Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/25c2f675ca48f55c83fb496f2b95e00e7a861956.roa
File:                     25c2f675ca48f55c83fb496f2b95e00e7a861956.roa (raw, json)
Hash identifier:          M04L9gQHRkBtf2tznITHIs9uas1aw5kBL6dqhF+1V9s=
Subject key identifier:   33:78:66:E9:94:51:F0:9D:51:91:94:20:1D:E2:48:7E:80:B2:8B:6C
Certificate issuer:       /CN=c808f585323c60a52c534c21625a79d8b5959db7
Certificate serial:       2098B7
Authority key identifier: 6B:24:3C:26:F5:3C:CC:AC:F0:B0:8B:93:85:4A:1C:40:57:02:F0:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c808f585323c60a52c534c21625a79d8b5959db7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/25c2f675ca48f55c83fb496f2b95e00e7a861956.roa
Signing time:             Tue 04 Jul 2023 14:45:43 +0000
ROA not before:           Mon 03 Jul 2023 14:45:43 +0000
ROA not after:            Fri 04 Jul 2025 14:45:43 +0000
asID:                     28107
IP address blocks:        190.124.224.0/20 maxlen: 20
                          190.124.240.0/22 maxlen: 22
                          2801:0:2f0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136247 (0x2098b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c808f585323c60a52c534c21625a79d8b5959db7
        Validity
            Not Before: Jul  3 14:45:43 2023 GMT
            Not After : Jul  4 14:45:43 2025 GMT
        Subject: CN=25c2f675ca48f55c83fb496f2b95e00e7a861956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:f2:e3:24:17:e7:f4:87:0a:c7:d1:da:a3:
                    eb:34:10:61:ce:7e:a0:80:05:ad:8c:cf:c8:c8:f8:
                    f1:8b:ed:c0:7f:2a:84:8d:61:fd:b1:c9:2e:8b:a8:
                    fb:39:32:06:7f:65:8a:af:63:bf:60:13:6e:c7:4f:
                    d6:d3:80:4f:9e:2c:a2:91:f9:e7:cf:69:55:e5:06:
                    4b:ee:76:b9:0e:22:fa:25:50:7c:93:47:d8:8e:21:
                    4c:86:2a:9b:a4:28:0f:ee:76:00:53:5c:39:f8:7b:
                    bb:7d:c4:fc:e3:1f:9e:78:52:b4:1a:59:55:93:79:
                    e9:bd:95:92:70:0e:5d:c0:ef:58:f0:23:30:7a:24:
                    27:47:8e:8e:34:b4:a0:b7:2b:9e:ab:02:09:a3:e8:
                    94:ac:e1:6b:51:bb:b6:05:50:ff:7b:38:45:df:c9:
                    80:62:a2:12:64:2f:45:6f:4f:9e:ba:ee:65:f9:ba:
                    56:d4:eb:67:86:1b:f8:c7:c9:ec:17:7b:94:2f:72:
                    4c:0b:3c:d3:d5:a1:c1:c7:1f:6d:4f:f4:9f:c6:07:
                    9f:9a:cb:38:27:8a:18:86:c7:c3:7f:aa:9d:ed:37:
                    ff:e8:32:10:24:7a:ac:00:55:88:a6:67:53:e8:3a:
                    93:98:d0:e6:02:90:f3:1e:3b:06:22:84:87:6c:14:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:78:66:E9:94:51:F0:9D:51:91:94:20:1D:E2:48:7E:80:B2:8B:6C
            X509v3 Authority Key Identifier:
                keyid:6B:24:3C:26:F5:3C:CC:AC:F0:B0:8B:93:85:4A:1C:40:57:02:F0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c808f585323c60a52c534c21625a79d8b5959db7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/25c2f675ca48f55c83fb496f2b95e00e7a861956.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/c808f585323c60a52c534c21625a79d8b5959db7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.224.0-190.124.243.255
