Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7206503aaec0a97fc8c285440d663cf33b2615a1.roa
File:                     7206503aaec0a97fc8c285440d663cf33b2615a1.roa (raw, json)
Hash identifier:          tzMyo+Rd/E9wQXwVAMF5YIxOGcm2GRMvuJkAFIDcclY=
Subject key identifier:   11:FA:F3:66:29:59:A0:A1:B2:44:A1:08:DA:27:BA:41:A6:9D:41:1E
Certificate issuer:       /CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
Certificate serial:       19DAB9
Authority key identifier: ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7206503aaec0a97fc8c285440d663cf33b2615a1.roa
Signing time:             Thu 20 Oct 2022 13:04:18 +0000
ROA not before:           Tue 23 Mar 2021 14:30:32 +0000
ROA not after:            Tue 24 Mar 2026 14:30:32 +0000
asID:                     52363
IP address blocks:        190.104.32.0/20 maxlen: 24
                          190.112.176.0/20 maxlen: 24
                          2803:6800::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694393 (0x19dab9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
        Validity
            Not Before: Mar 23 14:30:32 2021 GMT
            Not After : Mar 24 14:30:32 2026 GMT
        Subject: CN=7206503aaec0a97fc8c285440d663cf33b2615a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:56:10:43:4f:bc:72:30:4e:bb:8a:20:ca:8f:
                    01:9f:58:ab:fd:c1:10:d1:ac:c3:ec:9e:a8:df:e1:
                    c7:63:0e:62:58:ef:56:b0:c6:d2:d9:66:af:15:98:
                    43:26:cc:78:b9:30:f9:47:db:2b:ca:64:9f:72:18:
                    32:1d:d8:0a:0e:ac:3c:ab:3d:cf:11:dc:75:74:8c:
                    af:1a:85:43:e7:f4:a7:15:86:e6:dc:50:82:b4:6e:
                    a8:62:99:29:db:0c:80:ba:ef:25:6e:ff:4b:18:b2:
                    9d:fc:bc:71:85:f6:a0:f0:22:67:8d:17:27:9a:1b:
                    76:78:89:5b:24:34:20:1b:ec:9e:35:22:ac:a5:d7:
                    df:bd:7a:1c:9c:37:87:2f:4c:d0:d0:04:4d:bb:b4:
                    63:74:ce:35:82:59:dd:af:96:c5:53:5f:84:50:be:
                    12:2a:8a:87:4f:63:7b:8d:71:94:be:7b:93:67:0e:
                    17:f2:cb:95:5a:23:0b:4c:80:9c:36:1f:e2:97:2a:
                    eb:3c:e4:2d:f1:c7:0f:39:2d:d4:73:b4:17:91:70:
                    46:bf:71:3a:16:9f:7d:47:b6:cb:a2:df:ca:ff:ea:
                    e7:2e:da:77:99:18:4e:75:35:26:76:b5:a1:a9:4f:
                    e4:a3:3b:c1:67:e6:5a:dd:60:2e:b8:f0:3f:fc:d6:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FA:F3:66:29:59:A0:A1:B2:44:A1:08:DA:27:BA:41:A6:9D:41:1E
            X509v3 Authority Key Identifier:
                keyid:ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7206503aaec0a97fc8c285440d663cf33b2615a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.32.0/20
                  190.112.176.0/20
