Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/b9dd5c9a89f215b4a39c1a6a42a0e33504762ea9.roa
File:                     b9dd5c9a89f215b4a39c1a6a42a0e33504762ea9.roa (raw, json)
Hash identifier:          srxluSgFTsY23xt7qCOgF5gZUIOiMEKEsTU6TQqOUKk=
Subject key identifier:   8F:1F:10:4C:44:79:85:D1:FF:56:30:67:E5:35:E8:8C:A1:CB:AF:92
Certificate issuer:       /CN=74935393919dd2a404caa7ccadf12085d19ef35d
Certificate serial:       2172BA
Authority key identifier: 5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/b9dd5c9a89f215b4a39c1a6a42a0e33504762ea9.roa
Signing time:             Tue 18 Apr 2023 16:38:11 +0000
ROA not before:           Mon 17 Apr 2023 16:38:11 +0000
ROA not after:            Fri 18 Apr 2025 16:38:11 +0000
asID:                     264669
IP address blocks:        168.90.252.0/23 maxlen: 24
                          168.90.254.0/24 maxlen: 24
                          168.90.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192058 (0x2172ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74935393919dd2a404caa7ccadf12085d19ef35d
        Validity
            Not Before: Apr 17 16:38:11 2023 GMT
            Not After : Apr 18 16:38:11 2025 GMT
        Subject: CN=b9dd5c9a89f215b4a39c1a6a42a0e33504762ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:18:02:80:40:d9:76:c1:bf:2e:a9:ea:59:63:
                    ce:83:86:ac:0d:36:33:65:9d:ff:be:d6:bc:3b:41:
                    e2:27:03:dc:43:ac:bb:4f:41:44:2d:27:58:a3:43:
                    7b:2a:8a:97:dc:d7:ca:56:62:b2:2d:84:3c:aa:02:
                    1a:70:56:f4:7b:cc:d0:ef:71:65:a6:1b:0e:5b:7b:
                    27:19:e6:ac:ac:9d:bf:b0:54:77:96:bf:c8:de:49:
                    f3:3c:da:42:4a:be:f3:54:b8:47:0c:86:61:77:3a:
                    75:73:24:0f:2e:1c:a2:81:16:5c:81:51:b8:13:6c:
                    67:39:ea:95:87:fe:bb:f2:55:c8:f8:63:8a:34:9a:
                    f5:c6:2b:a1:f1:59:b4:3f:4f:51:d7:1c:ee:2c:dd:
                    08:7d:14:f2:da:0a:b2:3a:94:a9:50:7f:b3:ab:86:
                    15:ab:03:5c:b0:86:2c:c5:98:6d:15:90:5a:0d:f9:
                    94:90:7f:4d:f2:54:1b:41:21:f1:b4:c6:5c:4d:31:
                    5a:8c:62:80:0c:59:64:aa:ae:5f:b2:31:7a:cd:92:
                    23:8a:3a:aa:da:cd:e6:69:f9:7e:fa:ca:ee:7e:65:
                    2a:36:01:4e:7d:ed:65:51:30:74:90:5e:b8:08:93:
                    e1:3a:92:f7:54:8d:92:91:e7:b2:5f:4f:fb:33:61:
                    b0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1F:10:4C:44:79:85:D1:FF:56:30:67:E5:35:E8:8C:A1:CB:AF:92
            X509v3 Authority Key Identifier:
                keyid:5E:D2:1A:5E:C3:72:12:AF:DA:1B:4A:34:2F:5F:76:B5:2D:DC:07:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74935393919dd2a404caa7ccadf12085d19ef35d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/b9dd5c9a89f215b4a39c1a6a42a0e33504762ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3160561-571e-4e6c-a376-e6932ed2f3ba/74935393919dd2a404caa7ccadf12085d19ef35d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:11:7a:55:4b:cd:53:08:61:60:16:cb:db:78:e3:21:5a:60:
         07:26:e7:3d:37:9b:1c:dd:16:14:cd:8c:c1:d9:bf:a1:23:1f:
         a2:bf:92:68:e1:24:0d:5a:af:38:71:a0:4b:b3:9b:cb:6d:10:
         b1:da:f4:28:c0:e2:a4:09:27:37:ac:6d:a2:0d:d6:4b:3b:8c:
         da:05:45:dd:e5:e1:b3:9f:19:31:13:3e:1b:a3:de:9a:da:a9:
         54:59:b4:7a:95:46:8d:40:b4:1f:f9:b3:87:7b:2f:cd:91:38:
         5f:24:d5:c6:fe:60:15:2f:93:f2:f4:88:90:b1:a4:92:40:7a:
         30:75:70:7a:b6:b9:b7:e8:36:7f:68:e1:8e:db:a3:96:b1:17:
         07:3d:51:92:1c:86:68:9c:45:42:e2:ba:ac:71:51:16:c5:43:
         98:8b:87:7a:25:b1:b7:55:9f:2e:2e:71:22:cf:a7:02:95:6e:
         f6:59:94:7d:10:59:fb:68:94:0d:ed:8f:63:ea:e8:36:8d:1c:
         80:a7:ef:43:8e:cc:51:6c:c5:d5:5d:86:0a:d9:ad:f4:97:4c:
         9a:61:6b:50:19:36:77:18:e1:63:4f:ba:58:c4:46:a1:a9:0e:
         8a:02:1a:b9:d0:27:1c:c4:ca:8b:a0:c6:60:b1:fa:ee:2c:88:
         75:b4:1a:0f
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIXK6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc0
OTM1MzkzOTE5ZGQyYTQwNGNhYTdjY2FkZjEyMDg1ZDE5ZWYzNWQwHhcNMjMwNDE3
MTYzODExWhcNMjUwNDE4MTYzODExWjAzMTEwLwYDVQQDEyhiOWRkNWM5YTg5ZjIx
NWI0YTM5YzFhNmE0MmEwZTMzNTA0NzYyZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3hgCgEDZdsG/LqnqWWPOg4asDTYzZZ3/vta8O0HiJwPcQ6y7
T0FELSdYo0N7KoqX3NfKVmKyLYQ8qgIacFb0e8zQ73FlphsOW3snGeasrJ2/sFR3
lr/I3knzPNpCSr7zVLhHDIZhdzp1cyQPLhyigRZcgVG4E2xnOeqVh/678lXI+GOK
NJr1xiuh8Vm0P09R1xzuLN0IfRTy2gqyOpSpUH+zq4YVqwNcsIYsxZhtFZBaDfmU
kH9N8lQbQSHxtMZcTTFajGKADFlkqq5fsjF6zZIjijqq2s3mafl++srufmUqNgFO
fe1lUTB0kF64CJPhOpL3VI2SkeeyX0/7M2GwTQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFI8fEExEeYXR/1YwZ+U16Iyhy6+SMB8GA1UdIwQYMBaAFF7SGl7DchKv2htK
NC9fdrUt3Af/MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzQ5MzUz
OTM5MTlkZDJhNDA0Y2FhN2NjYWRmMTIwODVkMTllZjM1ZC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTMxNjA1NjEtNTcxZS00ZTZjLWEzNzYtZTY5MzJl
ZDJmM2JhL2I5ZGQ1YzlhODlmMjE1YjRhMzljMWE2YTQyYTBlMzM1MDQ3NjJlYTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMzE2MDU2MS01NzFlLTRlNmMtYTM3Ni1lNjkz
MmVkMmYzYmEvNzQ5MzUzOTM5MTlkZDJhNDA0Y2FhN2NjYWRmMTIwODVkMTllZjM1
ZC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqha/DANBgkqhkiG9w0BAQsFAAOCAQEAhBF6VUvNUwhhYBbL
23jjIVpgBybnPTebHN0WFM2Mwdm/oSMfor+SaOEkDVqvOHGgS7Oby20Qsdr0KMDi
pAknN6xtog3WSzuM2gVF3eXhs58ZMRM+G6PemtqpVFm0epVGjUC0H/mzh3svzZE4
XyTVxv5gFS+T8vSIkLGkkkB6MHVwera5t+g2f2jhjtujlrEXBz1RkhyGaJxFQuK6
rHFRFsVDmIuHeiWxt1WfLi5xIs+nApVu9lmUfRBZ+2iUDe2PY+roNo0cgKfvQ47M
UWzF1V2GCtmt9JdMmmFrUBk2dxjhY0+6WMRGoakOigIaudAnHMTKi6DGYLH67iyI
dbQaDw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org