Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0a3b9d7-b0e0-4bc6-8397-cbae449b31a8/1ce7421771c77216055be73db1d5057abfacdc2c.roa
File:                     1ce7421771c77216055be73db1d5057abfacdc2c.roa (raw, json)
Hash identifier:          jsdHrvGfIkIVIxcBsqI7xeA9VUOHL16JpdDKwf4J6so=
Subject key identifier:   D5:1E:CF:81:B2:8A:8B:DB:56:54:23:62:C6:F4:51:42:17:DD:40:4D
Certificate issuer:       /CN=7f5bcd32c19e6d6d2c83078867c8ae713897e6c3
Certificate serial:       077D35
Authority key identifier: C6:12:BA:0E:32:6B:E4:6B:86:EB:7B:A2:C0:B3:7A:AF:A2:A7:E6:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f5bcd32c19e6d6d2c83078867c8ae713897e6c3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c0a3b9d7-b0e0-4bc6-8397-cbae449b31a8/1ce7421771c77216055be73db1d5057abfacdc2c.roa
Signing time:             Wed 24 Mar 2021 14:42:14 +0000
ROA not before:           Wed 24 Mar 2021 14:42:14 +0000
ROA not after:            Tue 24 Mar 2026 14:42:14 +0000
asID:                     174
IP address blocks:        190.93.36.0/23 maxlen: 24
                          190.93.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490805 (0x77d35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f5bcd32c19e6d6d2c83078867c8ae713897e6c3
        Validity
            Not Before: Mar 24 14:42:14 2021 GMT
            Not After : Mar 24 14:42:14 2026 GMT
        Subject: CN=1ce7421771c77216055be73db1d5057abfacdc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7d:6c:93:0f:c0:7d:1d:f8:24:0f:33:74:03:
                    84:ee:f5:0c:52:ec:ae:34:c8:ef:92:0a:04:3e:78:
                    51:48:c1:ff:de:3b:22:2d:b3:db:e4:88:8b:44:3c:
                    8e:4f:9e:8c:ad:6b:56:63:71:af:8c:5e:a9:2e:b6:
                    c9:45:57:d6:84:8a:d2:75:d0:fd:b7:00:f7:ea:a4:
                    06:55:04:cb:ed:0c:66:e7:43:a8:0e:d5:46:16:a2:
                    3b:d4:5d:c5:48:1e:e2:65:c8:40:78:04:d1:cb:6d:
                    77:a5:c8:bb:80:07:e8:49:dd:ca:b7:30:e2:34:40:
                    23:6a:97:13:d7:15:13:d6:7d:bf:42:e4:88:98:3f:
                    dd:8a:88:e0:47:6b:73:ef:62:5d:70:b4:d4:32:26:
                    ad:54:e1:0b:dd:09:7b:b7:e2:09:c9:58:60:66:ff:
                    7a:29:80:2e:c9:d6:af:08:c3:68:c8:01:a1:70:e0:
                    ab:60:21:00:13:95:95:60:49:84:c3:c8:d3:dd:84:
                    8c:1b:94:53:fe:34:7f:74:20:1f:3a:85:d9:e0:a0:
                    fb:5a:34:9e:67:49:c1:05:89:b8:bc:52:b0:76:8c:
                    74:59:87:be:d3:93:51:e2:70:0f:7f:92:13:68:b3:
                    0d:59:e8:bc:4f:11:2e:be:bc:07:a0:17:9c:61:83:
                    64:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1E:CF:81:B2:8A:8B:DB:56:54:23:62:C6:F4:51:42:17:DD:40:4D
            X509v3 Authority Key Identifier:
                keyid:C6:12:BA:0E:32:6B:E4:6B:86:EB:7B:A2:C0:B3:7A:AF:A2:A7:E6:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f5bcd32c19e6d6d2c83078867c8ae713897e6c3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0a3b9d7-b0e0-4bc6-8397-cbae449b31a8/1ce7421771c77216055be73db1d5057abfacdc2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c0a3b9d7-b0e0-4bc6-8397-cbae449b31a8/7f5bcd32c19e6d6d2c83078867c8ae713897e6c3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.36.0-190.93.38.255

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:ff:b7:98:23:78:a1:ed:32:df:87:1f:0c:d9:8e:8a:db:
         a2:0a:19:81:6c:25:33:e8:f0:cd:b7:dc:d4:0d:ef:31:1e:1c:
         00:c3:f6:56:53:47:e4:9c:6c:f8:68:00:43:0b:52:42:9e:f3:
         76:9b:ef:1c:9b:4d:d4:bb:e8:4a:b8:e6:42:3e:f6:6f:29:e5:
         39:e5:2c:67:78:9d:db:cc:fc:a0:9b:ab:61:38:6e:02:5e:53:
         fd:7b:3f:c2:8e:44:ec:94:bb:c2:64:65:0e:55:e1:f3:a1:aa:
         f4:d5:b9:54:c6:87:97:02:64:10:89:24:7b:8a:00:d2:55:74:
         c8:c4:33:16:2b:e1:2a:c8:b3:6c:91:40:56:9b:de:41:80:24:
         b4:7a:f0:96:d1:0a:ba:a8:82:62:34:78:cc:f4:b2:54:4a:b4:
         f7:c4:da:c3:d6:94:37:4c:9e:c8:8d:bf:74:d9:74:82:bc:fa:
         95:84:6d:b4:0f:a5:e1:e7:59:8b:e0:54:80:eb:c5:f8:02:a0:
         f6:b8:50:aa:94:6b:61:3b:46:c5:f9:8b:d3:2e:c8:c7:a9:ae:
         8c:5c:23:82:3e:f7:6e:4f:6e:7f:4c:5a:13:f0:35:c5:3e:07:
         8c:1b:dd:ce:75:e6:2e:b5:1b:49:54:6c:26:2b:5b:c8:fd:b2:
         75:db:4c:3b
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDB301MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdm
NWJjZDMyYzE5ZTZkNmQyYzgzMDc4ODY3YzhhZTcxMzg5N2U2YzMwHhcNMjEwMzI0
MTQ0MjE0WhcNMjYwMzI0MTQ0MjE0WjAzMTEwLwYDVQQDEygxY2U3NDIxNzcxYzc3
MjE2MDU1YmU3M2RiMWQ1MDU3YWJmYWNkYzJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoH1skw/AfR34JA8zdAOE7vUMUuyuNMjvkgoEPnhRSMH/3jsi
LbPb5IiLRDyOT56MrWtWY3GvjF6pLrbJRVfWhIrSddD9twD36qQGVQTL7Qxm50Oo
DtVGFqI71F3FSB7iZchAeATRy213pci7gAfoSd3KtzDiNEAjapcT1xUT1n2/QuSI
mD/diojgR2tz72JdcLTUMiatVOEL3Ql7t+IJyVhgZv96KYAuydavCMNoyAGhcOCr
YCEAE5WVYEmEw8jT3YSMG5RT/jR/dCAfOoXZ4KD7WjSeZ0nBBYm4vFKwdox0WYe+
05NR4nAPf5ITaLMNWei8TxEuvrwHoBecYYNkcQIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFNUez4GyiovbVlQjYsb0UUIX3UBNMB8GA1UdIwQYMBaAFMYSug4ya+Rrhut7
osCzeq+ip+a0MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2Y1YmNk
MzJjMTllNmQ2ZDJjODMwNzg4NjdjOGFlNzEzODk3ZTZjMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzBhM2I5ZDctYjBlMC00YmM2LTgzOTctY2JhZTQ0
OWIzMWE4LzFjZTc0MjE3NzFjNzcyMTYwNTViZTczZGIxZDUwNTdhYmZhY2RjMmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMGEzYjlkNy1iMGUwLTRiYzYtODM5Ny1jYmFl
NDQ5YjMxYTgvN2Y1YmNkMzJjMTllNmQ2ZDJjODMwNzg4NjdjOGFlNzEzODk3ZTZj
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQCvl0kAwQAvl0mMA0GCSqGSIb3DQEBCwUAA4IBAQCPn/+3
mCN4oe0y34cfDNmOituiChmBbCUz6PDNt9zUDe8xHhwAw/ZWU0fknGz4aABDC1JC
nvN2m+8cm03Uu+hKuOZCPvZvKeU55SxneJ3bzPygm6thOG4CXlP9ez/CjkTslLvC
ZGUOVeHzoar01blUxoeXAmQQiSR7igDSVXTIxDMWK+EqyLNskUBWm95BgCS0evCW
0Qq6qIJiNHjM9LJUSrT3xNrD1pQ3TJ7Ijb902XSCvPqVhG20D6Xh51mL4FSA68X4
AqD2uFCqlGthO0bF+YvTLsjHqa6MXCOCPvduT25/TFoT8DXFPgeMG93OdeYutRtJ
VGwmK1vI/bJ120w7
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org