Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/9c216a8b2346491751754aad9280a2cd7ff7baf4.roa
File:                     9c216a8b2346491751754aad9280a2cd7ff7baf4.roa (raw, json)
Hash identifier:          zbaX3Pa2Kobqw14GBoEN9RCdkiN3+WymxHxptJUVvYs=
Subject key identifier:   4E:09:74:8E:CE:30:AD:C6:34:22:16:0B:B7:E3:51:EF:2C:A0:87:0B
Certificate issuer:       /CN=bef02a6151d23f223914a8f6eed9802b4dfd2a0b
Certificate serial:       1F6F1A
Authority key identifier: 9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/9c216a8b2346491751754aad9280a2cd7ff7baf4.roa
Signing time:             Fri 24 Mar 2023 08:31:45 +0000
ROA not before:           Thu 23 Mar 2023 08:31:45 +0000
ROA not after:            Sat 22 Mar 2025 08:31:45 +0000
asID:                     52253
IP address blocks:        190.108.198.0/24 maxlen: 24
                          190.108.199.0/24 maxlen: 24
                          190.108.201.0/24 maxlen: 24
                          190.108.202.0/23 maxlen: 24
                          190.108.202.0/24 maxlen: 24
                          190.108.203.0/24 maxlen: 24
                          190.108.204.0/24 maxlen: 24
                          190.108.205.0/24 maxlen: 24
                          190.108.206.0/24 maxlen: 24
                          190.108.207.0/24 maxlen: 24
                          190.108.208.0/24 maxlen: 24
                          190.108.209.0/24 maxlen: 24
                          190.108.210.0/24 maxlen: 24
                          190.108.211.0/24 maxlen: 24
                          190.108.212.0/24 maxlen: 24
                          190.108.213.0/24 maxlen: 24
                          190.108.214.0/24 maxlen: 24
                          190.108.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2060058 (0x1f6f1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef02a6151d23f223914a8f6eed9802b4dfd2a0b
        Validity
            Not Before: Mar 23 08:31:45 2023 GMT
            Not After : Mar 22 08:31:45 2025 GMT
        Subject: CN=9c216a8b2346491751754aad9280a2cd7ff7baf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e6:51:af:01:ac:0d:93:9a:4a:16:d8:de:30:
                    38:28:05:be:dc:5f:e1:12:9f:79:3f:9a:10:ce:31:
                    8f:3e:2e:6e:e5:05:91:59:d1:7a:b9:3a:68:4b:e4:
                    5a:f8:c6:61:19:33:1f:21:ef:90:5a:9d:09:16:91:
                    1a:a6:6b:63:d6:b0:fe:6b:2a:e0:67:95:3f:f5:5d:
                    43:b0:71:72:93:bc:3c:87:98:ce:e7:ea:b3:d8:00:
                    e1:ae:19:f5:d9:47:a5:43:a8:a5:98:1f:30:f2:dc:
                    92:45:dc:79:2b:59:ce:fb:ed:b1:f0:89:82:da:5a:
                    ff:95:ad:1a:d1:bc:f3:4d:37:8f:c2:cc:13:cf:1c:
                    20:1a:b8:b9:d4:e1:39:f8:20:f0:82:a1:53:ba:d1:
                    78:bc:d0:7f:32:4e:f3:b5:a5:45:a9:81:59:57:0d:
                    fd:8e:d2:90:a0:c4:f5:bc:ed:be:47:4f:c3:43:7c:
                    92:0a:cb:b5:ff:ac:77:4f:0c:d5:cd:bb:80:d4:f3:
                    dd:8e:e6:da:30:83:02:ec:25:77:2c:f7:b0:fb:09:
                    4e:c7:88:bc:14:2b:ff:10:e1:d9:89:2b:6b:b3:78:
                    b1:a5:d0:72:16:4e:bb:6d:53:f5:7f:08:db:72:9a:
                    7b:ec:6f:01:62:10:9d:82:a4:3a:a1:e9:7d:8b:ed:
                    e9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:09:74:8E:CE:30:AD:C6:34:22:16:0B:B7:E3:51:EF:2C:A0:87:0B
            X509v3 Authority Key Identifier:
                keyid:9C:CA:11:0B:7A:6F:04:CB:57:4B:44:E4:67:33:30:7D:DC:D8:3C:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/9c216a8b2346491751754aad9280a2cd7ff7baf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7653472f-b8d4-464e-9e46-8cfdc001c9b0/bef02a6151d23f223914a8f6eed9802b4dfd2a0b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.198.0/23
                  190.108.201.0-190.108.215.255

    Signature Algorithm: sha256WithRSAEncryption
         66:cb:15:bd:05:38:f7:b2:d3:2c:eb:1d:81:51:32:c7:98:37:
         a9:c2:8a:0c:39:de:b3:d0:0b:32:1a:42:bf:35:e4:9b:44:28:
         4a:a4:41:06:8b:f0:3a:f7:58:a3:3c:0e:dc:52:81:a8:76:ce:
         9c:a7:30:bf:db:25:76:7c:13:2c:f1:85:7a:9c:34:54:37:47:
         ae:df:70:52:1a:3c:ed:91:7d:d7:88:85:1a:70:fb:ff:56:24:
         76:21:23:20:2c:a6:fc:e9:4d:09:ec:49:85:77:00:36:5b:a6:
         77:72:d5:35:8c:5b:92:3b:ee:90:9a:0c:f6:96:2c:32:7a:dc:
         3b:e5:70:69:8f:77:c1:0b:01:ff:ff:23:12:9f:c3:73:9c:06:
         b0:d9:f0:fa:b2:68:8d:8a:83:94:09:b3:91:37:5b:16:66:12:
         4a:d5:d6:a5:35:73:08:cf:14:fd:09:3e:10:60:26:78:ae:24:
         24:1c:2f:1b:37:ac:ba:8d:c2:4e:f7:2b:d1:0c:73:b5:3e:e1:
         c9:49:8a:fd:19:e9:a5:0f:ff:b7:c4:57:68:37:64:68:f1:a8:
         e0:2e:84:a1:45:45:0e:21:ed:02:1c:1c:31:9f:69:3b:d9:bf:
         6a:90:73:5e:f3:66:a6:ce:04:76:f9:db:73:c3:6b:3f:4f:1e:
         25:18:8f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:51 2024 by rpki-client on console-fra.rpki-client.org