Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3d299b9b11521a8b61932d4c16243edc18d240a8.roa
File:                     3d299b9b11521a8b61932d4c16243edc18d240a8.roa (raw, json)
Hash identifier:          N0Xih44IbDJ544M5pJ5ds3v82eEx374Dxg7/KnHdOqw=
Subject key identifier:   D4:30:F6:7C:2E:73:10:AF:A4:CE:14:06:F7:51:47:10:31:BC:DD:15
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1792AD
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3d299b9b11521a8b61932d4c16243edc18d240a8.roa
Signing time:             Wed 27 Jul 2022 16:12:30 +0000
ROA not before:           Wed 27 Jul 2022 03:00:00 +0000
ROA not after:            Sat 27 Jul 2024 03:00:00 +0000
asID:                     266665
IP address blocks:        190.171.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1544877 (0x1792ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Jul 27 03:00:00 2022 GMT
            Not After : Jul 27 03:00:00 2024 GMT
        Subject: CN=3d299b9b11521a8b61932d4c16243edc18d240a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6a:44:f2:19:6b:a9:98:d4:17:02:f6:f0:f3:
                    51:86:9a:f7:c4:6a:85:0e:5e:0b:fb:f5:27:8a:6c:
                    4b:a7:5b:94:aa:58:5b:84:75:2d:ba:ff:81:fa:e9:
                    c2:45:0e:2f:2b:0d:ff:20:b4:a8:6b:f5:9b:42:67:
                    7b:5a:ff:76:f7:53:80:7c:0c:72:d2:0a:19:11:d1:
                    e8:db:a5:6e:b5:6b:34:fa:ad:da:66:7a:ff:43:65:
                    31:c7:c1:10:73:57:e5:d7:09:5e:58:3b:a4:fd:14:
                    63:f0:06:47:4c:b8:62:41:bc:94:0e:81:bb:9a:7e:
                    2a:6c:11:b5:6b:86:81:7b:52:1e:e3:f7:70:52:01:
                    ab:ed:78:9c:d5:b3:20:f9:0c:de:c5:75:ef:4a:f2:
                    9d:40:1f:32:e1:2f:5a:89:37:05:cc:2f:59:40:e7:
                    a4:22:4a:80:79:fd:ea:0e:fc:5d:77:22:38:b6:84:
                    14:90:23:dd:d3:f6:7d:9c:44:7a:a4:ac:52:ea:3b:
                    e1:a9:5b:47:46:6c:f1:fc:c9:ae:b3:54:39:18:22:
                    17:55:b0:23:25:08:bf:5d:1e:de:47:a9:e5:34:cf:
                    dc:bb:87:14:da:d3:0f:35:58:ee:66:8f:02:12:d3:
                    7f:77:30:d7:00:b6:95:79:bd:93:e6:f3:cb:95:40:
                    7d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:30:F6:7C:2E:73:10:AF:A4:CE:14:06:F7:51:47:10:31:BC:DD:15
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/3d299b9b11521a8b61932d4c16243edc18d240a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:32:d6:65:a0:32:d2:7e:5a:a6:48:e8:1d:d0:94:1a:7d:4c:
         7b:15:51:93:95:84:a5:d2:10:cb:6e:d0:03:96:f6:5b:3c:05:
         e0:2f:73:85:8d:6c:c2:22:52:c5:22:97:97:70:48:98:27:1b:
         f4:70:2a:2e:dd:64:45:89:55:ff:c5:43:93:7f:78:7d:c8:d6:
         2b:f1:f2:5b:6b:31:85:85:ad:99:0f:c7:bd:33:f7:17:cc:f0:
         c1:c5:45:13:97:d0:37:ae:89:70:43:d3:e4:91:75:07:4f:4d:
         c9:28:33:41:93:b9:b2:a8:e8:63:54:0e:93:88:71:e3:84:39:
         41:ee:1c:4d:04:03:16:4b:a9:15:5e:47:81:80:ed:bc:c6:61:
         1f:aa:d2:9a:79:c9:14:6c:36:a0:9d:2e:44:4a:93:ba:1f:11:
         b6:53:35:f3:6e:b5:4c:f9:23:79:80:71:5c:a1:7c:3d:78:66:
         d3:6b:c3:4e:25:35:26:92:50:c9:88:52:dd:a0:36:f3:51:94:
         f9:63:f2:28:3b:ac:71:11:40:10:ad:1f:b6:09:80:92:07:f9:
         10:a0:7b:51:ee:1e:d2:c0:01:b2:f5:e6:11:04:87:52:bd:b5:
         34:f2:bf:b8:44:94:3c:0a:52:76:2b:06:6f:58:78:b4:8d:1c:
         9b:f8:31:87
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDF5KtMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwNzI3
MDMwMDAwWhcNMjQwNzI3MDMwMDAwWjAzMTEwLwYDVQQDEygzZDI5OWI5YjExNTIx
YThiNjE5MzJkNGMxNjI0M2VkYzE4ZDI0MGE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA32pE8hlrqZjUFwL28PNRhpr3xGqFDl4L+/UnimxLp1uUqlhb
hHUtuv+B+unCRQ4vKw3/ILSoa/WbQmd7Wv9291OAfAxy0goZEdHo26VutWs0+q3a
Znr/Q2Uxx8EQc1fl1wleWDuk/RRj8AZHTLhiQbyUDoG7mn4qbBG1a4aBe1Ie4/dw
UgGr7Xic1bMg+QzexXXvSvKdQB8y4S9aiTcFzC9ZQOekIkqAef3qDvxddyI4toQU
kCPd0/Z9nER6pKxS6jvhqVtHRmzx/Mmus1Q5GCIXVbAjJQi/XR7eR6nlNM/cu4cU
2tMPNVjuZo8CEtN/dzDXALaVeb2T5vPLlUB9rwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNQw9nwucxCvpM4UBvdRRxAxvN0VMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzNkMjk5YjliMTE1MjFhOGI2MTkzMmQ0YzE2MjQzZWRjMThkMjQwYTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL6rGjANBgkqhkiG9w0BAQsFAAOCAQEAHDLWZaAy0n5apkjo
HdCUGn1MexVRk5WEpdIQy27QA5b2WzwF4C9zhY1swiJSxSKXl3BImCcb9HAqLt1k
RYlV/8VDk394fcjWK/HyW2sxhYWtmQ/HvTP3F8zwwcVFE5fQN66JcEPT5JF1B09N
ySgzQZO5sqjoY1QOk4hx44Q5Qe4cTQQDFkupFV5HgYDtvMZhH6rSmnnJFGw2oJ0u
REqTuh8RtlM18261TPkjeYBxXKF8PXhm02vDTiU1JpJQyYhS3aA281GU+WPyKDus
cRFAEK0ftgmAkgf5EKB7Ue4e0sABsvXmEQSHUr21NPK/uESUPApSdisGb1h4tI0c
m/gxhw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org