Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/4c2e8f6e88274d8a9213667aae73a1f9c5caeec6.roa
File:                     4c2e8f6e88274d8a9213667aae73a1f9c5caeec6.roa (raw, json)
Hash identifier:          FPa7cpzJ1uTO8JPUstr4XFl6Wx4PRadNmGxBf6a64Vs=
Subject key identifier:   CE:81:CC:AA:E4:0A:74:25:C2:84:65:3C:15:CA:24:6B:EA:EB:5F:3D
Certificate issuer:       /CN=85d4b72fa13ffd9e28508b361f274290526653af
Certificate serial:       2123D2
Authority key identifier: FE:E1:17:37:79:DC:4A:E4:FA:AE:FF:74:D7:F6:D1:41:79:0C:5D:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d4b72fa13ffd9e28508b361f274290526653af.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/4c2e8f6e88274d8a9213667aae73a1f9c5caeec6.roa
Signing time:             Wed 06 Dec 2023 19:40:37 +0000
ROA not before:           Wed 06 Dec 2023 19:40:37 +0000
ROA not after:            Wed 06 Dec 2028 19:40:37 +0000
asID:                     264688
IP address blocks:        190.107.240.0/24 maxlen: 24
                          190.107.241.0/24 maxlen: 24
                          190.107.242.0/24 maxlen: 24
                          190.107.243.0/24 maxlen: 24
                          190.107.244.0/24 maxlen: 24
                          190.107.245.0/24 maxlen: 24
                          190.107.246.0/24 maxlen: 24
                          190.107.247.0/24 maxlen: 24
                          190.196.225.0/24 maxlen: 24
                          190.196.226.0/24 maxlen: 24
                          190.196.227.0/24 maxlen: 24
                          190.196.228.0/24 maxlen: 24
                          190.196.229.0/24 maxlen: 24
                          190.196.230.0/24 maxlen: 24
                          190.196.231.0/24 maxlen: 24
                          190.196.232.0/24 maxlen: 24
                          190.196.233.0/24 maxlen: 24
                          190.196.234.0/24 maxlen: 24
                          190.196.235.0/24 maxlen: 24
                          190.196.236.0/24 maxlen: 24
                          190.196.237.0/24 maxlen: 24
                          190.196.238.0/24 maxlen: 24
                          190.196.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171858 (0x2123d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d4b72fa13ffd9e28508b361f274290526653af
        Validity
            Not Before: Dec  6 19:40:37 2023 GMT
            Not After : Dec  6 19:40:37 2028 GMT
        Subject: CN=4c2e8f6e88274d8a9213667aae73a1f9c5caeec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:0f:d7:a7:ce:de:99:23:18:76:14:4b:71:
                    85:23:27:49:ba:e9:cd:6a:92:12:d9:c3:94:8b:80:
                    e4:3b:0a:7f:7f:57:5d:a4:60:55:d7:b8:64:fe:94:
                    8f:d1:84:7d:a1:69:18:a7:c9:25:9d:00:9f:03:86:
                    76:b0:88:89:1d:cc:1b:2a:a1:30:fd:5a:e3:37:04:
                    b4:b9:05:32:94:bd:73:85:74:c0:af:c3:f0:7e:a2:
                    03:c0:e3:16:93:ee:5e:84:a9:21:b5:80:19:8f:b8:
                    91:87:48:79:23:1b:97:fb:26:c4:b1:4f:ee:3f:e6:
                    64:46:96:2e:61:ac:88:76:f2:2f:e2:a9:88:01:38:
                    af:d0:cf:dd:29:34:d5:37:d0:05:89:94:55:ed:18:
                    03:ed:6c:9f:ff:c1:54:f0:8e:8f:d6:7c:3a:f9:a2:
                    de:f8:d5:c2:d0:f6:f8:75:ce:8d:1d:b2:6d:4d:e0:
                    ac:75:f3:a1:c1:ed:1e:02:5b:59:5f:2c:11:5d:4f:
                    90:10:0b:84:ad:6c:d4:60:64:e6:9c:23:eb:c1:c3:
                    80:cb:3b:5a:c5:2b:97:c4:7b:94:5b:91:f4:22:cd:
                    8b:24:bd:da:d4:1c:4b:40:2a:7e:1f:ff:af:40:ba:
                    53:b9:e3:2c:39:78:43:b7:14:7c:34:87:42:96:18:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:81:CC:AA:E4:0A:74:25:C2:84:65:3C:15:CA:24:6B:EA:EB:5F:3D
            X509v3 Authority Key Identifier:
                keyid:FE:E1:17:37:79:DC:4A:E4:FA:AE:FF:74:D7:F6:D1:41:79:0C:5D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d4b72fa13ffd9e28508b361f274290526653af.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/4c2e8f6e88274d8a9213667aae73a1f9c5caeec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e898202-551c-4a4e-a6d0-cf739c316678/85d4b72fa13ffd9e28508b361f274290526653af.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.240.0/21
                  190.196.225.0-190.196.239.255

    Signature Algorithm: sha256WithRSAEncryption
         29:55:e0:8f:a0:a0:cc:d0:d0:f6:cc:af:af:9a:40:0f:af:8d:
         66:d5:b0:96:d7:d2:7f:f3:ae:bb:ed:aa:dc:cc:e3:ac:91:78:
         fb:cf:22:d5:0b:6f:57:6a:70:15:ce:23:df:4b:43:51:ad:50:
         23:3d:cd:13:dd:58:22:b8:e1:7d:78:77:6c:5e:ff:fd:a4:f3:
         f3:d7:02:e2:54:6c:20:24:cd:65:73:97:7e:f3:84:2b:08:5f:
         a2:ad:43:f1:ca:fc:45:6a:9a:d8:b7:43:45:5d:b6:3d:c5:2d:
         5e:cd:88:09:e6:d9:05:c2:62:c8:67:bc:f7:eb:34:49:19:bc:
         71:93:db:29:b1:aa:dd:a5:cd:14:de:67:a7:7d:f6:d2:0c:3f:
         0d:23:5d:cc:12:71:f8:7d:19:57:71:1d:d9:5f:12:0f:4d:71:
         cf:c3:c8:72:53:50:82:e8:d5:a2:6b:d7:bf:8d:6d:1f:f1:36:
         78:97:f9:a9:51:8b:e0:d2:13:87:78:8c:75:ea:cf:dd:66:70:
         c5:11:60:33:3f:d0:28:b7:50:3a:ae:54:fd:14:31:6d:2b:4b:
         08:43:bf:87:c2:72:4f:97:06:40:69:58:ee:d6:74:96:36:fa:
         2d:07:0f:30:38:57:9a:41:d8:2d:54:8d:21:21:ed:6e:fe:14:
         36:22:fc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org