Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/484f95265d5111d924f651fa37ff89cd5c555a33.roa
File:                     484f95265d5111d924f651fa37ff89cd5c555a33.roa (raw, json)
Hash identifier:          4hKcDpur3CK6LT9cBoLptfDw50mifuBwk/pnh1OE7aI=
Subject key identifier:   83:B3:DB:18:25:C9:3C:0F:E6:17:FF:4E:45:48:92:7A:33:81:CC:14
Certificate issuer:       /CN=74935393919dd2a404caa7ccadf12085d19ef35d
Certificate serial:       0E3E5A
Authority key identifier: 5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/484f95265d5111d924f651fa37ff89cd5c555a33.roa
Signing time:             Wed 24 Mar 2021 14:32:23 +0000
ROA not before:           Wed 24 Mar 2021 14:32:23 +0000
ROA not after:            Tue 24 Mar 2026 14:32:23 +0000
asID:                     264669
IP address blocks:        168.90.252.0/23 maxlen: 23
                          168.90.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933466 (0xe3e5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74935393919dd2a404caa7ccadf12085d19ef35d
        Validity
            Not Before: Mar 24 14:32:23 2021 GMT
            Not After : Mar 24 14:32:23 2026 GMT
        Subject: CN=484f95265d5111d924f651fa37ff89cd5c555a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:2c:64:9d:63:b7:52:62:13:e4:5c:a3:e2:
                    28:5e:94:8d:2a:86:4a:e9:fd:7c:8d:7a:03:c5:08:
                    08:88:a1:08:1e:db:c9:cc:cf:c4:25:c1:56:69:a6:
                    c7:35:aa:24:75:ca:5e:12:ac:fd:94:f3:2d:98:6f:
                    e0:d5:d9:f3:70:6b:a7:a6:4c:d1:54:0e:78:eb:17:
                    03:95:8d:b7:70:67:78:0b:23:cb:d5:9a:54:f8:c3:
                    9a:f0:06:5e:de:79:ae:ef:21:f8:ae:8d:20:0a:9c:
                    72:9c:f1:62:3d:7d:30:61:18:b7:49:03:39:c6:55:
                    e0:c2:1c:ae:be:6a:e9:f3:6d:4d:96:7b:7a:fd:69:
                    15:c5:e7:79:6c:76:b3:cb:2b:3b:ea:03:84:00:46:
                    b6:eb:15:f6:39:55:7a:a1:ea:4b:67:e1:d5:17:f8:
                    7d:9b:0f:8b:f8:6b:b1:a1:4e:52:2e:0c:40:31:f4:
                    1d:4e:b4:2a:4f:84:52:f7:fd:ea:12:f6:f5:cd:53:
                    bd:cb:89:48:3b:6e:6f:72:75:c1:97:45:3f:7d:84:
                    cd:22:fe:51:d3:f9:0a:08:47:45:88:da:56:e8:c1:
                    ab:bb:15:f7:d7:53:79:42:43:4c:05:c5:1b:8c:b1:
                    27:0e:ba:a2:d0:c0:ef:98:20:51:72:03:93:70:83:
                    d6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B3:DB:18:25:C9:3C:0F:E6:17:FF:4E:45:48:92:7A:33:81:CC:14
            X509v3 Authority Key Identifier:
                keyid:5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/484f95265d5111d924f651fa37ff89cd5c555a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/74935393919dd2a404caa7ccadf12085d19ef35d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.252.0-168.90.254.255

