Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/715f6b8206a49b1b230f245a725159ce12a3304e.roa
File:                     715f6b8206a49b1b230f245a725159ce12a3304e.roa (raw, json)
Hash identifier:          88C8nTS2N+g9S42b6ycvKBr4f1bqYgFSDmbJ9W7KdgQ=
Subject key identifier:   19:BD:E8:31:85:C2:B3:50:48:AF:E2:0E:35:D2:32:63:B6:37:BC:69
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       27431E
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/715f6b8206a49b1b230f245a725159ce12a3304e.roa
Signing time:             Mon 29 Jan 2024 14:43:46 +0000
ROA not before:           Mon 29 Jan 2024 14:43:43 +0000
ROA not after:            Thu 29 Jan 2026 14:43:43 +0000
asID:                     52267
IP address blocks:        190.54.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2573086 (0x27431e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Jan 29 14:43:43 2024 GMT
            Not After : Jan 29 14:43:43 2026 GMT
        Subject: CN=715f6b8206a49b1b230f245a725159ce12a3304e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3f:fa:ea:08:e0:74:af:c1:85:ae:4b:3a:a9:
                    f6:c7:dd:7c:99:7b:0a:4d:5f:c0:c4:0d:2d:b1:35:
                    6e:2a:6f:16:f4:e2:21:f9:1c:39:83:96:94:1a:d2:
                    b9:e3:19:d2:1e:5a:fe:6a:2e:9b:94:80:99:90:1c:
                    2d:c9:93:0f:52:4a:6c:19:47:d1:87:3b:78:c8:f2:
                    19:66:2a:c1:ab:7a:8c:bd:df:df:e4:55:f5:13:b4:
                    61:3b:3f:59:65:50:93:60:21:b1:63:a3:de:5d:8d:
                    f2:72:c1:c6:5f:13:95:23:46:59:38:41:a9:b6:40:
                    68:a6:ed:5b:62:17:6e:ff:89:69:2d:db:cc:fa:48:
                    ac:bd:40:7c:a7:6d:ad:27:fa:17:56:ea:98:cd:aa:
                    23:c4:77:df:fa:84:9a:e6:13:1f:24:e0:c9:87:d2:
                    59:62:e5:f3:7a:af:fa:52:6a:57:5f:7f:72:cb:1e:
                    4f:9d:db:d4:5b:96:cc:cc:23:f6:5c:35:17:85:c2:
                    95:8c:91:88:29:f8:dd:be:bc:55:21:62:1c:b7:ad:
                    7d:7f:83:25:63:b2:66:9f:0f:43:f6:62:fd:5a:9c:
                    b4:dd:30:52:43:79:77:59:5e:71:7b:76:95:8d:df:
                    b0:4f:2f:5a:88:de:cf:c2:e3:72:15:aa:5e:91:e6:
                    6c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BD:E8:31:85:C2:B3:50:48:AF:E2:0E:35:D2:32:63:B6:37:BC:69
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/715f6b8206a49b1b230f245a725159ce12a3304e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:72:ad:fc:5a:6d:25:99:d2:a7:45:6c:93:14:ac:49:74:10:
         2c:a8:ab:f0:d1:e3:54:89:b1:ea:c7:41:28:db:d4:c0:79:ac:
         81:ca:6c:6c:f6:b5:7c:d1:ab:a9:d5:de:7e:cf:f8:5f:74:23:
         c8:a0:36:8f:9e:63:52:8c:7c:7d:99:2d:92:51:55:74:85:99:
         a2:98:7e:85:d3:5a:b0:86:f2:c8:e6:1e:c0:e4:c0:99:6a:2d:
         e5:0e:94:1f:e4:1e:c6:a8:3d:c5:44:c3:61:96:42:94:96:0d:
         42:42:c1:39:e3:fe:d8:1e:8a:0d:c1:2e:59:bd:02:8f:28:46:
         36:ca:88:93:39:e8:61:e7:d4:51:4b:6e:66:f0:53:8c:c2:cc:
         45:08:f2:9c:cb:23:48:62:b9:5d:bd:7a:97:8f:a8:64:ca:47:
         ab:26:2c:d6:2f:5e:4b:74:7c:01:78:b0:98:fa:37:23:a7:d9:
         cd:04:69:bd:2b:7f:ae:5d:91:9e:b1:44:7c:4b:1f:e7:b2:ff:
         01:2e:c0:69:ad:72:05:03:17:45:88:7c:36:c2:52:27:8b:4e:
         d7:27:e3:9f:97:7c:35:88:a3:b9:7c:ca:e1:d5:f7:2d:2e:36:
         6e:d1:f2:d7:37:71:0b:87:44:fd:11:45:26:2a:06:c9:7a:08:
         07:8a:b5:b5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ0MeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFj
NzMwY2M0ZjExNDBlOWMzYTI0Mzc2OGQxMDUyYWUyYmYzNmQyNzkwHhcNMjQwMTI5
MTQ0MzQzWhcNMjYwMTI5MTQ0MzQzWjAzMTEwLwYDVQQDEyg3MTVmNmI4MjA2YTQ5
YjFiMjMwZjI0NWE3MjUxNTljZTEyYTMzMDRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgz/66gjgdK/Bha5LOqn2x918mXsKTV/AxA0tsTVuKm8W9OIh
+Rw5g5aUGtK54xnSHlr+ai6blICZkBwtyZMPUkpsGUfRhzt4yPIZZirBq3qMvd/f
5FX1E7RhOz9ZZVCTYCGxY6PeXY3ycsHGXxOVI0ZZOEGptkBopu1bYhdu/4lpLdvM
+kisvUB8p22tJ/oXVuqYzaojxHff+oSa5hMfJODJh9JZYuXzeq/6UmpXX39yyx5P
ndvUW5bMzCP2XDUXhcKVjJGIKfjdvrxVIWIct619f4MlY7Jmnw9D9mL9Wpy03TBS
Q3l3WV5xe3aVjd+wTy9aiN7PwuNyFapekeZszwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFBm96DGFwrNQSK/iDjXSMmO2N7xpMB8GA1UdIwQYMBaAFD2jZzfaSs3l6WtL
qUcId2SKsyUZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMWM3MzBj
YzRmMTE0MGU5YzNhMjQzNzY4ZDEwNTJhZTJiZjM2ZDI3OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTFjODFlZmYtYTZjZC00MzE5LWIzYzMtZGNhODNl
ODY2ZDI1LzcxNWY2YjgyMDZhNDliMWIyMzBmMjQ1YTcyNTE1OWNlMTJhMzMwNGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85MWM4MWVmZi1hNmNkLTQzMTktYjNjMy1kY2E4
M2U4NjZkMjUvMWM3MzBjYzRmMTE0MGU5YzNhMjQzNzY4ZDEwNTJhZTJiZjM2ZDI3
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL42HjANBgkqhkiG9w0BAQsFAAOCAQEANXKt/FptJZnSp0Vs
kxSsSXQQLKir8NHjVImx6sdBKNvUwHmsgcpsbPa1fNGrqdXefs/4X3QjyKA2j55j
Uox8fZktklFVdIWZoph+hdNasIbyyOYewOTAmWot5Q6UH+Qexqg9xUTDYZZClJYN
QkLBOeP+2B6KDcEuWb0CjyhGNsqIkznoYefUUUtuZvBTjMLMRQjynMsjSGK5Xb16
l4+oZMpHqyYs1i9eS3R8AXiwmPo3I6fZzQRpvSt/rl2RnrFEfEsf57L/AS7Aaa1y
BQMXRYh8NsJSJ4tO1yfjn5d8NYijuXzK4dX3LS42btHy1zdxC4dE/RFFJioGyXoI
B4q1tQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org