Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/d8cf2e61fdafa3ddd19e6dcb84cc0b854845942f.roa
File:                     d8cf2e61fdafa3ddd19e6dcb84cc0b854845942f.roa (raw, json)
Hash identifier:          0KLQ5jKiTOIQ1RM2zQOsV+chuZ2na+3FHtCn+5zrG0A=
Subject key identifier:   44:6C:A0:8D:BD:88:7C:76:66:A1:0E:F6:4B:D2:7E:02:40:01:FE:35
Certificate issuer:       /CN=450e05696920146d80a6cffd7e47b4df43d2b64a
Certificate serial:       22A24E
Authority key identifier: 14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/d8cf2e61fdafa3ddd19e6dcb84cc0b854845942f.roa
Signing time:             Tue 15 Aug 2023 22:50:34 +0000
ROA not before:           Mon 14 Aug 2023 22:50:34 +0000
ROA not after:            Fri 15 Aug 2025 22:50:34 +0000
asID:                     12127
IP address blocks:        190.57.57.0/24 maxlen: 24
                          190.57.58.0/24 maxlen: 24
                          190.57.59.0/24 maxlen: 24
                          190.57.60.0/24 maxlen: 24
                          190.57.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2269774 (0x22a24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450e05696920146d80a6cffd7e47b4df43d2b64a
        Validity
            Not Before: Aug 14 22:50:34 2023 GMT
            Not After : Aug 15 22:50:34 2025 GMT
        Subject: CN=d8cf2e61fdafa3ddd19e6dcb84cc0b854845942f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c2:a4:fa:ad:ae:fd:3c:0d:fa:9d:e4:68:5a:
                    8b:df:af:27:db:fe:d4:b7:b3:91:ea:01:df:27:5c:
                    f7:60:77:11:4d:09:50:77:35:0d:91:4b:4d:c0:4d:
                    8d:3e:2e:cb:15:db:28:1d:d9:ce:cc:8a:8f:7e:ed:
                    c2:03:b7:2b:a9:bf:e1:7b:39:08:71:18:cb:0f:f2:
                    e3:e9:e8:3d:99:ef:11:98:ab:7f:09:ce:ef:6d:7b:
                    24:60:b6:ad:f2:cb:fa:24:e4:c8:45:a2:43:80:fd:
                    44:12:2c:a1:40:ed:ec:8e:b6:cc:6d:46:ac:7c:c0:
                    ce:a4:12:84:37:ee:4b:c8:6b:11:ae:cc:f5:49:a0:
                    41:a0:61:c9:11:47:f5:38:6b:b4:c0:c2:f5:ab:a8:
                    9c:87:f4:b1:d7:78:5c:bd:48:65:c7:74:93:fb:d3:
                    d3:c7:32:9b:f0:00:cf:84:77:26:93:98:df:f8:e4:
                    6b:60:d6:ff:6c:17:27:48:cd:88:b0:4a:05:7a:43:
                    16:93:3d:16:cc:73:f2:a6:92:d1:77:32:8c:fe:12:
                    ef:fc:29:3a:3b:58:3f:ac:12:83:e6:fe:e9:d8:cf:
                    1a:5c:42:6b:b6:2f:97:54:44:41:74:79:8e:81:98:
                    0d:92:cf:ed:94:1f:ca:43:4a:a5:11:48:09:47:63:
                    e2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6C:A0:8D:BD:88:7C:76:66:A1:0E:F6:4B:D2:7E:02:40:01:FE:35
            X509v3 Authority Key Identifier:
                keyid:14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/d8cf2e61fdafa3ddd19e6dcb84cc0b854845942f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.57.0-190.57.61.255

