Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/63b0c96b45f5280a72d3f3fa672c93fb62760ca1.roa
File:                     63b0c96b45f5280a72d3f3fa672c93fb62760ca1.roa (raw, json)
Hash identifier:          W2P8cSnvfkA3oiK9sJcgZIZbPxGK8nfbSIkOG973uv8=
Subject key identifier:   FD:0D:FD:AE:0B:63:CC:5D:A6:05:2A:D6:42:FC:E8:40:D2:C5:47:9A
Certificate issuer:       /CN=4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa
Certificate serial:       206AB1
Authority key identifier: 16:32:85:BE:91:49:B4:FA:01:47:42:4E:C1:3D:94:27:89:1E:13:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/63b0c96b45f5280a72d3f3fa672c93fb62760ca1.roa
Signing time:             Mon 29 May 2023 16:13:27 +0000
ROA not before:           Sun 28 May 2023 16:13:26 +0000
ROA not after:            Thu 29 May 2025 16:13:26 +0000
asID:                     27844
IP address blocks:        190.94.152.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124465 (0x206ab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa
        Validity
            Not Before: May 28 16:13:26 2023 GMT
            Not After : May 29 16:13:26 2025 GMT
        Subject: CN=63b0c96b45f5280a72d3f3fa672c93fb62760ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:31:60:cc:e1:37:28:b5:36:93:d4:12:c2:
                    b6:4a:ad:92:b2:ee:d7:39:43:25:0a:3e:06:6a:95:
                    74:1d:7e:98:63:83:17:15:43:0d:5e:fc:ac:ac:f5:
                    45:48:70:27:4a:04:f1:2f:67:aa:1c:e2:96:5f:e7:
                    8d:fe:3b:6a:6b:b7:ef:76:3c:06:d4:b5:b8:2c:a0:
                    87:9c:6c:b1:dc:60:d6:0b:65:18:9b:a9:b7:2e:97:
                    7c:25:e7:e4:9d:7b:44:09:b8:35:d5:cc:5c:f3:26:
                    c1:35:fc:12:ea:0c:67:74:97:7a:a8:29:1c:2a:45:
                    59:38:ff:c1:65:eb:38:3c:f0:54:d6:62:6e:14:9d:
                    4e:1c:f2:3d:ce:ee:3d:24:e6:02:91:16:75:87:2c:
                    bf:7b:bd:50:4c:d6:26:60:bc:d2:53:81:f4:01:18:
                    04:a0:a6:78:ce:61:89:13:d2:b4:0b:c9:77:d5:f5:
                    01:ff:74:94:56:88:cf:b9:51:be:fd:ad:82:4a:e4:
                    29:0c:7e:eb:fc:2b:a9:bf:f9:56:75:13:26:4b:27:
                    3f:17:17:40:64:24:9d:62:ee:55:ad:35:b1:cb:ec:
                    09:08:22:0e:14:1d:45:90:a5:fe:e8:1d:e9:0d:b3:
                    b5:bc:8f:c8:1d:76:40:c9:88:45:ab:6e:18:86:64:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0D:FD:AE:0B:63:CC:5D:A6:05:2A:D6:42:FC:E8:40:D2:C5:47:9A
            X509v3 Authority Key Identifier:
                keyid:16:32:85:BE:91:49:B4:FA:01:47:42:4E:C1:3D:94:27:89:1E:13:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/63b0c96b45f5280a72d3f3fa672c93fb62760ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:dd:15:72:b1:b7:fc:31:6b:1b:f1:83:ed:70:5d:8b:ec:
         cd:0f:42:72:f0:5b:ac:6d:71:42:74:37:42:26:a2:e3:45:86:
         18:f8:bf:dd:80:64:98:16:fc:d9:10:f0:69:94:0d:ef:6b:77:
         75:77:0b:c6:2a:ff:8b:b0:ca:9e:c2:53:67:ee:ab:4d:68:cd:
         d2:a0:99:3c:fd:4f:95:99:90:4d:20:ad:1f:f8:6b:1e:fb:e4:
         86:f1:95:18:98:76:7b:60:51:dd:f8:34:02:e0:cf:c4:5d:3f:
         de:9b:ab:4b:17:83:1c:3a:04:cb:75:7f:e6:4e:35:84:78:f3:
         c1:27:8d:14:ef:a4:ef:50:dc:b8:5a:73:f3:9f:47:47:fa:a3:
         e3:53:fb:01:62:c5:c8:4d:cd:1c:fc:b4:76:9b:6c:d0:86:51:
         1c:e7:10:9d:34:d4:b1:20:96:34:ba:15:d6:5b:df:4d:71:07:
         19:c1:23:15:4a:9e:88:5c:3c:97:b4:1d:e7:23:cc:d5:6f:f5:
         ea:f5:04:4e:c3:c6:e9:f4:b2:ee:99:f0:3a:5d:7f:7d:9d:f4:
         47:bd:35:a3:36:d1:6c:21:a6:20:6b:e0:25:ca:6a:1c:28:33:
         dc:71:a7:8b:28:65:a9:ca:bc:10:e6:6f:51:0f:4a:ed:a7:a7:
         7b:87:7a:c4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIGqxMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDRh
MjhkMjE0NWM2M2ZlMmE0ZWM2OWE3YjJlZTk1MjEwMmYxMGE0ZmEwHhcNMjMwNTI4
MTYxMzI2WhcNMjUwNTI5MTYxMzI2WjAzMTEwLwYDVQQDEyg2M2IwYzk2YjQ1ZjUy
ODBhNzJkM2YzZmE2NzJjOTNmYjYyNzYwY2ExMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAm7kxYMzhNyi1NpPUEsK2Sq2Ssu7XOUMlCj4GapV0HX6YY4MX
FUMNXvysrPVFSHAnSgTxL2eqHOKWX+eN/jtqa7fvdjwG1LW4LKCHnGyx3GDWC2UY
m6m3Lpd8JefknXtECbg11cxc8ybBNfwS6gxndJd6qCkcKkVZOP/BZes4PPBU1mJu
FJ1OHPI9zu49JOYCkRZ1hyy/e71QTNYmYLzSU4H0ARgEoKZ4zmGJE9K0C8l31fUB
/3SUVojPuVG+/a2CSuQpDH7r/Cupv/lWdRMmSyc/FxdAZCSdYu5VrTWxy+wJCCIO
FB1FkKX+6B3pDbO1vI/IHXZAyYhFq24YhmS04wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFP0N/a4LY8xdpgUq1kL86EDSxUeaMB8GA1UdIwQYMBaAFBYyhb6RSbT6AUdC
TsE9lCeJHhOhMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNGEyOGQy
MTQ1YzYzZmUyYTRlYzY5YTdiMmVlOTUyMTAyZjEwYTRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZDgzZjRhN2YtMDcxMC00ZjViLTgzNDMtNDE2Mjgw
ZDg0YTBhLzYzYjBjOTZiNDVmNTI4MGE3MmQzZjNmYTY3MmM5M2ZiNjI3NjBjYTEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kODNmNGE3Zi0wNzEwLTRmNWItODM0My00MTYy
ODBkODRhMGEvNGEyOGQyMTQ1YzYzZmUyYTRlYzY5YTdiMmVlOTUyMTAyZjEwYTRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEA75emDANBgkqhkiG9w0BAQsFAAOCAQEAcLjdFXKxt/wxaxvx
g+1wXYvszQ9CcvBbrG1xQnQ3Qiai40WGGPi/3YBkmBb82RDwaZQN72t3dXcLxir/
i7DKnsJTZ+6rTWjN0qCZPP1PlZmQTSCtH/hrHvvkhvGVGJh2e2BR3fg0AuDPxF0/
3purSxeDHDoEy3V/5k41hHjzwSeNFO+k71DcuFpz859HR/qj41P7AWLFyE3NHPy0
dpts0IZRHOcQnTTUsSCWNLoV1lvfTXEHGcEjFUqeiFw8l7Qd5yPM1W/16vUETsPG
6fSy7pnwOl1/fZ30R701ozbRbCGmIGvgJcpqHCgz3HGniyhlqcq8EOZvUQ9K7aen
e4d6xA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org