Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/eec3ac34e37538805c0eb6007d0706f4bda6b91a.roa
File:                     eec3ac34e37538805c0eb6007d0706f4bda6b91a.roa (raw, json)
Hash identifier:          XGx2mAwjhTVFWhUYzeEocFSGyKTiaxyTAw5AUkPRD54=
Subject key identifier:   BA:93:AD:44:2E:DF:DF:4B:F6:B1:61:A6:B6:90:DE:DD:9E:FB:93:95
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       1E1C18
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/eec3ac34e37538805c0eb6007d0706f4bda6b91a.roa
Signing time:             Mon 08 May 2023 17:10:33 +0000
ROA not before:           Sun 07 May 2023 17:10:30 +0000
ROA not after:            Thu 08 May 2025 17:10:30 +0000
asID:                     13591
IP address blocks:        189.204.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1973272 (0x1e1c18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: May  7 17:10:30 2023 GMT
            Not After : May  8 17:10:30 2025 GMT
        Subject: CN=eec3ac34e37538805c0eb6007d0706f4bda6b91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:55:45:d6:1d:8c:81:90:c9:f6:8c:f2:7b:2c:
                    e4:b7:2a:ec:f9:30:d2:41:19:3b:f3:da:93:8d:10:
                    6c:47:77:75:7c:78:f0:0e:07:84:74:c9:5e:ff:02:
                    4e:32:0f:1c:b8:01:ff:72:f5:f3:c8:2a:cf:da:60:
                    12:e3:bb:b0:66:0c:7c:75:c6:a6:31:fa:08:13:3c:
                    ad:b7:44:d7:ed:8d:4a:83:77:00:68:8b:b0:d4:9f:
                    32:d8:c9:a9:a6:27:f9:d1:3f:96:4a:c6:3f:eb:09:
                    4a:f3:a5:e7:c4:55:fb:5f:91:13:be:7b:17:be:81:
                    7c:39:0a:0e:51:f2:d3:bc:73:ed:6f:f8:5d:af:80:
                    9f:73:ab:d8:2e:2a:6d:e5:a5:99:d0:fb:65:ab:53:
                    e7:2a:eb:ae:4a:d3:c3:01:0f:1c:ce:74:d1:48:57:
                    55:d3:93:1b:08:ef:65:fb:ba:da:28:85:0e:d9:d2:
                    4f:57:e1:3c:a4:57:21:5d:6d:f1:9f:e3:9d:80:b4:
                    de:d7:f3:91:d8:03:73:c1:06:c8:8c:bb:ce:e3:11:
                    25:5b:11:81:88:34:19:ed:17:37:90:7a:c0:d1:9e:
                    2f:08:41:a5:e8:d2:dd:e5:05:b2:3d:28:3b:ed:1a:
                    44:54:2f:70:af:62:83:04:32:ae:3d:fe:86:77:45:
                    53:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:93:AD:44:2E:DF:DF:4B:F6:B1:61:A6:B6:90:DE:DD:9E:FB:93:95
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/eec3ac34e37538805c0eb6007d0706f4bda6b91a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d9:73:02:9b:90:f3:e6:47:a8:bc:02:87:a6:5f:36:b2:ed:
         87:f0:20:47:ff:30:45:0a:e0:a0:cc:19:2a:77:1a:15:95:b5:
         e7:e5:b1:5f:15:ad:7f:0c:cb:57:39:54:5c:9c:8b:68:83:82:
         bf:a8:9e:67:73:cb:b8:76:83:12:c7:d9:52:27:a6:c7:b6:87:
         32:56:69:cb:a9:d0:a8:c0:cc:27:8a:a0:2d:e2:95:be:5b:01:
         28:84:1c:e1:a3:e8:06:49:5c:c9:9b:44:18:48:cf:5e:83:e6:
         ee:59:1a:5c:1c:93:aa:1b:72:c7:d7:f8:7e:a7:bf:15:75:a5:
         00:cd:79:a7:32:c8:64:42:e3:86:97:45:18:37:8c:65:13:f5:
         ed:f0:fb:b5:83:a7:a8:27:28:20:f0:07:a8:c8:f8:4d:7c:74:
         97:32:80:29:e1:0c:6b:41:3e:f0:eb:3c:2e:98:73:e9:1c:00:
         f6:48:7e:08:2f:a7:5d:6f:38:5e:8d:86:a2:d3:2b:5b:6a:6d:
         6e:bf:13:80:64:d2:ed:cd:ba:d0:5c:ab:20:48:dc:95:3e:92:
         f6:a6:77:04:cc:a5:51:82:5f:1d:78:8b:88:fa:c2:8e:35:d3:
         da:16:0d:de:36:aa:f8:21:a3:8c:ac:b0:2c:e1:d5:9b:ad:4f:
         56:bd:90:12
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHhwYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDk3
ODNhYzliYWQyYjdiOTIyZjY0OGM5MGU4ODFiZjQ0OTc4MDY5YWQwHhcNMjMwNTA3
MTcxMDMwWhcNMjUwNTA4MTcxMDMwWjAzMTEwLwYDVQQDEyhlZWMzYWMzNGUzNzUz
ODgwNWMwZWI2MDA3ZDA3MDZmNGJkYTZiOTFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqlVF1h2MgZDJ9ozyeyzktyrs+TDSQRk789qTjRBsR3d1fHjw
DgeEdMle/wJOMg8cuAH/cvXzyCrP2mAS47uwZgx8dcamMfoIEzytt0TX7Y1Kg3cA
aIuw1J8y2Mmppif50T+WSsY/6wlK86XnxFX7X5ETvnsXvoF8OQoOUfLTvHPtb/hd
r4Cfc6vYLipt5aWZ0Ptlq1PnKuuuStPDAQ8cznTRSFdV05MbCO9l+7raKIUO2dJP
V+E8pFchXW3xn+OdgLTe1/OR2ANzwQbIjLvO4xElWxGBiDQZ7Rc3kHrA0Z4vCEGl
6NLd5QWyPSg77RpEVC9wr2KDBDKuPf6Gd0VTSQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLqTrUQu399L9rFhpraQ3t2e+5OVMB8GA1UdIwQYMBaAFMqL6Qa6lrLFhJ+G
RkANLQxgDZdgMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTc4M2Fj
OWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlhZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTBjNGI0YTAtNjQxNy00YTdjLTg3NTgtOWU2ZjRi
MGU5Njc5L2VlYzNhYzM0ZTM3NTM4ODA1YzBlYjYwMDdkMDcwNmY0YmRhNmI5MWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMGM0YjRhMC02NDE3LTRhN2MtODc1OC05ZTZm
NGIwZTk2NzkvOTc4M2FjOWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5NzgwNjlh
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL3M6DANBgkqhkiG9w0BAQsFAAOCAQEAIdlzApuQ8+ZHqLwC
h6ZfNrLth/AgR/8wRQrgoMwZKncaFZW15+WxXxWtfwzLVzlUXJyLaIOCv6ieZ3PL
uHaDEsfZUiemx7aHMlZpy6nQqMDMJ4qgLeKVvlsBKIQc4aPoBklcyZtEGEjPXoPm
7lkaXByTqhtyx9f4fqe/FXWlAM15pzLIZELjhpdFGDeMZRP17fD7tYOnqCcoIPAH
qMj4TXx0lzKAKeEMa0E+8Os8Lphz6RwA9kh+CC+nXW84Xo2GotMrW2ptbr8TgGTS
7c260FyrIEjclT6S9qZ3BMylUYJfHXiLiPrCjjXT2hYN3jaq+CGjjKywLOHVm61P
Vr2QEg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org