
                    c0:ff:07:67:71:08:d2:93:cf:56:cc:51:cc:00:ff:
                    44:de:a1:cf:ea:71:2a:e2:e3:25:87:10:05:be:2f:
                    ae:96:6e:1d:ee:b1:e0:25:a5:ce:64:df:dd:ca:51:
                    a4:f2:48:5b:db:bd:c5:3e:1e:46:9d:75:15:6c:1c:
                    8a:b5:61:3a:64:04:16:0a:90:e1:d3:20:9a:cc:7d:
                    ff:71:37:8c:82:b7:53:4c:ef:77:eb:d2:5a:3e:bd:
                    52:c8:66:c9:ce:19:06:19:23:99:90:f1:3d:fe:3f:
                    37:5d:58:86:8a:5a:fb:10:7c:a8:30:ac:6e:63:f6:
                    07:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BE:AC:2D:86:70:B0:42:40:4E:08:25:C0:E3:36:85:D6:4F:ED:C2
            X509v3 Authority Key Identifier:
                keyid:81:5D:BC:55:F6:CA:7B:01:59:A8:44:71:B6:06:79:99:01:8A:42:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a77db4a4e3f57449d87d4445aa15303ad472c017.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5818f23c-cae3-4ac4-b432-79bfe40ab497/1f72c7d019562d67acff5767c73e93c2f94cc5b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5818f23c-cae3-4ac4-b432-79bfe40ab497/a77db4a4e3f57449d87d4445aa15303ad472c017.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:59:46:b8:9a:08:50:f1:d7:9c:53:3f:58:04:c5:32:d8:40:
         21:7d:b4:be:0e:f1:0a:13:f0:4f:73:ef:34:fe:4a:c2:18:fd:
         bb:f4:f9:28:ee:94:79:f7:c3:fe:e8:23:e2:5e:fe:5f:36:a3:
         0f:a1:93:63:3b:35:c8:a9:77:2d:20:b3:88:d1:f0:9b:78:a8:
         18:18:67:77:99:7f:6a:05:69:5f:60:93:d6:43:54:58:dd:2b:
         19:dd:6b:89:fc:94:df:27:35:f9:57:c6:20:19:eb:a8:a3:21:
         58:0e:ac:79:74:ba:85:94:2d:3d:1e:17:99:3b:b8:32:cf:21:
         f2:d5:cf:6f:be:ca:42:e0:94:97:7a:c9:9d:c9:83:0a:a2:a7:
         5d:38:85:7f:18:6f:61:3a:b9:49:15:c5:3d:ff:31:59:2b:cf:
         3e:b5:e1:e6:d4:e2:73:d5:24:7b:ec:7c:08:1c:db:95:82:d9:
         42:dc:33:95:57:5f:a9:5d:78:bf:30:1e:d1:fb:b3:0f:b4:39:
         7b:fd:b4:0b:97:d8:3e:89:ec:ce:4b:36:2a:00:3f:13:66:28:
         36:72:0e:6c:7b:e9:16:74:24:3c:68:13:1b:8c:b9:94:b4:12:
         1b:2b:77:5b:18:ad:42:11:e1:47:16:90:05:f0:9a:67:0a:dd:
         70:d8:c1:4f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAy8uMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3
N2RiNGE0ZTNmNTc0NDlkODdkNDQ0NWFhMTUzMDNhZDQ3MmMwMTcwHhcNMjEwMzI0
MTQzMTA2WhcNMjYwMzI0MTQzMTA2WjAzMTEwLwYDVQQDEygxZjcyYzdkMDE5NTYy
ZDY3YWNmZjU3NjdjNzNlOTNjMmY5NGNjNWI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApWEB4JUiDbiH5xaLAeHin/SI0/wNAnsGasmEkqZuQ8JLGtAY
48LnYe5kO2Y7ODejbLL6V93pKAJT//pwh0q47yWQYVR7NVExuCnfrgfIAUXeSrAe
6qkoIqSnRP1p+jhI/9l1P0HetAqUVfelcg3IAgmucHwrDePKulLv3tLHuIHFJF3N
gNDA/wdncQjSk89WzFHMAP9E3qHP6nEq4uMlhxAFvi+ulm4d7rHgJaXOZN/dylGk
8khb273FPh5GnXUVbByKtWE6ZAQWCpDh0yCazH3/cTeMgrdTTO9369JaPr1SyGbJ
zhkGGSOZkPE9/j83XViGilr7EHyoMKxuY/YHrwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFD6+rC2GcLBCQE4IJcDjNoXWT+3CMB8GA1UdIwQYMBaAFIFdvFX2ynsBWahE
cbYGeZkBikL+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTc3ZGI0
YTRlM2Y1NzQ0OWQ4N2Q0NDQ1YWExNTMwM2FkNDcyYzAxNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTgxOGYyM2MtY2FlMy00YWM0LWI0MzItNzliZmU0
MGFiNDk3LzFmNzJjN2QwMTk1NjJkNjdhY2ZmNTc2N2M3M2U5M2MyZjk0Y2M1Yjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ODE4ZjIzYy1jYWUzLTRhYzQtYjQzMi03OWJm
ZTQwYWI0OTcvYTc3ZGI0YTRlM2Y1NzQ0OWQ4N2Q0NDQ1YWExNTMwM2FkNDcyYzAx
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5wKDANBgkqhkiG9w0BAQsFAAOCAQEAaFlGuJoIUPHXnFM/
WATFMthAIX20vg7xChPwT3PvNP5Kwhj9u/T5KO6UeffD/ugj4l7+XzajD6GTYzs1
yKl3LSCziNHwm3ioGBhnd5l/agVpX2CT1kNUWN0rGd1rifyU3yc1+VfGIBnrqKMh
WA6seXS6hZQtPR4XmTu4Ms8h8tXPb77KQuCUl3rJncmDCqKnXTiFfxhvYTq5SRXF
Pf8xWSvPPrXh5tTic9Uke+x8CBzblYLZQtwzlVdfqV14vzAe0fuzD7Q5e/20C5fY
Ponszks2KgA/E2YoNnIObHvpFnQkPGgTG4y5lLQSGyt3WxitQhHhRxaQBfCaZwrd
cNjBTw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org