Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/290c78111f56aecd380eac39c962333ca82b66eb.roa
File:                     290c78111f56aecd380eac39c962333ca82b66eb.roa (raw, json)
Hash identifier:          GZcc/dVn0++54hesFpk5z4Xn4e49QvHFxDn9SxL3VbY=
Subject key identifier:   5E:99:65:C4:33:F3:04:C0:AE:FC:2A:47:81:34:E3:CA:45:54:23:A2
Certificate issuer:       /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial:       0D8D3C
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/290c78111f56aecd380eac39c962333ca82b66eb.roa
Signing time:             Wed 18 Oct 2023 18:18:40 +0000
ROA not before:           Tue 17 Oct 2023 18:18:40 +0000
ROA not after:            Sat 18 Oct 2025 18:18:40 +0000
asID:                     28414
IP address blocks:        187.251.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888124 (0xd8d3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Validity
            Not Before: Oct 17 18:18:40 2023 GMT
            Not After : Oct 18 18:18:40 2025 GMT
        Subject: CN=290c78111f56aecd380eac39c962333ca82b66eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:e9:63:5f:86:7d:25:22:29:56:20:f5:a8:
                    fb:c1:e9:e7:c4:fe:a8:46:4f:46:cb:77:db:65:0e:
                    de:fb:42:1d:89:b6:2f:3b:4f:5c:4e:55:24:a0:3e:
                    4c:a7:d3:d5:2e:48:c3:c5:21:88:80:a5:2c:90:bc:
                    72:20:55:4e:3b:2e:8e:a2:b8:12:4d:6b:4e:6c:b6:
                    3b:44:af:67:0f:52:ef:aa:ac:da:40:bc:f6:a1:bd:
                    10:44:d9:a2:5f:f8:62:30:f0:c6:06:bc:c8:52:50:
                    c4:af:cc:62:33:92:71:da:53:60:d6:6d:11:48:0e:
                    09:1f:ec:a5:36:f0:1d:5b:de:6a:7b:f2:9c:97:1c:
                    b8:7b:38:ac:64:cc:7e:46:cd:00:f1:31:53:7c:63:
                    13:48:68:ed:bc:57:1a:a9:5a:3d:a8:5c:53:50:92:
                    90:0b:bb:8a:49:51:a2:74:80:69:d1:82:54:ca:26:
                    8e:b6:a2:f9:43:7b:f5:ba:2a:8a:a2:e4:7f:47:9d:
                    a2:de:26:72:2c:aa:91:c4:15:a0:6b:c1:90:c9:63:
                    a7:55:95:58:86:9a:14:59:40:96:40:d6:ae:22:80:
                    ce:f8:25:bd:ae:22:93:51:87:57:42:02:94:40:ef:
                    7d:ca:7a:dd:f5:c2:39:d2:00:fd:76:e4:b0:6d:5c:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:99:65:C4:33:F3:04:C0:AE:FC:2A:47:81:34:E3:CA:45:54:23:A2
            X509v3 Authority Key Identifier:
                keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/290c78111f56aecd380eac39c962333ca82b66eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:4e:ad:10:35:29:f3:80:1c:69:a1:2f:ce:47:1f:a0:ae:a7:
         60:cf:3e:59:62:d5:d8:2f:cd:33:1e:c6:bb:d9:4e:88:05:4f:
         9e:39:83:32:3c:76:24:a1:09:ac:fa:11:83:b9:f3:b8:70:0e:
         fc:86:9c:3a:01:a3:47:47:fb:ce:71:3b:5e:54:f3:09:66:67:
         ea:76:1b:9a:14:b8:5c:16:c5:48:5e:c7:8c:dc:7c:e2:a9:37:
         b2:b4:38:7b:c0:5a:c1:3e:44:7a:5c:74:14:89:e0:ab:5a:82:
         e1:a2:79:8c:6f:a0:13:a4:25:e8:65:a4:d5:3e:1d:b3:65:b3:
         4f:16:cd:3d:b8:79:a9:69:34:a2:85:7d:36:eb:fb:0f:db:01:
         cd:cf:97:9d:0c:35:21:c5:a3:bc:b3:fe:3b:28:84:b0:e4:14:
         d4:b1:1d:67:6f:1b:a1:07:51:d0:2f:12:4e:7d:3f:d1:ad:a3:
         51:d8:bd:da:cb:e0:db:45:86:89:39:a1:e6:dc:48:9f:3b:cb:
         19:e6:91:44:86:5d:67:e0:93:4c:65:21:f1:53:3e:0d:54:86:
         a7:67:21:23:5d:58:be:88:89:2e:2b:1e:96:9f:e0:71:c7:43:
         e1:02:53:06:90:74:84:da:0d:59:f2:7b:01:4c:98:a5:ee:df:
         7d:d5:d1:b1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDY08MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
M2Q1Y2RiMTYwNzI2ZGM5MmUwNGVkNDZhNjU4ZWM2YmZjYmJkZDEwHhcNMjMxMDE3
MTgxODQwWhcNMjUxMDE4MTgxODQwWjAzMTEwLwYDVQQDEygyOTBjNzgxMTFmNTZh
ZWNkMzgwZWFjMzljOTYyMzMzY2E4MmI2NmViMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkDbpY1+GfSUiKVYg9aj7wennxP6oRk9Gy3fbZQ7e+0IdibYv
O09cTlUkoD5Mp9PVLkjDxSGIgKUskLxyIFVOOy6OorgSTWtObLY7RK9nD1Lvqqza
QLz2ob0QRNmiX/hiMPDGBrzIUlDEr8xiM5Jx2lNg1m0RSA4JH+ylNvAdW95qe/Kc
lxy4ezisZMx+Rs0A8TFTfGMTSGjtvFcaqVo9qFxTUJKQC7uKSVGidIBp0YJUyiaO
tqL5Q3v1uiqKouR/R52i3iZyLKqRxBWga8GQyWOnVZVYhpoUWUCWQNauIoDO+CW9
riKTUYdXQgKUQO99ynrd9cI50gD9duSwbVzz8wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFF6ZZcQz8wTArvwqR4E048pFVCOiMB8GA1UdIwQYMBaAFI9xTwL31bpGSCLp
2dR7u2DVk6EyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTEzZDVj
ZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Q1YWQ2YzAtNDk5Yi00MzgwLTk4NGYtODc0Yzlm
NTFkMmZmLzI5MGM3ODExMWY1NmFlY2QzODBlYWMzOWM5NjIzMzNjYTgyYjY2ZWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZDVhZDZjMC00OTliLTQzODAtOTg0Zi04NzRj
OWY1MWQyZmYvOTEzZDVjZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEALv77DANBgkqhkiG9w0BAQsFAAOCAQEATE6tEDUp84AcaaEv
zkcfoK6nYM8+WWLV2C/NMx7Gu9lOiAVPnjmDMjx2JKEJrPoRg7nzuHAO/IacOgGj
R0f7znE7XlTzCWZn6nYbmhS4XBbFSF7HjNx84qk3srQ4e8BawT5Eelx0FIngq1qC
4aJ5jG+gE6Ql6GWk1T4ds2WzTxbNPbh5qWk0ooV9Nuv7D9sBzc+XnQw1IcWjvLP+
OyiEsOQU1LEdZ28boQdR0C8STn0/0a2jUdi92svg20WGiTmh5txInzvLGeaRRIZd
Z+CTTGUh8VM+DVSGp2chI11YvoiJLiselp/gccdD4QJTBpB0hNoNWfJ7AUyYpe7f
fdXRsQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org