Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/de5b7dc9b589f4f25e34325345b0db3ca357bf73.roa
File:                     de5b7dc9b589f4f25e34325345b0db3ca357bf73.roa (raw, json)
Hash identifier:          LaCKFVv3dRrYU4VJPt3+OTPj9msnZ/2juEyGDz4QKr4=
Subject key identifier:   5A:75:20:64:0E:83:2F:75:AA:BA:7D:82:D1:47:01:A0:40:25:46:BE
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       2A1AF1
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/de5b7dc9b589f4f25e34325345b0db3ca357bf73.roa
Signing time:             Mon 26 Feb 2024 17:15:59 +0000
ROA not before:           Mon 26 Feb 2024 17:15:59 +0000
ROA not after:            Thu 26 Feb 2026 17:15:59 +0000
asID:                     28011
IP address blocks:        190.152.52.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2759409 (0x2a1af1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Feb 26 17:15:59 2024 GMT
            Not After : Feb 26 17:15:59 2026 GMT
        Subject: CN=de5b7dc9b589f4f25e34325345b0db3ca357bf73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:a0:2a:5c:d1:32:f5:2e:8c:87:70:d0:8d:
                    0b:97:fd:25:77:a3:6e:8a:e7:6a:95:52:93:e5:39:
                    84:eb:98:7d:eb:97:cf:93:ab:74:05:bc:6d:33:09:
                    e8:45:52:6c:3f:30:13:64:2f:66:58:a3:4b:42:12:
                    29:e2:c7:e6:39:96:4b:68:44:8e:5b:06:15:07:84:
                    a6:b3:37:b9:0e:c0:22:5b:5b:45:02:fb:ee:50:5e:
                    d7:d4:f8:92:4e:4a:b3:00:18:21:26:d8:87:58:68:
                    dc:82:38:ec:7c:60:fd:06:f3:d5:6f:73:b6:a2:b6:
                    47:75:ca:fe:c0:53:57:7d:99:c6:5a:6c:b6:f7:68:
                    34:51:ee:5b:d5:43:f5:5c:93:02:2c:82:ae:47:f5:
                    f2:8a:60:7f:a3:8e:07:5d:2a:ee:f3:fb:0d:64:87:
                    a9:19:f2:96:87:83:cf:c0:04:ec:10:59:f8:58:55:
                    ce:48:77:53:a4:90:29:11:e7:f7:31:f8:f3:1d:8e:
                    ff:1d:e2:c8:30:b3:4e:f9:92:f7:45:8c:e0:6f:93:
                    9b:8f:fa:2c:18:50:8e:0d:4a:e8:db:2a:7d:6f:d6:
                    18:43:a3:d8:cb:98:69:ef:2d:39:44:2b:5e:e4:59:
                    57:a6:15:fc:7c:4d:7c:82:33:06:83:ef:c4:ac:b6:
                    1c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:75:20:64:0E:83:2F:75:AA:BA:7D:82:D1:47:01:A0:40:25:46:BE
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/de5b7dc9b589f4f25e34325345b0db3ca357bf73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.152.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:98:f4:44:2c:7f:f8:e1:1f:c1:22:b5:ad:c9:9b:92:07:eb:
         b7:61:af:9f:7d:2c:2d:52:9e:65:0d:a6:3e:eb:d4:04:07:8b:
         0f:44:5e:14:9d:82:6b:7e:e4:28:d2:15:55:a5:7f:3f:75:b3:
         eb:f2:84:f5:4d:16:7b:ce:9c:1f:e1:80:53:3c:a7:2e:1e:a9:
         a6:c8:2e:4f:e4:b3:7b:2a:d8:1b:60:ea:80:97:e2:6b:4b:98:
         27:12:fa:26:4b:8d:ec:2d:6d:06:ea:01:e7:b5:1d:92:f5:39:
         22:25:30:ee:6e:fb:9a:cf:b0:ae:01:33:90:9b:fe:cb:73:71:
         7b:18:80:b3:2a:f8:be:31:b5:c4:d5:25:7e:01:09:43:42:52:
         74:a0:b7:a6:74:de:2d:b0:12:b6:98:44:4d:99:f5:e7:c1:00:
         81:03:09:72:27:91:e6:fe:ad:45:31:32:18:ff:93:3d:da:11:
         2f:38:49:6f:d7:8b:cf:4a:64:0c:d6:73:0e:aa:4f:91:c9:c9:
         c8:53:9b:ef:04:11:43:db:c2:19:d7:dd:52:7a:3b:8a:0d:26:
         fa:9a:b0:c8:9a:f5:31:9e:ac:06:3b:5e:a5:c7:4d:aa:30:52:
         56:e7:35:5b:9c:11:0a:f4:33:96:a1:f0:14:6d:fc:16:c7:3a:
         04:c4:a8:dd
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKhrxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
NTllMWUzMzE3NzA0NTc1ZjJjMGI3NTBlZTczYjE2NmEzOWNkMzcwHhcNMjQwMjI2
MTcxNTU5WhcNMjYwMjI2MTcxNTU5WjAzMTEwLwYDVQQDEyhkZTViN2RjOWI1ODlm
NGYyNWUzNDMyNTM0NWIwZGIzY2EzNTdiZjczMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqTKgKlzRMvUujIdw0I0Ll/0ld6NuiudqlVKT5TmE65h965fP
k6t0BbxtMwnoRVJsPzATZC9mWKNLQhIp4sfmOZZLaESOWwYVB4Smsze5DsAiW1tF
AvvuUF7X1PiSTkqzABghJtiHWGjcgjjsfGD9BvPVb3O2orZHdcr+wFNXfZnGWmy2
92g0Ue5b1UP1XJMCLIKuR/XyimB/o44HXSru8/sNZIepGfKWh4PPwATsEFn4WFXO
SHdTpJApEef3MfjzHY7/HeLIMLNO+ZL3RYzgb5Obj/osGFCODUro2yp9b9YYQ6PY
y5hp7y05RCte5FlXphX8fE18gjMGg+/ErLYc6wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFFp1IGQOgy91qrp9gtFHAaBAJUa+MB8GA1UdIwQYMBaAFIDwxydPgiTR6Xbz
gObvMs8Q+J3TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTA1OWUx
ZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2QzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWNhNzEzZjUtNmNhYy00ODZlLWEwMTYtYTNlOGIz
MWJmMDI5L2RlNWI3ZGM5YjU4OWY0ZjI1ZTM0MzI1MzQ1YjBkYjNjYTM1N2JmNzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hY2E3MTNmNS02Y2FjLTQ4NmUtYTAxNi1hM2U4
YjMxYmYwMjkvMTA1OWUxZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2Qz
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL6YNDANBgkqhkiG9w0BAQsFAAOCAQEAB5j0RCx/+OEfwSK1
rcmbkgfrt2Gvn30sLVKeZQ2mPuvUBAeLD0ReFJ2Ca37kKNIVVaV/P3Wz6/KE9U0W
e86cH+GAUzynLh6ppsguT+SzeyrYG2DqgJfia0uYJxL6JkuN7C1tBuoB57UdkvU5
IiUw7m77ms+wrgEzkJv+y3NxexiAsyr4vjG1xNUlfgEJQ0JSdKC3pnTeLbAStphE
TZn158EAgQMJcieR5v6tRTEyGP+TPdoRLzhJb9eLz0pkDNZzDqpPkcnJyFOb7wQR
Q9vCGdfdUno7ig0m+pqwyJr1MZ6sBjtepcdNqjBSVuc1W5wRCvQzlqHwFG38Fsc6
BMSo3Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org