Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/fa39dcc0a7b63e4dcfa05fb50edb7d75e68374ad.roa
File:                     fa39dcc0a7b63e4dcfa05fb50edb7d75e68374ad.roa (raw, json)
Hash identifier:          iwN8q2FtioXXppGSrYyL+kIIjWPCaM0oNSJXY6ch+jI=
Subject key identifier:   FD:F4:D4:64:A5:01:FD:5B:D9:2A:74:27:61:BD:CE:C0:04:E4:73:0F
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       2A19D1
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/fa39dcc0a7b63e4dcfa05fb50edb7d75e68374ad.roa
Signing time:             Mon 26 Feb 2024 17:09:42 +0000
ROA not before:           Mon 26 Feb 2024 17:09:41 +0000
ROA not after:            Thu 26 Feb 2026 17:09:41 +0000
asID:                     28011
IP address blocks:        190.152.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2759121 (0x2a19d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Feb 26 17:09:41 2024 GMT
            Not After : Feb 26 17:09:41 2026 GMT
        Subject: CN=fa39dcc0a7b63e4dcfa05fb50edb7d75e68374ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:63:27:58:ee:f8:b0:bb:c5:12:55:db:45:f0:
                    53:79:7e:de:33:ce:7f:e8:7f:50:52:35:3e:60:80:
                    d0:a3:50:e5:fd:b5:ea:2d:19:d8:e1:4d:18:1f:e2:
                    ae:3e:83:03:1b:cb:b2:bf:06:a5:28:ad:5f:64:49:
                    b0:41:b1:58:a0:0b:78:ff:bf:eb:c5:bf:14:73:78:
                    13:d0:e9:02:2a:0d:7f:19:82:45:11:fb:18:94:c9:
                    e1:a2:7a:8e:c5:ab:db:58:55:b6:6a:9c:31:0a:af:
                    17:25:f8:86:6e:bd:d2:1f:55:83:f3:93:ac:59:64:
                    b7:b2:0e:3f:66:98:6d:0a:f2:c6:58:35:05:41:4b:
                    ab:c4:47:fb:c2:24:00:99:71:08:b0:09:09:92:f3:
                    60:e9:d5:d8:d6:9d:15:4d:60:be:14:68:6e:92:52:
                    cb:00:0d:14:3c:ec:79:b3:47:5f:50:43:dc:54:60:
                    45:24:00:86:4f:44:f9:05:a9:70:12:6f:b5:f5:b4:
                    57:ca:aa:db:50:34:c1:b6:d5:f9:9e:da:f7:af:8f:
                    fa:87:12:75:ef:c8:89:be:66:a9:f7:4e:bf:e4:e4:
                    cb:c6:ff:96:14:96:06:b3:87:d5:d1:65:cb:c2:21:
                    56:0c:38:ab:e4:d3:1f:1d:2f:57:a7:fe:36:b8:c0:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F4:D4:64:A5:01:FD:5B:D9:2A:74:27:61:BD:CE:C0:04:E4:73:0F
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/fa39dcc0a7b63e4dcfa05fb50edb7d75e68374ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.152.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:91:e2:5b:d4:b1:09:42:a2:ef:5d:f0:77:84:a0:ed:b5:82:
         1c:16:8d:0e:da:57:3a:a8:cd:d4:6a:7b:25:fc:36:84:fc:62:
         42:97:72:72:51:21:55:38:86:2b:1a:74:7c:4a:0c:a1:52:94:
         f1:eb:9f:ad:82:2d:3c:a7:b1:67:0f:81:59:2b:a7:49:4c:18:
         95:a8:3f:0d:cc:65:7a:4f:ef:54:55:dc:75:02:3d:e2:4c:78:
         27:09:d7:b6:31:22:25:73:d6:2d:dd:b2:36:c4:90:67:63:ce:
         36:07:13:6c:b8:03:75:31:8e:8e:9c:d1:ba:06:ab:7f:9c:8f:
         c6:b2:ec:5d:11:dd:5e:eb:e6:31:bc:c7:5b:ad:54:ac:aa:d7:
         48:64:45:bf:79:a4:4b:1c:41:9e:c6:87:49:f8:bb:6b:93:1b:
         54:ae:98:c1:b6:4b:a9:a1:a9:26:85:4a:a3:a4:35:3f:82:19:
         db:dc:8d:ea:bf:6a:31:8d:e1:db:97:7d:73:b9:ce:09:ac:27:
         53:a1:d4:42:e5:ac:9e:49:a1:8d:cc:2d:63:be:67:95:ec:fa:
         10:6e:66:5c:8d:08:89:25:19:34:bd:fa:a2:ad:b0:16:ec:6e:
         1f:ef:1a:9b:29:08:70:0f:17:9b:bf:7f:ba:42:c1:76:ac:7d:
         f1:d7:42:05
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKhnRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
NTllMWUzMzE3NzA0NTc1ZjJjMGI3NTBlZTczYjE2NmEzOWNkMzcwHhcNMjQwMjI2
MTcwOTQxWhcNMjYwMjI2MTcwOTQxWjAzMTEwLwYDVQQDEyhmYTM5ZGNjMGE3YjYz
ZTRkY2ZhMDVmYjUwZWRiN2Q3NWU2ODM3NGFkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7mMnWO74sLvFElXbRfBTeX7eM85/6H9QUjU+YIDQo1Dl/bXq
LRnY4U0YH+KuPoMDG8uyvwalKK1fZEmwQbFYoAt4/7/rxb8Uc3gT0OkCKg1/GYJF
EfsYlMnhonqOxavbWFW2apwxCq8XJfiGbr3SH1WD85OsWWS3sg4/ZphtCvLGWDUF
QUurxEf7wiQAmXEIsAkJkvNg6dXY1p0VTWC+FGhuklLLAA0UPOx5s0dfUEPcVGBF
JACGT0T5BalwEm+19bRXyqrbUDTBttX5ntr3r4/6hxJ178iJvmap906/5OTLxv+W
FJYGs4fV0WXLwiFWDDir5NMfHS9Xp/42uMDQCwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFP301GSlAf1b2Sp0J2G9zsAE5HMPMB8GA1UdIwQYMBaAFIDwxydPgiTR6Xbz
gObvMs8Q+J3TMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTA1OWUx
ZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2QzNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYWNhNzEzZjUtNmNhYy00ODZlLWEwMTYtYTNlOGIz
MWJmMDI5L2ZhMzlkY2MwYTdiNjNlNGRjZmEwNWZiNTBlZGI3ZDc1ZTY4Mzc0YWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hY2E3MTNmNS02Y2FjLTQ4NmUtYTAxNi1hM2U4
YjMxYmYwMjkvMTA1OWUxZTMzMTc3MDQ1NzVmMmMwYjc1MGVlNzNiMTY2YTM5Y2Qz
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL6YLzANBgkqhkiG9w0BAQsFAAOCAQEAapHiW9SxCUKi713w
d4Sg7bWCHBaNDtpXOqjN1Gp7Jfw2hPxiQpdyclEhVTiGKxp0fEoMoVKU8eufrYIt
PKexZw+BWSunSUwYlag/Dcxlek/vVFXcdQI94kx4JwnXtjEiJXPWLd2yNsSQZ2PO
NgcTbLgDdTGOjpzRugarf5yPxrLsXRHdXuvmMbzHW61UrKrXSGRFv3mkSxxBnsaH
Sfi7a5MbVK6YwbZLqaGpJoVKo6Q1P4IZ29yN6r9qMY3h25d9c7nOCawnU6HUQuWs
nkmhjcwtY75nlez6EG5mXI0IiSUZNL36oq2wFuxuH+8amykIcA8Xm79/ukLBdqx9
8ddCBQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org