Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/e1fa43e9e4279dfa40f4d7a69c25fbcab54e8175.roa
File:                     e1fa43e9e4279dfa40f4d7a69c25fbcab54e8175.roa (raw, json)
Hash identifier:          8DWZlyi4BcMh5/w6hKr29948H+Nnqghca63LInIK5FY=
Subject key identifier:   9E:76:21:E5:FF:DA:D4:70:FE:9C:C3:6E:2C:49:D5:97:E0:CA:6A:62
Certificate issuer:       /CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Certificate serial:       226626
Authority key identifier: D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/e1fa43e9e4279dfa40f4d7a69c25fbcab54e8175.roa
Signing time:             Sat 03 Jun 2023 19:19:22 +0000
ROA not before:           Fri 02 Jun 2023 19:19:22 +0000
ROA not after:            Tue 03 Jun 2025 19:19:22 +0000
asID:                     7303
IP address blocks:        190.185.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2254374 (0x226626)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
        Validity
            Not Before: Jun  2 19:19:22 2023 GMT
            Not After : Jun  3 19:19:22 2025 GMT
        Subject: CN=e1fa43e9e4279dfa40f4d7a69c25fbcab54e8175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:eb:5c:b5:7e:e4:a2:8a:f2:32:d5:9d:a7:8a:
                    41:f0:64:0f:03:e0:f3:4c:2d:04:da:7a:6d:e2:c6:
                    86:c8:88:0f:a7:5d:25:3f:ec:0f:30:d1:d9:4c:ef:
                    ee:47:c5:59:55:78:b7:58:c0:f8:28:ae:62:19:b5:
                    a3:a7:dc:21:fc:45:d7:2f:f0:2f:86:07:8f:b5:f2:
                    2e:8b:ec:eb:f0:f8:d6:d0:92:e7:de:1d:5d:d8:c3:
                    d5:a9:78:da:71:4c:a9:8f:fe:b7:f8:14:fd:29:3c:
                    70:bf:36:dd:ad:67:bc:34:dc:79:cf:26:3b:5b:8a:
                    78:13:8b:63:0a:12:ae:58:c1:cf:2b:35:1d:7d:9f:
                    30:30:a5:95:92:b3:00:9a:93:fa:b7:a3:b5:66:0a:
                    04:b0:37:bd:c4:ab:5f:0a:e1:53:09:bc:38:eb:d3:
                    ee:e9:80:8f:c6:b5:68:24:d3:13:b2:ee:14:dc:87:
                    f4:08:de:00:e5:d3:93:56:59:f8:9e:e9:ca:8d:83:
                    03:4e:a9:d0:45:bd:da:2f:79:cf:dc:a6:e4:36:e2:
                    fd:17:e6:df:9f:cc:8b:31:0c:4f:95:ea:85:a3:d0:
                    a5:79:20:b8:3e:60:5d:4e:47:4d:25:5d:54:a3:e1:
                    00:6d:29:89:a0:d3:63:e1:f1:36:34:3a:34:d2:6c:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:76:21:E5:FF:DA:D4:70:FE:9C:C3:6E:2C:49:D5:97:E0:CA:6A:62
            X509v3 Authority Key Identifier:
                keyid:D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/e1fa43e9e4279dfa40f4d7a69c25fbcab54e8175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/103a3ea12b7f2ac503f3b2a208930367c4230e34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:ad:5e:55:2b:89:57:15:d0:4e:44:6f:43:92:d0:ff:f7:e1:
         a9:e2:0c:75:f3:d2:f2:1a:83:ab:21:41:95:e8:e1:e2:4a:6f:
         05:71:46:4d:8c:df:2c:45:4a:14:c2:c7:d3:46:76:71:c6:72:
         1d:58:2e:ce:43:b2:b9:e1:45:cb:c8:4e:78:14:7e:09:91:ca:
         fc:b5:8f:00:b6:3d:75:ea:4c:83:56:be:a8:78:6f:19:0e:d8:
         95:9d:6a:64:56:0e:34:bd:3e:5d:a9:22:14:f5:90:98:b8:e0:
         0d:ca:54:7e:8b:ac:63:d5:25:3a:21:b3:6e:83:18:d0:f9:0c:
         0e:a1:4e:4f:d7:04:65:74:4b:ec:df:e9:f7:6e:21:e7:e4:e5:
         71:db:f3:f7:e3:7b:db:df:33:6b:b6:92:39:51:cd:8c:e1:0c:
         bb:1b:98:2b:66:a9:28:4d:68:43:33:8b:b2:70:3e:24:0d:ee:
         ae:14:1b:1c:71:be:29:39:e4:cc:4f:26:28:42:83:8c:9a:be:
         48:31:f7:3f:d7:65:69:89:ef:ca:f7:30:23:19:14:3a:1e:78:
         3c:f7:8a:94:95:8e:56:d4:09:50:e8:a6:2b:e2:a7:25:e5:fa:
         7e:f6:74:52:e1:8b:63:a3:e7:4e:17:e9:a0:0f:dd:bc:be:ff:
         f0:23:ef:f9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDImYmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDEw
M2EzZWExMmI3ZjJhYzUwM2YzYjJhMjA4OTMwMzY3YzQyMzBlMzQwHhcNMjMwNjAy
MTkxOTIyWhcNMjUwNjAzMTkxOTIyWjAzMTEwLwYDVQQDEyhlMWZhNDNlOWU0Mjc5
ZGZhNDBmNGQ3YTY5YzI1ZmJjYWI1NGU4MTc1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAh+tctX7kooryMtWdp4pB8GQPA+DzTC0E2npt4saGyIgPp10l
P+wPMNHZTO/uR8VZVXi3WMD4KK5iGbWjp9wh/EXXL/AvhgePtfIui+zr8PjW0JLn
3h1d2MPVqXjacUypj/63+BT9KTxwvzbdrWe8NNx5zyY7W4p4E4tjChKuWMHPKzUd
fZ8wMKWVkrMAmpP6t6O1ZgoEsDe9xKtfCuFTCbw469Pu6YCPxrVoJNMTsu4U3If0
CN4A5dOTVln4nunKjYMDTqnQRb3aL3nP3KbkNuL9F+bfn8yLMQxPleqFo9CleSC4
PmBdTkdNJV1Uo+EAbSmJoNNj4fE2NDo00mxk8wIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFJ52IeX/2tRw/pzDbixJ1ZfgympiMB8GA1UdIwQYMBaAFNU0yLFFNHXVEn72
c689VA8nvwH3MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTAzYTNl
YTEyYjdmMmFjNTAzZjNiMmEyMDg5MzAzNjdjNDIzMGUzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTk3OWFjMGEtZTMyNy00Mzg4LWI5YzgtNDRkZmUy
MzA3YWIyL2UxZmE0M2U5ZTQyNzlkZmE0MGY0ZDdhNjljMjVmYmNhYjU0ZTgxNzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lOTc5YWMwYS1lMzI3LTQzODgtYjljOC00NGRm
ZTIzMDdhYjIvMTAzYTNlYTEyYjdmMmFjNTAzZjNiMmEyMDg5MzAzNjdjNDIzMGUz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL65zDANBgkqhkiG9w0BAQsFAAOCAQEAWa1eVSuJVxXQTkRv
Q5LQ//fhqeIMdfPS8hqDqyFBlejh4kpvBXFGTYzfLEVKFMLH00Z2ccZyHVguzkOy
ueFFy8hOeBR+CZHK/LWPALY9depMg1a+qHhvGQ7YlZ1qZFYONL0+XakiFPWQmLjg
DcpUfousY9UlOiGzboMY0PkMDqFOT9cEZXRL7N/p924h5+Tlcdvz9+N7298za7aS
OVHNjOEMuxuYK2apKE1oQzOLsnA+JA3urhQbHHG+KTnkzE8mKEKDjJq+SDH3P9dl
aYnvyvcwIxkUOh54PPeKlJWOVtQJUOimK+KnJeX6fvZ0UuGLY6PnThfpoA/dvL7/
8CPv+Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org