Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/95e219bbba618a360725958938f1ce5ee06a39a8.roa
File:                     95e219bbba618a360725958938f1ce5ee06a39a8.roa (raw, json)
Hash identifier:          OYL0sH9ze5OyvJGZylwd+rLfPGJQHB+yHZX9+/BInEA=
Subject key identifier:   E9:CA:E7:20:2A:94:2C:83:21:DF:BC:1D:23:B0:2C:D1:3F:9D:BE:A0
Certificate issuer:       /CN=b89e6f83f092429d4e523cebb3044e5f86895d46
Certificate serial:       18E293
Authority key identifier: BF:72:71:A4:6C:27:21:8E:09:23:1B:65:5D:32:10:50:CA:BE:4E:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b89e6f83f092429d4e523cebb3044e5f86895d46.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/95e219bbba618a360725958938f1ce5ee06a39a8.roa
Signing time:             Wed 05 Oct 2022 08:18:28 +0000
ROA not before:           Wed 05 Oct 2022 08:18:19 +0000
ROA not after:            Sat 05 Oct 2024 09:18:19 +0000
asID:                     49981
IP address blocks:        190.2.128.0/19 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1630867 (0x18e293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b89e6f83f092429d4e523cebb3044e5f86895d46
        Validity
            Not Before: Oct  5 08:18:19 2022 GMT
            Not After : Oct  5 09:18:19 2024 GMT
        Subject: CN=95e219bbba618a360725958938f1ce5ee06a39a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1a:59:8c:dd:f7:7d:8e:64:9a:52:1e:cd:08:
                    41:ea:88:52:4c:b8:15:b5:bd:5f:a3:f2:bd:03:c0:
                    47:4f:d2:93:49:5b:03:d0:e9:d8:e3:d8:e5:6e:e8:
                    9a:6c:ab:1d:d9:c3:33:12:87:9c:e3:74:ab:2e:43:
                    ca:17:5f:9e:7b:08:8b:29:0f:36:b1:10:70:30:1e:
                    db:54:4c:6e:b1:7c:b6:c4:a4:29:9c:6e:57:06:a5:
                    23:99:49:86:b7:de:32:4f:19:49:c9:95:3c:88:74:
                    c8:fe:bf:38:63:95:70:4f:a5:2f:09:ff:19:85:3a:
                    83:35:36:65:d2:7d:3f:fa:20:a3:dd:4e:7a:81:bf:
                    0d:ac:27:a2:e4:6e:2b:73:d0:1d:ae:b8:8c:98:b0:
                    6c:97:fa:09:c5:bd:b5:f3:70:4f:a8:5b:72:19:eb:
                    ad:30:10:e6:30:55:f0:05:37:d3:4f:fa:9c:d2:d4:
                    71:f5:93:2e:98:49:0f:06:d3:9e:5d:c2:f1:b6:4c:
                    2e:e2:b4:44:ca:3e:54:d6:b9:f2:b6:6d:fc:6f:2d:
                    6a:70:84:b1:cd:d6:1a:5d:e9:5f:2a:b4:d1:68:4a:
                    24:02:2f:37:a5:96:cf:2e:fa:c5:7f:72:2b:1f:5e:
                    fa:3b:8f:02:39:54:5c:e8:59:78:51:49:2e:39:29:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CA:E7:20:2A:94:2C:83:21:DF:BC:1D:23:B0:2C:D1:3F:9D:BE:A0
            X509v3 Authority Key Identifier:
