Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/37119ce964a2526b367b3ba560695f28d0493229.roa
File:                     37119ce964a2526b367b3ba560695f28d0493229.roa (raw, json)
Hash identifier:          Y6MCPv9BaJ3iQcFVKkob5RKKQ8gn8YNbtpO6+9tbsA0=
Subject key identifier:   26:1B:BE:FF:26:FA:65:FD:A0:1D:0C:EB:F9:7E:41:4F:DC:8B:E3:FB
Certificate issuer:       /CN=85d4b72fa13ffd9e28508b361f274290526653af
Certificate serial:       2126CF
Authority key identifier: FE:E1:17:37:79:DC:4A:E4:FA:AE:FF:74:D7:F6:D1:41:79:0C:5D:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d4b72fa13ffd9e28508b361f274290526653af.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/37119ce964a2526b367b3ba560695f28d0493229.roa
Signing time:             Wed 06 Dec 2023 19:40:38 +0000
ROA not before:           Wed 06 Dec 2023 19:40:37 +0000
ROA not after:            Wed 06 Dec 2028 19:40:37 +0000
asID:                     264688
IP address blocks:        190.107.240.0/21 maxlen: 24
                          190.196.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2172623 (0x2126cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d4b72fa13ffd9e28508b361f274290526653af
        Validity
            Not Before: Dec  6 19:40:37 2023 GMT
            Not After : Dec  6 19:40:37 2028 GMT
        Subject: CN=37119ce964a2526b367b3ba560695f28d0493229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:36:14:a8:63:ab:10:50:4b:db:c6:0a:83:
                    1e:4e:e7:da:ec:cd:01:2f:8d:13:7f:62:93:01:8e:
                    00:b1:3e:1e:74:b1:c6:bf:4d:f1:29:97:39:0e:2d:
                    73:8c:b4:1a:19:2c:ef:1a:54:ab:98:4b:cb:86:61:
                    5d:57:55:19:c0:38:63:ac:e4:5f:81:01:de:f1:98:
                    5b:4b:d1:d0:aa:84:40:07:73:b0:d7:51:4d:6e:fb:
                    00:f3:a5:c3:fa:75:fc:a0:70:29:86:0d:41:f6:9e:
                    ec:11:07:1a:ed:e3:26:6f:86:e3:5f:a6:83:f9:be:
                    07:3d:0b:f8:fc:54:02:f3:c0:97:43:31:90:58:35:
                    0c:0c:06:28:d7:be:b2:12:b5:2e:c5:39:0e:2d:cc:
                    62:e9:93:6f:a2:28:e1:54:c4:ce:15:8a:af:7b:70:
                    d9:ba:5c:82:30:9a:13:32:8a:f1:81:15:b8:1c:0b:
                    03:51:1b:dc:c4:01:06:04:57:94:ca:ef:15:5b:70:
                    61:40:85:76:4a:19:b7:d5:c7:aa:a6:41:2c:31:6f:
                    36:15:7a:34:bb:6d:ab:7d:a7:96:c9:68:dc:46:15:
                    22:cb:c5:34:64:c7:00:82:ee:6e:cd:4e:71:65:72:
                    8c:fa:fa:cb:db:b3:9a:5a:5e:16:00:8e:b6:45:0e:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1B:BE:FF:26:FA:65:FD:A0:1D:0C:EB:F9:7E:41:4F:DC:8B:E3:FB
            X509v3 Authority Key Identifier:
                keyid:FE:E1:17:37:79:DC:4A:E4:FA:AE:FF:74:D7:F6:D1:41:79:0C:5D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d4b72fa13ffd9e28508b361f274290526653af.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/37119ce964a2526b367b3ba560695f28d0493229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/85d4b72fa13ffd9e28508b361f274290526653af.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.240.0/21
                  190.196.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:30:2c:4e:60:c8:c0:30:f9:70:23:bb:24:53:69:40:56:2b:
         bd:d0:93:90:3e:ad:7f:e9:7f:15:27:56:df:4d:99:65:7b:b5:
         63:53:f5:11:f4:7e:66:1c:47:ed:8b:ed:f9:ee:f4:27:cd:f4:
         f7:d0:7f:cd:29:c5:21:8e:e8:6e:82:ab:0d:82:d7:58:be:22:
         d3:83:1b:7e:ad:b3:74:48:db:96:d6:fd:e6:85:2c:45:89:74:
         c6:ac:35:cb:05:02:1a:49:01:a1:86:ee:02:b4:ad:3a:99:4d:
         e0:d9:e1:f0:fd:e5:82:cc:30:05:fb:af:47:1b:19:76:31:82:
         ce:23:ef:98:21:55:03:ae:71:3e:1f:cc:ec:1b:01:22:02:ea:
         9e:c6:c2:37:ab:b7:c9:8b:ba:ce:b1:36:7f:e0:92:9c:04:9c:
         8e:92:9e:34:d1:cf:35:d8:ba:d1:e8:bd:2d:39:23:48:57:f7:
         bd:11:cd:9c:58:f8:92:76:80:32:ea:2c:b2:4d:2d:d1:7f:d5:
         b9:ab:02:d6:90:99:ef:a3:de:73:41:f0:94:fc:2c:28:88:a6:
         ac:aa:27:af:76:25:c4:9b:84:95:2a:10:a4:5c:93:56:2e:97:
         8f:96:a2:fe:a7:2f:f3:52:6f:af:79:b7:5c:e6:be:3a:e2:a3:
         c3:6b:fa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org