Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/89528c5f36cefb406aa72c4ceee3c701edc8f7a4.roa
File:                     89528c5f36cefb406aa72c4ceee3c701edc8f7a4.roa (raw, json)
Hash identifier:          LI/SQCxfisB+v+lHoiJBHK3PLWEDAsscDYVAJJUXyVg=
Subject key identifier:   C1:B9:91:71:11:CB:26:EA:08:90:58:7E:11:F7:F2:32:6B:E2:2C:05
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1CDB22
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/89528c5f36cefb406aa72c4ceee3c701edc8f7a4.roa
Signing time:             Wed 28 Sep 2022 17:00:43 +0000
ROA not before:           Wed 28 Sep 2022 16:59:44 +0000
ROA not after:            Sat 28 Sep 2024 16:59:44 +0000
asID:                     11830
IP address blocks:        190.241.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891106 (0x1cdb22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 28 16:59:44 2022 GMT
            Not After : Sep 28 16:59:44 2024 GMT
        Subject: CN=89528c5f36cefb406aa72c4ceee3c701edc8f7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:3e:31:a5:34:f1:86:5d:4c:bf:6b:11:78:
                    aa:0a:29:bb:d7:cf:37:99:4a:41:40:b0:b4:6d:60:
                    59:fd:a5:13:81:58:fe:59:02:c4:c5:ef:fd:65:86:
                    cf:77:57:be:e1:ef:a2:17:58:38:ed:4a:ff:9d:b6:
                    71:dd:69:28:8e:9c:d9:7f:0b:9e:04:14:5c:83:6f:
                    d2:c4:0d:2c:cb:42:34:d5:51:39:d3:70:9a:7e:df:
                    4b:d2:9a:76:29:bb:83:0c:0a:40:bb:1f:03:b3:86:
                    42:72:49:e6:69:5e:e7:5e:01:0d:c5:9b:20:6a:32:
                    be:91:b3:6e:df:e3:6a:e3:61:75:6f:d9:74:b3:c7:
                    55:0c:e9:ee:4e:02:ae:5c:88:c1:14:3e:83:e8:3c:
                    29:20:28:8a:10:b3:87:b8:5a:55:d6:63:d7:f7:fa:
                    40:85:f2:e5:7e:1d:d4:a6:69:47:be:48:88:df:6f:
                    30:9b:63:49:e5:c1:e2:a6:db:34:5b:93:fd:3e:fc:
                    38:3a:d4:3f:36:67:9e:8d:78:84:99:e0:c9:9b:48:
                    a1:7b:db:66:1d:ad:04:47:51:25:3e:2c:df:95:fd:
                    4b:1c:1d:40:b4:db:01:0a:08:e6:73:2d:37:ce:61:
                    df:ef:c1:62:13:fd:81:ea:ea:e0:74:01:c7:6f:19:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B9:91:71:11:CB:26:EA:08:90:58:7E:11:F7:F2:32:6B:E2:2C:05
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/89528c5f36cefb406aa72c4ceee3c701edc8f7a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.241.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:70:2f:c3:d4:70:57:cf:98:74:fd:db:29:6b:f6:1c:4e:0e:
         0a:a2:1b:e0:49:89:90:95:ff:bc:29:3b:33:d0:a3:bb:58:8b:
         2b:38:f4:8e:4a:0c:e4:61:d4:48:08:76:ef:12:f6:fd:77:95:
         c4:ef:e9:70:4a:e6:58:21:86:4b:00:0d:84:e5:bf:3d:30:fb:
         f7:a1:54:2f:cc:9e:34:c1:f7:3e:08:f9:62:3c:ec:62:30:ae:
         0e:4b:ab:42:4b:c4:6a:26:6f:44:e4:a1:3c:60:97:6a:d4:e8:
         18:69:25:64:b3:5e:97:1a:cc:3d:05:f8:c9:08:d0:f4:3d:bf:
         39:39:be:1f:75:db:b9:7e:a5:53:fd:fb:97:54:46:32:a2:5c:
         fd:d6:e3:b0:c4:a3:81:08:9b:9a:31:0f:e9:7d:21:4f:0f:66:
         64:ae:42:8e:8b:a2:20:0c:41:45:ff:91:c8:65:08:a4:5c:52:
         c8:24:aa:68:4d:31:bf:cb:89:50:b9:0d:97:19:42:e3:95:20:
         5f:29:f5:47:eb:fb:bb:8d:02:d8:93:2c:81:56:56:10:64:b7:
         9e:d1:d9:39:ad:84:b0:26:7e:e2:d0:48:83:4f:99:67:f5:2f:
         8a:cf:6e:b1:95:10:bd:72:bc:d8:f7:54:58:0b:db:cb:99:01:
         b3:cb:e7:88
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHNsiMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZj
M2YzY2JmOTcxYjMxZDRhMGZiNDhhMDYzZWQ4NmYwYjU5NGFjM2UwHhcNMjIwOTI4
MTY1OTQ0WhcNMjQwOTI4MTY1OTQ0WjAzMTEwLwYDVQQDEyg4OTUyOGM1ZjM2Y2Vm
YjQwNmFhNzJjNGNlZWUzYzcwMWVkYzhmN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmJY+MaU08YZdTL9rEXiqCim71883mUpBQLC0bWBZ/aUTgVj+
WQLExe/9ZYbPd1e+4e+iF1g47Ur/nbZx3WkojpzZfwueBBRcg2/SxA0sy0I01VE5
03Caft9L0pp2KbuDDApAux8Ds4ZCcknmaV7nXgENxZsgajK+kbNu3+Nq42F1b9l0
s8dVDOnuTgKuXIjBFD6D6DwpICiKELOHuFpV1mPX9/pAhfLlfh3UpmlHvkiI328w
m2NJ5cHipts0W5P9Pvw4OtQ/NmeejXiEmeDJm0ihe9tmHa0ER1ElPizflf1LHB1A
tNsBCgjmcy03zmHf78FiE/2B6urgdAHHbxnlXQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMG5kXERyybqCJBYfhH38jJr4iwFMB8GA1UdIwQYMBaAFNgLQZU9gBToGKPM
I8FMT5TRqMEbMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNmMzZjNj
YmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMzZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmE3ODYyZTgtZDJkYi00OGVhLWI4MDktZDRiOTcw
ZDFkODkyLzg5NTI4YzVmMzZjZWZiNDA2YWE3MmM0Y2VlZTNjNzAxZWRjOGY3YTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82YTc4NjJlOC1kMmRiLTQ4ZWEtYjgwOS1kNGI5
NzBkMWQ4OTIvNmMzZjNjYmY5NzFiMzFkNGEwZmI0OGEwNjNlZDg2ZjBiNTk0YWMz
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7xjDANBgkqhkiG9w0BAQsFAAOCAQEAJHAvw9RwV8+YdP3b
KWv2HE4OCqIb4EmJkJX/vCk7M9Cju1iLKzj0jkoM5GHUSAh27xL2/XeVxO/pcErm
WCGGSwANhOW/PTD796FUL8yeNMH3Pgj5YjzsYjCuDkurQkvEaiZvROShPGCXatTo
GGklZLNelxrMPQX4yQjQ9D2/OTm+H3XbuX6lU/37l1RGMqJc/dbjsMSjgQibmjEP
6X0hTw9mZK5CjouiIAxBRf+RyGUIpFxSyCSqaE0xv8uJULkNlxlC45UgXyn1R+v7
u40C2JMsgVZWEGS3ntHZOa2EsCZ+4tBIg0+ZZ/Uvis9usZUQvXK82PdUWAvby5kB
s8vniA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org