Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/02ac71006636bef18e255486aca7e7de600c4bf4.roa
File:                     02ac71006636bef18e255486aca7e7de600c4bf4.roa (raw, json)
Hash identifier:          hoHovg6eG+ujw93gYOEOOJjNq7zvV9OLKb5t1H6fWUw=
Subject key identifier:   C0:43:E6:B6:F9:3B:1E:79:93:88:76:4B:23:0A:D6:92:F5:EC:00:33
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       2349EC
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/02ac71006636bef18e255486aca7e7de600c4bf4.roa
Signing time:             Mon 14 Aug 2023 20:07:29 +0000
ROA not before:           Sun 13 Aug 2023 20:07:28 +0000
ROA not after:            Thu 14 Aug 2025 20:07:28 +0000
asID:                     27978
IP address blocks:        190.110.157.0/24 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312684 (0x2349ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Aug 13 20:07:28 2023 GMT
            Not After : Aug 14 20:07:28 2025 GMT
        Subject: CN=02ac71006636bef18e255486aca7e7de600c4bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fe:0e:f6:0a:20:97:af:bd:17:92:35:c5:51:
                    96:78:40:71:1b:53:4c:49:1d:1b:4a:59:49:d0:b6:
                    9b:5a:b1:56:cb:8e:4b:06:24:c9:29:0f:0f:5f:55:
                    72:fc:45:66:fb:4b:f7:65:64:63:a6:11:07:2a:22:
                    27:76:2d:ce:21:66:41:fd:bf:06:86:29:eb:d0:3c:
                    33:4d:43:58:ac:15:ae:4c:e6:0e:07:5e:24:3b:bb:
                    83:45:24:f1:b2:e7:d4:7a:e8:4c:91:3c:86:1c:1c:
                    fb:8b:3b:5b:ce:82:a7:d5:d7:17:4b:c9:53:2c:4c:
                    6d:2c:6f:7d:21:a0:15:d1:c7:94:c6:6e:7d:ec:57:
                    61:eb:01:08:f1:b6:c2:a2:4d:4c:02:56:37:48:aa:
                    72:7b:8f:f2:fa:37:62:c0:da:a3:ea:c2:f9:aa:d7:
                    87:90:e3:32:e9:49:16:dc:6c:65:d2:52:ee:3c:37:
                    a4:15:5e:97:85:45:99:a2:53:25:57:71:3e:30:a5:
                    46:5f:b2:fe:c6:c4:6e:0e:4c:33:84:1a:cf:86:c7:
                    50:a0:71:4e:2f:67:a7:23:81:07:4a:2b:2f:a3:60:
                    b0:2d:ab:1e:0a:e4:8e:75:41:68:5c:70:b4:b2:e3:
                    aa:c2:c5:7b:52:46:48:a5:80:6c:86:fb:5e:ea:4a:
                    c5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:43:E6:B6:F9:3B:1E:79:93:88:76:4B:23:0A:D6:92:F5:EC:00:33
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/02ac71006636bef18e255486aca7e7de600c4bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:cb:a4:8f:9b:f9:26:f1:fe:ee:07:94:be:63:0c:d5:e4:c5:
         2b:ee:2a:c5:35:d5:ab:22:4b:58:fd:86:b1:62:4e:b6:95:90:
