Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c798aab184555d517dfb471235ab93ead3e86cd0.roa
File:                     c798aab184555d517dfb471235ab93ead3e86cd0.roa (raw, json)
Hash identifier:          5r1xv4Key2hhxcK5CeyCQtWjlLq/qv2Wlqk2QllY4bU=
Subject key identifier:   E2:F9:58:0A:D4:A6:00:7B:7C:BB:9A:04:FF:02:30:49:E0:C4:89:A6
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       0DF130
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c798aab184555d517dfb471235ab93ead3e86cd0.roa
Signing time:             Wed 24 Mar 2021 14:32:25 +0000
ROA not before:           Wed 24 Mar 2021 14:32:25 +0000
ROA not after:            Tue 24 Mar 2026 14:32:25 +0000
asID:                     60725
IP address blocks:        190.98.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913712 (0xdf130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Mar 24 14:32:25 2021 GMT
            Not After : Mar 24 14:32:25 2026 GMT
        Subject: CN=c798aab184555d517dfb471235ab93ead3e86cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:93:e8:a5:f3:50:88:1d:9a:1b:d7:f4:60:71:
                    6e:b5:a2:49:c6:7a:66:8d:d0:70:f6:29:8c:50:4c:
                    12:97:1b:6f:b3:97:62:9a:60:11:2c:f4:20:fb:de:
                    4f:8c:f6:32:24:2a:9e:ef:0c:ea:e8:f3:3b:56:21:
                    c2:a8:64:24:6c:11:1f:51:ed:b4:cc:c6:5a:06:d3:
                    2e:52:e8:0c:02:c9:7b:9b:7c:41:3a:87:eb:6a:c4:
                    59:42:7f:20:76:8f:72:f5:f8:ee:17:b5:df:67:53:
                    76:a5:c1:d2:cd:b7:ed:12:15:b5:02:6a:0e:22:2f:
                    de:27:6e:f6:a8:99:ad:69:02:e3:bc:25:fd:66:dc:
                    f3:ca:1e:2a:7c:e0:09:e5:50:83:f0:c8:df:4e:1e:
                    64:2b:0c:f2:7e:86:a0:c2:93:45:73:2d:0f:80:75:
                    14:ff:b8:a8:96:99:11:ec:d5:57:31:ba:18:d1:ba:
                    a1:f6:86:f3:20:28:23:11:33:03:d3:a9:f8:ee:2f:
                    bb:40:db:23:7e:83:eb:b8:18:14:4e:e8:9d:95:96:
                    f9:59:58:1e:d3:9f:42:14:15:fb:7a:d7:51:61:e7:
                    8c:fd:54:e8:d5:04:68:d8:96:af:be:4f:11:c0:e2:
                    b8:70:c0:6a:5f:ec:6d:ee:02:36:c8:9b:d5:ec:d0:
                    de:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F9:58:0A:D4:A6:00:7B:7C:BB:9A:04:FF:02:30:49:E0:C4:89:A6
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c798aab184555d517dfb471235ab93ead3e86cd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a4:9a:4f:83:04:ad:0b:62:62:97:13:c9:3c:43:9c:f8:a0:
         65:e6:e3:91:32:e2:e7:a4:d7:d0:dd:3b:88:fb:9a:1d:a2:87:
         1a:95:ce:95:46:ec:b0:7e:c8:73:8e:94:25:0b:fe:da:ba:b0:
         46:bc:73:72:0c:5a:b4:2c:01:a4:44:f9:ee:99:22:41:8e:2e:
         2a:04:d1:f0:3c:ae:7e:83:73:70:e9:1e:cd:fe:94:a7:05:81:
         0d:25:dd:ba:43:7d:f0:6e:8b:ba:04:f6:b2:e7:29:9c:0d:ce:
         a8:0e:45:d1:ab:81:57:b2:c9:de:e5:2e:a2:fc:c8:ea:36:b9:
         bc:57:a3:45:e7:4b:44:28:9a:64:96:ef:67:d8:ce:45:c6:0b:
         19:0e:c4:1a:a7:56:7a:df:4e:1e:14:02:41:08:56:b4:11:8f:
         eb:4e:82:84:14:25:c8:59:11:a2:1b:b9:9a:2b:e6:fb:3c:56:
         5e:5b:03:0b:1a:c6:ed:df:0c:a6:19:aa:f2:34:c2:ea:ff:66:
         7a:fd:b4:7d:c8:98:fa:d4:bc:09:0c:9c:cb:1e:cf:80:2f:6d:
         20:21:ab:66:a1:57:85:71:a5:7b:89:ca:73:2d:da:51:52:89:
         b3:b9:e5:53:3c:d0:9c:6d:60:ad:97:99:ff:e8:ae:86:76:73:
         12:73:fd:dc
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDfEwMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
Mjg1M2NjODVjMWU1NWM2NWU3NjMyOTliYTA4ODk0ZjhjZThkNTEwHhcNMjEwMzI0
MTQzMjI1WhcNMjYwMzI0MTQzMjI1WjAzMTEwLwYDVQQDEyhjNzk4YWFiMTg0NTU1
ZDUxN2RmYjQ3MTIzNWFiOTNlYWQzZTg2Y2QwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArZPopfNQiB2aG9f0YHFutaJJxnpmjdBw9imMUEwSlxtvs5di
mmARLPQg+95PjPYyJCqe7wzq6PM7ViHCqGQkbBEfUe20zMZaBtMuUugMAsl7m3xB
OofrasRZQn8gdo9y9fjuF7XfZ1N2pcHSzbftEhW1AmoOIi/eJ272qJmtaQLjvCX9
Ztzzyh4qfOAJ5VCD8MjfTh5kKwzyfoagwpNFcy0PgHUU/7iolpkR7NVXMboY0bqh
9obzICgjETMD06n47i+7QNsjfoPruBgUTuidlZb5WVge059CFBX7etdRYeeM/VTo
1QRo2Javvk8RwOK4cMBqX+xt7gI2yJvV7NDe9wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFOL5WArUpgB7fLuaBP8CMEngxImmMB8GA1UdIwQYMBaAFI1zxHehMa1tUWdm
3vRyzC5gSH+tMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2YyODUz
Y2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDZmMjFhOGMtM2E3MS00N2E3LTlmNmUtYzliNDQx
NDI3ZmNkL2M3OThhYWIxODQ1NTVkNTE3ZGZiNDcxMjM1YWI5M2VhZDNlODZjZDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kNmYyMWE4Yy0zYTcxLTQ3YTctOWY2ZS1jOWI0
NDE0MjdmY2QvY2YyODUzY2M4NWMxZTU1YzY1ZTc2MzI5OWJhMDg4OTRmOGNlOGQ1
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5igTANBgkqhkiG9w0BAQsFAAOCAQEAJaSaT4MErQtiYpcT
yTxDnPigZebjkTLi56TX0N07iPuaHaKHGpXOlUbssH7Ic46UJQv+2rqwRrxzcgxa
tCwBpET57pkiQY4uKgTR8DyufoNzcOkezf6UpwWBDSXdukN98G6LugT2sucpnA3O
qA5F0auBV7LJ3uUuovzI6ja5vFejRedLRCiaZJbvZ9jORcYLGQ7EGqdWet9OHhQC
QQhWtBGP606ChBQlyFkRohu5mivm+zxWXlsDCxrG7d8Mphmq8jTC6v9mev20fciY
+tS8CQycyx7PgC9tICGrZqFXhXGle4nKcy3aUVKJs7nlUzzQnG1grZeZ/+iuhnZz
EnP93A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org