    Signature Algorithm: sha256WithRSAEncryption
         27:c0:4d:78:97:7f:f5:a8:b4:60:30:42:b3:76:2f:2f:90:b8:
         a7:09:a8:70:a4:75:4c:95:7a:c3:ee:31:45:70:1a:2d:ce:8d:
         af:87:09:bc:b9:d7:f0:aa:a9:4e:1c:02:5b:5c:0b:b0:29:7a:
         7a:0a:4b:24:e5:5e:d9:92:35:a7:ff:aa:6e:f6:6a:d5:55:1d:
         ba:23:0b:e5:d0:be:d9:b1:53:82:11:a7:ad:89:f3:8f:12:ef:
         84:8d:7f:56:2b:fa:c7:7d:d6:c9:32:a7:3e:13:c5:39:59:57:
         f9:7f:5b:85:97:3a:5b:a1:30:78:fa:63:6c:16:31:37:f8:d8:
         95:cd:81:51:eb:a4:fb:db:03:43:42:17:6a:2e:21:15:7d:64:
         52:22:33:d0:70:05:67:ca:a6:18:72:2e:56:85:74:64:72:31:
         67:bc:f6:2a:ce:9b:70:ce:43:42:ce:ec:72:70:43:79:5d:1f:
         33:9a:75:41:46:85:0c:31:f0:dc:4e:28:78:48:ca:c0:c8:e4:
         ad:73:ac:67:67:33:8a:04:38:bb:6d:e5:e9:79:31:91:bd:ea:
         d4:1b:82:f2:83:c3:98:63:08:35:ca:5b:bd:87:54:61:97:6b:
         4b:2c:27:2a:0b:6b:98:5a:8c:51:1a:bf:4a:14:f9:9b:8e:f1:
         3f:03:8b:5d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDIqJOMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ1
MGUwNTY5NjkyMDE0NmQ4MGE2Y2ZmZDdlNDdiNGRmNDNkMmI2NGEwHhcNMjMwODE0
MjI1MDM0WhcNMjUwODE1MjI1MDM0WjAzMTEwLwYDVQQDEyhkOGNmMmU2MWZkYWZh
M2RkZDE5ZTZkY2I4NGNjMGI4NTQ4NDU5NDJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6MKk+q2u/TwN+p3kaFqL368n2/7Ut7OR6gHfJ1z3YHcRTQlQ
dzUNkUtNwE2NPi7LFdsoHdnOzIqPfu3CA7crqb/hezkIcRjLD/Lj6eg9me8RmKt/
Cc7vbXskYLat8sv6JOTIRaJDgP1EEiyhQO3sjrbMbUasfMDOpBKEN+5LyGsRrsz1
SaBBoGHJEUf1OGu0wML1q6ich/Sx13hcvUhlx3ST+9PTxzKb8ADPhHcmk5jf+ORr
YNb/bBcnSM2IsEoFekMWkz0WzHPyppLRdzKM/hLv/Ck6O1g/rBKD5v7p2M8aXEJr
ti+XVERBdHmOgZgNks/tlB/KQ0qlEUgJR2Pi+QIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFERsoI29iHx2ZqEO9kvSfgJAAf41MB8GA1UdIwQYMBaAFBT7rr/j2U8/snFh
GAcKEgX3vVNPMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDUwZTA1
Njk2OTIwMTQ2ZDgwYTZjZmZkN2U0N2I0ZGY0M2QyYjY0YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjkzMDAyYmEtZTgzMy00MWU1LWJjYjUtNGQzODFj
MGQ3OWI2L2Q4Y2YyZTYxZmRhZmEzZGRkMTllNmRjYjg0Y2MwYjg1NDg0NTk0MmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82OTMwMDJiYS1lODMzLTQxZTUtYmNiNS00ZDM4
MWMwZDc5YjYvNDUwZTA1Njk2OTIwMTQ2ZDgwYTZjZmZkN2U0N2I0ZGY0M2QyYjY0
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQAvjk5AwQBvjk8MA0GCSqGSIb3DQEBCwUAA4IBAQAnwE14
l3/1qLRgMEKzdi8vkLinCahwpHVMlXrD7jFFcBotzo2vhwm8udfwqqlOHAJbXAuw
KXp6Cksk5V7ZkjWn/6pu9mrVVR26Iwvl0L7ZsVOCEaetifOPEu+EjX9WK/rHfdbJ
Mqc+E8U5WVf5f1uFlzpboTB4+mNsFjE3+NiVzYFR66T72wNDQhdqLiEVfWRSIjPQ
cAVnyqYYci5WhXRkcjFnvPYqzptwzkNCzuxycEN5XR8zmnVBRoUMMfDcTih4SMrA
yOStc6xnZzOKBDi7beXpeTGRverUG4Lyg8OYYwg1ylu9h1Rhl2tLLCcqC2uYWoxR
Gr9KFPmbjvE/A4td
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org