Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/45774f09209746339abc431b6bf56b00092425b1.roa
File:                     45774f09209746339abc431b6bf56b00092425b1.roa (raw, json)
Hash identifier:          YjQzwR511SFvXjxLjY4u77jdZsR5G+D2E66hneVqpWM=
Subject key identifier:   D1:70:67:50:11:48:15:58:CD:07:5D:31:42:99:FF:86:89:AD:D2:76
Certificate issuer:       /CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Certificate serial:       2550D5
Authority key identifier: D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/45774f09209746339abc431b6bf56b00092425b1.roa
Signing time:             Wed 20 Sep 2023 18:34:22 +0000
ROA not before:           Tue 19 Sep 2023 18:34:22 +0000
ROA not after:            Sat 20 Sep 2025 18:34:22 +0000
asID:                     7303
IP address blocks:        190.182.250.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2445525 (0x2550d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
        Validity
            Not Before: Sep 19 18:34:22 2023 GMT
            Not After : Sep 20 18:34:22 2025 GMT
        Subject: CN=45774f09209746339abc431b6bf56b00092425b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:be:57:a8:f8:f7:7d:46:02:83:50:60:77:8c:
                    18:5f:a3:93:a4:f0:ef:ce:59:b5:24:56:3c:16:e5:
                    7c:55:f9:1f:28:e2:e3:2d:37:6e:7a:a5:73:f3:80:
                    36:55:e6:75:45:a9:d2:23:3a:60:28:8c:1e:ac:e5:
                    f2:58:1b:be:7a:84:ee:83:fc:c8:3b:80:21:5b:7d:
                    42:2e:b1:d3:07:b6:d1:25:54:d1:be:04:80:05:96:
                    ae:06:14:06:d1:bc:58:6a:01:08:b6:5c:f7:8a:1a:
                    ab:fc:dd:35:ce:59:8d:ae:95:62:2f:a4:d1:e8:79:
                    62:db:e8:fc:49:20:6b:22:be:7d:01:04:7a:ee:5c:
                    14:8a:bc:be:e5:56:77:7b:7c:13:a6:4b:1d:b8:23:
                    1d:68:00:38:48:3d:10:95:02:2b:85:da:26:74:d6:
                    40:d5:16:37:c7:c9:b4:2c:af:f3:f4:ea:98:41:18:
                    0f:5c:a5:0b:b6:66:f2:95:f4:1f:1e:69:60:1b:03:
                    0a:81:9b:37:72:34:c5:4c:8c:8f:11:e4:b3:0c:7a:
                    2a:87:74:f3:a0:fc:f8:7c:c6:f3:14:26:3c:bc:79:
                    1a:e5:5d:16:c0:e0:4e:48:92:b4:ff:04:4e:4b:60:
                    df:02:08:22:f1:66:94:ca:40:9e:81:3b:44:3a:2a:
                    29:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:70:67:50:11:48:15:58:CD:07:5D:31:42:99:FF:86:89:AD:D2:76
            X509v3 Authority Key Identifier:
                keyid:D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/45774f09209746339abc431b6bf56b00092425b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/103a3ea12b7f2ac503f3b2a208930367c4230e34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.182.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:ca:01:02:05:35:28:b4:49:c2:19:ea:f7:dd:57:c0:d5:5c:
         00:bc:af:d6:d9:9b:40:30:c9:f2:32:f0:87:ee:a7:1c:01:3e:
         5c:0d:bc:20:6e:1d:1c:70:e6:dd:e3:6f:09:51:3f:0a:38:68:
         2a:80:f0:9c:87:9b:86:eb:38:f9:a3:51:7f:38:7e:41:03:05:
         62:ae:b2:ea:da:38:8d:05:74:b9:d6:fd:3d:91:05:5d:61:e2:
         39:5f:3a:42:cd:bb:a1:ba:7c:5b:60:e2:f7:f1:59:76:b5:d2:
         7c:c5:d8:a5:70:a9:a9:3a:a5:7b:18:1b:1d:df:66:ad:c6:8c:
         0c:09:9b:6d:68:fd:2e:3b:42:4b:0b:9d:f2:6a:f4:6c:05:25:
         88:ac:23:f9:ec:44:22:3b:7e:d7:62:3b:2c:61:54:42:22:c7:
         f8:f9:9a:3b:05:6a:d0:ae:5f:25:66:54:ac:ce:51:54:5e:bd:
         4c:45:28:5c:72:62:d8:a8:10:e1:91:f8:f7:83:eb:39:35:8a:
         26:b7:ca:75:b4:15:31:74:b4:c3:7b:07:9e:8b:8d:43:9e:48:
         1d:e3:a7:80:0d:c0:34:e9:b0:32:12:26:3d:74:79:fd:ec:a9:
         79:e2:b1:95:cc:5d:7a:ec:6e:2b:34:bb:2f:2f:9e:92:34:0c:
         ed:93:47:a8
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJVDVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
M2EzZWExMmI3ZjJhYzUwM2YzYjJhMjA4OTMwMzY3YzQyMzBlMzQwHhcNMjMwOTE5
MTgzNDIyWhcNMjUwOTIwMTgzNDIyWjAzMTEwLwYDVQQDEyg0NTc3NGYwOTIwOTc0
NjMzOWFiYzQzMWI2YmY1NmIwMDA5MjQyNWIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi75XqPj3fUYCg1Bgd4wYX6OTpPDvzlm1JFY8FuV8VfkfKOLj
LTdueqVz84A2VeZ1RanSIzpgKIwerOXyWBu+eoTug/zIO4AhW31CLrHTB7bRJVTR
vgSABZauBhQG0bxYagEItlz3ihqr/N01zlmNrpViL6TR6Hli2+j8SSBrIr59AQR6
7lwUiry+5VZ3e3wTpksduCMdaAA4SD0QlQIrhdomdNZA1RY3x8m0LK/z9OqYQRgP
XKULtmbylfQfHmlgGwMKgZs3cjTFTIyPEeSzDHoqh3TzoPz4fMbzFCY8vHka5V0W
wOBOSJK0/wROS2DfAggi8WaUykCegTtEOiopLQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFNFwZ1ARSBVYzQddMUKZ/4aJrdJ2MB8GA1UdIwQYMBaAFNU0yLFFNHXVEn72
c689VA8nvwH3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTAzYTNl
YTEyYjdmMmFjNTAzZjNiMmEyMDg5MzAzNjdjNDIzMGUzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTk3OWFjMGEtZTMyNy00Mzg4LWI5YzgtNDRkZmUy
MzA3YWIyLzQ1Nzc0ZjA5MjA5NzQ2MzM5YWJjNDMxYjZiZjU2YjAwMDkyNDI1YjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lOTc5YWMwYS1lMzI3LTQzODgtYjljOC00NGRm
ZTIzMDdhYjIvMTAzYTNlYTEyYjdmMmFjNTAzZjNiMmEyMDg5MzAzNjdjNDIzMGUz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb62+jANBgkqhkiG9w0BAQsFAAOCAQEANMoBAgU1KLRJwhnq
991XwNVcALyv1tmbQDDJ8jLwh+6nHAE+XA28IG4dHHDm3eNvCVE/CjhoKoDwnIeb
hus4+aNRfzh+QQMFYq6y6to4jQV0udb9PZEFXWHiOV86Qs27obp8W2Di9/FZdrXS
fMXYpXCpqTqlexgbHd9mrcaMDAmbbWj9LjtCSwud8mr0bAUliKwj+exEIjt+12I7
LGFUQiLH+PmaOwVq0K5fJWZUrM5RVF69TEUoXHJi2KgQ4ZH494PrOTWKJrfKdbQV
MXS0w3sHnouNQ55IHeOngA3ANOmwMhImPXR5/eypeeKxlcxdeuxuKzS7Ly+ekjQM
7ZNHqA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org