Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ca12913-0731-47a3-bfdf-d4650095c0f2/07999264689340a9dec32795fe02d749fdfc6ed8.roa
File:                     07999264689340a9dec32795fe02d749fdfc6ed8.roa (raw, json)
Hash identifier:          HPRzj3GmxwBT9SS4nFTXqvyfyRq8qwHTmo8QADBUBi0=
Subject key identifier:   8F:93:4F:7E:E9:30:D4:15:D5:B6:12:81:72:1C:92:EE:9E:9F:E1:3F
Certificate issuer:       /CN=8332a0a627ec1dcde6573f34c68eed389e98bfa1
Certificate serial:       1A42EE
Authority key identifier: 4F:49:33:C1:DC:0E:2F:AC:42:D7:EA:C1:E7:24:9B:5B:15:F0:BF:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8332a0a627ec1dcde6573f34c68eed389e98bfa1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ca12913-0731-47a3-bfdf-d4650095c0f2/07999264689340a9dec32795fe02d749fdfc6ed8.roa
Signing time:             Tue 23 Aug 2022 17:48:14 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27751
IP address blocks:        190.108.224.0/20 maxlen: 24
                          190.108.240.0/20 maxlen: 24
                          190.121.176.0/20 maxlen: 24
                          200.59.224.0/20 maxlen: 24
                          200.59.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721070 (0x1a42ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8332a0a627ec1dcde6573f34c68eed389e98bfa1
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=07999264689340a9dec32795fe02d749fdfc6ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:be:27:9d:2f:ab:01:2c:0d:94:e8:8b:cc:34:
                    1f:c9:61:29:65:32:d0:57:53:35:07:6c:de:15:9a:
                    fb:12:cc:8c:d7:c5:73:b7:63:cf:d9:2b:28:c1:e0:
                    c2:a4:82:f3:19:d6:7b:d3:6a:72:78:3f:67:73:b7:
                    14:a6:df:05:39:e3:75:b1:bb:e9:40:a1:a0:82:5d:
                    32:aa:af:ca:71:8d:1e:f2:b6:eb:ac:af:d9:b2:aa:
                    13:9e:d3:b2:4e:54:4c:1f:70:a9:6a:ee:43:ef:31:
                    54:62:ab:f5:ce:42:8d:ea:e2:24:b2:8c:ff:ed:07:
                    13:64:92:3e:8e:b5:4f:0b:d5:97:8e:26:ff:7b:46:
                    02:8d:e5:41:c2:2c:44:e4:45:2c:91:ca:03:40:6f:
                    0e:6a:ec:56:e8:e5:53:ab:ff:ac:2a:66:79:85:75:
                    7e:03:58:48:03:20:bb:50:3c:19:3b:ea:0f:e2:eb:
                    a6:cd:6e:f2:0d:03:25:1f:cd:cf:39:69:93:75:7b:
                    e2:0c:e1:ff:78:26:e3:14:06:24:5f:5c:3e:9e:77:
                    74:38:dd:e7:db:72:7f:34:ee:19:5a:22:71:c3:58:
                    87:a3:6d:d6:84:fb:d0:c5:c8:f8:72:a5:ba:9f:0a:
                    b3:8d:8c:3e:32:43:c6:b6:75:b8:4f:23:49:d1:0b:
                    75:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:93:4F:7E:E9:30:D4:15:D5:B6:12:81:72:1C:92:EE:9E:9F:E1:3F
            X509v3 Authority Key Identifier:
                keyid:4F:49:33:C1:DC:0E:2F:AC:42:D7:EA:C1:E7:24:9B:5B:15:F0:BF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8332a0a627ec1dcde6573f34c68eed389e98bfa1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ca12913-0731-47a3-bfdf-d4650095c0f2/07999264689340a9dec32795fe02d749fdfc6ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ca12913-0731-47a3-bfdf-d4650095c0f2/8332a0a627ec1dcde6573f34c68eed389e98bfa1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.224.0/19
                  190.121.176.0/20
                  200.59.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:b1:c3:42:bc:41:b8:9b:e4:bb:b9:a2:9e:54:23:70:6b:e5:
         aa:6c:fa:d3:a7:e3:24:bb:20:eb:96:b4:fc:76:d3:f0:9d:5c:
         f2:49:55:44:1a:1e:3c:1d:f8:bc:f0:5f:80:bf:50:2a:c5:04:
         b2:57:c4:3e:b5:16:05:8a:82:49:92:93:54:96:8d:1a:9a:52:
         d1:24:a8:60:f7:ce:64:96:ef:96:21:0e:c9:ff:47:8b:78:3d:
         cd:b9:e0:58:73:5b:02:10:b8:b4:fb:5f:ef:8a:88:bf:ab:d3:
         9f:5e:33:5f:bd:55:8d:85:be:8d:33:51:29:89:a0:5e:8f:7f:
         5e:37:dc:af:52:a1:12:54:73:6f:c0:d0:7f:a4:75:a6:2b:96:
         21:90:ca:9d:4a:38:ec:31:61:84:f4:14:01:8f:a2:32:cb:72:
         d9:b5:4c:c4:0b:29:24:f0:3c:cd:7d:dc:1e:66:75:92:38:f3:
         f3:e6:f5:c6:2b:1c:6e:0e:2b:30:0c:6d:72:8b:3f:6b:51:9f:
         bd:83:6e:48:fa:ad:be:6f:a0:49:cd:ba:c5:fb:4f:1a:1c:30:
         5a:24:40:c5:1b:8f:8c:35:59:f7:81:7d:17:71:73:34:e7:20:
         83:23:47:1a:63:04:b8:33:60:1a:dd:5f:0d:19:61:f2:ec:ee:
         63:d3:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org