Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ee70b8a-3beb-482a-a0eb-3d566f3931db/0cd301db55099bc33df18d3e7ed170193caab1fc.roa
File:                     0cd301db55099bc33df18d3e7ed170193caab1fc.roa (raw, json)
Hash identifier:          XCaec8Zvg6FAJTFgjIKBouT0TXcAnuBUjTyCx7e+4lc=
Subject key identifier:   A0:09:91:98:FD:DD:3E:40:89:E5:C7:BC:7F:B5:02:A0:59:C1:CF:AB
Certificate issuer:       /CN=e11ec0a0b43ef57ac407a6c5051281adb24eb48d
Certificate serial:       11D3BF
Authority key identifier: F8:73:26:40:20:33:30:20:14:9B:00:A0:A2:2E:BE:5F:F8:AB:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e11ec0a0b43ef57ac407a6c5051281adb24eb48d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ee70b8a-3beb-482a-a0eb-3d566f3931db/0cd301db55099bc33df18d3e7ed170193caab1fc.roa
Signing time:             Sat 25 Sep 2021 20:32:36 +0000
ROA not before:           Sat 25 Sep 2021 03:00:00 +0000
ROA not after:            Mon 25 Sep 2023 03:00:00 +0000
asID:                     263698
IP address blocks:        190.113.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168319 (0x11d3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11ec0a0b43ef57ac407a6c5051281adb24eb48d
        Validity
            Not Before: Sep 25 03:00:00 2021 GMT
            Not After : Sep 25 03:00:00 2023 GMT
        Subject: CN=0cd301db55099bc33df18d3e7ed170193caab1fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:22:0f:41:5e:5f:c6:7c:7b:82:fc:1f:d7:9b:
                    62:c7:8c:f1:55:49:04:bb:95:c4:44:2c:f6:01:8f:
                    be:d4:cb:38:35:24:ed:59:8b:0b:be:aa:26:c4:a0:
                    cb:3a:f5:91:3c:d8:9c:d9:99:1e:fd:ac:6b:52:9d:
                    02:20:6a:5b:60:f1:6e:3d:12:4f:94:73:f0:c7:d1:
                    3b:b2:2f:a5:95:41:df:8f:b8:73:3d:19:d4:62:a0:
                    e1:46:30:36:9a:10:14:1c:ee:9e:c8:8d:91:c1:14:
                    f6:fa:f0:f8:a1:6a:1c:6b:69:f5:f6:fa:ac:31:a1:
                    62:59:38:e0:1b:14:19:cb:00:c0:48:c1:8a:68:65:
                    36:94:36:ec:e8:80:53:91:18:16:b4:a9:c6:6f:45:
                    79:2e:1d:3c:c2:90:b3:2b:f9:3d:b0:a5:b4:e8:31:
                    d5:ca:56:b9:ee:11:b5:cb:e2:7d:91:44:e3:e0:8c:
                    26:e9:08:88:2a:35:d4:35:87:ba:fa:e5:88:30:99:
                    4a:3c:a4:87:5c:cb:e0:c8:b3:1c:53:fd:25:7a:8f:
                    32:17:fb:c9:b8:c8:71:3b:2f:24:fd:bf:31:83:2d:
                    eb:d8:21:2d:ca:5a:ee:95:ef:36:43:bc:d9:e2:4e:
                    39:0a:ee:1c:eb:3f:40:59:fb:f0:26:f0:64:98:35:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:09:91:98:FD:DD:3E:40:89:E5:C7:BC:7F:B5:02:A0:59:C1:CF:AB
            X509v3 Authority Key Identifier:
