Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/201d50507e297b5ce880b7cb12201f6d298c0296.roa
File:                     201d50507e297b5ce880b7cb12201f6d298c0296.roa (raw, json)
Hash identifier:          ymITahgEmBLrr7l4Oq4S0nM2K9SPsqBkt99V/DH6qB4=
Subject key identifier:   4F:45:53:C2:DC:7F:B4:F1:E1:C4:80:D6:42:73:D6:BD:51:24:6F:53
Certificate issuer:       /CN=63046ffca1186784d420944b2f52a6525f2a9b8d
Certificate serial:       22998E
Authority key identifier: 8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/201d50507e297b5ce880b7cb12201f6d298c0296.roa
Signing time:             Tue 25 Jul 2023 22:54:28 +0000
ROA not before:           Mon 24 Jul 2023 22:54:28 +0000
ROA not after:            Fri 25 Jul 2025 22:54:28 +0000
asID:                     272913
IP address blocks:        190.14.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2267534 (0x22998e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63046ffca1186784d420944b2f52a6525f2a9b8d
        Validity
            Not Before: Jul 24 22:54:28 2023 GMT
            Not After : Jul 25 22:54:28 2025 GMT
        Subject: CN=201d50507e297b5ce880b7cb12201f6d298c0296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:57:a7:a2:67:5b:28:98:61:68:26:f0:26:
                    3b:b6:bf:56:f9:2c:0c:3c:16:08:a5:b9:60:8a:e6:
                    41:c8:ae:69:e7:39:f3:f0:90:28:a4:78:25:3e:74:
                    8b:15:c5:c6:c0:59:ed:5e:f6:a3:99:7d:6a:0a:b8:
                    1a:14:a4:a4:67:80:36:f6:c1:21:d8:98:c1:cd:cd:
                    3f:76:2e:f8:ca:25:3c:f3:0e:82:94:7d:87:20:be:
                    fe:14:bd:8a:0b:c6:5f:79:3f:70:9d:1f:2c:e3:21:
                    89:63:89:cf:79:2c:7b:7e:a8:b2:ed:e2:ce:5e:c1:
                    d4:ec:40:2c:ba:32:c1:f3:88:f9:9d:ec:f9:c9:46:
                    e7:4e:97:e8:71:70:5d:48:c0:4b:51:5d:93:9c:b8:
                    a4:52:e6:21:58:e6:42:74:e4:18:52:10:10:d1:d2:
                    85:eb:83:a4:b4:72:05:6e:85:10:87:25:b5:25:1a:
                    cd:d5:f4:d6:8a:c3:9a:e6:f3:e2:ce:7d:dd:39:c0:
                    e8:76:74:8f:11:49:be:d5:16:3f:2b:01:2b:46:0b:
                    d7:38:b8:da:be:95:8d:b8:c1:ec:85:4e:06:c7:f5:
                    da:f7:22:2f:50:ba:1e:93:be:42:5e:54:61:3d:54:
                    99:ce:e3:89:a3:f2:bc:24:4d:a8:76:c4:97:f3:0d:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:45:53:C2:DC:7F:B4:F1:E1:C4:80:D6:42:73:D6:BD:51:24:6F:53
            X509v3 Authority Key Identifier:
                keyid:8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/201d50507e297b5ce880b7cb12201f6d298c0296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/63046ffca1186784d420944b2f52a6525f2a9b8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:1f:8e:b6:e6:f0:d5:e5:1e:06:69:f9:b6:39:fe:c2:55:83:
         24:7e:36:fb:a3:5b:00:68:cf:98:b2:64:b8:b2:42:64:72:48:
         cd:a8:72:dd:09:2c:75:ee:c5:ee:54:70:a7:d9:4e:d2:a2:e3:
         8e:c3:c1:33:39:7e:99:55:83:d5:0b:eb:2b:44:6e:f2:97:c1:
         57:34:46:14:e0:fd:19:e0:85:ba:fa:e9:5d:fe:1a:8e:b4:b2:
         53:d7:9c:d8:66:15:61:71:05:77:69:65:94:e8:49:5b:10:21:
         41:9c:31:9b:4d:ae:b8:9b:d8:a5:65:a8:bb:e9:e4:c9:af:df:
         06:fc:4a:d2:e2:a8:9b:12:b0:26:16:52:07:ab:47:cc:fa:ec:
         6f:c0:83:97:ec:9a:a0:18:8e:55:cd:fe:0f:be:a3:19:f0:fe:
         0f:85:d0:b2:94:de:08:17:c2:4c:d6:11:5d:8c:3e:ae:0f:a8:
         ef:26:76:70:b3:3e:c4:46:76:98:4b:45:d7:14:dc:42:15:fa:
         17:1a:3f:f3:7d:92:89:8c:8d:91:54:b4:78:23:1d:4e:7e:c4:
         a4:f7:ed:7b:31:c8:a6:09:48:a3:23:f6:6b:cb:af:cd:29:14:
         6f:79:89:a6:4b:89:23:01:a4:6b:db:bf:b4:92:08:24:89:12:
         f9:74:38:1e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIpmOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYz
MDQ2ZmZjYTExODY3ODRkNDIwOTQ0YjJmNTJhNjUyNWYyYTliOGQwHhcNMjMwNzI0
MjI1NDI4WhcNMjUwNzI1MjI1NDI4WjAzMTEwLwYDVQQDEygyMDFkNTA1MDdlMjk3
YjVjZTg4MGI3Y2IxMjIwMWY2ZDI5OGMwMjk2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAljpXp6JnWyiYYWgm8CY7tr9W+SwMPBYIpblgiuZByK5p5znz
8JAopHglPnSLFcXGwFntXvajmX1qCrgaFKSkZ4A29sEh2JjBzc0/di74yiU88w6C
lH2HIL7+FL2KC8ZfeT9wnR8s4yGJY4nPeSx7fqiy7eLOXsHU7EAsujLB84j5nez5
yUbnTpfocXBdSMBLUV2TnLikUuYhWOZCdOQYUhAQ0dKF64OktHIFboUQhyW1JRrN
1fTWisOa5vPizn3dOcDodnSPEUm+1RY/KwErRgvXOLjavpWNuMHshU4Gx/Xa9yIv
ULoek75CXlRhPVSZzuOJo/K8JE2odsSX8w1G/wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFE9FU8Lcf7Tx4cSA1kJz1r1RJG9TMB8GA1UdIwQYMBaAFIrrGOHN1vBRFW3s
wCOyOnm0ZgOuMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjMwNDZm
ZmNhMTE4Njc4NGQ0MjA5NDRiMmY1MmE2NTI1ZjJhOWI4ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjhkMmViNDEtNmNiOS00YzcyLTg2YTEtNGEyMWIw
NDFhOTVjLzIwMWQ1MDUwN2UyOTdiNWNlODgwYjdjYjEyMjAxZjZkMjk4YzAyOTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82OGQyZWI0MS02Y2I5LTRjNzItODZhMS00YTIx
YjA0MWE5NWMvNjMwNDZmZmNhMTE4Njc4NGQ0MjA5NDRiMmY1MmE2NTI1ZjJhOWI4
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL4OZTANBgkqhkiG9w0BAQsFAAOCAQEAVx+Otubw1eUeBmn5
tjn+wlWDJH42+6NbAGjPmLJkuLJCZHJIzahy3Qksde7F7lRwp9lO0qLjjsPBMzl+
mVWD1QvrK0Ru8pfBVzRGFOD9GeCFuvrpXf4ajrSyU9ec2GYVYXEFd2lllOhJWxAh
QZwxm02uuJvYpWWou+nkya/fBvxK0uKomxKwJhZSB6tHzPrsb8CDl+yaoBiOVc3+
D76jGfD+D4XQspTeCBfCTNYRXYw+rg+o7yZ2cLM+xEZ2mEtF1xTcQhX6Fxo/832S
iYyNkVS0eCMdTn7EpPftezHIpglIoyP2a8uvzSkUb3mJpkuJIwGka9u/tJIIJIkS
+XQ4Hg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org