Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/65cdd4c7c549b5ffe30e71013e0dbbf7ef54abc3.roa
File:                     65cdd4c7c549b5ffe30e71013e0dbbf7ef54abc3.roa (raw, json)
Hash identifier:          7kmKigd6O2TDcd67rVCzB1xJRIaP5hQG4zxZ4UecNKQ=
Subject key identifier:   D9:A5:E0:16:D0:1D:66:F8:A3:18:F6:31:F1:2C:DC:41:C1:E1:40:F6
Certificate issuer:       /CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Certificate serial:       16CB57
Authority key identifier: F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/65cdd4c7c549b5ffe30e71013e0dbbf7ef54abc3.roa
Signing time:             Sat 18 Nov 2023 01:44:24 +0000
ROA not before:           Sat 18 Nov 2023 01:44:24 +0000
ROA not after:            Tue 18 Nov 2025 01:44:24 +0000
asID:                     22698
IP address blocks:        190.13.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1493847 (0x16cb57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
        Validity
            Not Before: Nov 18 01:44:24 2023 GMT
            Not After : Nov 18 01:44:24 2025 GMT
        Subject: CN=65cdd4c7c549b5ffe30e71013e0dbbf7ef54abc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:cc:3e:c6:a1:8b:ec:4c:c8:43:40:d5:23:
                    c7:01:c3:44:eb:9b:04:29:f6:26:08:81:7b:07:d2:
                    5b:90:3b:4b:fc:b5:63:0a:45:71:42:aa:6f:0f:8d:
                    b8:aa:b6:d0:bc:73:05:cf:e3:42:08:04:d7:55:88:
                    27:a8:3f:24:72:45:94:44:2b:6a:a1:8c:37:65:8a:
                    89:b1:5f:48:a3:ba:4f:a5:3e:68:6e:ec:8c:29:19:
                    d1:07:f4:9f:16:79:d8:cd:7e:09:79:5d:45:bb:a4:
                    07:67:3f:b7:3c:ec:8c:f9:bf:41:a7:2e:30:d7:2d:
                    42:0f:67:3e:47:d2:44:90:52:d2:12:07:0a:0f:6b:
                    e3:84:3e:7f:ae:cd:c3:41:66:0e:97:c9:c7:02:31:
                    2f:05:68:c0:ce:7f:84:97:64:19:9b:f5:ad:29:98:
                    15:6b:f9:d8:aa:49:15:d1:74:25:b7:f7:df:71:15:
                    5e:a0:a6:e2:f0:4c:d8:37:0e:64:37:13:31:28:d2:
                    a5:fa:31:74:76:fb:82:a0:9a:dd:65:a5:85:d6:3d:
                    21:42:a8:dd:52:c6:4b:5a:1d:11:88:44:d3:49:40:
                    af:e5:5f:21:99:f2:2b:ea:e8:ae:e0:7e:17:bf:ff:
                    b9:ec:a9:0f:c1:76:77:97:a1:5c:37:a3:6d:94:58:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A5:E0:16:D0:1D:66:F8:A3:18:F6:31:F1:2C:DC:41:C1:E1:40:F6
            X509v3 Authority Key Identifier:
                keyid:F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/65cdd4c7c549b5ffe30e71013e0dbbf7ef54abc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:69:39:d9:28:cd:2a:0b:79:5d:42:96:dc:24:c8:cf:37:c0:
         20:91:c8:df:1e:9e:34:6d:26:da:5b:dd:78:ba:6d:0d:bd:dd:
         98:24:10:80:2d:50:6c:a2:4b:6d:96:98:a4:c2:17:a7:30:4a:
         18:af:00:1e:7a:af:b8:81:66:ed:51:de:62:3f:89:1e:89:18:
         24:52:f4:eb:f7:87:28:8d:df:9a:28:88:2c:5b:d9:bb:27:28:
         9c:62:a6:73:0a:a1:eb:4b:fa:74:a8:34:f1:f4:78:4d:91:11:
         97:68:f9:03:03:50:df:73:3f:b0:c8:b7:85:63:8d:ea:d1:e8:
         70:52:0a:3f:17:4d:a7:ac:8d:a2:78:70:11:7e:7c:df:dd:f3:
         90:7f:30:f1:73:02:1b:79:86:63:fe:2f:25:1d:23:5c:0f:27:
         e6:66:e5:9c:a6:5c:cf:ef:69:51:fe:65:c8:d1:49:2c:82:76:
         d4:0e:3d:d5:da:74:cd:13:b4:a5:f3:9e:63:a2:14:59:ad:dc:
         7d:bc:37:e9:1b:1c:90:66:8c:6f:ac:4d:e9:b4:b1:29:d4:4c:
         6f:46:1d:37:72:c2:e4:38:6b:e4:ac:30:0d:ac:d9:b9:e1:44:
         64:43:38:91:11:26:7e:12:fc:e4:0b:b0:e7:b8:d9:9a:e6:f7:
         01:76:54:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org