Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/4d5f9095461a399000debc094af1174343d6d8f2.roa
File:                     4d5f9095461a399000debc094af1174343d6d8f2.roa (raw, json)
Hash identifier:          h2YH1GXGGIUUEk1w6UuyKkuXO7Qr30jPWpMuBFFHgC0=
Subject key identifier:   0B:D5:E8:D4:3A:FE:FF:BE:AA:86:B9:E9:D4:4A:C7:78:A1:C5:CC:BD
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A420C
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/4d5f9095461a399000debc094af1174343d6d8f2.roa
Signing time:             Wed 07 Sep 2022 20:43:32 +0000
ROA not before:           Wed 07 Sep 2022 20:41:05 +0000
ROA not after:            Sat 07 Sep 2024 20:41:05 +0000
asID:                     262145
IP address blocks:        190.211.118.0/24 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1720844 (0x1a420c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:41:05 2022 GMT
            Not After : Sep  7 20:41:05 2024 GMT
        Subject: CN=4d5f9095461a399000debc094af1174343d6d8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ef:a6:5d:5a:2f:97:ea:7f:02:41:18:91:b3:
                    cc:a1:8f:f1:c6:0a:b8:3d:69:e2:e1:d9:6e:76:fd:
                    3c:99:7f:8e:16:4d:ae:44:03:84:98:e3:71:21:e6:
                    3b:ab:05:38:09:35:ca:ae:e3:84:b7:ff:e4:2a:05:
                    b2:86:6a:90:c3:7e:27:d0:09:dc:10:91:17:1a:e6:
                    51:59:59:a4:01:ff:0e:1c:5f:fa:88:07:c3:3a:4d:
                    cb:29:03:95:c6:2a:16:83:58:1f:7b:1a:4d:72:e1:
                    2a:4a:8d:be:c2:03:8c:f0:46:75:2d:b0:06:7d:43:
                    15:42:2e:5c:4f:e1:d3:49:6b:09:e5:46:2a:f3:96:
                    9e:bf:2d:cc:42:8b:83:e5:1b:8d:54:b4:be:07:ef:
                    53:31:ee:74:2f:82:88:34:e7:7a:56:30:c0:ce:be:
                    1f:d5:0f:83:75:63:89:e9:1a:15:97:26:81:75:ad:
                    2a:82:60:c9:8a:04:e7:df:9f:0f:92:0b:66:9c:38:
                    72:e6:86:9e:8a:63:d5:d7:c0:cc:f6:b8:7c:42:b3:
                    ae:03:44:46:eb:73:84:eb:c2:f0:7f:7d:1e:93:4c:
                    38:28:ad:d0:da:08:d0:42:da:a2:c0:3d:fb:1c:20:
                    4e:27:fc:c6:21:16:70:eb:49:e2:35:81:6b:bd:6c:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D5:E8:D4:3A:FE:FF:BE:AA:86:B9:E9:D4:4A:C7:78:A1:C5:CC:BD
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/4d5f9095461a399000debc094af1174343d6d8f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:c3:7d:92:1a:b9:25:00:e8:d7:ae:c5:be:52:ea:aa:19:10:
         af:1d:23:9f:be:6c:e5:33:08:75:d3:ae:97:d9:d4:15:b4:a7:
         3c:d9:e4:84:cc:ff:c8:bb:14:d7:35:c6:b6:e7:86:ff:9a:06:
         b4:da:16:a4:7c:7c:09:f0:58:08:d5:7e:40:c6:a0:be:c2:31:
         57:de:00:5e:eb:4e:a4:db:41:ed:2f:d9:1c:01:19:a2:15:c4:
         67:df:dc:e3:48:a4:3a:73:29:c4:37:be:a5:96:ac:57:93:f0:
         c4:da:0a:6b:85:fa:7d:79:e4:36:cb:a2:c4:9c:da:a9:f8:a5:
         f2:8a:78:41:18:29:5e:7d:66:b7:53:cc:d9:9d:15:c2:f0:39:
         52:7d:99:2c:93:ce:26:98:8a:68:b2:75:7c:e0:8d:0d:12:98:
         da:b4:bd:63:d5:78:48:ac:9a:fa:65:e7:60:fe:43:d5:8b:90:
         cc:07:f3:b9:89:bd:25:44:44:67:72:da:f5:2d:22:ab:77:e8:
         aa:0c:5d:99:2f:e7:51:d2:be:24:d8:54:88:ea:01:4e:e5:ef:
         53:96:2c:d5:26:15:e2:70:1f:bc:75:49:59:e2:0e:e5:47:30:
         0c:16:c4:ef:b6:02:71:07:d5:35:b2:f9:8c:13:e2:d7:12:68:
         0f:98:e7:b8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDGkIMMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
NzQ3YzE5ODBiY2JlZWQ1NmNiNTE3YzY2N2E5NjZiODk0NWNlZWUwHhcNMjIwOTA3
MjA0MTA1WhcNMjQwOTA3MjA0MTA1WjAzMTEwLwYDVQQDEyg0ZDVmOTA5NTQ2MWEz
OTkwMDBkZWJjMDk0YWYxMTc0MzQzZDZkOGYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo++mXVovl+p/AkEYkbPMoY/xxgq4PWni4dludv08mX+OFk2u
RAOEmONxIeY7qwU4CTXKruOEt//kKgWyhmqQw34n0AncEJEXGuZRWVmkAf8OHF/6
iAfDOk3LKQOVxioWg1gfexpNcuEqSo2+wgOM8EZ1LbAGfUMVQi5cT+HTSWsJ5UYq
85aevy3MQouD5RuNVLS+B+9TMe50L4KINOd6VjDAzr4f1Q+DdWOJ6RoVlyaBda0q
gmDJigTn358PkgtmnDhy5oaeimPV18DM9rh8QrOuA0RG63OE68Lwf30ek0w4KK3Q
2gjQQtqiwD37HCBOJ/zGIRZw60niNYFrvWxHBwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFAvV6NQ6/v++qoa56dRKx3ihxcy9MB8GA1UdIwQYMBaAFBR0FWjkKW4qa7y5
Trkc04XkHHr0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDU3NDdj
MTk4MGJjYmVlZDU2Y2I1MTdjNjY3YTk2NmI4OTQ1Y2VlZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWJmMTk1Y2UtYzQzZS00M2U2LTgyYmEtZDc3Njg5
NjgwNzg3LzRkNWY5MDk1NDYxYTM5OTAwMGRlYmMwOTRhZjExNzQzNDNkNmQ4ZjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hYmYxOTVjZS1jNDNlLTQzZTYtODJiYS1kNzc2
ODk2ODA3ODcvZDU3NDdjMTk4MGJjYmVlZDU2Y2I1MTdjNjY3YTk2NmI4OTQ1Y2Vl
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7TdjANBgkqhkiG9w0BAQsFAAOCAQEAGMN9khq5JQDo167F
vlLqqhkQrx0jn75s5TMIddOul9nUFbSnPNnkhMz/yLsU1zXGtueG/5oGtNoWpHx8
CfBYCNV+QMagvsIxV94AXutOpNtB7S/ZHAEZohXEZ9/c40ikOnMpxDe+pZasV5Pw
xNoKa4X6fXnkNsuixJzaqfil8op4QRgpXn1mt1PM2Z0VwvA5Un2ZLJPOJpiKaLJ1
fOCNDRKY2rS9Y9V4SKya+mXnYP5D1YuQzAfzuYm9JUREZ3La9S0iq3foqgxdmS/n
UdK+JNhUiOoBTuXvU5Ys1SYV4nAfvHVJWeIO5UcwDBbE77YCcQfVNbL5jBPi1xJo
D5jnuA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org