Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/7c6ce10229b2cd8cfa698305cc4ab590eb289eed.roa
File:                     7c6ce10229b2cd8cfa698305cc4ab590eb289eed.roa (raw, json)
Hash identifier:          Dlr0FWfqmvgU0Gs8dGD7RzMphCiT7o9jT67fl6xQnEQ=
Subject key identifier:   E4:AA:EE:D9:03:8D:92:10:D4:D3:A9:EA:EE:3B:B3:F0:CA:DC:FD:54
Certificate issuer:       /CN=c808f585323c60a52c534c21625a79d8b5959db7
Certificate serial:       20A260
Authority key identifier: 6B:24:3C:26:F5:3C:CC:AC:F0:B0:8B:93:85:4A:1C:40:57:02:F0:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c808f585323c60a52c534c21625a79d8b5959db7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/7c6ce10229b2cd8cfa698305cc4ab590eb289eed.roa
Signing time:             Tue 04 Jul 2023 14:46:29 +0000
ROA not before:           Mon 03 Jul 2023 14:46:29 +0000
ROA not after:            Fri 04 Jul 2025 14:46:29 +0000
asID:                     28107
IP address blocks:        190.124.224.0/20 maxlen: 20
                          190.124.240.0/22 maxlen: 22
                          2801:0:2f0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138720 (0x20a260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c808f585323c60a52c534c21625a79d8b5959db7
        Validity
            Not Before: Jul  3 14:46:29 2023 GMT
            Not After : Jul  4 14:46:29 2025 GMT
        Subject: CN=7c6ce10229b2cd8cfa698305cc4ab590eb289eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d4:11:1e:d7:ae:63:1d:ad:99:e6:a8:cd:7a:
                    88:7c:56:23:92:12:c3:0f:4e:f5:25:46:f9:c4:78:
                    48:e6:64:fa:02:b2:97:89:af:11:72:b1:72:83:b6:
                    25:fc:78:50:96:75:c8:33:22:50:0f:a2:1e:9b:e0:
                    51:7d:5f:87:cf:0a:b4:9b:76:87:72:db:eb:38:fe:
                    f0:7b:cf:eb:1b:52:41:37:b5:96:2c:5d:2d:47:19:
                    8d:24:79:5b:71:f3:d9:d1:9d:a9:02:f7:a5:23:9f:
                    d9:8e:06:5a:ed:65:84:14:5f:48:a7:00:00:0a:65:
                    b6:72:a6:d2:b2:5b:ac:9a:6f:2b:1a:06:14:16:d2:
                    9d:45:73:ff:f8:f0:a9:14:c9:a3:96:1a:b4:ac:ee:
                    0e:e3:8b:05:25:c9:d0:1b:2b:65:d3:f0:1f:e4:b2:
                    4d:c0:e3:11:4c:4b:48:8e:8f:d9:c1:b3:be:fd:8a:
                    f8:96:a9:6e:f8:08:9e:87:f9:1a:53:f8:2d:cc:e5:
                    25:92:21:89:a4:e7:86:e6:01:76:b1:94:10:b5:66:
                    74:75:74:65:2c:7e:84:da:22:dc:2a:cd:c4:dd:be:
                    94:5e:94:c0:24:9f:54:f1:69:c3:4b:91:11:93:69:
                    e5:96:9a:11:d9:11:07:c1:8a:aa:c1:71:e6:22:7a:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AA:EE:D9:03:8D:92:10:D4:D3:A9:EA:EE:3B:B3:F0:CA:DC:FD:54
            X509v3 Authority Key Identifier:
                keyid:6B:24:3C:26:F5:3C:CC:AC:F0:B0:8B:93:85:4A:1C:40:57:02:F0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c808f585323c60a52c534c21625a79d8b5959db7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/7c6ce10229b2cd8cfa698305cc4ab590eb289eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed9faf3d-def1-478c-b68d-b08d1761f8c0/c808f585323c60a52c534c21625a79d8b5959db7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.224.0-190.124.243.255
