Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/831b9f0a7e36f4e126b8909b649afdb5935af976.roa
File:                     831b9f0a7e36f4e126b8909b649afdb5935af976.roa (raw, json)
Hash identifier:          Lz4+mYg/nSQ+Ghba7vmtowtYdg0O3pONfnDqe9ZwiFI=
Subject key identifier:   FB:11:59:BE:05:AA:32:7C:EE:B8:46:E8:15:24:76:4B:54:D6:2B:51
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       15465E
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/831b9f0a7e36f4e126b8909b649afdb5935af976.roa
Signing time:             Tue 01 Feb 2022 21:58:00 +0000
ROA not before:           Tue 01 Feb 2022 03:00:00 +0000
ROA not after:            Sun 01 Feb 2026 03:00:00 +0000
asID:                     52263
IP address blocks:        190.61.108.0/24 maxlen: 24
                          190.61.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394270 (0x15465e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Feb  1 03:00:00 2022 GMT
            Not After : Feb  1 03:00:00 2026 GMT
        Subject: CN=831b9f0a7e36f4e126b8909b649afdb5935af976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4c:8a:28:e7:34:6a:ab:82:24:4d:36:96:7c:
                    e1:69:da:2c:c0:1a:5d:3c:0e:53:e9:28:a1:70:9b:
                    73:78:48:aa:48:a3:f0:05:36:7b:98:54:7d:9f:a8:
                    9f:04:02:32:8c:eb:1f:33:75:17:19:a4:83:e7:99:
                    da:f1:eb:85:6f:65:31:c2:37:36:88:8f:00:a3:b6:
                    a4:57:15:bb:f2:e4:7f:50:74:e6:23:6c:bd:50:27:
                    59:38:86:3d:c1:9d:72:f2:27:c4:ac:0a:98:1a:6b:
                    9d:28:48:37:dc:0b:4d:6f:23:e3:d5:f4:31:aa:98:
                    82:51:fe:d3:24:bf:b0:c1:ac:fe:65:de:a2:13:9b:
                    91:43:f7:4f:29:39:00:1e:68:b9:dc:a3:ca:5f:22:
                    e6:b0:39:91:23:95:b2:5f:2c:64:a9:da:9e:33:ac:
                    58:b3:23:3b:b4:65:79:b8:bd:bf:88:89:3e:63:62:
                    cc:7b:7a:f5:82:65:4a:3b:52:05:b3:8f:35:ed:96:
                    cb:bc:bb:37:cc:6d:6a:86:f1:57:72:ac:60:ec:02:
                    23:a3:0f:69:a3:bb:3e:d7:e3:34:64:ea:b9:e9:ba:
                    2d:66:e8:fb:6a:f6:50:c3:00:9e:2f:96:60:47:6d:
                    94:8b:84:61:7d:91:4b:1e:83:37:f3:bd:e6:22:c1:
                    5d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:11:59:BE:05:AA:32:7C:EE:B8:46:E8:15:24:76:4B:54:D6:2B:51
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/831b9f0a7e36f4e126b8909b649afdb5935af976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:ec:08:68:c5:bb:e5:cd:0c:1e:23:fd:37:b2:e5:38:62:71:
         fa:d1:ab:39:93:e1:91:71:0f:da:1c:02:43:24:86:1b:3b:0f:
         7a:5a:f5:13:21:31:fd:5b:e4:4b:48:e6:3e:1f:ea:3a:3e:4c:
         ab:f0:39:4b:6f:fc:0a:e0:de:68:0c:e0:e1:42:0e:d4:fb:bb:
         b3:df:15:3b:94:2c:99:76:f4:47:c3:51:f2:fa:44:75:62:15:
         ee:33:6b:91:da:cc:41:b8:6a:0e:2f:f6:49:e5:7d:8a:b4:69:
         2c:a2:e2:cd:67:b7:39:a7:97:16:b7:59:94:1c:84:ec:72:5e:
         40:da:d0:a0:4e:ac:4d:2a:37:00:b5:07:9b:6c:10:65:d1:57:
         8d:65:55:42:ae:9e:76:95:b2:01:90:52:db:1a:c8:d7:49:07:
         3f:18:a7:6c:76:35:a0:0e:e0:1a:9e:3a:93:ec:3e:12:df:d5:
         fc:e9:5b:7b:96:84:13:95:15:39:7f:6b:31:22:7a:51:9c:9a:
         62:d5:f7:80:6c:81:82:b3:21:50:24:47:6f:cc:e7:78:a3:d3:
         d2:4a:d1:f7:2e:81:f5:e3:80:ef:4d:01:80:38:b1:1f:f0:37:
         ce:c4:4f:b0:f0:de:c2:5e:41:ec:8d:20:a9:95:07:cc:77:35:
         20:3a:c1:9d
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDFUZeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMz
NzZjZTk3MzJhN2Y4NDM4YTg3Mjg4NjNkNDI2MjQwNThlMTgzOTAwHhcNMjIwMjAx
MDMwMDAwWhcNMjYwMjAxMDMwMDAwWjAzMTEwLwYDVQQDEyg4MzFiOWYwYTdlMzZm
NGUxMjZiODkwOWI2NDlhZmRiNTkzNWFmOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhUyKKOc0aquCJE02lnzhadoswBpdPA5T6SihcJtzeEiqSKPw
BTZ7mFR9n6ifBAIyjOsfM3UXGaSD55na8euFb2Uxwjc2iI8Ao7akVxW78uR/UHTm
I2y9UCdZOIY9wZ1y8ifErAqYGmudKEg33AtNbyPj1fQxqpiCUf7TJL+wwaz+Zd6i
E5uRQ/dPKTkAHmi53KPKXyLmsDmRI5WyXyxkqdqeM6xYsyM7tGV5uL2/iIk+Y2LM
e3r1gmVKO1IFs4817ZbLvLs3zG1qhvFXcqxg7AIjow9po7s+1+M0ZOq56botZuj7
avZQwwCeL5ZgR22Ui4RhfZFLHoM3873mIsFdgQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPsRWb4FqjJ87rhG6BUkdktU1itRMB8GA1UdIwQYMBaAFNGmIukxGok3TvdC
nrbrLNQWolSSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzM3NmNl
OTczMmE3Zjg0MzhhODcyODg2M2Q0MjYyNDA1OGUxODM5MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjdlMmNiY2ItNGUxZS00NDUxLWJhOWYtYjgzOWFj
YjVhNzVmLzgzMWI5ZjBhN2UzNmY0ZTEyNmI4OTA5YjY0OWFmZGI1OTM1YWY5NzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iN2UyY2JjYi00ZTFlLTQ0NTEtYmE5Zi1iODM5
YWNiNWE3NWYvYzM3NmNlOTczMmE3Zjg0MzhhODcyODg2M2Q0MjYyNDA1OGUxODM5
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb49bDANBgkqhkiG9w0BAQsFAAOCAQEANuwIaMW75c0MHiP9
N7LlOGJx+tGrOZPhkXEP2hwCQySGGzsPelr1EyEx/VvkS0jmPh/qOj5Mq/A5S2/8
CuDeaAzg4UIO1Pu7s98VO5QsmXb0R8NR8vpEdWIV7jNrkdrMQbhqDi/2SeV9irRp
LKLizWe3OaeXFrdZlByE7HJeQNrQoE6sTSo3ALUHm2wQZdFXjWVVQq6edpWyAZBS
2xrI10kHPxinbHY1oA7gGp46k+w+Et/V/Olbe5aEE5UVOX9rMSJ6UZyaYtX3gGyB
grMhUCRHb8zneKPT0krR9y6B9eOA700BgDixH/A3zsRPsPDewl5B7I0gqZUHzHc1
IDrBnQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org