Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5850af4c831f01515941f76a207bb28d1ce8b19f.roa
File:                     5850af4c831f01515941f76a207bb28d1ce8b19f.roa (raw, json)
Hash identifier:          OSf7ExuxZ5qu0Ty5QZtOR1fbYNair/CV41UIPEaZgqA=
Subject key identifier:   0D:88:55:E3:A7:7A:52:2C:B4:78:65:FF:38:C0:84:AC:FD:54:0D:36
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       24388D
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5850af4c831f01515941f76a207bb28d1ce8b19f.roa
Signing time:             Fri 09 Jun 2023 20:30:19 +0000
ROA not before:           Thu 08 Jun 2023 20:30:19 +0000
ROA not after:            Mon 09 Jun 2025 20:30:19 +0000
asID:                     28002
IP address blocks:        190.112.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2373773 (0x24388d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Jun  8 20:30:19 2023 GMT
            Not After : Jun  9 20:30:19 2025 GMT
        Subject: CN=5850af4c831f01515941f76a207bb28d1ce8b19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:bf:28:8e:d8:ef:df:b0:4b:f1:99:45:ad:
                    c9:6f:6d:1a:45:a5:38:36:6a:01:38:e8:1a:d3:b6:
                    f2:93:f1:cc:e6:f7:88:14:23:38:62:34:c9:94:53:
                    56:c1:7f:31:ec:2e:22:99:cd:e0:e3:b4:6f:ad:77:
                    13:4a:f2:ce:4d:9c:8a:26:a0:f3:42:c9:d6:0f:b8:
                    a4:36:ab:9d:da:72:e7:38:fc:b3:b7:75:68:1a:1f:
                    98:6c:b0:43:4e:d7:8f:b2:b8:73:a0:cf:d7:da:ec:
                    3a:d1:aa:01:72:69:da:24:57:8f:f0:7c:8a:2f:8e:
                    fa:72:1e:98:47:f2:07:9c:e0:5a:6d:b3:13:7d:02:
                    4a:00:0c:e4:08:96:21:3e:5b:50:3f:fa:f2:48:51:
                    89:f9:5f:2d:71:99:bc:0b:42:b7:17:c4:19:80:04:
                    f9:dd:83:2f:6c:95:ba:2c:1c:41:24:90:da:3f:c7:
                    c8:b1:a2:fa:03:e0:13:92:13:ea:6a:52:60:86:8e:
                    cd:7f:c0:73:fa:fa:ae:25:04:bf:39:5d:23:67:e5:
                    d4:8b:dd:7f:9c:43:74:5b:42:cf:c0:28:d3:fb:02:
                    e7:ef:96:ab:02:05:bd:44:a5:70:d8:9e:d8:e1:20:
                    1e:08:76:74:fe:f0:f1:37:d3:61:ce:f7:dd:30:74:
                    9c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:88:55:E3:A7:7A:52:2C:B4:78:65:FF:38:C0:84:AC:FD:54:0D:36
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5850af4c831f01515941f76a207bb28d1ce8b19f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:5a:13:05:df:90:c3:9f:11:86:8d:18:45:1c:d4:91:a0:1d:
         5d:c3:72:25:9a:af:3a:8f:02:f8:80:1f:2b:8b:82:00:fc:36:
         98:20:2b:93:03:ec:a6:c3:b4:4b:98:39:3b:f7:a0:c1:62:5d:
         fa:cb:85:6e:74:0f:a8:f7:cd:78:1d:e4:34:28:2d:c5:90:29:
         78:54:eb:70:26:a6:98:1d:7b:16:19:1a:a2:18:22:30:a7:40:
         b5:d6:a2:56:74:a0:70:49:51:25:8d:71:51:81:15:ba:4d:45:
         a7:ba:85:d7:64:ed:9a:57:45:8e:44:7a:a6:50:59:b2:99:dd:
         9e:41:df:6b:63:1f:e3:30:07:75:ba:72:dd:32:6e:ff:b1:49:
         8d:2d:c5:79:76:14:b4:ac:12:c8:49:16:5d:50:4c:7e:24:45:
         8c:3d:b5:ce:42:52:62:76:27:0d:7a:00:05:6d:b0:c1:9e:58:
         66:be:9d:5d:94:f5:4a:d1:69:bb:26:c6:ee:c7:53:cc:b2:34:
         f7:8b:17:e9:68:0c:c0:51:a7:60:3f:84:33:ce:00:ea:56:32:
         db:a3:90:bd:37:a2:6c:8a:0b:2b:7a:3c:79:48:14:be:8a:5f:
         49:a6:de:6c:79:78:37:c4:28:42:fa:23:98:e8:79:80:35:f6:
         cb:8b:4e:06
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJDiNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjMwNjA4
MjAzMDE5WhcNMjUwNjA5MjAzMDE5WjAzMTEwLwYDVQQDEyg1ODUwYWY0YzgzMWYw
MTUxNTk0MWY3NmEyMDdiYjI4ZDFjZThiMTlmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArwC/KI7Y79+wS/GZRa3Jb20aRaU4NmoBOOga07byk/HM5veI
FCM4YjTJlFNWwX8x7C4imc3g47RvrXcTSvLOTZyKJqDzQsnWD7ikNqud2nLnOPyz
t3VoGh+YbLBDTtePsrhzoM/X2uw60aoBcmnaJFeP8HyKL476ch6YR/IHnOBabbMT
fQJKAAzkCJYhPltQP/rySFGJ+V8tcZm8C0K3F8QZgAT53YMvbJW6LBxBJJDaP8fI
saL6A+ATkhPqalJgho7Nf8Bz+vquJQS/OV0jZ+XUi91/nEN0W0LPwCjT+wLn75ar
AgW9RKVw2J7Y4SAeCHZ0/vDxN9NhzvfdMHScoQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFA2IVeOnelIstHhl/zjAhKz9VA02MB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M
m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2
MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5LzU4NTBhZjRjODMxZjAxNTE1OTQxZjc2YTIwN2JiMjhkMWNlOGIxOWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5wNDANBgkqhkiG9w0BAQsFAAOCAQEAPloTBd+Qw58Rho0Y
RRzUkaAdXcNyJZqvOo8C+IAfK4uCAPw2mCArkwPspsO0S5g5O/egwWJd+suFbnQP
qPfNeB3kNCgtxZApeFTrcCammB17FhkaohgiMKdAtdaiVnSgcElRJY1xUYEVuk1F
p7qF12TtmldFjkR6plBZspndnkHfa2Mf4zAHdbpy3TJu/7FJjS3FeXYUtKwSyEkW
XVBMfiRFjD21zkJSYnYnDXoABW2wwZ5YZr6dXZT1StFpuybG7sdTzLI094sX6WgM
wFGnYD+EM84A6lYy26OQvTeibIoLK3o8eUgUvopfSabebHl4N8QoQvojmOh5gDX2
y4tOBg==
-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:25 2024 by rpki-client on console-fra.rpki-client.org