Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/f452e0e1a66689090aa5b7dea55064671eb5eff5.roa
File:                     f452e0e1a66689090aa5b7dea55064671eb5eff5.roa (raw, json)
Hash identifier:          c1w6gU5Cl64Kqdt4UDCGyAAeuPVIOdAikR4KLI7r+MU=
Subject key identifier:   BD:8F:B1:95:8D:A7:7F:18:8E:A4:B1:A7:F2:AF:19:A1:A6:DB:56:62
Certificate issuer:       /CN=0c4557be1a84f05a56a15cb22513acd961fb70fa
Certificate serial:       20AD41
Authority key identifier: 6A:F8:BD:09:59:77:BC:67:70:C2:C2:34:20:F9:8A:39:EC:B6:12:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c4557be1a84f05a56a15cb22513acd961fb70fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/f452e0e1a66689090aa5b7dea55064671eb5eff5.roa
Signing time:             Wed 22 Nov 2023 07:30:01 +0000
ROA not before:           Wed 22 Nov 2023 07:30:01 +0000
ROA not after:            Fri 21 Nov 2025 07:30:01 +0000
asID:                     269936
IP address blocks:        190.83.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2141505 (0x20ad41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4557be1a84f05a56a15cb22513acd961fb70fa
        Validity
            Not Before: Nov 22 07:30:01 2023 GMT
            Not After : Nov 21 07:30:01 2025 GMT
        Subject: CN=f452e0e1a66689090aa5b7dea55064671eb5eff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:86:fb:d3:16:64:59:81:3f:f6:60:cb:54:c1:
                    14:e0:fc:35:e0:13:25:c1:f7:4c:29:16:f7:7c:32:
                    82:4b:e8:d3:fa:d4:72:5f:2b:2a:49:1e:89:b1:cb:
                    af:af:cb:3b:a8:a4:e4:03:2c:7b:e3:c1:bc:ac:b9:
                    bc:4c:4f:26:e4:f9:f0:32:79:d3:f6:8d:d4:5e:09:
                    44:b4:8a:49:e8:9b:07:3f:b3:58:88:02:57:f1:96:
                    c1:06:06:b3:97:e8:0b:91:42:7d:6f:32:b9:04:12:
                    99:be:c6:12:2c:6e:2f:02:88:0d:d0:19:19:1c:43:
                    c3:0b:80:a5:d7:e7:0a:eb:7f:0e:7b:28:a9:86:c6:
                    3b:29:a7:ec:84:a9:13:4b:56:37:df:03:72:c8:b0:
                    26:96:36:ef:e5:4a:3e:96:62:bc:1a:7f:c5:1e:c7:
                    68:ae:fc:83:e0:9d:df:47:ee:8b:65:75:c0:bc:2d:
                    12:e5:85:37:b2:03:ac:7e:af:04:9a:54:82:16:6f:
                    19:1c:09:29:cb:f2:28:05:ad:81:3d:6e:8a:25:17:
                    ea:4d:89:9d:5a:59:b6:ad:06:6c:54:39:06:b4:c1:
                    8d:22:95:3c:16:65:54:8f:42:14:d5:3a:e5:18:a8:
                    e2:71:62:31:82:cc:4c:ca:de:f3:d2:c8:28:7c:aa:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8F:B1:95:8D:A7:7F:18:8E:A4:B1:A7:F2:AF:19:A1:A6:DB:56:62
            X509v3 Authority Key Identifier:
                keyid:6A:F8:BD:09:59:77:BC:67:70:C2:C2:34:20:F9:8A:39:EC:B6:12:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c4557be1a84f05a56a15cb22513acd961fb70fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/f452e0e1a66689090aa5b7dea55064671eb5eff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/0c4557be1a84f05a56a15cb22513acd961fb70fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:50:96:d9:5b:49:a5:a6:de:50:73:3a:02:ff:00:c0:4e:da:
         a2:9d:14:d5:88:5b:89:32:b6:ca:4f:2d:71:90:3a:e7:a1:fd:
         11:4d:45:71:a5:87:ab:66:d1:a4:59:9e:d0:04:33:68:36:b3:
         cc:f5:03:43:4b:dd:a2:1c:eb:63:cd:c5:8e:8a:2a:8a:4c:45:
         8b:68:e4:9e:3f:f1:5c:84:0f:72:96:cd:ba:c4:04:c9:f5:09:
         b0:60:9c:63:1c:7c:0a:1a:e9:84:e2:5e:d5:4a:5f:fe:6c:cd:
         7e:64:b9:cb:9d:25:ae:f6:31:69:d1:58:c2:b2:0c:b0:78:15:
         c0:73:e3:fe:8d:e6:5f:9a:9a:e5:fe:38:00:e5:b5:49:43:96:
         f5:97:a7:7d:9f:7a:1d:bf:6f:16:6e:9f:e6:1e:55:50:3b:f1:
         14:7c:43:ce:2a:c7:02:a0:45:55:4a:f4:77:ab:a2:c5:09:af:
         e6:5b:a9:34:be:9a:06:3d:92:23:fa:05:f9:cd:00:3f:c5:71:
         49:cb:56:f4:f5:f9:8a:92:39:96:be:3d:4b:09:b3:3f:17:4d:
         53:a0:97:c1:7d:45:4c:4a:f2:3e:1c:2c:8e:b7:62:72:43:f8:
         f2:aa:0f:81:66:a4:28:dc:ef:8c:8b:02:01:dc:ad:89:db:67:
         f4:d3:4f:d0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIK1BMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBj
NDU1N2JlMWE4NGYwNWE1NmExNWNiMjI1MTNhY2Q5NjFmYjcwZmEwHhcNMjMxMTIy
MDczMDAxWhcNMjUxMTIxMDczMDAxWjAzMTEwLwYDVQQDEyhmNDUyZTBlMWE2NjY4
OTA5MGFhNWI3ZGVhNTUwNjQ2NzFlYjVlZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgIb70xZkWYE/9mDLVMEU4Pw14BMlwfdMKRb3fDKCS+jT+tRy
XysqSR6Jscuvr8s7qKTkAyx748G8rLm8TE8m5PnwMnnT9o3UXglEtIpJ6JsHP7NY
iAJX8ZbBBgazl+gLkUJ9bzK5BBKZvsYSLG4vAogN0BkZHEPDC4Cl1+cK638Oeyip
hsY7KafshKkTS1Y33wNyyLAmljbv5Uo+lmK8Gn/FHsdorvyD4J3fR+6LZXXAvC0S
5YU3sgOsfq8EmlSCFm8ZHAkpy/IoBa2BPW6KJRfqTYmdWlm2rQZsVDkGtMGNIpU8
FmVUj0IU1TrlGKjicWIxgsxMyt7z0sgofKpE9wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFL2PsZWNp38YjqSxp/KvGaGm21ZiMB8GA1UdIwQYMBaAFGr4vQlZd7xncMLC
NCD5ijnsthIWMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMGM0NTU3
YmUxYTg0ZjA1YTU2YTE1Y2IyMjUxM2FjZDk2MWZiNzBmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjgzMDBkYjItYTM1Mi00ZGY5LTk3YjItYWMzM2E1
YWUxNGQ4L2Y0NTJlMGUxYTY2Njg5MDkwYWE1YjdkZWE1NTA2NDY3MWViNWVmZjUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iODMwMGRiMi1hMzUyLTRkZjktOTdiMi1hYzMz
YTVhZTE0ZDgvMGM0NTU3YmUxYTg0ZjA1YTU2YTE1Y2IyMjUxM2FjZDk2MWZiNzBm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr5TaDANBgkqhkiG9w0BAQsFAAOCAQEANlCW2VtJpabeUHM6
Av8AwE7aop0U1YhbiTK2yk8tcZA656H9EU1FcaWHq2bRpFme0AQzaDazzPUDQ0vd
ohzrY83FjooqikxFi2jknj/xXIQPcpbNusQEyfUJsGCcYxx8ChrphOJe1Upf/mzN
fmS5y50lrvYxadFYwrIMsHgVwHPj/o3mX5qa5f44AOW1SUOW9ZenfZ96Hb9vFm6f
5h5VUDvxFHxDzirHAqBFVUr0d6uixQmv5lupNL6aBj2SI/oF+c0AP8VxSctW9PX5
ipI5lr49SwmzPxdNU6CXwX1FTEryPhwsjrdickP48qoPgWakKNzvjIsCAdytidtn
9NNP0A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org