Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/b4c484f60ae5cc2ce7f86ca85400e88a279635a5.roa
File:                     b4c484f60ae5cc2ce7f86ca85400e88a279635a5.roa (raw, json)
Hash identifier:          GWlZR/mK6y9cD3qic71a5KLi5fXMYm6vVElIpvx+cKQ=
Subject key identifier:   6F:1C:82:7A:5F:DD:12:36:A3:CA:0D:24:2F:C5:7F:DF:BC:91:7F:F6
Certificate issuer:       /CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Certificate serial:       0DCAB7
Authority key identifier: D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/b4c484f60ae5cc2ce7f86ca85400e88a279635a5.roa
Signing time:             Wed 24 Mar 2021 14:31:55 +0000
ROA not before:           Wed 24 Mar 2021 14:31:55 +0000
ROA not after:            Tue 24 Mar 2026 14:31:55 +0000
asID:                     265719
IP address blocks:        190.182.250.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903863 (0xdcab7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
        Validity
            Not Before: Mar 24 14:31:55 2021 GMT
            Not After : Mar 24 14:31:55 2026 GMT
        Subject: CN=b4c484f60ae5cc2ce7f86ca85400e88a279635a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dc:66:12:df:21:7c:1a:f2:1a:c7:56:37:de:
                    15:aa:27:6a:a7:28:8e:8e:86:f5:07:d4:08:38:fb:
                    66:dc:f8:2f:fa:10:6d:f2:57:61:7d:4a:3b:33:ce:
                    f5:d2:96:a2:f9:36:16:56:f0:5f:ef:2a:ab:0c:af:
                    30:f9:8c:82:e1:72:a4:6a:82:27:d0:11:99:9e:1b:
                    44:c3:7b:f4:ab:c7:f2:28:88:5f:fb:c1:c4:e7:23:
                    81:f6:19:1b:c1:f7:52:c2:3e:8c:77:6e:2b:58:1e:
                    cc:cd:66:6b:96:72:a1:05:42:01:2e:74:61:3f:88:
                    95:65:be:05:7b:2a:01:70:b2:8e:e8:7c:3f:90:34:
                    aa:c1:44:89:31:b3:7d:b1:9c:69:7d:70:a0:82:46:
                    c0:4b:07:19:b0:94:aa:87:62:20:93:ad:c7:f2:8d:
                    ee:0c:ad:75:5f:ee:67:fc:d7:20:e8:ea:c5:0a:f3:
                    0f:94:a0:c2:6d:d2:37:8d:a9:c9:f1:f2:41:32:0e:
                    be:35:5b:d5:4a:e9:1d:30:7a:fe:7b:1b:d1:9b:9c:
                    51:6f:88:8b:27:d2:1a:fb:39:e8:1c:0c:e8:95:de:
                    49:0c:5c:05:0b:d5:2c:41:e0:d4:4f:15:3c:f3:40:
                    f8:bd:09:46:32:7b:e2:4e:fc:58:c2:6d:98:7b:6f:
                    57:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1C:82:7A:5F:DD:12:36:A3:CA:0D:24:2F:C5:7F:DF:BC:91:7F:F6
            X509v3 Authority Key Identifier:
                keyid:D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/b4c484f60ae5cc2ce7f86ca85400e88a279635a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/103a3ea12b7f2ac503f3b2a208930367c4230e34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.182.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:ba:c6:bb:ca:31:c1:97:30:10:a3:19:1e:d3:76:e0:66:5d:
