Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/a0d2e0cdec8221e509723e42916b7cfc657b4d87.roa
File:                     a0d2e0cdec8221e509723e42916b7cfc657b4d87.roa (raw, json)
Hash identifier:          jFdEa0I5yh8wBYAw2+D8zMPkxub12a6aDhMGcwFPTl8=
Subject key identifier:   1E:53:E8:8B:E2:0A:04:F2:5A:9B:9C:B7:4D:AB:31:AF:44:82:8D:8A
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       1E369B
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/a0d2e0cdec8221e509723e42916b7cfc657b4d87.roa
Signing time:             Mon 08 May 2023 20:39:17 +0000
ROA not before:           Sun 07 May 2023 20:39:17 +0000
ROA not after:            Thu 08 May 2025 20:39:17 +0000
asID:                     28548
IP address blocks:        189.202.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1980059 (0x1e369b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: May  7 20:39:17 2023 GMT
            Not After : May  8 20:39:17 2025 GMT
        Subject: CN=a0d2e0cdec8221e509723e42916b7cfc657b4d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:28:1d:d8:c6:cd:b5:80:73:a3:cf:19:da:
                    7d:5a:dd:9c:3c:2c:df:e5:9b:20:ba:4c:a8:92:94:
                    14:b6:7d:ca:e3:d8:c7:79:23:9d:3c:3f:fb:79:b5:
                    7b:4a:5c:89:44:7e:dd:1d:4f:a8:c9:82:0c:a1:30:
                    05:87:cd:bd:5b:53:4c:d0:ff:ef:83:48:d9:3e:27:
                    fc:17:7a:7d:a2:2e:2e:f3:03:3f:2e:81:55:fa:f8:
                    e2:d4:b9:1b:b6:c2:08:22:60:44:45:77:b3:fb:63:
                    02:bf:30:40:4f:af:92:58:1d:33:ce:b1:a3:14:ed:
                    24:c1:7b:18:32:82:69:2f:5d:4e:d1:50:cb:2f:d5:
                    25:c0:59:68:6e:c6:e6:bd:7b:30:7f:56:32:cf:c4:
                    ff:ef:a1:79:97:dc:4a:61:86:ca:51:80:1c:cd:23:
                    77:3a:5c:9a:86:0e:e4:a2:5f:c6:a9:2c:45:20:b8:
                    f6:35:27:0f:09:d2:8a:3b:3c:41:0a:17:a6:e6:e6:
                    75:3d:9d:18:1d:2a:9e:f6:80:70:90:5a:2f:2f:08:
                    ae:76:82:61:3d:0e:27:ed:11:c1:70:95:bc:72:7d:
                    f8:e8:08:c0:7e:9e:c6:20:77:fc:53:b2:f8:03:3e:
                    a3:bd:20:10:ad:9d:b4:86:04:65:17:b4:81:ac:7c:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:53:E8:8B:E2:0A:04:F2:5A:9B:9C:B7:4D:AB:31:AF:44:82:8D:8A
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/a0d2e0cdec8221e509723e42916b7cfc657b4d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:07:c6:b8:6d:ed:12:4f:45:48:20:05:11:da:84:5a:0a:49:
         ea:80:a6:77:c2:65:86:c6:74:93:37:b1:12:be:f6:6d:68:e7:
         26:e7:29:64:6c:46:36:fb:0d:f6:0d:73:44:e6:4d:97:08:43:
         b8:ec:c7:ee:60:4a:b5:d3:14:4f:a6:3b:e7:24:da:ff:45:b2:
         5e:ff:88:7f:f0:7e:22:ea:f8:33:50:f2:0e:3e:6d:86:7f:2a:
         f9:13:8f:af:4b:37:f8:25:de:b2:ff:b2:52:3c:7b:c6:ed:df:
         b7:84:ad:b3:25:c9:e9:2b:c1:f8:69:e4:0a:93:f4:e7:6c:d1:
         7d:53:65:aa:c7:19:e7:89:31:b3:e8:34:c8:ea:02:b4:de:03:
         85:e5:55:13:81:1e:8a:9b:eb:2b:46:05:c4:d2:f6:3b:f6:5f:
         68:b5:b6:14:b5:ea:20:96:d4:3b:94:5c:a5:15:f1:93:55:b7:
         f2:40:f7:e1:8c:4f:f1:68:24:bf:f4:e2:0f:e0:9f:10:da:03:
         e9:aa:1f:fb:be:56:2f:87:c2:d8:0e:08:37:79:35:81:65:7d:
         df:5b:2f:64:94:d8:52:1e:07:7c:2a:cd:19:27:8f:ff:9a:9b:
         58:09:c8:1d:6a:bd:4b:ba:a9:07:40:33:fc:ea:be:a9:b1:4e:
         0c:b8:35:31
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHjabMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk3
ODNhYzliYWQyYjdiOTIyZjY0OGM5MGU4ODFiZjQ0OTc4MDY5YWQwHhcNMjMwNTA3
MjAzOTE3WhcNMjUwNTA4MjAzOTE3WjAzMTEwLwYDVQQDEyhhMGQyZTBjZGVjODIy
MWU1MDk3MjNlNDI5MTZiN2NmYzY1N2I0ZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArXIoHdjGzbWAc6PPGdp9Wt2cPCzf5ZsgukyokpQUtn3K49jH
eSOdPD/7ebV7SlyJRH7dHU+oyYIMoTAFh829W1NM0P/vg0jZPif8F3p9oi4u8wM/
LoFV+vji1LkbtsIIImBERXez+2MCvzBAT6+SWB0zzrGjFO0kwXsYMoJpL11O0VDL
L9UlwFlobsbmvXswf1Yyz8T/76F5l9xKYYbKUYAczSN3Olyahg7kol/GqSxFILj2
NScPCdKKOzxBChem5uZ1PZ0YHSqe9oBwkFovLwiudoJhPQ4n7RHBcJW8cn346AjA
fp7GIHf8U7L4Az6jvSAQrZ20hgRlF7SBrHxj1QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFB5T6IviCgTyWpuct02rMa9Ego2KMB8GA1UdIwQYMBaAFMqL6Qa6lrLFhJ+G
RkANLQxgDZdgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTc4M2Fj
OWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTBjNGI0YTAtNjQxNy00YTdjLTg3NTgtOWU2ZjRi
MGU5Njc5L2EwZDJlMGNkZWM4MjIxZTUwOTcyM2U0MjkxNmI3Y2ZjNjU3YjRkODcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMGM0YjRhMC02NDE3LTRhN2MtODc1OC05ZTZm
NGIwZTk2NzkvOTc4M2FjOWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL3K5DANBgkqhkiG9w0BAQsFAAOCAQEABgfGuG3tEk9FSCAF
EdqEWgpJ6oCmd8JlhsZ0kzexEr72bWjnJucpZGxGNvsN9g1zROZNlwhDuOzH7mBK
tdMUT6Y75yTa/0WyXv+If/B+Iur4M1DyDj5thn8q+ROPr0s3+CXesv+yUjx7xu3f
t4StsyXJ6SvB+GnkCpP052zRfVNlqscZ54kxs+g0yOoCtN4DheVVE4EeipvrK0YF
xNL2O/ZfaLW2FLXqIJbUO5RcpRXxk1W38kD34YxP8Wgkv/TiD+CfENoD6aof+75W
L4fC2A4IN3k1gWV931svZJTYUh4HfCrNGSeP/5qbWAnIHWq9S7qpB0Az/Oq+qbFO
DLg1MQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org