Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/3275e8070bad056d93c0c50767e03057784df4f4.roa
File:                     3275e8070bad056d93c0c50767e03057784df4f4.roa (raw, json)
Hash identifier:          DnFavnO7URnq01i4LT0ZHk+zqvmZF4DeRjGQbEudXgg=
Subject key identifier:   E6:EF:46:86:3B:19:ED:70:54:49:57:BF:85:DC:AE:CE:20:B5:AB:09
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E2C9C
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/3275e8070bad056d93c0c50767e03057784df4f4.roa
Signing time:             Wed 24 Mar 2021 14:31:36 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     27711
IP address blocks:        190.2.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928924 (0xe2c9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=3275e8070bad056d93c0c50767e03057784df4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:47:45:b1:b7:91:9b:dd:57:0d:a1:a2:e5:
                    1e:7e:a3:8a:95:79:a3:16:7c:62:67:c2:47:cf:99:
                    b9:29:64:9e:da:91:7e:39:71:d7:d2:16:e6:ea:e4:
                    1a:a8:91:a1:76:47:c7:70:27:bc:d1:4c:df:bc:9c:
                    04:29:58:05:c8:2c:aa:56:dd:f6:09:26:48:4f:3b:
                    fb:89:41:1a:68:0e:85:1a:f3:f2:78:a3:76:61:f5:
                    3c:0c:83:7d:66:18:9d:b3:f3:eb:36:dc:4f:31:5e:
                    54:37:bb:18:51:43:3f:0c:eb:9c:fc:b9:06:e3:ab:
                    17:fd:50:20:65:c6:ce:8e:6c:12:6c:69:22:2f:81:
                    0e:cf:1a:56:05:6a:ea:55:3f:8e:42:1e:43:bd:5b:
                    7f:8e:59:bb:c8:0c:d3:ed:25:26:1a:0b:3a:9d:b9:
                    44:c3:b9:26:da:78:17:cd:f1:24:09:2f:97:d8:63:
                    be:80:12:47:5e:f9:7e:af:b3:be:90:8a:98:73:60:
                    46:d9:6c:14:e9:1b:e8:b5:1f:d8:80:5c:c8:75:0e:
                    3a:dd:f5:73:5d:82:d7:59:c9:1b:eb:ee:90:1d:2b:
                    e9:20:4e:a8:43:d8:0f:d8:95:e0:e6:4e:9f:c8:2f:
                    ef:93:83:a4:44:49:03:ea:37:38:ef:2c:8c:83:f5:
                    46:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EF:46:86:3B:19:ED:70:54:49:57:BF:85:DC:AE:CE:20:B5:AB:09
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/3275e8070bad056d93c0c50767e03057784df4f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:da:5d:54:dc:44:32:e4:7c:86:5d:84:66:ff:f4:8b:43:f9:
         c2:0e:3a:a4:dd:13:28:67:46:f7:df:fe:70:4c:25:9a:73:5e:
         a6:6b:6f:82:08:1b:1c:35:27:41:00:5c:fb:5c:ac:2a:99:08:
         5e:56:9f:07:2f:e9:2a:5d:94:4f:11:dd:15:84:d5:a8:da:13:
         62:8c:7a:7c:16:0e:45:2c:42:6e:b4:ad:a2:12:33:f0:06:09:
         d8:6f:05:06:65:ec:d1:25:08:8e:a1:f4:d1:64:a5:3b:4c:53:
         88:e0:0e:e6:c6:ef:40:bc:1b:c3:f9:fa:54:14:fa:c2:26:87:
         7b:27:58:a6:2d:b1:b0:c6:5a:41:a8:4a:23:0a:1a:5e:fe:45:
         66:cc:70:0c:28:86:40:f0:23:c7:67:c0:b3:0a:a3:ba:52:70:
         ab:62:fe:7d:09:57:8b:bb:1e:d8:b7:83:01:f6:43:8c:51:61:
         2f:f7:fa:59:04:25:24:41:71:37:4c:17:95:39:0e:a7:2c:37:
         62:2b:43:5e:9e:23:c8:17:bf:64:75:13:08:45:58:80:3e:fb:
         46:aa:bb:84:5f:2b:b1:eb:4e:b5:8a:36:02:41:76:69:a2:d2:
         9d:de:24:b3:5e:9d:c0:49:c9:a7:99:a6:b0:8b:1b:e1:e8:3c:
         56:42:18:3b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDiycMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDI5
YmZjNjNjNGQyZTIyMmRmM2EwOTllMjIyNTY3ZGViOWU4OGJiMjcwHhcNMjEwMzI0
MTQzMTM0WhcNMjYwMzI0MTQzMTM0WjAzMTEwLwYDVQQDEygzMjc1ZTgwNzBiYWQw
NTZkOTNjMGM1MDc2N2UwMzA1Nzc4NGRmNGY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1j1HRbG3kZvdVw2houUefqOKlXmjFnxiZ8JHz5m5KWSe2pF+
OXHX0hbm6uQaqJGhdkfHcCe80UzfvJwEKVgFyCyqVt32CSZITzv7iUEaaA6FGvPy
eKN2YfU8DIN9Zhids/PrNtxPMV5UN7sYUUM/DOuc/LkG46sX/VAgZcbOjmwSbGki
L4EOzxpWBWrqVT+OQh5DvVt/jlm7yAzT7SUmGgs6nblEw7km2ngXzfEkCS+X2GO+
gBJHXvl+r7O+kIqYc2BG2WwU6RvotR/YgFzIdQ463fVzXYLXWckb6+6QHSvpIE6o
Q9gP2JXg5k6fyC/vk4OkREkD6jc47yyMg/VGYwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFObvRoY7Ge1wVElXv4Xcrs4gtasJMB8GA1UdIwQYMBaAFKbB/2GNliK3iQ+g
mDamXNI878RiMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjliZmM2
M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjI2ZjRmMjgtODgwYy00YmI1LTk0NDItOWVlZjkz
MjVkN2ViLzMyNzVlODA3MGJhZDA1NmQ5M2MwYzUwNzY3ZTAzMDU3Nzg0ZGY0ZjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjZmNGYyOC04ODBjLTRiYjUtOTQ0Mi05ZWVm
OTMyNWQ3ZWIvMjliZmM2M2M0ZDJlMjIyZGYzYTA5OWUyMjI1NjdkZWI5ZTg4YmIy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL4CEzANBgkqhkiG9w0BAQsFAAOCAQEAZNpdVNxEMuR8hl2E
Zv/0i0P5wg46pN0TKGdG99/+cEwlmnNepmtvgggbHDUnQQBc+1ysKpkIXlafBy/p
Kl2UTxHdFYTVqNoTYox6fBYORSxCbrStohIz8AYJ2G8FBmXs0SUIjqH00WSlO0xT
iOAO5sbvQLwbw/n6VBT6wiaHeydYpi2xsMZaQahKIwoaXv5FZsxwDCiGQPAjx2fA
swqjulJwq2L+fQlXi7se2LeDAfZDjFFhL/f6WQQlJEFxN0wXlTkOpyw3YitDXp4j
yBe/ZHUTCEVYgD77Rqq7hF8rsetOtYo2AkF2aaLSnd4ks16dwEnJp5mmsIsb4eg8
VkIYOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org