Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/f3815e43d1a9d12dbd98523cf7d2a4d8fa30d566.roa
File:                     f3815e43d1a9d12dbd98523cf7d2a4d8fa30d566.roa (raw, json)
Hash identifier:          +5wTv0bFdXtfr7em0jT2Hekb7mAdDhWhhl/9WYW5WEg=
Subject key identifier:   09:AD:67:D3:EE:16:86:E8:11:CA:6E:67:EA:34:12:1D:85:28:D5:58
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1F4EDD
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/f3815e43d1a9d12dbd98523cf7d2a4d8fa30d566.roa
Signing time:             Tue 17 Jan 2023 22:51:26 +0000
ROA not before:           Tue 23 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     262589
IP address blocks:        190.90.14.0/24 maxlen: 24
                          190.90.84.0/24 maxlen: 24
                          190.90.98.0/24 maxlen: 24
                          190.90.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051805 (0x1f4edd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 23 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=f3815e43d1a9d12dbd98523cf7d2a4d8fa30d566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:ed:74:78:13:71:bd:f3:ed:ff:48:e8:70:
                    f4:07:50:a9:93:74:96:ff:15:09:7f:1b:97:55:23:
                    39:bc:a7:b4:f6:02:8a:f8:64:24:c6:b9:d6:2e:6a:
                    a5:7d:3a:22:3b:48:4c:7c:89:49:0e:b4:b4:17:c1:
                    0e:47:fc:f0:67:d6:2c:52:47:17:a0:bb:79:10:76:
                    fb:cc:d1:81:ca:02:c8:82:f8:c3:22:50:3a:6c:cc:
                    ed:3f:fa:36:88:10:b0:70:43:84:22:5f:98:c9:59:
                    92:ef:80:4b:bc:aa:52:f4:b4:12:50:e5:cb:fe:4b:
                    84:ad:e7:68:a1:22:e6:84:71:8f:9f:2a:bf:d2:07:
                    de:6e:53:0d:26:2e:1d:ad:20:a6:33:70:d5:e8:29:
                    35:90:29:c6:ed:53:ae:63:b2:30:28:98:a0:22:21:
                    c8:fb:47:f1:09:f1:be:74:34:1c:93:0e:39:54:41:
                    c5:28:1f:5e:fb:c8:0a:cf:9d:f6:93:32:79:70:22:
                    1b:c5:ea:cc:0d:79:11:f9:44:22:67:cc:c3:cc:6a:
                    bf:ae:23:06:2b:ec:48:c5:72:4c:49:49:49:16:43:
                    d3:a1:57:ab:0b:ec:a0:86:0d:8f:4a:cc:c2:5b:59:
                    24:a6:82:5c:ce:60:fa:94:41:cc:35:87:fa:ce:ca:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AD:67:D3:EE:16:86:E8:11:CA:6E:67:EA:34:12:1D:85:28:D5:58
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/f3815e43d1a9d12dbd98523cf7d2a4d8fa30d566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.14.0/24
                  190.90.84.0/24
                  190.90.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:27:ec:73:39:b9:a3:90:31:37:0a:e1:77:2f:fb:2a:c5:ae:
         59:d4:66:a2:4b:9f:c0:aa:29:9d:24:de:13:de:f7:33:7b:49:
         68:b4:49:c6:59:a4:b2:1b:f1:55:7a:06:2e:f7:6a:4f:74:ea:
         45:c3:9f:fb:c8:df:41:0d:11:58:3c:9c:86:93:15:5e:55:8c:
         72:dc:55:a2:88:de:a9:e1:3a:cd:94:8e:88:d9:c5:cd:23:4d:
         3b:71:e1:c0:18:9f:a6:cd:23:d9:9f:48:da:20:57:bb:01:33:
         0b:ed:85:0b:cf:71:e8:29:de:da:ae:64:49:6e:26:c1:24:a4:
         a4:68:ba:23:c2:b0:99:dc:4b:f6:90:7c:3a:e4:be:d0:56:2f:
         37:ed:20:26:69:da:65:38:ae:3e:d7:73:1a:4f:6e:46:64:3c:
         60:8a:83:d1:a2:5f:3d:8f:d4:65:a2:dc:bd:6b:63:a9:58:09:
         2f:58:8e:82:64:21:68:b2:ac:ac:52:b8:1f:55:f4:b4:a3:c2:
         2c:7b:0c:1f:11:ec:72:e4:16:73:ca:85:3b:1b:d4:ae:3c:02:
         bd:11:59:b3:af:d6:7d:76:90:d5:0e:fb:48:b5:28:ca:1b:3e:
         09:6d:e1:fe:a3:ca:e4:96:37:cb:ba:a1:24:8a:4b:05:6a:45:
         23:bd:3c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org