                IPv6:
                  2801:0:2f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:ae:77:aa:31:99:a0:57:bf:78:c6:08:1e:68:02:93:a2:c7:
         5e:ba:c0:47:07:ca:bb:0a:8a:15:3b:fb:0e:de:67:a8:58:c1:
         61:35:74:10:03:70:2b:50:3e:f7:f9:38:4a:55:91:fd:19:5f:
         7c:1e:e9:dd:2d:5c:14:93:35:bc:a0:58:98:60:e6:e6:55:c6:
         b3:5e:c5:fe:86:c1:e4:da:c4:4a:62:55:a5:a5:21:16:e9:c9:
         49:54:19:95:16:b6:0d:9e:ec:40:0c:06:eb:36:16:0a:c8:50:
         72:e2:df:59:cd:9c:34:4a:86:de:ba:49:8b:0b:83:dc:87:bf:
         28:72:b4:90:1d:5d:9e:61:1e:2b:bb:0b:ec:83:b9:04:8b:44:
         27:83:f2:78:c9:5e:82:68:76:b2:56:bd:06:6a:cc:8e:0a:92:
         bb:5c:3c:2b:58:37:e1:9e:40:9b:93:7b:07:08:fc:45:0f:b2:
         68:32:b3:ff:48:ae:f9:84:ac:59:cf:6e:f4:03:27:35:e5:b7:
         40:f0:99:1d:d3:cb:1f:30:a6:70:4a:7f:39:d2:e6:71:a2:f7:
         59:93:d1:07:c5:bf:2b:87:b3:d4:e6:eb:62:a4:f7:6a:98:65:
         0f:26:04:9f:f5:04:d8:c3:d7:03:37:67:f5:4a:ae:b1:fd:b0:
         bd:7d:b5:4c
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDIKJgMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM4
MDhmNTg1MzIzYzYwYTUyYzUzNGMyMTYyNWE3OWQ4YjU5NTlkYjcwHhcNMjMwNzAz
MTQ0NjI5WhcNMjUwNzA0MTQ0NjI5WjAzMTEwLwYDVQQDEyg3YzZjZTEwMjI5YjJj
ZDhjZmE2OTgzMDVjYzRhYjU5MGViMjg5ZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiNQRHteuYx2tmeaozXqIfFYjkhLDD071JUb5xHhI5mT6ArKX
ia8RcrFyg7Yl/HhQlnXIMyJQD6Iem+BRfV+Hzwq0m3aHctvrOP7we8/rG1JBN7WW
LF0tRxmNJHlbcfPZ0Z2pAvelI5/ZjgZa7WWEFF9IpwAACmW2cqbSslusmm8rGgYU
FtKdRXP/+PCpFMmjlhq0rO4O44sFJcnQGytl0/Af5LJNwOMRTEtIjo/ZwbO+/Yr4
lqlu+Aieh/kaU/gtzOUlkiGJpOeG5gF2sZQQtWZ0dXRlLH6E2iLcKs3E3b6UXpTA
JJ9U8WnDS5ERk2nllpoR2REHwYqqwXHmInrKFwIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFOSq7tkDjZIQ1NOp6u47s/DK3P1UMB8GA1UdIwQYMBaAFGskPCb1PMys8LCL
k4VKHEBXAvC7MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzgwOGY1
ODUzMjNjNjBhNTJjNTM0YzIxNjI1YTc5ZDhiNTk1OWRiNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZWQ5ZmFmM2QtZGVmMS00NzhjLWI2OGQtYjA4ZDE3
NjFmOGMwLzdjNmNlMTAyMjliMmNkOGNmYTY5ODMwNWNjNGFiNTkwZWIyODllZWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lZDlmYWYzZC1kZWYxLTQ3OGMtYjY4ZC1iMDhk
MTc2MWY4YzAvYzgwOGY1ODUzMjNjNjBhNTJjNTM0YzIxNjI1YTc5ZDhiNTk1OWRi
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA4BggrBgEFBQcBBwEB/wQp
MCcwFAQCAAEwDjAMAwQFvnzgAwQCvnzwMA8EAgACMAkDBwAoAQAAAvAwDQYJKoZI
hvcNAQELBQADggEBAI+ud6oxmaBXv3jGCB5oApOix166wEcHyrsKihU7+w7eZ6hY
wWE1dBADcCtQPvf5OEpVkf0ZX3we6d0tXBSTNbygWJhg5uZVxrNexf6GweTaxEpi
VaWlIRbpyUlUGZUWtg2e7EAMBus2FgrIUHLi31nNnDRKht66SYsLg9yHvyhytJAd
XZ5hHiu7C+yDuQSLRCeD8njJXoJodrJWvQZqzI4KkrtcPCtYN+GeQJuTewcI/EUP
smgys/9IrvmErFnPbvQDJzXlt0DwmR3Tyx8wpnBKfznS5nGi91mT0QfFvyuHs9Tm
62Kk92qYZQ8mBJ/1BNjD1wM3Z/VKrrH9sL19tUw=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:51 2024 by rpki-client on console-ams.rpki-client.org