Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/44a5727839512dfd3c252be66cb1adab05fcd469.roa
File:                     44a5727839512dfd3c252be66cb1adab05fcd469.roa (raw, json)
Hash identifier:          XYNf65gURp2mi/tv4PbSObisAruXPAs9ittci+b3Exg=
Subject key identifier:   84:5C:4F:D8:DE:51:92:DD:CA:C2:85:C6:D0:82:B0:30:2E:32:B7:C1
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A8473
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/44a5727839512dfd3c252be66cb1adab05fcd469.roa
Signing time:             Wed 14 Feb 2024 13:40:07 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     212384
IP address blocks:        190.93.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2786419 (0x2a8473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=44a5727839512dfd3c252be66cb1adab05fcd469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ca:a4:e5:46:74:02:9c:f2:4c:c8:c5:68:48:
                    c6:ff:f6:1b:fc:00:4c:b1:a5:6a:3f:f4:ff:1c:30:
                    2f:b2:b7:1b:3b:ee:06:6b:37:85:67:db:6f:3e:10:
                    a6:2e:d6:be:fb:c4:4e:54:b4:dd:82:d0:97:dc:d4:
                    21:ca:2c:be:65:0e:74:e9:18:f5:f7:fd:82:3c:01:
                    b5:fd:55:7f:d4:1d:c6:73:a3:4a:40:ce:e8:1d:bc:
                    c4:6f:72:47:7e:ee:9a:24:cf:8c:e5:18:88:ed:f5:
                    45:8d:c0:26:60:81:f3:01:44:f8:15:56:62:49:68:
                    ef:8a:b9:86:22:dc:23:ef:54:fe:72:ee:3e:3b:66:
                    ac:e1:e3:06:24:c9:ff:30:34:4d:a4:9f:90:99:54:
                    19:11:90:7c:72:f6:39:43:ae:60:47:20:a5:b5:a0:
                    a2:10:5a:38:60:16:e7:e2:35:85:a3:e3:53:fc:34:
                    4a:66:12:2e:5e:f2:41:89:f4:35:41:b8:10:6a:86:
                    d0:04:c6:39:f6:40:b5:45:7d:cc:35:e8:c6:1c:d1:
                    93:0d:40:55:d0:53:1e:0c:34:75:96:a1:7f:25:8d:
                    ae:a3:8e:dc:93:ab:2d:fc:7a:95:13:ed:fd:a6:99:
                    a1:b9:74:80:d9:c4:18:8e:0f:63:a3:5a:36:8f:6d:
                    16:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5C:4F:D8:DE:51:92:DD:CA:C2:85:C6:D0:82:B0:30:2E:32:B7:C1
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/44a5727839512dfd3c252be66cb1adab05fcd469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:d5:34:50:94:ac:f6:52:3c:4f:58:f6:a2:a9:48:ce:df:
         3a:f2:21:43:c6:e2:5f:3b:be:05:12:a1:18:5c:55:25:2f:bb:
         8c:6c:50:9b:63:87:3c:71:bf:ec:08:ea:40:d2:b5:25:c4:b9:
         be:a9:79:1a:44:82:a8:97:55:53:48:7a:d7:5f:ad:06:d6:06:
         72:9f:1c:03:f5:9e:c7:e9:36:cf:00:63:c6:b7:b2:60:66:8e:
         05:d1:39:42:50:04:10:6e:52:97:82:89:ea:63:83:81:c3:e2:
         13:db:d4:2c:fc:33:6e:36:55:72:a0:5d:b9:06:42:f5:a5:dc:
         d7:53:b1:80:fc:b3:c7:66:c4:3a:73:1b:28:84:81:dd:0c:85:
         81:4c:46:c7:92:77:77:5c:17:91:69:2c:dd:69:07:86:a9:c2:
         63:1c:04:94:7b:b7:47:76:7a:67:12:45:30:a2:b5:cf:66:7c:
         18:7b:81:11:24:9f:6b:a2:c7:46:d3:e4:d8:09:24:54:71:e3:
         0a:bf:12:d4:51:a5:7e:58:36:69:67:0a:1a:bf:88:d1:c6:ca:
         1f:c9:01:bd:a6:fa:ae:76:da:57:29:c4:5e:9a:f3:e0:12:d0:
         e7:37:e2:2c:e2:e9:3c:f8:b3:0d:40:c8:d5:30:c9:10:04:c1:
         de:c3:81:2f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDKoRzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE5
ZmI1Y2Q5OTNkMzQ4MjVkY2ExYWZjNGNhZGVhZjg0OTNkYmRiZGQwHhcNMjQwMjE0
MTMzOTM0WhcNMjkwMjE0MTMzOTM0WjAzMTEwLwYDVQQDEyg0NGE1NzI3ODM5NTEy
ZGZkM2MyNTJiZTY2Y2IxYWRhYjA1ZmNkNDY5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAksqk5UZ0ApzyTMjFaEjG//Yb/ABMsaVqP/T/HDAvsrcbO+4G
azeFZ9tvPhCmLta++8ROVLTdgtCX3NQhyiy+ZQ506Rj19/2CPAG1/VV/1B3Gc6NK
QM7oHbzEb3JHfu6aJM+M5RiI7fVFjcAmYIHzAUT4FVZiSWjvirmGItwj71T+cu4+
O2as4eMGJMn/MDRNpJ+QmVQZEZB8cvY5Q65gRyCltaCiEFo4YBbn4jWFo+NT/DRK
ZhIuXvJBifQ1QbgQaobQBMY59kC1RX3MNejGHNGTDUBV0FMeDDR1lqF/JY2uo47c
k6st/HqVE+39ppmhuXSA2cQYjg9jo1o2j20WfwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFIRcT9jeUZLdysKFxtCCsDAuMrfBMB8GA1UdIwQYMBaAFPt84Eo2/gXQEbvk
w1q2h+jw4qG8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYTlmYjVj
ZDk5M2QzNDgyNWRjYTFhZmM0Y2FkZWFmODQ5M2RiZGJkZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYzcwZGE1MWEtYzFjNC00NjQ4LTg4ODctMzhkYTRm
MTdiZjg2LzQ0YTU3Mjc4Mzk1MTJkZmQzYzI1MmJlNjZjYjFhZGFiMDVmY2Q0Njku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jNzBkYTUxYS1jMWM0LTQ2NDgtODg4Ny0zOGRh
NGYxN2JmODYvYTlmYjVjZDk5M2QzNDgyNWRjYTFhZmM0Y2FkZWFmODQ5M2RiZGJk
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5dTDANBgkqhkiG9w0BAQsFAAOCAQEAFbfVNFCUrPZSPE9Y
9qKpSM7fOvIhQ8biXzu+BRKhGFxVJS+7jGxQm2OHPHG/7AjqQNK1JcS5vql5GkSC
qJdVU0h611+tBtYGcp8cA/Wex+k2zwBjxreyYGaOBdE5QlAEEG5Sl4KJ6mODgcPi
E9vULPwzbjZVcqBduQZC9aXc11OxgPyzx2bEOnMbKISB3QyFgUxGx5J3d1wXkWks
3WkHhqnCYxwElHu3R3Z6ZxJFMKK1z2Z8GHuBESSfa6LHRtPk2AkkVHHjCr8S1FGl
flg2aWcKGr+I0cbKH8kBvab6rnbaVynEXprz4BLQ5zfiLOLpPPizDUDI1TDJEATB
3sOBLw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org