         53:a5:de:f7:c6:11:45:04:2e:82:19:a6:b5:08:16:5a:87:9a:
         0a:e8:91:d5:86:fc:3f:28:ca:67:e7:01:62:40:4d:c7:0a:af:
         10:02:be:83:69:4e:be:5b:9d:b3:29:2a:57:da:f3:fd:c3:7b:
         0f:4a:5a:fa:ca:62:3d:f6:a5:bd:df:d6:4c:11:d2:c5:d4:c6:
         8a:ad:ad:15:9e:ea:81:28:1a:29:7d:a8:5f:4c:6c:56:d5:82:
         b3:2c:fe:51:f8:05:28:23:5f:bd:a2:e9:bb:54:b9:7b:5e:f2:
         98:75:2d:8a:70:f1:43:07:d2:c4:96:c8:2c:8e:8e:dd:c3:10:
         b7:5a:58:5d:b8:34:26:7d:12:19:c9:f1:82:5a:84:cc:ae:dc:
         f3:60:2d:8b:39:b7:34:13:83:12:36:dd:a2:b9:61:92:c2:fc:
         71:d3:34:dd:78:49:99:69:db:fb:a6:9b:12:87:df:10:7e:4d:
         00:af:2c:c8:b2:c1:f0:c8:0d:0c:d8:78:3d:be:a2:e8:34:e9:
         e7:bc:62:e7:67:1b:c5:e9:78:54:77:7d:73:c9:f5:69:4a:67:
         d8:de:5a:5e:f4:ac:3a:8f:24:5a:a1:c1:53:61:48:0c:38:ec:
         ab:50:b4:43
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDcq3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
M2EzZWExMmI3ZjJhYzUwM2YzYjJhMjA4OTMwMzY3YzQyMzBlMzQwHhcNMjEwMzI0
MTQzMTU1WhcNMjYwMzI0MTQzMTU1WjAzMTEwLwYDVQQDEyhiNGM0ODRmNjBhZTVj
YzJjZTdmODZjYTg1NDAwZTg4YTI3OTYzNWE1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgtxmEt8hfBryGsdWN94VqidqpyiOjob1B9QIOPtm3Pgv+hBt
8ldhfUo7M8710pai+TYWVvBf7yqrDK8w+YyC4XKkaoIn0BGZnhtEw3v0q8fyKIhf
+8HE5yOB9hkbwfdSwj6Md24rWB7MzWZrlnKhBUIBLnRhP4iVZb4FeyoBcLKO6Hw/
kDSqwUSJMbN9sZxpfXCggkbASwcZsJSqh2Igk63H8o3uDK11X+5n/Ncg6OrFCvMP
lKDCbdI3janJ8fJBMg6+NVvVSukdMHr+exvRm5xRb4iLJ9Ia+znoHAzold5JDFwF
C9UsQeDUTxU880D4vQlGMnviTvxYwm2Ye29X0QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFG8cgnpf3RI2o8oNJC/Ff9+8kX/2MB8GA1UdIwQYMBaAFNU0yLFFNHXVEn72
c689VA8nvwH3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTAzYTNl
YTEyYjdmMmFjNTAzZjNiMmEyMDg5MzAzNjdjNDIzMGUzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTk3OWFjMGEtZTMyNy00Mzg4LWI5YzgtNDRkZmUy
MzA3YWIyL2I0YzQ4NGY2MGFlNWNjMmNlN2Y4NmNhODU0MDBlODhhMjc5NjM1YTUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lOTc5YWMwYS1lMzI3LTQzODgtYjljOC00NGRm
ZTIzMDdhYjIvMTAzYTNlYTEyYjdmMmFjNTAzZjNiMmEyMDg5MzAzNjdjNDIzMGUz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAb62+jANBgkqhkiG9w0BAQsFAAOCAQEAL7rGu8oxwZcwEKMZ
HtN24GZdU6Xe98YRRQQughmmtQgWWoeaCuiR1Yb8PyjKZ+cBYkBNxwqvEAK+g2lO
vludsykqV9rz/cN7D0pa+spiPfalvd/WTBHSxdTGiq2tFZ7qgSgaKX2oX0xsVtWC
syz+UfgFKCNfvaLpu1S5e17ymHUtinDxQwfSxJbILI6O3cMQt1pYXbg0Jn0SGcnx
glqEzK7c82Atizm3NBODEjbdorlhksL8cdM03XhJmWnb+6abEoffEH5NAK8syLLB
8MgNDNh4Pb6i6DTp57xi52cbxel4VHd9c8n1aUpn2N5aXvSsOo8kWqHBU2FIDDjs
q1C0Qw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org