Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c0c93313e0ac1b6f6e5089aec4473e271638bc17.roa
File:                     c0c93313e0ac1b6f6e5089aec4473e271638bc17.roa (raw, json)
Hash identifier:          8xh4/CSzrIqZYVZXbho3OFGvPMxpZQtAQAbiIjPjdNA=
Subject key identifier:   CF:89:BB:7E:E5:4D:87:82:17:BA:F9:01:4F:A2:27:13:40:34:33:4B
Certificate issuer:       /CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
Certificate serial:       10AEF0
Authority key identifier: E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c0c93313e0ac1b6f6e5089aec4473e271638bc17.roa
Signing time:             Thu 12 Aug 2021 21:43:12 +0000
ROA not before:           Thu 12 Aug 2021 03:00:00 +0000
ROA not after:            Sat 12 Aug 2023 03:00:00 +0000
asID:                     23383
IP address blocks:        190.4.0.0/21 maxlen: 24
                          190.4.8.0/23 maxlen: 24
                          190.4.11.0/24 maxlen: 24
                          190.4.12.0/22 maxlen: 24
                          190.4.16.0/23 maxlen: 24
                          190.4.18.0/24 maxlen: 24
                          190.4.20.0/22 maxlen: 24
                          190.4.25.0/24 maxlen: 24
                          190.4.26.0/23 maxlen: 24
                          190.4.28.0/22 maxlen: 24
                          190.4.32.0/20 maxlen: 24
                          190.4.48.0/21 maxlen: 24
                          190.4.56.0/23 maxlen: 24
                          190.4.58.0/24 maxlen: 24
                          190.4.60.0/22 maxlen: 24
                          200.35.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1093360 (0x10aef0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
        Validity
            Not Before: Aug 12 03:00:00 2021 GMT
            Not After : Aug 12 03:00:00 2023 GMT
        Subject: CN=c0c93313e0ac1b6f6e5089aec4473e271638bc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:16:06:f1:65:af:11:a4:9a:be:39:e1:3c:
                    a3:5e:08:66:76:c8:1e:48:e5:bd:42:d4:1a:a3:a5:
                    ac:9f:0a:18:7c:36:ac:22:0a:cd:36:24:08:6e:c6:
                    ad:13:1b:4f:90:9c:a3:3c:d7:3a:66:3b:9b:d1:9a:
                    93:d5:fc:d4:b5:b2:88:31:29:c6:2b:f4:63:b8:cf:
                    3d:43:f2:12:7c:cf:b9:2d:68:ac:d1:1e:fa:1d:61:
                    20:1f:3b:14:3a:ec:f5:ba:34:41:7c:b0:9a:d1:f9:
                    24:15:33:1c:f0:b5:8e:14:81:ff:89:b5:10:82:22:
                    d3:30:79:25:9b:77:6e:4e:17:fb:85:ba:c5:cd:9a:
                    d9:18:92:73:1b:5c:e2:8c:35:b6:56:2b:b5:67:b3:
                    39:63:65:e1:30:05:e3:74:89:19:f9:a7:67:8a:ca:
                    ad:45:4d:99:17:06:cd:a7:ae:9a:9f:89:50:c8:5f:
                    d7:0e:1b:7c:b9:22:2b:de:1c:fe:87:0b:6f:1f:c3:
                    9f:49:b9:f5:e0:fb:b0:8d:3e:4b:01:88:7d:ed:5f:
                    97:82:06:4b:b0:46:0f:d3:ed:13:5e:58:c2:c9:29:
                    5e:9f:aa:ff:b3:f7:33:79:9e:97:2a:3c:3b:5f:69:
                    18:35:df:80:5e:9b:ab:91:c6:d8:1f:65:7c:c2:1b:
                    17:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:89:BB:7E:E5:4D:87:82:17:BA:F9:01:4F:A2:27:13:40:34:33:4B
            X509v3 Authority Key Identifier:
                keyid:E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c0c93313e0ac1b6f6e5089aec4473e271638bc17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9fa677563ca5bfe6068216c74122a5d7cb2db27a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.0.0-190.4.9.255
                  190.4.11.0-190.4.18.255
                  190.4.20.0/22
                  190.4.25.0-190.4.58.255
                  190.4.60.0/22
                  200.35.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:c9:42:75:77:e8:54:1d:d2:19:4e:26:d3:24:7d:ab:f2:86:
         d9:15:c6:40:b4:f0:78:e0:93:1b:be:5c:99:06:df:11:0e:0d:
         df:10:23:c5:a6:ee:40:ca:6c:86:57:1d:d5:3b:6e:aa:b2:7c:
         2d:80:45:c0:15:69:fb:42:81:9d:d6:1c:ed:7d:fe:9e:1f:66:
         a1:65:4d:fa:9d:1d:a9:63:04:8d:61:85:0f:c8:a1:a7:27:30:
         c4:f1:f5:7c:f3:06:ca:97:21:0c:63:08:1a:01:da:a8:e6:2a:
         4f:f4:6a:58:5f:03:65:9e:b9:a0:15:52:b7:37:a7:cd:87:7c:
         0b:a2:fb:0f:cf:11:d6:95:4d:6d:94:6f:27:9c:4f:53:63:4a:
         42:40:5b:b1:1c:47:70:2c:bf:73:a4:34:20:78:f6:c7:c3:39:
         99:93:67:d8:71:88:80:d6:97:35:aa:68:0e:85:f6:2d:88:1c:
         90:fc:fe:cf:4b:47:dd:12:bf:47:98:cc:11:33:7c:fd:68:e2:
         74:e7:8f:99:2c:54:29:09:9f:c2:52:94:d3:1e:67:ab:71:f5:
         74:1f:fa:c5:69:4b:06:8a:c9:e9:c1:c1:5d:17:70:a2:8e:f9:
         d5:47:50:3c:0f:4e:96:a8:eb:cc:be:d2:cb:a1:38:d3:b5:70:
         27:c4:ca:91
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIDEK7wMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
YTY3NzU2M2NhNWJmZTYwNjgyMTZjNzQxMjJhNWQ3Y2IyZGIyN2EwHhcNMjEwODEy
MDMwMDAwWhcNMjMwODEyMDMwMDAwWjAzMTEwLwYDVQQDEyhjMGM5MzMxM2UwYWMx
YjZmNmU1MDg5YWVjNDQ3M2UyNzE2MzhiYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqvwWBvFlrxGkmr454TyjXghmdsgeSOW9QtQao6WsnwoYfDas
IgrNNiQIbsatExtPkJyjPNc6Zjub0ZqT1fzUtbKIMSnGK/RjuM89Q/ISfM+5LWis
0R76HWEgHzsUOuz1ujRBfLCa0fkkFTMc8LWOFIH/ibUQgiLTMHklm3duThf7hbrF
zZrZGJJzG1zijDW2Viu1Z7M5Y2XhMAXjdIkZ+adnisqtRU2ZFwbNp66an4lQyF/X
Dht8uSIr3hz+hwtvH8OfSbn14PuwjT5LAYh97V+XggZLsEYP0+0TXljCySlen6r/
s/czeZ6XKjw7X2kYNd+AXpurkcbYH2V8whsXBQIDAQABo4ICkDCCAowwHQYDVR0O
BBYEFM+Ju37lTYeCF7r5AU+iJxNANDNLMB8GA1UdIwQYMBaAFObQ+/X3VGDwMdgI
uJIHHLi+yqQ5MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWZhNjc3
NTYzY2E1YmZlNjA2ODIxNmM3NDEyMmE1ZDdjYjJkYjI3YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYmVmOTFlZTEtNDIyNC00YzFjLWFlZTYtNWNlMTM4
NjQxYzQ4L2MwYzkzMzEzZTBhYzFiNmY2ZTUwODlhZWM0NDczZTI3MTYzOGJjMTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iZWY5MWVlMS00MjI0LTRjMWMtYWVlNi01Y2Ux
Mzg2NDFjNDgvOWZhNjc3NTYzY2E1YmZlNjA2ODIxNmM3NDEyMmE1ZDdjYjJkYjI3
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBUBggrBgEFBQcBBwEB/wRF
MEMwQQQCAAEwOzALAwMCvgQDBAG+BAgwDAMEAL4ECwMEAL4EEgMEAr4EFDAMAwQA
vgQZAwQAvgQ6AwQCvgQ8AwQAyCOlMA0GCSqGSIb3DQEBCwUAA4IBAQB8yUJ1d+hU
HdIZTibTJH2r8obZFcZAtPB44JMbvlyZBt8RDg3fECPFpu5AymyGVx3VO26qsnwt
gEXAFWn7QoGd1hztff6eH2ahZU36nR2pYwSNYYUPyKGnJzDE8fV88wbKlyEMYwga
Adqo5ipP9GpYXwNlnrmgFVK3N6fNh3wLovsPzxHWlU1tlG8nnE9TY0pCQFuxHEdw
LL9zpDQgePbHwzmZk2fYcYiA1pc1qmgOhfYtiByQ/P7PS0fdEr9HmMwRM3z9aOJ0
54+ZLFQpCZ/CUpTTHmercfV0H/rFaUsGisnpwcFdF3CijvnVR1A8D06WqOvMvtLL
oTjTtXAnxMqR
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org