                keyid:BF:72:71:A4:6C:27:21:8E:09:23:1B:65:5D:32:10:50:CA:BE:4E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b89e6f83f092429d4e523cebb3044e5f86895d46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/95e219bbba618a360725958938f1ce5ee06a39a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e9c80ec-67a7-4ac4-9de4-21d8134e8e99/b89e6f83f092429d4e523cebb3044e5f86895d46.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:91:14:5a:94:49:75:22:80:1e:c3:17:91:3d:4d:0c:fe:49:
         a1:75:85:a7:30:e0:be:6c:df:41:32:a5:b6:dc:6e:87:a1:f1:
         63:63:ca:d5:ad:bd:db:74:fa:92:f8:ac:1f:59:3f:c6:56:2b:
         bd:1f:07:54:6c:a7:3a:80:71:bf:a6:42:b2:96:e0:7f:a7:94:
         29:5e:b8:f4:c6:ea:88:e4:92:fc:99:af:f3:3e:0c:93:d1:52:
         9a:93:cd:88:6c:3c:7d:28:00:1e:48:ea:28:0b:c0:f6:ad:39:
         6f:4e:4c:dd:27:9e:f9:ad:e3:1e:c7:f8:54:9e:8d:fe:1d:3d:
         1f:a2:86:32:79:54:84:7c:81:08:72:3f:35:26:4d:ff:96:ee:
         a9:83:09:19:7f:71:8c:2b:ad:9c:d6:e4:70:ef:ba:da:2f:c1:
         f0:29:9a:12:6f:af:dd:c2:59:10:07:a4:db:f8:80:fc:20:b6:
         74:a4:07:b6:b0:64:db:0e:db:36:27:4d:7a:19:7f:13:db:19:
         ba:8c:f8:c8:2b:46:3d:b2:dc:d8:06:d4:27:1c:4f:00:b1:8a:
         66:4a:7b:a1:26:89:5c:e7:04:fe:4b:60:08:f2:df:49:af:56:
         c9:de:da:fb:e8:e0:fd:80:0d:19:e2:f0:3c:00:a5:e9:e8:61:
         13:ed:8e:e3
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGOKTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGI4
OWU2ZjgzZjA5MjQyOWQ0ZTUyM2NlYmIzMDQ0ZTVmODY4OTVkNDYwHhcNMjIxMDA1
MDgxODE5WhcNMjQxMDA1MDkxODE5WjAzMTEwLwYDVQQDEyg5NWUyMTliYmJhNjE4
YTM2MDcyNTk1ODkzOGYxY2U1ZWUwNmEzOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkxpZjN33fY5kmlIezQhB6ohSTLgVtb1fo/K9A8BHT9KTSVsD
0OnY49jlbuiabKsd2cMzEoec43SrLkPKF1+eewiLKQ82sRBwMB7bVExusXy2xKQp
nG5XBqUjmUmGt94yTxlJyZU8iHTI/r84Y5VwT6UvCf8ZhTqDNTZl0n0/+iCj3U56
gb8NrCei5G4rc9AdrriMmLBsl/oJxb2183BPqFtyGeutMBDmMFXwBTfTT/qc0tRx
9ZMumEkPBtOeXcLxtkwu4rREyj5U1rnytm38by1qcISxzdYaXelfKrTRaEokAi83
pZbPLvrFf3IrH176O48COVRc6Fl4UUkuOSmmBwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOnK5yAqlCyDId+8HSOwLNE/nb6gMB8GA1UdIwQYMBaAFL9ycaRsJyGOCSMb
ZV0yEFDKvk6gMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjg5ZTZm
ODNmMDkyNDI5ZDRlNTIzY2ViYjMwNDRlNWY4Njg5NWQ0Ni5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWU5YzgwZWMtNjdhNy00YWM0LTlkZTQtMjFkODEz
NGU4ZTk5Lzk1ZTIxOWJiYmE2MThhMzYwNzI1OTU4OTM4ZjFjZTVlZTA2YTM5YTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZTljODBlYy02N2E3LTRhYzQtOWRlNC0yMWQ4
MTM0ZThlOTkvYjg5ZTZmODNmMDkyNDI5ZDRlNTIzY2ViYjMwNDRlNWY4Njg5NWQ0
Ni5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBb4CgDANBgkqhkiG9w0BAQsFAAOCAQEAe5EUWpRJdSKAHsMX
kT1NDP5JoXWFpzDgvmzfQTKlttxuh6HxY2PK1a2923T6kvisH1k/xlYrvR8HVGyn
OoBxv6ZCspbgf6eUKV649MbqiOSS/Jmv8z4Mk9FSmpPNiGw8fSgAHkjqKAvA9q05
b05M3See+a3jHsf4VJ6N/h09H6KGMnlUhHyBCHI/NSZN/5buqYMJGX9xjCutnNbk
cO+62i/B8CmaEm+v3cJZEAek2/iA/CC2dKQHtrBk2w7bNidNehl/E9sZuoz4yCtG
PbLc2AbUJxxPALGKZkp7oSaJXOcE/ktgCPLfSa9Wyd7a++jg/YANGeLwPACl6ehh
E+2O4w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org