Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/202524a7b8028fed99741387e97ff487f98f3927.roa
File:                     202524a7b8028fed99741387e97ff487f98f3927.roa (raw, json)
Hash identifier:          VBZ2Wqz8nTPf87kqYschO3UDwi9jJ+T4COjSmwFAosY=
Subject key identifier:   BF:90:02:8C:5F:A6:16:A2:DC:60:05:E6:6C:F4:07:0C:B1:FC:8F:55
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       1598AA
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/202524a7b8028fed99741387e97ff487f98f3927.roa
Signing time:             Thu 23 Feb 2023 15:19:02 +0000
ROA not before:           Wed 22 Feb 2023 15:17:21 +0000
ROA not after:            Sun 23 Feb 2025 15:17:21 +0000
asID:                     270035
IP address blocks:        130.250.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415338 (0x1598aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Feb 22 15:17:21 2023 GMT
            Not After : Feb 23 15:17:21 2025 GMT
        Subject: CN=202524a7b8028fed99741387e97ff487f98f3927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:49:47:46:a4:d6:80:ee:32:ec:16:25:0b:81:
                    81:fb:67:c9:81:00:fd:2b:42:a3:33:02:e0:12:2f:
                    07:a0:f8:bc:f2:62:88:ef:fc:9a:6d:e6:bf:23:e1:
                    df:3f:5e:24:88:65:e3:19:87:ac:00:e6:66:f9:d3:
                    04:a8:95:80:58:8a:5d:b8:a6:0b:e5:54:9e:1b:62:
                    df:83:da:6c:70:43:f9:f7:c0:56:91:1b:ba:21:c8:
                    62:a4:12:01:8b:9c:62:e5:af:3a:1b:50:88:fe:cf:
                    e2:b2:b9:ec:71:1b:f5:41:bd:7f:27:98:21:74:71:
                    a7:60:60:24:fa:da:ef:6e:bd:8c:b8:21:21:33:9a:
                    5c:cd:a8:cd:0e:a8:2a:b7:1d:df:d2:f3:92:4a:58:
                    27:0b:cd:15:6a:f7:57:78:17:be:a5:cc:8b:8f:61:
                    33:b5:92:6c:9f:5f:0a:56:21:ab:e7:18:4d:15:86:
                    2e:05:05:1a:17:ba:dd:c7:55:2f:cf:21:99:9c:86:
                    4a:22:f0:62:66:c3:30:4c:17:af:4b:18:16:32:c6:
                    0e:cf:a8:87:d2:56:5d:19:57:7e:81:5c:2b:36:d9:
                    8f:4a:1f:d2:11:a1:f4:d2:01:45:0e:96:22:71:45:
                    e7:c2:89:63:bf:79:62:f0:57:8c:4b:a5:46:a4:8a:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:90:02:8C:5F:A6:16:A2:DC:60:05:E6:6C:F4:07:0C:B1:FC:8F:55
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/202524a7b8028fed99741387e97ff487f98f3927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:90:0a:5b:04:15:68:3a:b0:19:ff:64:c6:d6:2c:c0:9c:c2:
         8d:70:95:25:dd:28:2a:3f:7f:e0:9d:be:0d:8b:42:8a:ab:81:
         51:93:63:0d:97:2f:bb:18:3d:a9:c6:08:49:17:f2:65:67:0d:
         9e:2e:e7:cb:ba:48:ed:66:5d:1d:02:55:a5:38:6e:ab:73:bb:
         06:e4:df:52:72:69:b5:54:d6:ec:55:1c:6a:35:5f:e0:fe:f2:
         c5:26:75:63:cb:13:8d:29:0e:7c:5e:71:cb:7a:ae:22:2b:9c:
         05:e8:3c:e7:37:4f:b3:56:94:8b:c0:28:ee:8c:3e:1f:b4:cf:
         e8:ec:a4:da:03:94:92:01:fe:c9:d1:e2:37:f3:44:48:3e:64:
         cf:2c:6c:27:00:93:1b:f9:bc:00:4a:b5:91:9a:ab:7e:d6:a7:
         e0:b9:ec:fb:dd:93:40:69:c5:a0:33:76:f1:c0:7a:f0:ba:26:
         55:10:05:95:60:61:25:f2:a3:27:5c:7f:06:8c:a3:e1:7b:a6:
         31:1a:8a:f1:17:bd:a0:4c:7d:6c:a7:ef:b7:94:bb:95:9b:5b:
         da:da:ca:98:4a:0a:54:73:a3:fb:e2:0d:b6:84:32:77:25:65:
         74:25:23:c4:ef:08:d0:39:09:d9:f6:a9:cb:2d:90:32:ba:19:
         e0:1d:df:2f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFZiqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFj
MDExYzQ5ZWYwNDVlZjBlMTA2YWQ4NzI4MGFhNzA2NDMzNzhhMDMwHhcNMjMwMjIy
MTUxNzIxWhcNMjUwMjIzMTUxNzIxWjAzMTEwLwYDVQQDEygyMDI1MjRhN2I4MDI4
ZmVkOTk3NDEzODdlOTdmZjQ4N2Y5OGYzOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiElHRqTWgO4y7BYlC4GB+2fJgQD9K0KjMwLgEi8HoPi88mKI
7/yabea/I+HfP14kiGXjGYesAOZm+dMEqJWAWIpduKYL5VSeG2Lfg9pscEP598BW
kRu6IchipBIBi5xi5a86G1CI/s/isrnscRv1Qb1/J5ghdHGnYGAk+trvbr2MuCEh
M5pczajNDqgqtx3f0vOSSlgnC80VavdXeBe+pcyLj2EztZJsn18KViGr5xhNFYYu
BQUaF7rdx1UvzyGZnIZKIvBiZsMwTBevSxgWMsYOz6iH0lZdGVd+gVwrNtmPSh/S
EaH00gFFDpYicUXnwoljv3li8FeMS6VGpIoeUwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFL+QAoxfphai3GAF5mz0Bwyx/I9VMB8GA1UdIwQYMBaAFHVuu7DUX8XEisVn
zP99zeqU8juYMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWMwMTFj
NDllZjA0NWVmMGUxMDZhZDg3MjgwYWE3MDY0MzM3OGEwMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU4ZDQ4YTktYjMxNy00OGY3LWE5YjMtMGM5YTA4
NjQwMjc0LzIwMjUyNGE3YjgwMjhmZWQ5OTc0MTM4N2U5N2ZmNDg3Zjk4ZjM5Mjcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NThkNDhhOS1iMzE3LTQ4ZjctYTliMy0wYzlh
MDg2NDAyNzQvMWMwMTFjNDllZjA0NWVmMGUxMDZhZDg3MjgwYWE3MDY0MzM3OGEw
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAoL65DANBgkqhkiG9w0BAQsFAAOCAQEAXpAKWwQVaDqwGf9k
xtYswJzCjXCVJd0oKj9/4J2+DYtCiquBUZNjDZcvuxg9qcYISRfyZWcNni7ny7pI
7WZdHQJVpThuq3O7BuTfUnJptVTW7FUcajVf4P7yxSZ1Y8sTjSkOfF5xy3quIiuc
Beg85zdPs1aUi8Ao7ow+H7TP6Oyk2gOUkgH+ydHiN/NESD5kzyxsJwCTG/m8AEq1
kZqrftan4Lns+92TQGnFoDN28cB68LomVRAFlWBhJfKjJ1x/Boyj4XumMRqK8Re9
oEx9bKfvt5S7lZtb2trKmEoKVHOj++INtoQydyVldCUjxO8I0DkJ2fapyy2QMroZ
4B3fLw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:48 2024 by rpki-client on console-fra.rpki-client.org