Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/a7744b4a73d46c86cb32aee8dbca47ed52b652eb.roa
File:                     a7744b4a73d46c86cb32aee8dbca47ed52b652eb.roa (raw, json)
Hash identifier:          f9v//EN6XVES+8RZsVXp1twQT4vUDhk3XyxW2dWlOOs=
Subject key identifier:   C2:08:1C:12:B6:A8:37:7E:66:A0:96:16:2D:4B:6F:9F:91:25:7B:29
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1F2D6F
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/a7744b4a73d46c86cb32aee8dbca47ed52b652eb.roa
Signing time:             Mon 16 Jan 2023 22:00:42 +0000
ROA not before:           Tue 23 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     18678
IP address blocks:        190.90.10.0/24 maxlen: 24
                          190.90.101.0/24 maxlen: 24
                          190.90.13.0/24 maxlen: 24
                          190.90.14.0/24 maxlen: 24
                          190.90.15.0/24 maxlen: 24
                          190.90.151.0/24 maxlen: 24
                          190.90.152.0/24 maxlen: 24
                          190.90.16.0/24 maxlen: 24
                          190.90.192.0/24 maxlen: 24
                          190.90.193.0/24 maxlen: 24
                          190.90.202.0/24 maxlen: 24
                          190.90.204.0/24 maxlen: 24
                          190.90.210.0/24 maxlen: 24
                          190.90.221.0/24 maxlen: 24
                          190.90.222.0/24 maxlen: 24
                          190.90.223.0/24 maxlen: 24
                          190.90.242.0/24 maxlen: 24
                          190.90.38.0/24 maxlen: 24
                          190.90.68.0/24 maxlen: 24
                          190.90.7.0/24 maxlen: 24
                          190.90.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043247 (0x1f2d6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 23 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=a7744b4a73d46c86cb32aee8dbca47ed52b652eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:15:ce:12:a9:6c:08:3b:d8:44:f8:8b:15:8a:
                    23:ce:13:f1:bd:5f:f6:0c:e6:9b:aa:7f:4d:eb:33:
                    3a:7e:eb:53:d6:cf:16:f7:10:9d:f0:45:d7:bf:32:
                    ed:7f:1c:d8:1b:b5:af:7a:57:2c:51:7e:c7:1c:62:
                    2f:59:ba:cb:31:6c:dd:69:cf:02:c0:83:8a:eb:84:
                    e3:81:b9:12:85:f1:b5:25:4a:49:da:d6:97:a6:75:
                    33:c9:9b:82:3f:25:54:7d:7c:0f:df:aa:25:af:e9:
                    e0:c2:68:ee:cb:b5:6a:0d:89:7b:a4:00:7a:ab:a4:
                    03:b6:94:1d:09:7b:d7:e8:a3:b9:ee:da:67:97:bc:
                    da:9c:1d:de:75:68:6e:e1:87:0a:1b:6b:6a:0b:3a:
                    d1:80:68:c0:54:34:e3:4c:e5:c2:8f:e2:ce:88:93:
                    0b:bc:b5:13:c2:d3:28:0d:67:3b:38:1a:d4:43:a9:
                    63:41:61:a5:d0:57:25:09:fa:5c:b6:b7:4f:26:3a:
                    dd:10:28:e3:dd:57:ec:42:33:b6:fa:c0:5d:42:01:
                    b9:63:db:ed:1e:25:a9:88:c3:fc:f1:60:80:6a:d1:
                    19:99:38:00:49:89:db:29:87:1c:d5:c2:1b:cd:67:
                    76:c3:c5:4a:af:dc:fe:45:f0:7a:52:a7:ea:48:21:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:08:1C:12:B6:A8:37:7E:66:A0:96:16:2D:4B:6F:9F:91:25:7B:29
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/a7744b4a73d46c86cb32aee8dbca47ed52b652eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.7.0/24
                  190.90.10.0/24
                  190.90.13.0-190.90.16.255
                  190.90.38.0/24
                  190.90.68.0/24
                  190.90.79.0/24
                  190.90.101.0/24
                  190.90.151.0-190.90.152.255
                  190.90.192.0/23
                  190.90.202.0/24
                  190.90.204.0/24
                  190.90.210.0/24
                  190.90.221.0-190.90.223.255
                  190.90.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:72:4e:38:1a:b5:f1:ed:32:30:9a:25:d6:f1:34:03:e0:02:
         19:b2:60:dd:94:64:a6:3e:af:39:9f:b8:44:46:0a:05:28:fe:
         a0:9d:c9:27:a8:e0:db:54:5c:1e:fa:2f:5d:e3:1d:a5:b7:a5:
         80:e5:81:1e:ca:db:59:88:33:5d:6f:24:5c:30:ef:3c:0d:e7:
         5d:f6:fa:ce:70:0e:06:7e:1a:97:e1:7b:65:6d:d1:41:f4:bc:
         28:ae:cc:89:e3:f7:b8:79:05:07:8c:ee:b8:94:ac:75:bc:79:
         33:64:e7:f1:e1:f1:df:79:b0:1e:68:08:3c:8f:56:fd:87:67:
         bc:e3:ce:ad:fc:f4:bb:5b:49:98:e0:e9:78:21:cf:dc:e6:dd:
         70:b8:78:ee:d0:78:2f:3b:b7:c4:e8:36:05:5f:57:01:1c:e2:
         c3:cd:f7:b6:d4:14:97:64:03:3a:7f:ec:92:b1:b1:c1:9a:94:
         c6:2d:0a:57:60:4a:70:00:b1:ba:55:66:70:09:52:f7:e3:17:
         70:7c:0e:96:7a:a5:72:3e:e4:51:21:9a:98:37:14:2a:e5:f4:
         f7:cd:1e:43:ef:85:47:b6:23:df:9b:d6:cc:47:f1:fb:53:83:
         9e:e5:14:78:39:61:fe:55:a1:6b:04:49:96:8d:ef:a0:8f:e2:
         42:7a:46:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org