                IPv6:
                  2803:6800::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:0b:57:dc:f6:ae:91:2d:16:7e:9d:44:21:01:41:8b:92:b3:
         fa:82:18:5b:40:5c:b3:bf:80:a1:ab:57:21:e4:7d:30:60:63:
         6e:52:94:52:af:f2:01:8a:e4:be:64:0e:ae:c2:ad:21:13:18:
         4b:8c:dc:0d:7e:6f:62:66:99:e3:2e:88:b7:0d:5f:64:10:cd:
         a3:fd:fd:4d:86:4d:a0:55:5a:d8:05:9f:f6:4b:63:a9:8a:03:
         c0:d8:f8:59:4c:f2:ed:78:bb:6f:33:95:1d:fe:72:18:c0:27:
         c9:84:7a:a4:f5:25:77:76:95:4f:28:25:0c:1b:e4:45:52:d7:
         aa:16:40:1c:20:17:58:4d:5a:cf:5d:61:1b:ce:c0:1c:7c:b4:
         79:5f:02:3f:8e:12:4f:7a:3f:50:6a:f9:a9:e3:96:44:84:5f:
         71:3d:e4:b7:b4:76:f5:c8:55:a9:2d:21:c8:8c:c9:a5:ab:34:
         7f:45:cd:d2:ba:ea:c8:4d:19:1d:fe:ea:01:a5:de:cc:a7:5d:
         83:ee:8e:c7:9a:ca:31:60:94:61:25:81:cb:0f:dd:f1:dd:a4:
         26:c8:98:3f:6e:9a:50:54:71:4e:01:92:77:2d:d7:b7:f0:b6:
         8d:de:a3:90:d7:65:c2:ac:83:23:b0:68:8d:e0:5a:77:b6:74:
         a3:3b:9e:07
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDGdq5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdm
YTk2YWQ0Njg4NGY5MjBiYzhmM2I4ZjljMmZiYjY2MGZmZDliNjgwHhcNMjEwMzIz
MTQzMDMyWhcNMjYwMzI0MTQzMDMyWjAzMTEwLwYDVQQDEyg3MjA2NTAzYWFlYzBh
OTdmYzhjMjg1NDQwZDY2M2NmMzNiMjYxNWExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAglYQQ0+8cjBOu4ogyo8Bn1ir/cEQ0azD7J6o3+HHYw5iWO9W
sMbS2WavFZhDJsx4uTD5R9srymSfchgyHdgKDqw8qz3PEdx1dIyvGoVD5/SnFYbm
3FCCtG6oYpkp2wyAuu8lbv9LGLKd/Lxxhfag8CJnjRcnmht2eIlbJDQgG+yeNSKs
pdffvXocnDeHL0zQ0ARNu7RjdM41glndr5bFU1+EUL4SKoqHT2N7jXGUvnuTZw4X
8suVWiMLTICcNh/ilyrrPOQt8ccPOS3Uc7QXkXBGv3E6Fp99R7bLot/K/+rnLtp3
mRhOdTUmdrWhqU/kozvBZ+Za3WAuuPA//NY5jwIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFBH682YpWaChskShCNonukGmnUEeMB8GA1UdIwQYMBaAFO0CLaOSte73ycfy
75hBfrVfNtboMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2ZhOTZh
ZDQ2ODg0ZjkyMGJjOGYzYjhmOWMyZmJiNjYwZmZkOWI2OC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTFmMGI4ODktNGE3Mi00ODU2LTlhMWYtNzg1ZjU1
OTM4YzAzLzcyMDY1MDNhYWVjMGE5N2ZjOGMyODU0NDBkNjYzY2YzM2IyNjE1YTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMWYwYjg4OS00YTcyLTQ4NTYtOWExZi03ODVm
NTU5MzhjMDMvN2ZhOTZhZDQ2ODg0ZjkyMGJjOGYzYjhmOWMyZmJiNjYwZmZkOWI2
OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEBL5oIAMEBL5wsDANBAIAAjAHAwUAKANoADANBgkqhkiG9w0B
AQsFAAOCAQEAGgtX3PaukS0Wfp1EIQFBi5Kz+oIYW0Bcs7+AoatXIeR9MGBjblKU
Uq/yAYrkvmQOrsKtIRMYS4zcDX5vYmaZ4y6Itw1fZBDNo/39TYZNoFVa2AWf9ktj
qYoDwNj4WUzy7Xi7bzOVHf5yGMAnyYR6pPUld3aVTyglDBvkRVLXqhZAHCAXWE1a
z11hG87AHHy0eV8CP44ST3o/UGr5qeOWRIRfcT3kt7R29chVqS0hyIzJpas0f0XN
0rrqyE0ZHf7qAaXezKddg+6Ox5rKMWCUYSWByw/d8d2kJsiYP26aUFRxTgGSdy3X
t/C2jd6jkNdlwqyDI7BojeBad7Z0ozueBw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org