    Signature Algorithm: sha256WithRSAEncryption
         2c:ea:48:62:26:8d:59:80:94:1e:4c:e4:fa:b0:0b:52:e5:6b:
         15:ab:f1:e8:12:72:65:03:c2:b1:3b:47:c3:b5:10:64:f6:89:
         bc:52:cd:d2:42:f7:5c:d9:d4:bf:3c:6b:27:63:04:8f:29:6b:
         57:6f:4e:b4:71:e7:c2:99:a6:50:38:5d:e6:bb:2f:00:0c:af:
         db:03:3e:fa:1a:7b:3e:0a:a1:9b:a0:9d:0f:0a:40:10:6b:91:
         c1:1d:77:76:7a:6a:30:ce:42:1c:4a:5f:3c:26:07:af:25:56:
         ca:0d:5b:98:8c:df:87:f4:56:f4:39:23:86:87:83:c9:24:e2:
         5f:b0:a2:28:44:2e:16:a5:18:a2:b2:9d:ca:8f:bd:86:1c:80:
         04:21:4f:9b:5d:90:6b:42:30:06:82:b7:19:8b:e9:c7:17:42:
         60:41:0f:28:1a:0d:5d:45:1a:6f:de:37:94:bf:29:23:c5:46:
         11:66:8f:6b:c2:49:fc:9f:23:b4:8c:12:13:e3:9f:af:29:bd:
         52:54:97:fd:c8:cf:a2:cb:e2:25:d2:e3:ec:e9:ca:ef:9d:9d:
         44:84:f3:5f:da:35:c9:8c:1b:3a:0f:4e:5f:58:30:d6:23:05:
         d3:72:44:a2:7b:65:5a:87:9e:2f:1a:e1:6e:2c:d2:0f:25:08:
         26:de:4d:57
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIDDj5aMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc0
OTM1MzkzOTE5ZGQyYTQwNGNhYTdjY2FkZjEyMDg1ZDE5ZWYzNWQwHhcNMjEwMzI0
MTQzMjIzWhcNMjYwMzI0MTQzMjIzWjAzMTEwLwYDVQQDEyg0ODRmOTUyNjVkNTEx
MWQ5MjRmNjUxZmEzN2ZmODljZDVjNTU1YTMzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsjgsZJ1jt1JiE+Rco+IoXpSNKoZK6f18jXoDxQgIiKEIHtvJ
zM/EJcFWaabHNaokdcpeEqz9lPMtmG/g1dnzcGunpkzRVA546xcDlY23cGd4CyPL
1ZpU+MOa8AZe3nmu7yH4ro0gCpxynPFiPX0wYRi3SQM5xlXgwhyuvmrp821Nlnt6
/WkVxed5bHazyys76gOEAEa26xX2OVV6oepLZ+HVF/h9mw+L+GuxoU5SLgxAMfQd
TrQqT4RS9/3qEvb1zVO9y4lIO25vcnXBl0U/fYTNIv5R0/kKCEdFiNpW6MGruxX3
11N5QkNMBcUbjLEnDrqi0MDvmCBRcgOTcIPWMwIDAQABo4ICYzCCAl8wHQYDVR0O
BBYEFIOz2xglyTwP5hf/TkVIknozgcwUMB8GA1UdIwQYMBaAFF7SGl7DchKv2htK
NC9fdrUt3Af/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzQ5MzUz
OTM5MTlkZDJhNDA0Y2FhN2NjYWRmMTIwODVkMTllZjM1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTMxNjA1NjEtNTcxZS00ZTZjLWEzNzYtZTY5MzJl
ZDJmM2JhLzQ4NGY5NTI2NWQ1MTExZDkyNGY2NTFmYTM3ZmY4OWNkNWM1NTVhMzMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMzE2MDU2MS01NzFlLTRlNmMtYTM3Ni1lNjkz
MmVkMmYzYmEvNzQ5MzUzOTM5MTlkZDJhNDA0Y2FhN2NjYWRmMTIwODVkMTllZjM1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQY
MBYwFAQCAAEwDjAMAwQCqFr8AwQAqFr+MA0GCSqGSIb3DQEBCwUAA4IBAQAs6khi
Jo1ZgJQeTOT6sAtS5WsVq/HoEnJlA8KxO0fDtRBk9om8Us3SQvdc2dS/PGsnYwSP
KWtXb060cefCmaZQOF3muy8ADK/bAz76Gns+CqGboJ0PCkAQa5HBHXd2emowzkIc
Sl88JgevJVbKDVuYjN+H9Fb0OSOGh4PJJOJfsKIoRC4WpRiisp3Kj72GHIAEIU+b
XZBrQjAGgrcZi+nHF0JgQQ8oGg1dRRpv3jeUvykjxUYRZo9rwkn8nyO0jBIT45+v
Kb1SVJf9yM+iy+Il0uPs6crvnZ1EhPNf2jXJjBs6D05fWDDWIwXTckSie2Vah54v
GuFuLNIPJQgm3k1X
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org