Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/721daa5a767c9fbeb5c98c83c90bdbf11472d9e4.roa
File:                     721daa5a767c9fbeb5c98c83c90bdbf11472d9e4.roa (raw, json)
Hash identifier:          ZcJ1azMIociJZzA4ECxp5j4hO26BXb3f9vIjSBRSLAE=
Subject key identifier:   A2:2F:9C:61:95:E5:09:75:88:0F:E3:BA:43:CA:7F:D7:19:33:04:1F
Certificate issuer:       /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial:       27F844
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/721daa5a767c9fbeb5c98c83c90bdbf11472d9e4.roa
Signing time:             Mon 12 Feb 2024 15:10:11 +0000
ROA not before:           Mon 12 Feb 2024 15:09:57 +0000
ROA not after:            Mon 12 Feb 2029 15:09:57 +0000
asID:                     28094
IP address blocks:        190.242.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2619460 (0x27f844)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
        Validity
            Not Before: Feb 12 15:09:57 2024 GMT
            Not After : Feb 12 15:09:57 2029 GMT
        Subject: CN=721daa5a767c9fbeb5c98c83c90bdbf11472d9e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:93:8c:74:04:40:6e:25:ae:fa:3c:7a:59:dc:
                    da:3b:7b:bd:06:77:69:b5:8f:63:5b:6d:94:64:36:
                    9c:13:01:9f:8d:b8:e7:a0:a4:29:10:f5:d5:bd:8a:
                    5b:18:eb:01:c0:ed:01:18:66:ea:04:64:04:3e:bf:
                    1a:92:4a:22:5b:88:4a:46:0f:89:86:0e:c0:93:ce:
                    d6:08:f8:e4:d5:9d:bd:09:30:b5:d0:a7:bc:27:e2:
                    11:b4:f7:49:37:5f:ab:0b:db:ae:62:19:75:8d:1b:
                    5b:c4:a0:90:d6:81:25:95:d7:b0:15:c9:06:b5:76:
                    f5:fb:5f:09:a4:a7:27:23:0f:a0:0a:c5:78:51:74:
                    80:05:dd:25:21:7a:1d:ea:02:aa:19:bc:5c:fc:f1:
                    96:db:70:14:c6:d8:2c:6f:53:2d:53:31:28:cf:07:
                    68:9b:77:1e:e2:3c:2f:6b:91:fd:7a:47:51:32:72:
                    e0:e4:f0:56:3c:a9:fc:b4:a1:84:26:27:7c:b5:51:
                    0b:f7:51:ed:27:0a:4d:11:ff:c9:90:23:50:03:af:
                    77:70:32:6e:ea:a0:17:62:86:74:7f:94:cd:a0:e2:
                    0c:31:e7:01:de:a8:04:23:d6:dd:fc:09:15:98:41:
                    4c:5b:60:4f:17:1a:2f:cd:97:42:38:fd:6d:46:1e:
                    6b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2F:9C:61:95:E5:09:75:88:0F:E3:BA:43:CA:7F:D7:19:33:04:1F
            X509v3 Authority Key Identifier:
                keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/721daa5a767c9fbeb5c98c83c90bdbf11472d9e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:a3:0e:52:cb:67:77:ce:c2:12:aa:29:d6:63:4b:e6:1d:4b:
         99:3c:dc:ab:e8:36:30:f0:bd:c6:4f:9b:9c:2b:9f:12:77:7e:
         07:6e:e3:f8:c4:b2:db:9e:9b:43:aa:77:96:15:f2:bf:3d:18:
         d9:38:a2:5d:55:78:53:7a:d4:3a:f0:65:10:ea:06:5e:5f:2e:
         68:3d:05:32:c4:5f:7e:1f:71:0c:47:59:af:1c:91:5f:5f:50:
         f1:7c:ae:1a:7d:6b:c6:05:34:fe:3d:86:6d:dd:dc:2b:e0:a5:
         d7:23:bd:97:97:8f:f4:23:38:f5:0e:de:4a:93:c2:98:4d:0e:
         3e:d2:a9:3e:a5:bf:29:41:97:8b:69:59:cd:e0:4d:32:82:53:
         fa:a5:49:75:50:73:c1:de:a1:9d:12:ac:1e:f1:47:3e:f0:9f:
         d1:21:a8:73:04:0c:bc:44:74:62:c2:da:05:3a:cb:12:59:3a:
         d3:7d:89:15:7c:7a:62:3b:9b:83:b0:ce:8b:11:68:92:1f:d2:
         ca:03:d6:f2:fd:dc:fe:30:89:d1:b1:77:20:8f:3b:58:7d:42:
         37:48:7a:d3:84:df:cf:e3:b3:88:85:34:27:74:62:a3:ce:4b:
         3e:3a:db:10:f1:62:d4:b4:97:d4:eb:9c:81:80:96:3a:b9:8e:
         78:50:81:c2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ/hEMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3
MjM3ZDMyZmQzNWJiZjBmZGJhNzczNGE4MzY4ZmQ5NjI2ZWNhNWEwHhcNMjQwMjEy
MTUwOTU3WhcNMjkwMjEyMTUwOTU3WjAzMTEwLwYDVQQDEyg3MjFkYWE1YTc2N2M5
ZmJlYjVjOThjODNjOTBiZGJmMTE0NzJkOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj5OMdARAbiWu+jx6WdzaO3u9BndptY9jW22UZDacEwGfjbjn
oKQpEPXVvYpbGOsBwO0BGGbqBGQEPr8akkoiW4hKRg+Jhg7Ak87WCPjk1Z29CTC1
0Ke8J+IRtPdJN1+rC9uuYhl1jRtbxKCQ1oElldewFckGtXb1+18JpKcnIw+gCsV4
UXSABd0lIXod6gKqGbxc/PGW23AUxtgsb1MtUzEozwdom3ce4jwva5H9ekdRMnLg
5PBWPKn8tKGEJid8tVEL91HtJwpNEf/JkCNQA693cDJu6qAXYoZ0f5TNoOIMMecB
3qgEI9bd/AkVmEFMW2BPFxovzZdCOP1tRh5rxQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFKIvnGGV5Ql1iA/jukPKf9cZMwQfMB8GA1UdIwQYMBaAFL4C0jb4sAa6h4Eq
IC71t2bcjjA/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTcyMzdk
MzJmZDM1YmJmMGZkYmE3NzM0YTgzNjhmZDk2MjZlY2E1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjdlZDkwMDgtYWUzNC00NGJlLTg4MmYtNTkzODEy
MDFiMWUxLzcyMWRhYTVhNzY3YzlmYmViNWM5OGM4M2M5MGJkYmYxMTQ3MmQ5ZTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82N2VkOTAwOC1hZTM0LTQ0YmUtODgyZi01OTM4
MTIwMWIxZTEvYTcyMzdkMzJmZDM1YmJmMGZkYmE3NzM0YTgzNjhmZDk2MjZlY2E1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr7yIDANBgkqhkiG9w0BAQsFAAOCAQEAcKMOUstnd87CEqop
1mNL5h1LmTzcq+g2MPC9xk+bnCufEnd+B27j+MSy256bQ6p3lhXyvz0Y2TiiXVV4
U3rUOvBlEOoGXl8uaD0FMsRffh9xDEdZrxyRX19Q8XyuGn1rxgU0/j2Gbd3cK+Cl
1yO9l5eP9CM49Q7eSpPCmE0OPtKpPqW/KUGXi2lZzeBNMoJT+qVJdVBzwd6hnRKs
HvFHPvCf0SGocwQMvER0YsLaBTrLElk6032JFXx6Yjubg7DOixFokh/SygPW8v3c
/jCJ0bF3II87WH1CN0h604Tfz+OziIU0J3Rio85LPjrbEPFi1LSX1OucgYCWOrmO
eFCBwg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org