Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/976060ac210afac0b9e55c969211d23f3a7d3222.roa
File:                     976060ac210afac0b9e55c969211d23f3a7d3222.roa (raw, json)
Hash identifier:          T2uKMZZ3YjVKoU3T4nrcAxVX+F5htvAimilE92+YHug=
Subject key identifier:   FB:81:CF:59:14:60:20:13:0C:B3:8E:8B:A3:B5:B4:06:0E:09:B0:F9
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       0D9DD8
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/976060ac210afac0b9e55c969211d23f3a7d3222.roa
Signing time:             Wed 24 Mar 2021 14:35:26 +0000
ROA not before:           Wed 24 Mar 2021 14:35:25 +0000
ROA not after:            Tue 24 Mar 2026 14:35:25 +0000
asID:                     7087
IP address blocks:        190.60.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892376 (0xd9dd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Mar 24 14:35:25 2021 GMT
            Not After : Mar 24 14:35:25 2026 GMT
        Subject: CN=976060ac210afac0b9e55c969211d23f3a7d3222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:92:6f:f4:97:14:49:d4:3d:24:07:04:c0:
                    5a:dd:db:b8:be:94:ef:a3:af:ac:ec:b9:1e:d1:cb:
                    8b:64:0e:54:83:b0:99:ff:7b:09:fe:2a:41:a0:ce:
                    7b:9f:92:88:c7:ae:64:b1:ed:be:b7:c4:d8:c8:7f:
                    b2:44:88:9a:5f:34:ef:b0:94:17:dc:25:8e:03:e4:
                    06:5d:7d:52:eb:52:dd:5f:8d:4e:7f:19:4f:93:a9:
                    19:62:26:75:ce:02:0d:c0:9b:e7:8c:d5:b0:fc:c5:
                    c2:dd:90:a8:4f:ad:16:75:fa:58:c0:cb:55:c6:39:
                    5e:5d:ec:78:04:31:77:09:cb:99:af:c1:49:a3:c2:
                    43:78:9e:25:d2:77:8a:25:e2:ac:f3:64:ee:7e:e5:
                    bc:0f:e6:e6:f7:65:6d:63:f5:da:4f:6d:de:5a:4e:
                    f8:df:b0:53:43:47:c6:f2:d5:23:5a:bd:1a:81:70:
                    b0:f1:fa:34:9f:b5:91:79:97:4f:89:72:e2:9f:1c:
                    35:e4:9a:1f:bf:74:b7:76:98:56:fb:e0:d6:18:b2:
                    58:a2:0f:e3:c4:51:af:03:b5:74:90:9e:27:0c:dd:
                    aa:ec:63:b3:24:86:9b:4b:37:d3:d9:d1:fd:77:c1:
                    b2:f2:73:5b:1c:cd:b2:b3:2e:34:92:68:32:69:f7:
                    f4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:81:CF:59:14:60:20:13:0C:B3:8E:8B:A3:B5:B4:06:0E:09:B0:F9
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/976060ac210afac0b9e55c969211d23f3a7d3222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:ff:8c:c3:b8:ae:c8:10:21:d4:2d:3a:17:9e:1d:d8:f6:48:
         9c:1b:b1:0e:cf:cc:40:23:42:19:c0:e7:27:8a:a8:8b:34:9d:
         5c:fb:18:c1:64:ba:25:e1:42:dc:25:d9:c1:bc:a3:7f:e7:86:
         32:88:35:7a:a0:92:63:23:bc:cc:2c:32:8c:e4:83:c1:d9:cb:
         32:21:5e:ef:ff:74:67:6e:12:64:3b:a4:50:6a:f8:a9:c2:2c:
         56:56:b0:5c:66:67:14:0c:b8:5b:86:d7:c4:e3:f7:e4:2b:7c:
         78:af:cd:76:f0:73:1e:01:4e:42:be:2b:01:65:b5:77:ec:b2:
         95:6f:cb:24:5a:b6:07:55:a7:ba:73:0b:62:fb:65:f1:65:36:
         2a:ca:a4:2b:1f:34:d9:1e:61:20:7a:63:74:b6:da:eb:35:be:
         d4:98:31:92:9c:9f:a6:1c:19:f8:53:7a:a9:87:21:f9:2b:1d:
         4b:f5:a7:bf:3a:df:88:8e:9d:7d:70:1b:24:a7:95:00:28:8e:
         58:5a:e8:cf:5f:20:7c:32:90:48:69:39:0a:d6:f6:67:1b:6c:
         f9:db:30:a4:2e:78:b5:2a:19:96:48:c0:50:5f:24:e6:49:2d:
         18:2f:4e:d6:ee:c5:f9:f3:48:b9:8a:79:50:89:e6:ef:74:f3:
         d0:5f:87:19
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDZ3YMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMz
NzZjZTk3MzJhN2Y4NDM4YTg3Mjg4NjNkNDI2MjQwNThlMTgzOTAwHhcNMjEwMzI0
MTQzNTI1WhcNMjYwMzI0MTQzNTI1WjAzMTEwLwYDVQQDEyg5NzYwNjBhYzIxMGFm
YWMwYjllNTVjOTY5MjExZDIzZjNhN2QzMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhvqSb/SXFEnUPSQHBMBa3du4vpTvo6+s7Lke0cuLZA5Ug7CZ
/3sJ/ipBoM57n5KIx65kse2+t8TYyH+yRIiaXzTvsJQX3CWOA+QGXX1S61LdX41O
fxlPk6kZYiZ1zgINwJvnjNWw/MXC3ZCoT60WdfpYwMtVxjleXex4BDF3CcuZr8FJ
o8JDeJ4l0neKJeKs82TufuW8D+bm92VtY/XaT23eWk7437BTQ0fG8tUjWr0agXCw
8fo0n7WReZdPiXLinxw15Jofv3S3dphW++DWGLJYog/jxFGvA7V0kJ4nDN2q7GOz
JIabSzfT2dH9d8Gy8nNbHM2ysy40kmgyaff0CwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFPuBz1kUYCATDLOOi6O1tAYOCbD5MB8GA1UdIwQYMBaAFNGmIukxGok3TvdC
nrbrLNQWolSSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzM3NmNl
OTczMmE3Zjg0MzhhODcyODg2M2Q0MjYyNDA1OGUxODM5MC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjdlMmNiY2ItNGUxZS00NDUxLWJhOWYtYjgzOWFj
YjVhNzVmLzk3NjA2MGFjMjEwYWZhYzBiOWU1NWM5NjkyMTFkMjNmM2E3ZDMyMjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iN2UyY2JjYi00ZTFlLTQ0NTEtYmE5Zi1iODM5
YWNiNWE3NWYvYzM3NmNlOTczMmE3Zjg0MzhhODcyODg2M2Q0MjYyNDA1OGUxODM5
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL48FTANBgkqhkiG9w0BAQsFAAOCAQEAuv+Mw7iuyBAh1C06
F54d2PZInBuxDs/MQCNCGcDnJ4qoizSdXPsYwWS6JeFC3CXZwbyjf+eGMog1eqCS
YyO8zCwyjOSDwdnLMiFe7/90Z24SZDukUGr4qcIsVlawXGZnFAy4W4bXxOP35Ct8
eK/NdvBzHgFOQr4rAWW1d+yylW/LJFq2B1WnunMLYvtl8WU2KsqkKx802R5hIHpj
dLba6zW+1JgxkpyfphwZ+FN6qYch+SsdS/WnvzrfiI6dfXAbJKeVACiOWFroz18g
fDKQSGk5Ctb2Zxts+dswpC54tSoZlkjAUF8k5kktGC9O1u7F+fNIuYp5UInm73Tz
0F+HGQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org