Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f351b8e83570c3343dcc9c6d2c66c7bc8037dc93.roa
File:                     f351b8e83570c3343dcc9c6d2c66c7bc8037dc93.roa (raw, json)
Hash identifier:          t/K/NKVV50OncYMd+6bKp7dSHqeUsHwy+F6R/mQN/Bs=
Subject key identifier:   30:B1:A4:86:BE:85:BE:96:11:A4:8D:38:24:2E:F1:72:E1:55:D5:DF
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1CDD14
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f351b8e83570c3343dcc9c6d2c66c7bc8037dc93.roa
Signing time:             Fri 30 Sep 2022 01:23:53 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     52256
IP address blocks:        190.255.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891604 (0x1cdd14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=f351b8e83570c3343dcc9c6d2c66c7bc8037dc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:6d:ce:99:1f:44:5a:cb:0a:09:08:a3:d7:
                    3b:9d:30:d1:2c:ba:1e:bd:15:7e:6b:0d:1c:c4:96:
                    e4:09:73:c2:81:2d:88:e6:e0:3f:10:c4:37:14:52:
                    b9:40:90:a1:26:75:f3:86:59:5b:5b:41:a7:7e:4c:
                    de:4a:7a:a1:90:29:57:7f:9d:05:25:9b:ba:6a:50:
                    5f:d2:41:e2:9f:53:21:92:11:06:14:02:49:dd:53:
                    18:de:7d:73:ea:c3:c7:b2:fc:4f:ca:b6:d2:3f:03:
                    e4:81:99:3d:6a:c7:a8:6b:af:a2:09:12:c7:d7:5b:
                    81:09:75:2f:1a:a2:7d:ba:a9:e1:3a:35:48:31:b8:
                    5c:ad:2b:83:27:dc:fc:52:18:f0:ac:b1:e4:3c:61:
                    7f:59:6c:73:59:fc:f2:02:5c:12:e4:e7:c4:36:d9:
                    30:31:68:40:f2:e8:21:a8:66:2b:a7:2d:35:5f:70:
                    66:31:49:1f:6b:99:ce:49:83:7d:1c:a2:bb:00:3d:
                    de:05:b6:82:96:4c:bb:d2:0f:7f:1a:d2:ba:67:9a:
                    d1:e0:95:85:dc:33:bc:ac:bd:ac:9f:3a:da:b8:25:
                    8a:be:c1:67:03:24:5a:a2:18:ad:26:51:b9:44:07:
                    20:af:5e:00:76:17:96:ee:c4:04:f5:90:d7:e4:56:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B1:A4:86:BE:85:BE:96:11:A4:8D:38:24:2E:F1:72:E1:55:D5:DF
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/f351b8e83570c3343dcc9c6d2c66c7bc8037dc93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.255.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:69:4b:91:98:43:b0:7c:e3:80:e9:2e:0b:da:e3:4f:aa:aa:
         9f:93:ee:cb:ec:d0:50:84:c8:50:96:b1:a8:13:c6:91:9d:ea:
         c3:8b:5c:05:5b:8b:4b:e4:bf:5b:11:04:52:08:bb:fd:13:e3:
         a1:4f:ca:94:ec:cf:56:4e:db:d8:47:c3:27:81:29:34:cf:99:
         1c:d3:16:5e:ac:36:9d:a2:a4:a1:8b:c0:cd:8e:dd:5c:47:2e:
         a6:c4:d5:32:09:2d:9f:e0:d9:7a:d2:7a:4f:08:d1:c1:e5:16:
         84:4f:6d:9e:d3:5c:21:0f:fd:2c:04:7a:cb:6a:e5:cb:80:7c:
         da:0d:4f:33:a5:d2:b2:87:fc:2a:1d:09:48:6d:cb:e3:92:da:
         70:eb:be:04:c2:e2:53:e4:19:78:ed:9c:f6:3e:a0:9b:75:b6:
         6e:36:ab:4d:f0:07:21:77:77:e9:8f:1c:17:59:88:7b:41:13:
         56:70:d2:f7:15:8c:68:99:e7:06:28:d1:cb:3e:9f:cb:53:69:
         09:45:bf:bb:c4:e8:cd:54:87:be:f4:05:64:c0:16:ac:bd:c3:
         68:1d:5e:86:ac:6e:c0:fe:fc:92:d8:79:67:f4:da:73:62:9e:
         fa:24:40:78:9c:4f:11:b5:bf:9f:e1:ac:de:9f:0d:a4:62:89:
         a9:a7:80:73
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDHN0UMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIz
NTgwMDc4ZjRmODk3ZmNmZGJhYTBkOTBjMmVjNmY0NjBlMzMyMjIwHhcNMjEwMzI0
MTQzNDU3WhcNMjYwMzI0MTQzNDU3WjAzMTEwLwYDVQQDEyhmMzUxYjhlODM1NzBj
MzM0M2RjYzljNmQyYzY2YzdiYzgwMzdkYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApOptzpkfRFrLCgkIo9c7nTDRLLoevRV+aw0cxJbkCXPCgS2I
5uA/EMQ3FFK5QJChJnXzhllbW0GnfkzeSnqhkClXf50FJZu6alBf0kHin1MhkhEG
FAJJ3VMY3n1z6sPHsvxPyrbSPwPkgZk9aseoa6+iCRLH11uBCXUvGqJ9uqnhOjVI
MbhcrSuDJ9z8UhjwrLHkPGF/WWxzWfzyAlwS5OfENtkwMWhA8ughqGYrpy01X3Bm
MUkfa5nOSYN9HKK7AD3eBbaClky70g9/GtK6Z5rR4JWF3DO8rL2snzrauCWKvsFn
AyRaohitJlG5RAcgr14AdheW7sQE9ZDX5FaZQwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFDCxpIa+hb6WEaSNOCQu8XLhVdXfMB8GA1UdIwQYMBaAFN/Gyo1ROTKXljh0
TDeMs6BDDpW1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjM1ODAw
NzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIyMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzIwYjU1OGEtODllMC00YzllLWI2YzgtZDdjNjk0
NjMyMTIwL2YzNTFiOGU4MzU3MGMzMzQzZGNjOWM2ZDJjNjZjN2JjODAzN2RjOTMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMjBiNTU4YS04OWUwLTRjOWUtYjZjOC1kN2M2
OTQ2MzIxMjAvYjM1ODAwNzhmNGY4OTdmY2ZkYmFhMGQ5MGMyZWM2ZjQ2MGUzMzIy
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL7/LDANBgkqhkiG9w0BAQsFAAOCAQEAMGlLkZhDsHzjgOku
C9rjT6qqn5Puy+zQUITIUJaxqBPGkZ3qw4tcBVuLS+S/WxEEUgi7/RPjoU/KlOzP
Vk7b2EfDJ4EpNM+ZHNMWXqw2naKkoYvAzY7dXEcupsTVMgktn+DZetJ6TwjRweUW
hE9tntNcIQ/9LAR6y2rly4B82g1PM6XSsof8Kh0JSG3L45LacOu+BMLiU+QZeO2c
9j6gm3W2bjarTfAHIXd36Y8cF1mIe0ETVnDS9xWMaJnnBijRyz6fy1NpCUW/u8To
zVSHvvQFZMAWrL3DaB1ehqxuwP78kth5Z/Tac2Ke+iRAeJxPEbW/n+Gs3p8NpGKJ
qaeAcw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org