Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/0ceea57a01ccaec1bd9aa25c76fe7cf81d55955d.roa
File:                     0ceea57a01ccaec1bd9aa25c76fe7cf81d55955d.roa (raw, json)
Hash identifier:          1we0wt2DGA3FnPwgFUdtQ2S+d0YVYf4k14AsuFdmo8g=
Subject key identifier:   0B:7D:19:22:A6:55:BF:8D:1B:84:7E:85:E3:21:B3:FE:6F:3F:F3:FE
Certificate issuer:       /CN=e7910aba265e3d6933bffbf4bb39ed43b03a2ffb
Certificate serial:       216D97
Authority key identifier: 95:A7:49:5D:DB:4D:A4:77:AD:D6:61:D7:05:CB:ED:C0:4B:54:26:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/0ceea57a01ccaec1bd9aa25c76fe7cf81d55955d.roa
Signing time:             Thu 31 Aug 2023 15:39:05 +0000
ROA not before:           Wed 30 Aug 2023 15:39:05 +0000
ROA not after:            Sun 31 Aug 2025 15:39:05 +0000
asID:                     52295
IP address blocks:        190.211.244.0/22 maxlen: 22
                          190.211.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190743 (0x216d97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7910aba265e3d6933bffbf4bb39ed43b03a2ffb
        Validity
            Not Before: Aug 30 15:39:05 2023 GMT
            Not After : Aug 31 15:39:05 2025 GMT
        Subject: CN=0ceea57a01ccaec1bd9aa25c76fe7cf81d55955d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:09:cf:c6:ae:9f:4b:66:15:98:5f:d2:41:
                    3c:68:a5:d1:d6:d9:2b:b4:16:72:49:4e:0e:35:ba:
                    28:d7:62:8f:89:ab:f0:d9:d7:ba:6c:7e:1c:8b:63:
                    92:e9:1e:d6:5e:17:2d:9c:96:05:4e:f9:0c:ba:ee:
                    14:af:61:39:eb:dc:ae:4b:72:52:59:9f:d2:39:ed:
                    57:d9:8a:47:70:65:87:7b:9f:06:34:68:11:27:fa:
                    fc:be:0a:31:47:1d:cf:4a:aa:aa:dd:02:35:26:47:
                    2f:9d:03:7a:51:4d:3a:31:63:4f:85:02:b2:a6:bf:
                    24:ec:5c:be:43:15:d9:04:c6:5c:71:8e:48:9e:88:
                    ba:8f:64:e7:7b:00:6e:ce:f9:cb:54:0e:d6:d1:98:
                    5e:e5:7c:8c:c8:28:c0:bc:12:da:23:f8:19:ee:9d:
                    72:6c:2b:83:86:ff:24:a7:80:cc:9a:36:08:fe:70:
                    e3:b3:c3:5b:61:70:e1:31:b9:cd:95:9e:c6:1e:ac:
                    6f:1c:6b:00:9c:8b:4d:63:20:34:db:15:57:c0:58:
                    e6:03:df:33:11:ab:8a:e7:85:58:4c:a0:7f:6d:da:
                    c1:34:cb:8a:85:81:3e:e9:71:f8:ee:62:9a:e7:42:
                    4a:7f:64:31:09:72:91:49:e2:52:3c:18:d5:9b:ee:
                    5f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7D:19:22:A6:55:BF:8D:1B:84:7E:85:E3:21:B3:FE:6F:3F:F3:FE
            X509v3 Authority Key Identifier:
                keyid:95:A7:49:5D:DB:4D:A4:77:AD:D6:61:D7:05:CB:ED:C0:4B:54:26:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/0ceea57a01ccaec1bd9aa25c76fe7cf81d55955d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7e760a4d-6e09-4bc8-a653-37aebcd512a5/e7910aba265e3d6933bffbf4bb39ed43b03a2ffb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:73:c4:10:4e:29:04:d4:a8:99:ff:c0:94:ec:b7:e0:f7:2d:
         6b:e9:3f:de:c6:67:a5:59:db:5e:19:0d:59:66:27:e7:10:34:
         71:c1:4d:a0:65:17:ec:8e:1b:76:23:37:4f:ce:be:20:f4:28:
         2a:1c:d0:fd:6b:77:0d:7c:00:d1:2a:56:fd:12:9c:4a:c1:be:
         63:ad:f4:17:1c:6c:77:07:c3:ab:d8:ed:54:9e:21:3d:b4:bc:
         f8:fe:9b:72:3e:98:ed:12:f0:78:34:cc:5a:a9:d0:9d:28:3d:
         60:9b:0a:c9:58:0a:cb:09:67:56:dc:40:d2:28:b2:ca:36:ae:
         9d:20:1b:c9:16:1d:e4:76:34:cd:c6:e6:52:b1:8a:aa:c1:00:
         9c:fb:c2:8e:ca:1c:e1:c1:ee:87:6f:b6:b2:56:d4:59:da:9b:
         4f:7b:fc:ec:fa:10:16:8f:af:5c:a8:21:2c:d4:83:a3:e7:98:
         2f:fa:ed:16:03:aa:b0:a8:9c:5f:5a:42:07:a4:12:fb:c5:08:
         a6:f6:39:7a:95:5f:36:51:3b:88:36:33:80:b6:a7:97:0c:c6:
         1a:05:ec:2c:e9:4e:06:74:b8:64:b2:76:67:da:8b:05:2e:63:
         6f:b0:99:f9:cf:5e:6f:db:28:0d:3b:de:f0:23:c3:0c:89:0f:
         cd:cd:72:f9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIW2XMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU3
OTEwYWJhMjY1ZTNkNjkzM2JmZmJmNGJiMzllZDQzYjAzYTJmZmIwHhcNMjMwODMw
MTUzOTA1WhcNMjUwODMxMTUzOTA1WjAzMTEwLwYDVQQDEygwY2VlYTU3YTAxY2Nh
ZWMxYmQ5YWEyNWM3NmZlN2NmODFkNTU5NTVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAskwJz8aun0tmFZhf0kE8aKXR1tkrtBZySU4ONboo12KPiavw
2de6bH4ci2OS6R7WXhctnJYFTvkMuu4Ur2E569yuS3JSWZ/SOe1X2YpHcGWHe58G
NGgRJ/r8vgoxRx3PSqqq3QI1JkcvnQN6UU06MWNPhQKypr8k7Fy+QxXZBMZccY5I
noi6j2TnewBuzvnLVA7W0Zhe5XyMyCjAvBLaI/gZ7p1ybCuDhv8kp4DMmjYI/nDj
s8NbYXDhMbnNlZ7GHqxvHGsAnItNYyA02xVXwFjmA98zEauK54VYTKB/bdrBNMuK
hYE+6XH47mKa50JKf2QxCXKRSeJSPBjVm+5fcwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAt9GSKmVb+NG4R+heMhs/5vP/P+MB8GA1UdIwQYMBaAFJWnSV3bTaR3rdZh
1wXL7cBLVCa9MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTc5MTBh
YmEyNjVlM2Q2OTMzYmZmYmY0YmIzOWVkNDNiMDNhMmZmYi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvN2U3NjBhNGQtNmUwOS00YmM4LWE2NTMtMzdhZWJj
ZDUxMmE1LzBjZWVhNTdhMDFjY2FlYzFiZDlhYTI1Yzc2ZmU3Y2Y4MWQ1NTk1NWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy83ZTc2MGE0ZC02ZTA5LTRiYzgtYTY1My0zN2Fl
YmNkNTEyYTUvZTc5MTBhYmEyNjVlM2Q2OTMzYmZmYmY0YmIzOWVkNDNiMDNhMmZm
Yi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr7T9DANBgkqhkiG9w0BAQsFAAOCAQEAE3PEEE4pBNSomf/A
lOy34Pcta+k/3sZnpVnbXhkNWWYn5xA0ccFNoGUX7I4bdiM3T86+IPQoKhzQ/Wt3
DXwA0SpW/RKcSsG+Y630FxxsdwfDq9jtVJ4hPbS8+P6bcj6Y7RLweDTMWqnQnSg9
YJsKyVgKywlnVtxA0iiyyjaunSAbyRYd5HY0zcbmUrGKqsEAnPvCjsoc4cHuh2+2
slbUWdqbT3v87PoQFo+vXKghLNSDo+eYL/rtFgOqsKicX1pCB6QS+8UIpvY5epVf
NlE7iDYzgLanlwzGGgXsLOlOBnS4ZLJ2Z9qLBS5jb7CZ+c9eb9soDTve8CPDDIkP
zc1y+Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org