Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/ea9f9d1ec8e09e4c089e8bff178d27922a8791e4.roa
File:                     ea9f9d1ec8e09e4c089e8bff178d27922a8791e4.roa (raw, json)
Hash identifier:          TFCWOtgASJHO1UqAYOKk9m8zcdOzI9R27QzTDlX3HGU=
Subject key identifier:   44:9C:AB:02:93:8D:7F:01:DE:26:1D:D1:41:2E:89:79:0F:1E:3F:BE
Certificate issuer:       /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial:       27F18B
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/ea9f9d1ec8e09e4c089e8bff178d27922a8791e4.roa
Signing time:             Mon 12 Feb 2024 15:10:08 +0000
ROA not before:           Mon 12 Feb 2024 15:09:57 +0000
ROA not after:            Mon 12 Feb 2029 15:09:57 +0000
asID:                     52262
IP address blocks:        190.242.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2617739 (0x27f18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
        Validity
            Not Before: Feb 12 15:09:57 2024 GMT
            Not After : Feb 12 15:09:57 2029 GMT
        Subject: CN=ea9f9d1ec8e09e4c089e8bff178d27922a8791e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f2:06:c5:56:69:37:58:b7:3d:d0:c7:53:a5:
                    38:0d:d2:b8:e5:03:b8:b2:18:b3:0e:33:92:37:ae:
                    e3:34:6f:a0:07:ff:9b:9f:69:e2:c8:93:11:3f:e3:
                    2d:7a:61:5a:f1:5a:1e:7b:1f:98:b2:a3:03:d8:32:
                    ec:4c:92:b9:54:cf:4f:5e:16:e2:56:2e:55:34:37:
                    86:25:2e:32:32:4d:54:97:12:94:c4:4c:85:1a:97:
                    0c:bc:dd:10:17:7c:a6:59:1b:60:49:25:f6:ef:e0:
                    98:39:eb:94:bb:f4:e9:f5:84:ef:4d:fb:8e:ef:94:
                    d9:16:78:a7:5a:6b:ea:1f:74:fd:e3:ec:d6:ab:ad:
                    62:5a:fd:c3:6b:de:af:f2:2e:a0:54:76:85:0c:34:
                    26:d9:96:54:cd:18:01:35:19:0a:c4:b9:3e:9f:cb:
                    ce:1e:30:e0:a4:92:22:5e:73:bd:ab:45:3c:e8:a7:
                    4e:dc:68:f1:72:0c:b1:7e:f6:10:ba:b4:a9:2d:62:
                    ec:8a:07:cd:fd:0e:4e:9c:9c:e6:e0:b6:2f:d4:9d:
                    87:13:c7:08:ea:29:f7:37:17:2a:e6:1e:10:88:d1:
                    9f:0f:21:d2:f9:79:41:98:20:ee:18:e9:f1:4e:11:
                    32:f6:3b:ae:c1:20:c4:01:a2:0d:c2:9e:c6:3d:74:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9C:AB:02:93:8D:7F:01:DE:26:1D:D1:41:2E:89:79:0F:1E:3F:BE
            X509v3 Authority Key Identifier:
                keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/ea9f9d1ec8e09e4c089e8bff178d27922a8791e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:5b:30:f6:33:9b:b0:14:49:2e:12:a1:b7:bb:40:51:86:e0:
         a2:db:a6:45:85:57:a4:7c:41:19:33:4d:1b:33:94:f2:8c:d9:
         e1:08:c3:2c:22:57:18:db:d8:76:40:2a:f0:e2:71:6f:f9:ba:
         7a:2a:59:56:37:ee:a4:3d:55:f7:f5:88:d5:92:25:2e:14:ad:
         67:97:c1:26:d4:e6:c8:8c:f7:b8:4f:97:d3:e4:a1:de:e8:3f:
         31:e3:91:32:a1:ee:c9:7d:2a:75:6a:70:59:a5:cb:94:0d:29:
         07:e6:ac:df:94:78:3c:46:f0:16:5d:4d:b3:16:b6:b5:4d:c2:
         86:85:d1:d7:24:c4:da:07:29:2d:ac:03:04:90:c0:a1:32:91:
         f5:53:ee:d4:29:8a:f5:c8:8d:a3:ba:93:d7:d2:7e:04:9a:e4:
         e5:e1:9e:58:f7:94:ad:d8:1c:d3:16:54:d4:4a:13:80:f5:7f:
         c4:5d:a7:4b:d9:44:86:68:13:04:40:53:80:48:33:0f:dd:a5:
         cf:f4:ae:21:b5:31:95:d8:9a:e1:2f:3d:65:34:50:e8:a5:cb:
         00:5e:2d:93:02:9d:5c:d1:5c:87:dd:4c:aa:37:e4:ad:70:bb:
         59:7b:39:e0:bd:03:90:16:da:39:6a:83:a0:f3:8e:1f:2c:d3:
         d5:03:46:8f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ/GLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3
MjM3ZDMyZmQzNWJiZjBmZGJhNzczNGE4MzY4ZmQ5NjI2ZWNhNWEwHhcNMjQwMjEy
MTUwOTU3WhcNMjkwMjEyMTUwOTU3WjAzMTEwLwYDVQQDEyhlYTlmOWQxZWM4ZTA5
ZTRjMDg5ZThiZmYxNzhkMjc5MjJhODc5MWU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAovIGxVZpN1i3PdDHU6U4DdK45QO4shizDjOSN67jNG+gB/+b
n2niyJMRP+MtemFa8Voeex+YsqMD2DLsTJK5VM9PXhbiVi5VNDeGJS4yMk1UlxKU
xEyFGpcMvN0QF3ymWRtgSSX27+CYOeuUu/Tp9YTvTfuO75TZFninWmvqH3T94+zW
q61iWv3Da96v8i6gVHaFDDQm2ZZUzRgBNRkKxLk+n8vOHjDgpJIiXnO9q0U86KdO
3GjxcgyxfvYQurSpLWLsigfN/Q5OnJzm4LYv1J2HE8cI6in3Nxcq5h4QiNGfDyHS
+XlBmCDuGOnxThEy9juuwSDEAaINwp7GPXRb7QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEScqwKTjX8B3iYd0UEuiXkPHj++MB8GA1UdIwQYMBaAFL4C0jb4sAa6h4Eq
IC71t2bcjjA/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTcyMzdk
MzJmZDM1YmJmMGZkYmE3NzM0YTgzNjhmZDk2MjZlY2E1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjdlZDkwMDgtYWUzNC00NGJlLTg4MmYtNTkzODEy
MDFiMWUxL2VhOWY5ZDFlYzhlMDllNGMwODllOGJmZjE3OGQyNzkyMmE4NzkxZTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82N2VkOTAwOC1hZTM0LTQ0YmUtODgyZi01OTM4
MTIwMWIxZTEvYTcyMzdkMzJmZDM1YmJmMGZkYmE3NzM0YTgzNjhmZDk2MjZlY2E1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr7yGDANBgkqhkiG9w0BAQsFAAOCAQEAi1sw9jObsBRJLhKh
t7tAUYbgotumRYVXpHxBGTNNGzOU8ozZ4QjDLCJXGNvYdkAq8OJxb/m6eipZVjfu
pD1V9/WI1ZIlLhStZ5fBJtTmyIz3uE+X0+Sh3ug/MeORMqHuyX0qdWpwWaXLlA0p
B+as35R4PEbwFl1Nsxa2tU3ChoXR1yTE2gcpLawDBJDAoTKR9VPu1CmK9ciNo7qT
19J+BJrk5eGeWPeUrdgc0xZU1EoTgPV/xF2nS9lEhmgTBEBTgEgzD92lz/SuIbUx
ldia4S89ZTRQ6KXLAF4tkwKdXNFch91MqjfkrXC7WXs54L0DkBbaOWqDoPOOHyzT
1QNGjw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org