         ed:e1:b9:df:0f:87:2a:98:b0:7f:46:22:bc:71:33:ab:3f:4b:
         b9:5d:2e:f8:d6:f8:2f:2e:c7:a0:71:06:b2:52:14:6c:37:9e:
         d4:4e:af:0d:06:cc:49:9f:ac:c3:36:68:58:bc:e7:3c:64:74:
         63:b7:28:45:15:f1:5c:e9:22:72:16:ca:b3:03:ac:10:ec:71:
         e2:89:8b:8d:4f:f4:3f:ec:3f:3c:22:81:84:91:ba:7d:46:1e:
         df:5b:b5:d2:a7:97:8c:33:c2:48:3b:da:41:4a:f9:3e:70:92:
         a7:cf:71:ad:26:bf:c1:2f:5f:0d:2a:79:74:c6:76:0d:81:30:
         b8:ab:08:2b:6e:f3:9c:27:16:e0:15:4d:4b:76:b8:62:46:d6:
         75:13:f3:d6:cf:1f:16:8d:d2:d5:93:b4:c8:53:b3:68:68:51:
         74:a0:99:e7:bc:72:60:70:ea:e1:41:5d:41:08:25:a1:00:ac:
         fd:0e:c3:e1:9d:28:03:27:06:1e:e0:2b:37:06:0f:e0:d9:5e:
         86:35:43:64:9e:d6:30:28:36:bc:fc:b9:60:f8:43:47:ce:c1:
         4b:13:8f:74
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDI0nsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ2
MmJhZjFkNDM3MTJlZjVmMzg2MGIyMWQwNGU4NTM0NTM2ZmExNjQwHhcNMjMwODEz
MjAwNzI4WhcNMjUwODE0MjAwNzI4WjAzMTEwLwYDVQQDEygwMmFjNzEwMDY2MzZi
ZWYxOGUyNTU0ODZhY2E3ZTdkZTYwMGM0YmY0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4P4O9gogl6+9F5I1xVGWeEBxG1NMSR0bSllJ0LabWrFWy45L
BiTJKQ8PX1Vy/EVm+0v3ZWRjphEHKiIndi3OIWZB/b8Ghinr0DwzTUNYrBWuTOYO
B14kO7uDRSTxsufUeuhMkTyGHBz7iztbzoKn1dcXS8lTLExtLG99IaAV0ceUxm59
7Fdh6wEI8bbCok1MAlY3SKpye4/y+jdiwNqj6sL5qteHkOMy6UkW3Gxl0lLuPDek
FV6XhUWZolMlV3E+MKVGX7L+xsRuDkwzhBrPhsdQoHFOL2enI4EHSisvo2CwLase
CuSOdUFoXHC0suOqwsV7UkZIpYBshvte6krFVwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFMBD5rb5Ox55k4h2SyMK1pL17AAzMB8GA1UdIwQYMBaAFIfjVjLD26sNS5jd
XBIONKlIODBJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDYyYmFm
MWQ0MzcxMmVmNWYzODYwYjIxZDA0ZTg1MzQ1MzZmYTE2NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZmQyZDI4MGItNmJhYy00Y2NlLWIwZTEtYzk1YjRj
ZGQwNTBjLzAyYWM3MTAwNjYzNmJlZjE4ZTI1NTQ4NmFjYTdlN2RlNjAwYzRiZjQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mZDJkMjgwYi02YmFjLTRjY2UtYjBlMS1jOTVi
NGNkZDA1MGMvZDYyYmFmMWQ0MzcxMmVmNWYzODYwYjIxZDA0ZTg1MzQ1MzZmYTE2
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAL5unTANBgkqhkiG9w0BAQsFAAOCAQEA0sukj5v5JvH+7geU
vmMM1eTFK+4qxTXVqyJLWP2GsWJOtpWQ7eG53w+HKpiwf0YivHEzqz9LuV0u+Nb4
Ly7HoHEGslIUbDee1E6vDQbMSZ+swzZoWLznPGR0Y7coRRXxXOkichbKswOsEOxx
4omLjU/0P+w/PCKBhJG6fUYe31u10qeXjDPCSDvaQUr5PnCSp89xrSa/wS9fDSp5
dMZ2DYEwuKsIK27znCcW4BVNS3a4YkbWdRPz1s8fFo3S1ZO0yFOzaGhRdKCZ57xy
YHDq4UFdQQgloQCs/Q7D4Z0oAycGHuArNwYP4NlehjVDZJ7WMCg2vPy5YPhDR87B
SxOPdA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org