Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/344dbf925e0def6f43dc26270d3e78248915353e.roa
File:                     344dbf925e0def6f43dc26270d3e78248915353e.roa (raw, json)
Hash identifier:          rNuz09yp93tUIjgWqkDtWdQ5GXs/p2xclvCq/Ks66bI=
Subject key identifier:   62:F8:AB:1D:B0:92:C8:A3:E8:4C:51:71:66:D2:DF:BA:CE:33:03:5B
Certificate issuer:       /CN=9f38530271142a50ccefbe64df571c9b0e259487
Certificate serial:       1D2CC7
Authority key identifier: 99:A2:EC:1F:36:42:13:6D:C3:B8:90:70:A7:3F:78:50:C1:5F:61:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f38530271142a50ccefbe64df571c9b0e259487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/344dbf925e0def6f43dc26270d3e78248915353e.roa
Signing time:             Wed 28 Dec 2022 23:57:51 +0000
ROA not before:           Tue 23 Mar 2021 14:34:50 +0000
ROA not after:            Tue 24 Mar 2026 14:34:50 +0000
asID:                     269822
IP address blocks:        45.65.232.0/22 maxlen: 24
                          190.102.120.0/22 maxlen: 24
                          190.102.124.0/22 maxlen: 24
                          2803:15c0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1912007 (0x1d2cc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f38530271142a50ccefbe64df571c9b0e259487
        Validity
            Not Before: Mar 23 14:34:50 2021 GMT
            Not After : Mar 24 14:34:50 2026 GMT
        Subject: CN=344dbf925e0def6f43dc26270d3e78248915353e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:30:36:9b:86:72:0b:b4:00:92:69:66:21:ac:
                    23:5b:12:48:a6:ff:62:11:75:a8:5b:23:3e:0f:a5:
                    b2:eb:6f:fe:22:b8:92:dc:0f:09:93:0d:eb:e8:7c:
                    d6:20:cf:b3:e6:6f:eb:99:d2:2d:ec:95:eb:e0:7c:
                    5b:5b:a0:02:7b:1f:ed:e3:0a:c4:58:41:1e:6e:9c:
                    e1:dd:da:1e:07:53:b3:06:b6:5d:f3:ed:d3:21:91:
                    78:2a:de:56:42:02:ad:69:67:50:f9:be:c0:f0:38:
                    94:d3:25:25:7c:1d:42:34:c4:14:86:be:7a:39:00:
                    dc:53:8d:08:16:bd:51:1b:d1:9f:b9:39:b9:58:09:
                    78:f8:10:25:86:33:91:94:bf:1d:ce:bd:28:1a:95:
                    68:3b:86:9b:c4:c4:2c:05:21:14:1a:a7:2c:62:79:
                    12:57:3c:23:14:d8:11:92:cb:31:a6:b6:af:fe:04:
                    c2:eb:77:8c:59:b4:69:f9:c5:ce:c9:11:f4:63:d9:
                    84:53:3b:7a:d6:e7:2c:d4:00:af:c8:ae:47:77:e5:
                    fe:01:46:f2:0f:4a:e2:5d:fc:6d:a5:40:49:d8:ca:
                    53:26:6a:d5:f9:4f:5b:30:9a:b7:7a:d8:19:ae:1f:
                    ca:88:ff:69:9a:03:06:f7:69:f0:51:aa:c7:1d:84:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F8:AB:1D:B0:92:C8:A3:E8:4C:51:71:66:D2:DF:BA:CE:33:03:5B
            X509v3 Authority Key Identifier:
                keyid:99:A2:EC:1F:36:42:13:6D:C3:B8:90:70:A7:3F:78:50:C1:5F:61:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f38530271142a50ccefbe64df571c9b0e259487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/344dbf925e0def6f43dc26270d3e78248915353e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c33a0118-0655-414e-a7dc-0e8f24b76d15/9f38530271142a50ccefbe64df571c9b0e259487.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.232.0/22
