Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/990eddfc6f545c00424768ade27755075a8ff8e6.roa
File:                     990eddfc6f545c00424768ade27755075a8ff8e6.roa (raw, json)
Hash identifier:          xOKMGMemusZ2m0ROCzQZDzoJY36PxzYd2w9aOvW5tMM=
Subject key identifier:   5F:A4:0A:0D:F9:90:1F:FC:C6:22:FF:A0:72:F9:9F:83:2F:7D:42:88
Certificate issuer:       /CN=54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16
Certificate serial:       032E69
Authority key identifier: 33:5A:49:E7:92:32:3D:59:06:A8:41:7C:8D:12:54:B8:4A:BB:E4:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/990eddfc6f545c00424768ade27755075a8ff8e6.roa
Signing time:             Wed 24 May 2023 16:45:06 +0000
ROA not before:           Tue 23 May 2023 16:45:06 +0000
ROA not after:            Sat 24 May 2025 16:45:06 +0000
asID:                     28432
IP address blocks:        201.131.236.0/22 maxlen: 22
                          201.131.236.0/24 maxlen: 24
                          201.131.237.0/24 maxlen: 24
                          201.131.238.0/24 maxlen: 24
                          201.131.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208489 (0x32e69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16
        Validity
            Not Before: May 23 16:45:06 2023 GMT
            Not After : May 24 16:45:06 2025 GMT
        Subject: CN=990eddfc6f545c00424768ade27755075a8ff8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:51:f8:ed:dd:58:d8:9b:ba:d9:92:a2:68:
                    d2:e8:df:02:2a:48:c4:77:9b:ea:8f:d6:90:c9:58:
                    53:a9:9c:6b:0f:76:2a:ac:90:9f:e0:8b:ae:78:90:
                    49:c4:b6:41:e8:08:e4:3c:6c:f3:d7:80:5e:c4:3c:
                    2f:8f:05:ad:a9:5f:e5:f7:91:42:ff:c9:05:22:ed:
                    40:c0:e4:d6:54:a5:3a:50:5b:22:37:11:b8:e4:ae:
                    71:b3:d7:c2:0c:01:7e:21:3e:0b:ba:fa:fe:13:3c:
                    30:d2:12:f1:4a:eb:90:c0:a1:0e:8f:e9:6f:0e:58:
                    2f:20:ce:96:0f:0e:0d:c4:6a:cc:bf:3c:ac:8b:b6:
                    73:63:8b:62:24:2d:e0:df:ec:b0:6d:cf:e6:92:5b:
                    5a:42:09:99:7e:dd:70:b9:d4:84:4e:d4:64:25:46:
                    2b:69:05:ef:d7:f2:cb:5d:d8:9e:49:fe:f4:73:da:
                    32:f4:36:f0:65:dd:ca:26:07:6c:a5:8d:17:cf:50:
                    6d:81:a2:a3:0d:bb:57:1d:4f:78:9b:84:f9:05:14:
                    9e:b4:be:f0:0f:a1:59:b9:2e:09:15:54:7f:2c:9b:
                    19:88:fb:60:da:f4:23:f6:f7:db:75:64:f4:a2:08:
                    02:37:9b:ac:b5:f1:ae:22:5c:d8:c1:ce:b1:4a:c9:
                    ab:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A4:0A:0D:F9:90:1F:FC:C6:22:FF:A0:72:F9:9F:83:2F:7D:42:88
            X509v3 Authority Key Identifier:
                keyid:33:5A:49:E7:92:32:3D:59:06:A8:41:7C:8D:12:54:B8:4A:BB:E4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/990eddfc6f545c00424768ade27755075a8ff8e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:11:4b:bf:aa:b0:e9:82:fb:c1:c8:6f:80:f9:f1:5d:74:e1:
         68:df:91:e4:e8:01:92:9c:41:cc:eb:bd:76:af:17:f1:b0:e9:
         97:ee:ce:39:af:80:09:f9:e9:33:a8:2e:f6:c6:50:47:a7:ce:
         86:12:98:f4:e9:5f:04:4c:7c:44:81:b2:8a:09:55:17:14:d8:
         4e:58:e3:e2:63:df:31:c5:a1:7f:9e:69:37:cf:14:5d:ea:66:
         99:59:63:21:58:04:53:0d:54:3f:7a:83:8b:b7:08:2b:bb:1c:
         07:c3:3d:c9:00:63:8c:68:cc:1f:fc:b4:e0:5d:10:97:9d:45:
         60:ec:ab:c4:43:a9:93:03:3f:bc:91:1b:79:b7:59:c3:61:17:
         cc:a7:fc:8d:f9:95:49:e8:86:42:e0:1b:65:d3:1b:36:a4:7a:
         e8:b0:2d:5d:2c:2a:56:4e:b2:ba:98:80:58:30:59:6b:35:d8:
         02:9e:18:07:45:b2:d0:c1:4f:3b:7c:52:f0:f1:70:59:a9:68:
         41:87:2b:d1:52:b0:b7:e1:2b:74:ac:ea:f0:73:66:69:fd:ee:
         a7:04:db:a3:ce:fe:c0:a1:b3:10:7a:73:e6:a9:c3:b7:7a:5f:
         cc:52:9e:88:4e:85:0a:5f:86:47:13:3f:2f:31:51:0e:cb:b9:
         9a:ad:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org