Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/7b7eb3506aa8d7427dc263d81c2a222a411bdc6d.roa
File:                     7b7eb3506aa8d7427dc263d81c2a222a411bdc6d.roa (raw, json)
Hash identifier:          Gu+0nc6acRnUz0Tk3rNpivrxGJKZThbIv3QoBwxsvQ8=
Subject key identifier:   4C:4E:5C:5F:1C:A8:8B:80:66:39:90:0E:F8:8B:A4:07:58:73:C1:E2
Certificate issuer:       /CN=ad1db2aa734e6dcb93a8797a98a422a7f542f512
Certificate serial:       080700
Authority key identifier: C8:A9:2F:5E:C3:22:F7:EB:49:1E:AA:0B:B8:6B:31:A8:A3:2C:EE:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad1db2aa734e6dcb93a8797a98a422a7f542f512.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/7b7eb3506aa8d7427dc263d81c2a222a411bdc6d.roa
Signing time:             Wed 24 Mar 2021 14:29:41 +0000
ROA not before:           Wed 24 Mar 2021 14:29:40 +0000
ROA not after:            Tue 24 Mar 2026 14:29:40 +0000
asID:                     28093
IP address blocks:        190.52.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526080 (0x80700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad1db2aa734e6dcb93a8797a98a422a7f542f512
        Validity
            Not Before: Mar 24 14:29:40 2021 GMT
            Not After : Mar 24 14:29:40 2026 GMT
        Subject: CN=7b7eb3506aa8d7427dc263d81c2a222a411bdc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:42:3c:36:5c:f0:66:c1:6f:e5:e7:4e:3f:
                    4f:4b:63:9e:b1:54:33:fd:db:9d:5b:6d:d3:b1:9a:
                    71:68:08:1d:f6:07:06:8f:30:53:0f:19:91:cb:6c:
                    fa:0e:82:1c:84:f0:5d:f0:ec:68:25:04:27:52:c9:
                    d1:64:91:b8:5a:a8:9b:70:9b:10:e7:e2:e5:6b:7e:
                    16:07:e5:29:85:7d:b8:aa:1b:cf:15:27:ed:16:fa:
                    2e:26:e8:fd:7e:ce:79:d7:84:4d:7b:81:f8:23:e3:
                    5c:b0:ca:ce:8b:91:77:b3:a6:0a:18:17:ef:3a:54:
                    be:0c:d9:e4:ec:f0:7a:9d:c3:e7:fd:e6:2a:7f:83:
                    70:bb:f9:af:3b:67:03:ad:ac:84:2a:b6:4a:f8:56:
                    16:21:61:4e:66:6d:96:d2:d8:b6:bc:ec:ea:45:03:
                    21:5b:61:01:3c:f3:b1:12:81:b1:66:2a:b6:f0:be:
                    98:0d:83:14:ed:a0:92:2f:86:90:f9:b2:dd:8f:21:
                    24:e8:cb:84:6e:86:f1:50:c1:4b:1d:bc:39:25:aa:
                    a5:6f:c5:98:5a:2d:3e:d4:46:fd:07:6b:54:b6:66:
                    1d:63:6b:68:54:6e:e8:08:ca:70:95:a0:c3:1b:5d:
                    6b:77:74:f3:1d:dd:19:bd:15:33:7f:b1:45:e8:e5:
                    12:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4E:5C:5F:1C:A8:8B:80:66:39:90:0E:F8:8B:A4:07:58:73:C1:E2
            X509v3 Authority Key Identifier:
                keyid:C8:A9:2F:5E:C3:22:F7:EB:49:1E:AA:0B:B8:6B:31:A8:A3:2C:EE:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad1db2aa734e6dcb93a8797a98a422a7f542f512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/7b7eb3506aa8d7427dc263d81c2a222a411bdc6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5daad9a7-232d-4fe9-b4d4-9bfa105b1417/ad1db2aa734e6dcb93a8797a98a422a7f542f512.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:80:ea:89:61:94:5d:51:fc:f4:50:ff:3d:e0:4d:95:d5:f0:
         df:7b:ff:c8:22:e7:9c:52:3c:d9:46:34:d3:bf:72:34:54:97:
         c8:e6:ab:48:e9:db:71:a0:7d:b6:18:a5:c0:e7:4d:87:99:90:
         33:90:a0:3c:c1:ce:a9:56:bd:d7:05:cf:11:cb:f4:c5:45:db:
         33:00:b7:f1:4f:47:13:dc:c0:9f:74:70:c9:7c:c4:16:f2:af:
         15:e3:7a:fc:38:96:2d:c9:e7:d2:3c:d9:eb:6e:e6:2e:42:a3:
         6e:c2:49:94:44:03:e7:8f:7e:cf:fe:38:ad:a8:de:55:c1:cc:
         d9:31:cd:48:72:29:85:b9:49:ab:f7:29:46:4b:5e:a6:b0:2a:
         88:cf:78:1a:8f:32:b4:01:7a:c8:28:4a:ee:2b:50:eb:1e:3e:
         71:f7:63:b0:a9:23:bd:5f:c2:f8:e9:77:0e:3b:d1:72:04:a9:
         fb:c4:c0:37:1d:87:60:eb:97:2f:88:96:e4:5d:db:06:bd:7a:
         46:b4:86:7d:b5:65:9a:62:92:e8:e5:76:df:43:f4:96:7b:15:
         58:d6:a5:a0:75:67:c7:b3:ec:f0:2f:a7:6a:b1:bc:f5:34:b8:
         02:62:27:59:1d:ff:b4:d3:79:05:5e:ed:99:96:b7:7d:84:cc:
         77:d7:8b:72
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCAcAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGFk
MWRiMmFhNzM0ZTZkY2I5M2E4Nzk3YTk4YTQyMmE3ZjU0MmY1MTIwHhcNMjEwMzI0
MTQyOTQwWhcNMjYwMzI0MTQyOTQwWjAzMTEwLwYDVQQDEyg3YjdlYjM1MDZhYThk
NzQyN2RjMjYzZDgxYzJhMjIyYTQxMWJkYzZkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoYpCPDZc8GbBb+XnTj9PS2OesVQz/dudW23TsZpxaAgd9gcG
jzBTDxmRy2z6DoIchPBd8OxoJQQnUsnRZJG4WqibcJsQ5+Lla34WB+UphX24qhvP
FSftFvouJuj9fs5514RNe4H4I+NcsMrOi5F3s6YKGBfvOlS+DNnk7PB6ncPn/eYq
f4Nwu/mvO2cDrayEKrZK+FYWIWFOZm2W0ti2vOzqRQMhW2EBPPOxEoGxZiq28L6Y
DYMU7aCSL4aQ+bLdjyEk6MuEbobxUMFLHbw5Jaqlb8WYWi0+1Eb9B2tUtmYdY2to
VG7oCMpwlaDDG11rd3TzHd0ZvRUzf7FF6OUSowIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFExOXF8cqIuAZjmQDviLpAdYc8HiMB8GA1UdIwQYMBaAFMipL17DIvfrSR6q
C7hrMaijLO7EMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYWQxZGIy
YWE3MzRlNmRjYjkzYTg3OTdhOThhNDIyYTdmNTQyZjUxMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWRhYWQ5YTctMjMyZC00ZmU5LWI0ZDQtOWJmYTEw
NWIxNDE3LzdiN2ViMzUwNmFhOGQ3NDI3ZGMyNjNkODFjMmEyMjJhNDExYmRjNmQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZGFhZDlhNy0yMzJkLTRmZTktYjRkNC05YmZh
MTA1YjE0MTcvYWQxZGIyYWE3MzRlNmRjYjkzYTg3OTdhOThhNDIyYTdmNTQyZjUx
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA740KDANBgkqhkiG9w0BAQsFAAOCAQEACYDqiWGUXVH89FD/
PeBNldXw33v/yCLnnFI82UY0079yNFSXyOarSOnbcaB9thilwOdNh5mQM5CgPMHO
qVa91wXPEcv0xUXbMwC38U9HE9zAn3RwyXzEFvKvFeN6/DiWLcnn0jzZ627mLkKj
bsJJlEQD549+z/44rajeVcHM2THNSHIphblJq/cpRkteprAqiM94Go8ytAF6yChK
7itQ6x4+cfdjsKkjvV/C+Ol3DjvRcgSp+8TANx2HYOuXL4iW5F3bBr16RrSGfbVl
mmKS6OV230P0lnsVWNaloHVnx7Ps8C+narG89TS4AmInWR3/tNN5BV7tmZa3fYTM
d9eLcg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org