                  190.102.120.0/21
                IPv6:
                  2803:15c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:08:f1:8c:81:8e:03:9e:d2:2f:3d:59:89:1e:fd:a9:08:75:
         fd:3c:f1:2a:77:18:c3:bf:42:63:14:78:30:b4:8c:08:c0:0f:
         55:f3:ab:09:d1:e2:61:66:76:27:e3:0f:3c:b6:c8:4d:2a:4d:
         a8:e1:7f:57:85:af:a7:ab:b4:59:a1:55:8a:a8:ff:5c:89:62:
         3b:a6:1f:6b:40:90:2c:c1:4c:06:82:d8:12:35:eb:6e:c5:58:
         ba:d9:3a:36:6b:64:cb:89:19:04:44:14:dd:ad:d7:76:90:69:
         08:20:ac:bf:50:81:20:c3:a1:7e:a8:10:2d:b6:9d:7b:2f:2b:
         e2:7c:ee:db:10:93:3c:73:b7:89:96:5e:d9:f1:84:39:97:36:
         0d:61:1c:f9:01:a8:8c:09:a9:4c:89:43:66:bd:00:49:19:d3:
         56:17:f4:b8:8b:a7:83:d8:72:fd:ea:5f:fd:6a:d5:12:0e:b7:
         ae:26:5c:bf:c7:a1:65:d7:2b:d1:0d:3e:96:e1:75:20:31:44:
         63:56:c4:04:42:8d:2c:e6:2b:f9:72:cb:91:c4:30:0d:11:eb:
         93:2a:df:ff:e5:44:36:ea:db:03:f4:ed:a6:e5:87:cc:b8:25:
         68:8a:d2:7a:7b:61:db:a5:f5:17:bb:6e:b7:c5:fa:e6:45:bc:
         bb:41:0b:f5
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDHSzHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlm
Mzg1MzAyNzExNDJhNTBjY2VmYmU2NGRmNTcxYzliMGUyNTk0ODcwHhcNMjEwMzIz
MTQzNDUwWhcNMjYwMzI0MTQzNDUwWjAzMTEwLwYDVQQDEygzNDRkYmY5MjVlMGRl
ZjZmNDNkYzI2MjcwZDNlNzgyNDg5MTUzNTNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4zA2m4ZyC7QAkmlmIawjWxJIpv9iEXWoWyM+D6Wy62/+IriS
3A8Jkw3r6HzWIM+z5m/rmdIt7JXr4HxbW6ACex/t4wrEWEEebpzh3doeB1OzBrZd
8+3TIZF4Kt5WQgKtaWdQ+b7A8DiU0yUlfB1CNMQUhr56OQDcU40IFr1RG9GfuTm5
WAl4+BAlhjORlL8dzr0oGpVoO4abxMQsBSEUGqcsYnkSVzwjFNgRkssxprav/gTC
63eMWbRp+cXOyRH0Y9mEUzt61ucs1ACvyK5Hd+X+AUbyD0riXfxtpUBJ2MpTJmrV
+U9bMJq3etgZrh/KiP9pmgMG92nwUarHHYQbuQIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFGL4qx2wksij6ExRcWbS37rOMwNbMB8GA1UdIwQYMBaAFJmi7B82QhNtw7iQ
cKc/eFDBX2GPMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWYzODUz
MDI3MTE0MmE1MGNjZWZiZTY0ZGY1NzFjOWIwZTI1OTQ4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzMzYTAxMTgtMDY1NS00MTRlLWE3ZGMtMGU4ZjI0
Yjc2ZDE1LzM0NGRiZjkyNWUwZGVmNmY0M2RjMjYyNzBkM2U3ODI0ODkxNTM1M2Uu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jMzNhMDExOC0wNjU1LTQxNGUtYTdkYy0wZThm
MjRiNzZkMTUvOWYzODUzMDI3MTE0MmE1MGNjZWZiZTY0ZGY1NzFjOWIwZTI1OTQ4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAi1B6AMEA75meDANBAIAAjAHAwUAKAMVwDANBgkqhkiG9w0B
AQsFAAOCAQEAEAjxjIGOA57SLz1ZiR79qQh1/TzxKncYw79CYxR4MLSMCMAPVfOr
CdHiYWZ2J+MPPLbITSpNqOF/V4Wvp6u0WaFViqj/XIliO6Yfa0CQLMFMBoLYEjXr
bsVYutk6Nmtky4kZBEQU3a3XdpBpCCCsv1CBIMOhfqgQLbadey8r4nzu2xCTPHO3
iZZe2fGEOZc2DWEc+QGojAmpTIlDZr0ASRnTVhf0uIung9hy/epf/WrVEg63riZc
v8ehZdcr0Q0+luF1IDFEY1bEBEKNLOYr+XLLkcQwDRHrkyrf/+VENurbA/TtpuWH
zLglaIrSenth26X1F7tut8X65kW8u0EL9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org