                keyid:F8:73:26:40:20:33:30:20:14:9B:00:A0:A2:2E:BE:5F:F8:AB:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e11ec0a0b43ef57ac407a6c5051281adb24eb48d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee70b8a-3beb-482a-a0eb-3d566f3931db/0cd301db55099bc33df18d3e7ed170193caab1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ee70b8a-3beb-482a-a0eb-3d566f3931db/e11ec0a0b43ef57ac407a6c5051281adb24eb48d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:a7:4e:0f:b1:f4:32:eb:67:15:74:a2:bc:9d:65:97:d1:ae:
         80:8a:d3:a3:c2:87:05:64:59:81:b8:71:d3:44:32:a8:59:f1:
         c3:53:47:70:9d:c9:46:cb:f6:d5:bc:f9:b4:5f:f9:71:a8:b7:
         22:e5:43:64:d1:af:aa:31:2f:fa:8e:ec:0e:82:e7:e7:72:1e:
         29:dc:3f:48:5c:17:f8:80:aa:cf:3c:45:80:dc:3b:e2:be:83:
         b2:c0:de:5c:0d:87:05:f2:1e:9a:9a:10:c4:46:b6:1a:1b:3b:
         86:9e:14:3b:b5:31:30:d8:bd:6d:25:c6:3c:f1:74:ed:52:d3:
         d1:04:41:fc:0a:a6:88:b9:6a:29:be:70:87:0d:25:14:5e:86:
         34:2a:05:ba:df:d7:33:e8:3c:dc:88:fb:fb:9f:0b:18:31:d6:
         83:f9:8a:91:83:86:d4:dd:74:f9:39:76:06:e0:74:61:82:14:
         ed:55:c3:e4:00:53:b6:30:e8:07:10:7e:fa:a6:00:35:ce:d9:
         50:09:63:b9:69:96:80:e0:d3:aa:bd:15:cd:ef:f7:27:ab:89:
         4c:17:af:f8:45:f9:75:fe:d0:a7:6e:00:4c:c5:aa:5c:30:70:
         0f:90:24:cd:d8:34:01:53:b3:8e:8d:ca:36:26:6f:19:70:b1:
         95:1a:65:7e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDEdO/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGUx
MWVjMGEwYjQzZWY1N2FjNDA3YTZjNTA1MTI4MWFkYjI0ZWI0OGQwHhcNMjEwOTI1
MDMwMDAwWhcNMjMwOTI1MDMwMDAwWjAzMTEwLwYDVQQDEygwY2QzMDFkYjU1MDk5
YmMzM2RmMThkM2U3ZWQxNzAxOTNjYWFiMWZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgyIPQV5fxnx7gvwf15tix4zxVUkEu5XERCz2AY++1Ms4NSTt
WYsLvqomxKDLOvWRPNic2Zke/axrUp0CIGpbYPFuPRJPlHPwx9E7si+llUHfj7hz
PRnUYqDhRjA2mhAUHO6eyI2RwRT2+vD4oWoca2n19vqsMaFiWTjgGxQZywDASMGK
aGU2lDbs6IBTkRgWtKnGb0V5Lh08wpCzK/k9sKW06DHVyla57hG1y+J9kUTj4Iwm
6QiIKjXUNYe6+uWIMJlKPKSHXMvgyLMcU/0leo8yF/vJuMhxOy8k/b8xgy3r2CEt
ylrule82Q7zZ4k45Cu4c6z9AWfvwJvBkmDU/9QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKAJkZj93T5AieXHvH+1AqBZwc+rMB8GA1UdIwQYMBaAFPhzJkAgMzAgFJsA
oKIuvl/4q14ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTExZWMw
YTBiNDNlZjU3YWM0MDdhNmM1MDUxMjgxYWRiMjRlYjQ4ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVlNzBiOGEtM2JlYi00ODJhLWEwZWItM2Q1NjZm
MzkzMWRiLzBjZDMwMWRiNTUwOTliYzMzZGYxOGQzZTdlZDE3MDE5M2NhYWIxZmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWU3MGI4YS0zYmViLTQ4MmEtYTBlYi0zZDU2
NmYzOTMxZGIvZTExZWMwYTBiNDNlZjU3YWM0MDdhNmM1MDUxMjgxYWRiMjRlYjQ4
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5xVDANBgkqhkiG9w0BAQsFAAOCAQEABKdOD7H0MutnFXSi
vJ1ll9GugIrTo8KHBWRZgbhx00QyqFnxw1NHcJ3JRsv21bz5tF/5cai3IuVDZNGv
qjEv+o7sDoLn53IeKdw/SFwX+ICqzzxFgNw74r6DssDeXA2HBfIempoQxEa2Ghs7
hp4UO7UxMNi9bSXGPPF07VLT0QRB/AqmiLlqKb5whw0lFF6GNCoFut/XM+g83Ij7
+58LGDHWg/mKkYOG1N10+Tl2BuB0YYIU7VXD5ABTtjDoBxB++qYANc7ZUAljuWmW
gODTqr0Vze/3J6uJTBev+EX5df7Qp24ATMWqXDBwD5Akzdg0AVOzjo3KNiZvGXCx
lRplfg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org