Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/059b88dd3056f91b0304e75a1675470422047fd2.roa
File:                     059b88dd3056f91b0304e75a1675470422047fd2.roa (raw, json)
Hash identifier:          vOaXWzJSDM6kIlLMglbJAd+C0hWiZ2xBIci3jrW3irg=
Subject key identifier:   1B:54:61:2E:09:77:01:9E:E8:61:7B:0E:C1:B2:69:0F:C6:36:58:BE
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0AE5D8
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/059b88dd3056f91b0304e75a1675470422047fd2.roa
Signing time:             Wed 31 Jan 2024 21:20:50 +0000
ROA not before:           Wed 31 Jan 2024 21:20:50 +0000
ROA not after:            Sat 31 Jan 2026 21:20:50 +0000
asID:                     262191
IP address blocks:        190.109.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714200 (0xae5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Jan 31 21:20:50 2024 GMT
            Not After : Jan 31 21:20:50 2026 GMT
        Subject: CN=059b88dd3056f91b0304e75a1675470422047fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:30:e0:90:e7:e1:53:e4:22:15:9d:fd:db:
                    d8:73:f3:e2:b3:d4:1c:6c:9d:7d:22:33:d6:68:3e:
                    c3:53:04:5e:20:6a:9a:ee:a7:25:06:f1:59:a7:1e:
                    8f:f9:31:0e:4c:d4:ac:5d:cc:97:fe:1e:46:de:dd:
                    80:8d:34:c6:9d:11:3b:7b:a5:2c:f2:03:38:9d:05:
                    5d:34:c8:83:06:82:a9:24:9f:2d:6f:74:8d:99:4a:
                    b2:95:ba:8e:3c:cb:8e:67:35:ef:18:ac:b0:78:6c:
                    dc:57:15:3e:de:87:2a:7f:57:49:1f:47:f6:30:d3:
                    02:75:8d:a6:73:e4:7b:46:45:16:42:f7:d6:a9:8f:
                    e6:39:b1:99:e5:38:1f:52:e3:e9:d6:57:3a:10:e8:
                    d5:aa:ef:5a:c8:ca:a3:13:e5:ea:e6:1a:25:b2:cc:
                    55:f2:78:63:a3:5a:bb:93:37:23:a2:1a:d5:f5:c2:
                    47:c6:c4:df:db:d7:47:68:ce:4f:b5:54:7f:b6:f2:
                    78:87:bb:2e:95:cd:4d:88:78:e1:e9:76:1a:0a:61:
                    b3:1e:10:22:12:cd:d9:a7:2c:ba:37:38:5f:d8:4b:
                    5a:3c:0d:1c:fe:bc:e7:9d:ed:84:d9:82:5c:97:8d:
                    3c:90:87:95:f8:30:5f:f3:46:35:f0:2a:fa:1a:af:
                    d8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:54:61:2E:09:77:01:9E:E8:61:7B:0E:C1:B2:69:0F:C6:36:58:BE
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/059b88dd3056f91b0304e75a1675470422047fd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:b9:11:d4:55:14:fb:71:2b:5a:e5:a6:cb:46:e3:85:e5:0a:
         f6:0a:95:8e:ed:08:7c:95:0d:f8:e4:03:a7:b6:29:b6:34:74:
         a8:20:1f:21:d9:2a:5c:44:02:e8:53:a7:fb:e0:63:c1:48:8a:
         cb:8e:d9:90:98:eb:b6:46:fc:6d:1f:ba:94:3f:ab:3c:8f:12:
         1a:0a:4e:74:62:d4:79:cb:1f:b7:16:a2:69:c9:9c:6e:ed:2c:
         40:ed:44:04:b2:9e:6e:95:2d:19:f0:66:cb:a4:aa:82:33:86:
         84:e0:aa:95:c3:49:93:e4:ef:0e:52:1b:22:d7:87:15:03:90:
         80:c6:f1:b1:c7:93:88:26:79:98:11:ab:84:6c:ea:52:b8:ca:
         c7:6c:d8:4d:c1:ce:c6:f5:68:22:5d:18:78:52:5d:d5:28:de:
         55:80:76:5d:dd:eb:3f:d3:66:de:52:83:2a:2b:c2:4c:3f:b9:
         22:f2:89:17:98:bf:5a:e6:8b:30:c8:e4:81:db:5b:69:6a:64:
         3f:9a:80:42:00:02:43:a6:c3:33:10:eb:96:f2:4b:82:d8:b4:
         1f:d4:30:1e:c4:69:48:3e:13:d6:6e:a1:a9:11:fd:69:c6:72:
         9b:38:e9:46:eb:49:25:8a:31:47:f8:e5:69:9c:6b:85:3c:49:
         d1:2b:28:8c
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCuXYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
NjVkYjhmNTdjYWJhMzEyNjI5ZTg5ZDYxMWVhMWYzOTMzNTE0MTUwHhcNMjQwMTMx
MjEyMDUwWhcNMjYwMTMxMjEyMDUwWjAzMTEwLwYDVQQDEygwNTliODhkZDMwNTZm
OTFiMDMwNGU3NWExNjc1NDcwNDIyMDQ3ZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoxQw4JDn4VPkIhWd/dvYc/Pis9QcbJ19IjPWaD7DUwReIGqa
7qclBvFZpx6P+TEOTNSsXcyX/h5G3t2AjTTGnRE7e6Us8gM4nQVdNMiDBoKpJJ8t
b3SNmUqylbqOPMuOZzXvGKyweGzcVxU+3ocqf1dJH0f2MNMCdY2mc+R7RkUWQvfW
qY/mObGZ5TgfUuPp1lc6EOjVqu9ayMqjE+Xq5holssxV8nhjo1q7kzcjohrV9cJH
xsTf29dHaM5PtVR/tvJ4h7sulc1NiHjh6XYaCmGzHhAiEs3Zpyy6Nzhf2EtaPA0c
/rznne2E2YJcl408kIeV+DBf80Y18Cr6Gq/YdwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBtUYS4JdwGe6GF7DsGyaQ/GNli+MB8GA1UdIwQYMBaAFFag5Ezz3lNXwzbk
OzFtdRflsLO8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDE2NWRi
OGY1N2NhYmEzMTI2MjllODlkNjExZWExZjM5MzM1MTQxNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzc1YzYzMjUtYmY3YS00M2RiLTgzMzMtZTkzMDI3
ZmEyZDRhLzA1OWI4OGRkMzA1NmY5MWIwMzA0ZTc1YTE2NzU0NzA0MjIwNDdmZDIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NzVjNjMyNS1iZjdhLTQzZGItODMzMy1lOTMw
MjdmYTJkNGEvNDE2NWRiOGY1N2NhYmEzMTI2MjllODlkNjExZWExZjM5MzM1MTQx
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5tATANBgkqhkiG9w0BAQsFAAOCAQEAEbkR1FUU+3ErWuWm
y0bjheUK9gqVju0IfJUN+OQDp7YptjR0qCAfIdkqXEQC6FOn++BjwUiKy47ZkJjr
tkb8bR+6lD+rPI8SGgpOdGLUecsftxaiacmcbu0sQO1EBLKebpUtGfBmy6SqgjOG
hOCqlcNJk+TvDlIbIteHFQOQgMbxsceTiCZ5mBGrhGzqUrjKx2zYTcHOxvVoIl0Y
eFJd1SjeVYB2Xd3rP9Nm3lKDKivCTD+5IvKJF5i/WuaLMMjkgdtbaWpkP5qAQgAC
Q6bDMxDrlvJLgti0H9QwHsRpSD4T1m6hqRH9acZymzjpRutJJYoxR/jlaZxrhTxJ
0SsojA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org