Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/6a893226156be1d95d65d3549456430f0d3ffee1.roa
File:                     6a893226156be1d95d65d3549456430f0d3ffee1.roa (raw, json)
Hash identifier:          UBPToOX+msiwqCbhWF4NdwdWSqAeGEeaxSa4H1n5V48=
Subject key identifier:   5B:C1:7B:F5:C1:BF:30:86:E6:FA:2C:9E:AE:0B:5C:53:E3:83:FF:95
Certificate issuer:       /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial:       21ED08
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/6a893226156be1d95d65d3549456430f0d3ffee1.roa
Signing time:             Fri 02 Jun 2023 14:22:38 +0000
ROA not before:           Thu 01 Jun 2023 14:22:38 +0000
ROA not after:            Mon 02 Jun 2025 14:22:38 +0000
asID:                     52451
IP address blocks:        190.143.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223368 (0x21ed08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
        Validity
            Not Before: Jun  1 14:22:38 2023 GMT
            Not After : Jun  2 14:22:38 2025 GMT
        Subject: CN=6a893226156be1d95d65d3549456430f0d3ffee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3b:7b:29:d0:fe:d4:19:7c:51:6d:7a:80:36:
                    9c:a2:ef:54:90:5d:20:a4:fb:a1:75:c1:62:a5:04:
                    19:63:9b:07:4f:c6:1c:93:a8:3a:2f:3e:cb:33:5d:
                    ff:7a:9d:89:8a:9a:79:0d:23:73:d7:3f:63:d9:cb:
                    de:3d:61:b6:7f:09:ec:93:55:d0:84:f3:53:a7:c6:
                    4d:ce:64:c1:04:9d:cf:56:e8:37:82:90:56:75:32:
                    ca:67:6b:a3:cc:4f:cf:1b:20:26:02:cc:a5:f1:08:
                    eb:01:df:6f:6e:3c:5a:19:41:3c:65:73:3a:a4:76:
                    df:4b:6a:82:e2:ea:72:98:29:9c:0c:21:00:f6:d7:
                    a2:c4:e4:54:55:ca:ba:2d:a1:93:fe:58:ce:23:2f:
                    b7:5b:4e:22:92:f2:fb:46:e5:a7:e4:47:f7:6f:3b:
                    d6:da:d8:6f:94:11:e6:5c:d3:06:ea:1c:ed:f0:a7:
                    d6:2a:dd:d6:02:d1:0f:bb:dd:c5:40:3f:d9:bf:a3:
                    da:5c:83:0f:c4:5a:a3:9e:19:a2:94:44:f2:b7:91:
                    69:a4:aa:36:99:aa:17:9e:f1:61:1b:54:b1:62:12:
                    20:01:35:b3:5f:3f:44:be:a2:ca:c2:35:bc:21:fd:
                    2b:13:97:2b:5a:d8:b5:64:07:fd:f9:73:2b:aa:7a:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C1:7B:F5:C1:BF:30:86:E6:FA:2C:9E:AE:0B:5C:53:E3:83:FF:95
            X509v3 Authority Key Identifier:
                keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/6a893226156be1d95d65d3549456430f0d3ffee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:9d:47:50:f6:ab:bd:53:ca:f2:72:27:22:ed:1c:53:68:63:
         62:83:32:10:6c:54:f1:65:31:58:ce:3e:80:29:3f:ce:01:02:
         b9:34:b2:88:d9:55:95:77:8e:1d:d7:ba:34:63:d0:07:d9:1c:
         1b:60:8f:a3:9d:d4:6a:3b:e0:81:78:18:4a:40:be:cd:75:29:
         7b:52:e8:97:4f:5a:21:3e:b1:79:fb:64:6b:ff:ae:ed:5a:8a:
         4e:5f:fa:59:56:af:c0:03:d7:c7:d3:bd:85:56:31:69:20:ee:
         ad:bb:49:89:2f:90:79:52:06:cf:02:81:fa:07:66:5e:ec:00:
         44:3b:ae:06:e0:3a:ee:8b:17:e5:92:a2:a3:a9:85:b4:7f:16:
         ce:3a:e4:2d:31:60:21:fc:1f:b3:4c:ce:d7:f2:9a:54:6b:7e:
         92:f6:75:70:2f:1d:fd:45:b2:d0:e2:c8:7a:97:10:27:6c:e3:
         26:7b:61:de:1a:05:6e:fe:d0:1a:75:3c:06:09:17:70:50:80:
         2e:8a:7a:bf:ab:31:83:29:06:50:02:9e:17:78:6d:b4:51:80:
         bf:b9:68:e8:b3:3a:df:23:6d:35:9c:dc:04:5b:2d:82:c3:c9:
         11:ee:d3:86:94:a4:ef:16:dc:82:e9:49:fe:55:7f:3d:b2:6e:
         98:f0:c6:19
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIe0IMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVh
MDk0NWM3MmZmODc4ZDc2YWJkOWM0NDlmMmQzZTY0YWZiNjFiYTEwHhcNMjMwNjAx
MTQyMjM4WhcNMjUwNjAyMTQyMjM4WjAzMTEwLwYDVQQDEyg2YTg5MzIyNjE1NmJl
MWQ5NWQ2NWQzNTQ5NDU2NDMwZjBkM2ZmZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkzt7KdD+1Bl8UW16gDacou9UkF0gpPuhdcFipQQZY5sHT8Yc
k6g6Lz7LM13/ep2Jipp5DSNz1z9j2cvePWG2fwnsk1XQhPNTp8ZNzmTBBJ3PVug3
gpBWdTLKZ2ujzE/PGyAmAsyl8QjrAd9vbjxaGUE8ZXM6pHbfS2qC4upymCmcDCEA
9teixORUVcq6LaGT/ljOIy+3W04ikvL7RuWn5Ef3bzvW2thvlBHmXNMG6hzt8KfW
Kt3WAtEPu93FQD/Zv6PaXIMPxFqjnhmilETyt5FppKo2maoXnvFhG1SxYhIgATWz
Xz9EvqLKwjW8If0rE5crWti1ZAf9+XMrqnpTnwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFvBe/XBvzCG5vosnq4LXFPjg/+VMB8GA1UdIwQYMBaAFLr0xRgMH7mzhsD2
WcSrd1i1PVKaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNWEwOTQ1
YzcyZmY4NzhkNzZhYmQ5YzQ0OWYyZDNlNjRhZmI2MWJhMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTZiYjBjOTQtYTIzOS00ZjdhLWFmZjItNGE0YTM1
MmVlZDQ5LzZhODkzMjI2MTU2YmUxZDk1ZDY1ZDM1NDk0NTY0MzBmMGQzZmZlZTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hNmJiMGM5NC1hMjM5LTRmN2EtYWZmMi00YTRh
MzUyZWVkNDkvNWEwOTQ1YzcyZmY4NzhkNzZhYmQ5YzQ0OWYyZDNlNjRhZmI2MWJh
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL6P0DANBgkqhkiG9w0BAQsFAAOCAQEACJ1HUParvVPK8nIn
Iu0cU2hjYoMyEGxU8WUxWM4+gCk/zgECuTSyiNlVlXeOHde6NGPQB9kcG2CPo53U
ajvggXgYSkC+zXUpe1Lol09aIT6xeftka/+u7VqKTl/6WVavwAPXx9O9hVYxaSDu
rbtJiS+QeVIGzwKB+gdmXuwARDuuBuA67osX5ZKio6mFtH8WzjrkLTFgIfwfs0zO
1/KaVGt+kvZ1cC8d/UWy0OLIepcQJ2zjJnth3hoFbv7QGnU8BgkXcFCALop6v6sx
gykGUAKeF3httFGAv7lo6LM63yNtNZzcBFstgsPJEe7ThpSk7xbcgulJ/lV/PbJu
mPDGGQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org