Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/594ab660e19509381f4e7a4282ee9db439c2740b.roa
File:                     594ab660e19509381f4e7a4282ee9db439c2740b.roa (raw, json)
Hash identifier:          q8IbgTs1xX7kXuBMsUAHMCX0Hdx8JnMmZAwZIyqmmZU=
Subject key identifier:   6B:27:DE:69:03:6D:67:09:61:0A:8F:29:1E:11:DA:53:D7:83:67:83
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       25A681
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/594ab660e19509381f4e7a4282ee9db439c2740b.roa
Signing time:             Wed 28 Jun 2023 22:32:24 +0000
ROA not before:           Tue 27 Jun 2023 22:32:24 +0000
ROA not after:            Sat 28 Jun 2025 22:32:24 +0000
asID:                     26619
IP address blocks:        190.90.216.0/24 maxlen: 24
                          190.90.170.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2467457 (0x25a681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Jun 27 22:32:24 2023 GMT
            Not After : Jun 28 22:32:24 2025 GMT
        Subject: CN=594ab660e19509381f4e7a4282ee9db439c2740b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:c9:5d:db:68:0b:b1:1d:19:fe:55:6f:7a:
                    35:6a:8b:9e:a0:4f:11:78:64:5f:e5:e2:44:c6:a5:
                    bf:ef:66:26:dc:fc:0a:d3:1f:06:f1:88:f9:25:3d:
                    54:de:c7:98:a3:3a:00:9d:1b:76:5b:4e:a9:20:e0:
                    a0:c8:2f:aa:be:72:a7:05:99:23:2e:a7:20:7d:a6:
                    d1:0e:f9:0f:89:0c:3a:67:4a:d1:96:50:8c:d7:d8:
                    84:44:48:1e:5a:70:3e:11:05:39:70:96:b3:1f:98:
                    c9:35:36:33:06:03:ce:0e:69:d5:a4:c2:a2:7f:7e:
                    ab:71:da:7c:4c:3f:42:8b:a8:04:0a:72:b1:04:50:
                    4e:1c:69:e3:f8:a9:12:fe:e7:6d:d9:6f:88:2b:e5:
                    48:db:85:8b:ca:66:8b:12:8f:06:d0:45:6d:53:3a:
                    c2:ed:73:ed:74:e4:2b:58:93:9d:86:27:71:68:b1:
                    5b:9f:5f:c2:e4:0e:ac:50:09:03:a6:17:58:19:86:
                    5c:ad:41:5a:b0:2c:ac:89:dd:6f:87:b8:84:35:bf:
                    a5:86:c9:5f:9e:82:60:ab:70:81:80:33:91:fb:ca:
                    39:8c:e3:f7:57:5a:81:37:a7:3c:ce:21:f7:b2:a9:
                    ff:22:a7:35:b8:7b:98:4a:49:ad:3c:75:ee:48:1e:
                    7a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:27:DE:69:03:6D:67:09:61:0A:8F:29:1E:11:DA:53:D7:83:67:83
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/594ab660e19509381f4e7a4282ee9db439c2740b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.170.0/23
                  190.90.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:d0:fd:81:5d:a7:5e:53:10:c5:60:60:cc:25:13:c3:d2:bc:
         7c:fd:f2:21:76:a6:18:60:25:65:dc:57:90:6f:1b:27:42:40:
         b1:7e:42:1a:05:be:01:57:88:0e:4e:bc:d9:95:bb:4a:36:cd:
         e7:d1:8c:13:62:f9:58:c0:63:cb:9a:62:d9:23:02:7f:55:96:
         0e:e2:0e:51:07:82:6e:0f:48:13:a1:9d:b9:13:ca:40:4a:f1:
         52:92:41:b2:86:2e:36:6b:02:c8:28:6f:bd:45:21:0e:6d:94:
         6c:d0:cc:0d:23:ea:6c:0c:92:a2:ca:93:4e:c6:76:f1:99:3c:
         7c:2e:fa:b3:3a:cd:f3:13:41:15:a1:6d:53:eb:e3:0f:a4:ab:
         a0:96:57:26:34:9e:81:22:e1:16:af:00:4b:ae:c6:9f:31:d2:
         4f:24:74:9b:b5:06:10:b1:d3:4f:9e:d9:a6:92:91:00:47:5f:
         b4:79:49:53:38:06:ca:62:0c:8d:54:8d:56:ea:18:07:24:97:
         15:09:ff:6b:2c:26:4a:df:de:3e:c5:76:4c:81:81:f1:fb:3d:
         0e:1a:0e:50:12:01:12:bc:ae:26:e2:f9:04:9e:51:82:7a:25:
         cb:f6:6f:7d:79:d8:6f:cb:69:44:34:d4:c1:d0:9c:9a:6b:4e:
         7b:6d:55:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org