Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/ff36a0840c9bf955d5571a5cb9c761436fec2a11.roa
File:                     ff36a0840c9bf955d5571a5cb9c761436fec2a11.roa (raw, json)
Hash identifier:          9qpKmElE+Pvuqags6g6HtN92qCEF26eK/qEBy3Aem/U=
Subject key identifier:   F7:50:19:B6:61:C1:59:28:27:DC:25:A9:8C:8B:C7:4B:EA:46:99:C0
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B89F5
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/ff36a0840c9bf955d5571a5cb9c761436fec2a11.roa
Signing time:             Wed 07 Feb 2024 18:09:21 +0000
ROA not before:           Wed 07 Feb 2024 18:09:21 +0000
ROA not after:            Sat 07 Feb 2026 18:09:21 +0000
asID:                     262191
IP address blocks:        190.109.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756213 (0xb89f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  7 18:09:21 2024 GMT
            Not After : Feb  7 18:09:21 2026 GMT
        Subject: CN=ff36a0840c9bf955d5571a5cb9c761436fec2a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:86:62:cc:b4:5e:e6:fa:1a:23:01:1f:05:bc:
                    d9:d4:8c:c3:e9:9e:86:b2:0d:4a:2f:88:27:31:d4:
                    7a:63:ec:c5:b7:83:71:e3:13:9c:14:51:d2:1b:40:
                    a8:07:17:2a:86:42:d7:c1:b2:83:bc:44:f2:46:41:
                    ee:41:d2:bc:2a:6b:84:ff:7a:78:3a:0a:76:b0:49:
                    bd:7c:90:87:80:9c:b5:5a:1b:c4:54:9d:da:63:a0:
                    6e:50:c8:66:3c:36:79:72:3f:88:6d:62:09:2d:fe:
                    dc:48:74:cf:ec:2a:cb:be:e1:32:0f:fe:18:1b:68:
                    f4:1b:c4:38:8e:ee:03:8f:06:3f:73:c9:a3:42:93:
                    59:0d:e0:eb:05:88:84:31:6e:5e:9b:b1:66:0d:59:
                    a7:f9:b5:da:74:15:70:41:b5:b9:a5:45:c0:77:7e:
                    1d:b3:fc:10:24:e2:14:c8:41:15:80:06:a9:1d:e8:
                    c0:f8:cd:98:12:71:02:18:12:25:06:fe:e8:4b:09:
                    87:d8:ba:95:c6:1f:2d:e7:f4:10:8c:43:24:7c:a9:
                    aa:a5:11:0c:0a:a6:4f:ec:50:e1:e2:c8:4e:6b:cc:
                    b5:a5:9b:4c:2f:ca:20:7a:07:e5:c3:7b:74:e8:09:
                    c9:54:07:a9:08:20:e4:3a:a6:94:d7:3b:99:28:06:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:50:19:B6:61:C1:59:28:27:DC:25:A9:8C:8B:C7:4B:EA:46:99:C0
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/ff36a0840c9bf955d5571a5cb9c761436fec2a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:1d:dc:1f:75:e0:4a:be:c2:80:41:3d:72:4a:fd:df:55:dd:
         32:bc:2f:63:9c:f4:46:1f:c0:82:bc:db:47:38:60:c5:35:1f:
         15:db:62:f1:d8:be:21:75:59:81:45:35:87:2d:93:11:b6:43:
         6d:c3:01:e4:f1:82:bf:2d:75:4b:84:6b:c1:50:b6:ca:8a:8d:
         6d:03:9a:5d:72:c0:15:6a:65:7f:5a:fc:6a:79:15:a7:5e:d6:
         ef:63:b0:cc:01:01:48:21:60:f0:36:9d:fc:66:8f:1e:9c:19:
         f6:6d:b5:64:df:89:a4:ba:f9:5d:c5:bf:bb:37:21:db:e2:14:
         1e:d5:c8:52:28:48:cf:a3:6e:9b:56:4d:55:17:e0:c7:4b:ba:
         d6:13:25:70:94:59:15:87:51:e3:39:9a:01:84:9d:7f:e8:c1:
         05:8e:a8:76:12:07:8e:23:37:9f:51:02:75:f5:0b:63:00:ef:
         44:96:aa:59:87:61:40:20:be:21:c9:5c:2c:a2:c5:b1:c7:4b:
         17:ed:cc:fe:16:6d:d1:1a:f1:56:d0:76:98:91:a9:41:a2:0e:
         c6:ec:a4:25:9e:c4:4c:06:67:08:28:22:61:0e:2d:98:e0:8d:
         4e:20:84:e3:bc:bc:30:1e:f2:85:56:f3:5e:6f:58:78:f8:1c:
         2f:42:ad:80
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDC4n1MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQx
NjVkYjhmNTdjYWJhMzEyNjI5ZTg5ZDYxMWVhMWYzOTMzNTE0MTUwHhcNMjQwMjA3
MTgwOTIxWhcNMjYwMjA3MTgwOTIxWjAzMTEwLwYDVQQDEyhmZjM2YTA4NDBjOWJm
OTU1ZDU1NzFhNWNiOWM3NjE0MzZmZWMyYTExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlYZizLRe5voaIwEfBbzZ1IzD6Z6Gsg1KL4gnMdR6Y+zFt4Nx
4xOcFFHSG0CoBxcqhkLXwbKDvETyRkHuQdK8KmuE/3p4Ogp2sEm9fJCHgJy1WhvE
VJ3aY6BuUMhmPDZ5cj+IbWIJLf7cSHTP7CrLvuEyD/4YG2j0G8Q4ju4DjwY/c8mj
QpNZDeDrBYiEMW5em7FmDVmn+bXadBVwQbW5pUXAd34ds/wQJOIUyEEVgAapHejA
+M2YEnECGBIlBv7oSwmH2LqVxh8t5/QQjEMkfKmqpREMCqZP7FDh4shOa8y1pZtM
L8ogegflw3t06AnJVAepCCDkOqaU1zuZKAZBfQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPdQGbZhwVkoJ9wlqYyLx0vqRpnAMB8GA1UdIwQYMBaAFFag5Ezz3lNXwzbk
OzFtdRflsLO8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDE2NWRi
OGY1N2NhYmEzMTI2MjllODlkNjExZWExZjM5MzM1MTQxNS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNzc1YzYzMjUtYmY3YS00M2RiLTgzMzMtZTkzMDI3
ZmEyZDRhL2ZmMzZhMDg0MGM5YmY5NTVkNTU3MWE1Y2I5Yzc2MTQzNmZlYzJhMTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83NzVjNjMyNS1iZjdhLTQzZGItODMzMy1lOTMw
MjdmYTJkNGEvNDE2NWRiOGY1N2NhYmEzMTI2MjllODlkNjExZWExZjM5MzM1MTQx
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5tHjANBgkqhkiG9w0BAQsFAAOCAQEAAB3cH3XgSr7CgEE9
ckr931XdMrwvY5z0Rh/AgrzbRzhgxTUfFdti8di+IXVZgUU1hy2TEbZDbcMB5PGC
vy11S4RrwVC2yoqNbQOaXXLAFWplf1r8ankVp17W72OwzAEBSCFg8Dad/GaPHpwZ
9m21ZN+JpLr5XcW/uzch2+IUHtXIUihIz6Num1ZNVRfgx0u61hMlcJRZFYdR4zma
AYSdf+jBBY6odhIHjiM3n1ECdfULYwDvRJaqWYdhQCC+IclcLKLFscdLF+3M/hZt
0RrxVtB2mJGpQaIOxuykJZ7ETAZnCCgiYQ4tmOCNTiCE47y8MB7yhVbzXm9YePgc
L0KtgA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org