Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3b1da209de71717d1b54ee6fbcec2286468b2f1f.roa
File:                     3b1da209de71717d1b54ee6fbcec2286468b2f1f.roa (raw, json)
Hash identifier:          hoiCv0+rHPrSitxK4N6qYI7P90kmpzxUHSG8ccwN+S4=
Subject key identifier:   C8:A3:36:7D:DD:C5:CD:01:62:79:B7:23:38:3B:32:E2:D3:C9:55:19
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       281AC9
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3b1da209de71717d1b54ee6fbcec2286468b2f1f.roa
Signing time:             Thu 05 Oct 2023 19:24:17 +0000
ROA not before:           Wed 04 Oct 2023 19:24:17 +0000
ROA not after:            Sun 05 Oct 2025 19:24:17 +0000
asID:                     27837
IP address blocks:        190.90.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2628297 (0x281ac9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Oct  4 19:24:17 2023 GMT
            Not After : Oct  5 19:24:17 2025 GMT
        Subject: CN=3b1da209de71717d1b54ee6fbcec2286468b2f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:5a:c3:90:12:0a:4a:a2:80:d2:9d:44:83:
                    93:11:28:57:df:71:61:86:75:6b:a2:36:57:b9:cd:
                    ad:dc:1f:6f:98:80:33:47:9b:40:4d:8e:dc:05:16:
                    1e:b3:20:22:01:b1:16:11:02:f5:9c:2f:8a:ce:c0:
                    46:bd:25:b1:6b:4a:c9:e1:75:42:f7:3b:ff:91:7d:
                    8d:42:8c:a8:03:e4:ab:41:06:dc:9a:b1:cd:3e:14:
                    e2:bd:7e:1b:9c:d1:3d:ca:9e:c5:73:09:dd:96:e2:
                    49:cd:ba:36:c1:78:4c:55:05:83:98:a4:f0:cd:57:
                    0c:64:75:42:c2:2a:b1:37:21:22:fd:9c:de:c0:a6:
                    ac:fc:05:2b:bc:e1:b2:6c:67:6e:46:e7:5e:69:eb:
                    8f:70:df:98:6b:c0:11:ad:6f:da:36:e6:c9:f2:d0:
                    f5:77:9c:e9:df:c3:6c:bd:a8:e0:a9:82:75:a7:80:
                    2f:0b:22:51:14:61:0a:6e:86:ee:a3:9d:f5:bc:43:
                    ca:2c:74:be:6a:29:00:8b:7e:de:e1:42:c5:df:fd:
                    bd:ae:ba:51:cf:64:97:5d:64:66:76:4c:fd:42:a8:
                    89:86:7a:f6:6d:85:6b:4e:db:84:15:4e:bf:40:e3:
                    49:d7:01:de:7d:ba:2a:38:4f:21:fe:60:59:15:e1:
                    d9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A3:36:7D:DD:C5:CD:01:62:79:B7:23:38:3B:32:E2:D3:C9:55:19
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3b1da209de71717d1b54ee6fbcec2286468b2f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:e9:90:5e:63:0c:e7:dd:e8:60:b7:1f:27:d2:93:52:1f:9e:
         c3:a1:a9:b9:f9:f0:bb:e5:b4:c0:16:c0:c1:84:16:d5:8d:07:
         47:15:5a:15:4c:17:4f:d9:ac:e4:ff:03:bd:fd:47:94:45:c4:
         21:79:24:a2:04:b6:e3:8d:c8:1f:4e:d6:58:f6:18:8e:47:9f:
         fd:e2:4c:1b:0c:6e:dc:ac:7f:38:cf:6e:40:76:57:ee:83:87:
         8b:ec:33:c0:f9:b6:38:7a:56:5b:66:92:8b:4f:ef:e1:1d:42:
         db:93:47:f5:34:cc:04:66:fa:bf:ee:31:24:67:14:3b:f1:2f:
         ed:c0:2e:4a:4a:ee:60:70:4e:77:3c:cb:83:8c:d9:97:31:b8:
         0e:1f:2a:2b:c4:cb:79:b8:6b:bf:e6:6d:1f:4d:bd:9e:58:74:
         93:f2:7c:6f:33:f6:39:cf:b6:60:bc:68:77:ce:1d:eb:89:b5:
         49:eb:0c:c8:cd:f7:d1:ff:40:3e:77:88:bd:da:93:35:c2:2b:
         51:83:cc:2c:dd:5b:8d:fe:b8:c5:89:d4:4f:64:fc:45:4a:c1:
         d9:5a:12:4e:93:b9:6b:9c:a3:ee:99:e1:b1:78:ce:bb:d2:83:
         7b:96:95:3a:5f:96:27:a8:e8:83:1b:c2:b1:24:b0:24:cd:e1:
         09:71:86:8f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKBrJMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDMz
MDBhNmVmYjViMzRjNzkxMjVmY2U1ZGM0YWZhNjk3N2E0Njc0NGYwHhcNMjMxMDA0
MTkyNDE3WhcNMjUxMDA1MTkyNDE3WjAzMTEwLwYDVQQDEygzYjFkYTIwOWRlNzE3
MTdkMWI1NGVlNmZiY2VjMjI4NjQ2OGIyZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt4xaw5ASCkqigNKdRIOTEShX33FhhnVrojZXuc2t3B9vmIAz
R5tATY7cBRYesyAiAbEWEQL1nC+KzsBGvSWxa0rJ4XVC9zv/kX2NQoyoA+SrQQbc
mrHNPhTivX4bnNE9yp7FcwndluJJzbo2wXhMVQWDmKTwzVcMZHVCwiqxNyEi/Zze
wKas/AUrvOGybGduRudeaeuPcN+Ya8ARrW/aNubJ8tD1d5zp38NsvajgqYJ1p4Av
CyJRFGEKbobuo531vEPKLHS+aikAi37e4ULF3/29rrpRz2SXXWRmdkz9QqiJhnr2
bYVrTtuEFU6/QONJ1wHefboqOE8h/mBZFeHZDQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMijNn3dxc0BYnm3Izg7MuLTyVUZMB8GA1UdIwQYMBaAFGKqByp0W653gtLZ
RHYgTAylTu3CMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzMwMGE2
ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0Zi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWE2OWE5NzUtODNhMy00NTMyLWE3NzktNWZmYjg3
NTgwMzA5LzNiMWRhMjA5ZGU3MTcxN2QxYjU0ZWU2ZmJjZWMyMjg2NDY4YjJmMWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYTY5YTk3NS04M2EzLTQ1MzItYTc3OS01ZmZi
ODc1ODAzMDkvMzMwMGE2ZWZiNWIzNGM3OTEyNWZjZTVkYzRhZmE2OTc3YTQ2NzQ0
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5a8DANBgkqhkiG9w0BAQsFAAOCAQEAVemQXmMM593oYLcf
J9KTUh+ew6Gpufnwu+W0wBbAwYQW1Y0HRxVaFUwXT9ms5P8Dvf1HlEXEIXkkogS2
443IH07WWPYYjkef/eJMGwxu3Kx/OM9uQHZX7oOHi+wzwPm2OHpWW2aSi0/v4R1C
25NH9TTMBGb6v+4xJGcUO/Ev7cAuSkruYHBOdzzLg4zZlzG4Dh8qK8TLebhrv+Zt
H029nlh0k/J8bzP2Oc+2YLxod84d64m1SesMyM330f9APneIvdqTNcIrUYPMLN1b
jf64xYnUT2T8RUrB2VoSTpO5a5yj7pnhsXjOu9KDe5aVOl+WJ6jogxvCsSSwJM3h
CXGGjw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org