                IPv6:
                  2801:0:2f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:48:0f:62:9d:01:db:88:d2:da:cc:43:9f:44:d6:73:3b:70:
         6b:7d:d5:d0:a7:06:22:98:28:01:3a:2e:c8:b3:f4:ec:36:e0:
         e4:fc:bd:6a:ae:25:44:4d:2a:c0:33:80:ef:fc:0c:50:a5:ef:
         08:f6:08:a2:98:38:e8:98:40:a0:9b:d0:4a:49:f4:12:72:42:
         d6:94:39:53:0e:99:c0:ff:b6:77:79:56:17:da:94:a0:05:81:
         26:2a:a7:8d:2b:f3:99:ed:e2:a2:b6:43:e7:ab:ff:6e:dd:8c:
         04:c7:69:8b:4e:53:5e:8c:23:b5:fb:89:cd:38:b0:8a:93:b2:
         fb:df:bd:4e:07:b9:8b:dc:65:96:fb:3d:3c:36:cb:21:92:29:
         50:a0:89:88:b9:55:c8:b2:40:3a:1c:2b:b9:d3:bc:de:9f:44:
         a0:f5:dd:1a:12:46:74:07:a3:c8:9b:46:8a:3d:0d:20:52:54:
         b3:20:8e:6e:9c:6d:24:b0:54:42:7a:1c:6d:2b:0f:fb:85:f4:
         d3:6b:bb:f3:3e:1d:85:db:b0:f2:2b:5c:ee:82:91:7f:d6:59:
         03:f9:4c:f9:cc:6f:5f:74:ab:b0:5d:74:f7:4d:88:40:ee:65:
         64:43:d4:2c:d6:92:c9:a6:77:12:0c:52:92:58:f6:43:a6:4a:
         f2:a8:cc:58
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDIJi3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM4
MDhmNTg1MzIzYzYwYTUyYzUzNGMyMTYyNWE3OWQ4YjU5NTlkYjcwHhcNMjMwNzAz
MTQ0NTQzWhcNMjUwNzA0MTQ0NTQzWjAzMTEwLwYDVQQDEygyNWMyZjY3NWNhNDhm
NTVjODNmYjQ5NmYyYjk1ZTAwZTdhODYxOTU2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoYHy4yQX5/SHCsfR2qPrNBBhzn6ggAWtjM/IyPjxi+3AfyqE
jWH9sckui6j7OTIGf2WKr2O/YBNux0/W04BPniyikfnnz2lV5QZL7na5DiL6JVB8
k0fYjiFMhiqbpCgP7nYAU1w5+Hu7fcT84x+eeFK0GllVk3npvZWScA5dwO9Y8CMw
eiQnR46ONLSgtyueqwIJo+iUrOFrUbu2BVD/ezhF38mAYqISZC9Fb0+euu5l+bpW
1Otnhhv4x8nsF3uUL3JMCzzT1aHBxx9tT/Sfxgefmss4J4oYhsfDf6qd7Tf/6DIQ
JHqsAFWIpmdT6DqTmNDmApDzHjsGIoSHbBTwcQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFDN4ZumUUfCdUZGUIB3iSH6AsotsMB8GA1UdIwQYMBaAFGskPCb1PMys8LCL
k4VKHEBXAvC7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzgwOGY1
ODUzMjNjNjBhNTJjNTM0YzIxNjI1YTc5ZDhiNTk1OWRiNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWQ5ZmFmM2QtZGVmMS00NzhjLWI2OGQtYjA4ZDE3
NjFmOGMwLzI1YzJmNjc1Y2E0OGY1NWM4M2ZiNDk2ZjJiOTVlMDBlN2E4NjE5NTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZDlmYWYzZC1kZWYxLTQ3OGMtYjY4ZC1iMDhk
MTc2MWY4YzAvYzgwOGY1ODUzMjNjNjBhNTJjNTM0YzIxNjI1YTc5ZDhiNTk1OWRi
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA4BggrBgEFBQcBBwEB/wQp
MCcwFAQCAAEwDjAMAwQFvnzgAwQCvnzwMA8EAgACMAkDBwAoAQAAAvAwDQYJKoZI
hvcNAQELBQADggEBAGJID2KdAduI0trMQ59E1nM7cGt91dCnBiKYKAE6Lsiz9Ow2
4OT8vWquJURNKsAzgO/8DFCl7wj2CKKYOOiYQKCb0EpJ9BJyQtaUOVMOmcD/tnd5
VhfalKAFgSYqp40r85nt4qK2Q+er/27djATHaYtOU16MI7X7ic04sIqTsvvfvU4H
uYvcZZb7PTw2yyGSKVCgiYi5VciyQDocK7nTvN6fRKD13RoSRnQHo8ibRoo9DSBS
VLMgjm6cbSSwVEJ6HG0rD/uF9NNru/M+HYXbsPIrXO6CkX/WWQP5TPnMb190q7Bd
dPdNiEDuZWRD1CzWksmmdxIMUpJY9kOmSvKozFg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org