Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/3c5eec8d655053ab930e9d4870eccd8cca967232.roa
File:                     3c5eec8d655053ab930e9d4870eccd8cca967232.roa (raw, json)
Hash identifier:          2nw3wfi/Mve3cXYZWuipupks33Sp+IkXiuhVGvBY1K8=
Subject key identifier:   53:1C:87:A9:6C:47:F8:00:CA:29:8D:C9:78:22:C3:5C:50:C1:5C:DE
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A4A9A
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/3c5eec8d655053ab930e9d4870eccd8cca967232.roa
Signing time:             Wed 07 Sep 2022 20:47:36 +0000
ROA not before:           Wed 07 Sep 2022 20:43:34 +0000
ROA not after:            Sat 07 Sep 2024 20:43:34 +0000
asID:                     262145
IP address blocks:        190.211.116.0/24 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723034 (0x1a4a9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:43:34 2022 GMT
            Not After : Sep  7 20:43:34 2024 GMT
        Subject: CN=3c5eec8d655053ab930e9d4870eccd8cca967232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:62:f7:9a:6a:e7:39:72:2a:95:ce:a0:b1:
                    38:ed:67:c8:95:5a:f7:b4:89:a3:a4:c7:22:01:e4:
                    8b:6b:0f:ec:0f:dd:ae:54:62:57:5a:de:8a:e4:1a:
                    6a:03:19:a8:dc:0f:1d:5f:88:31:ee:b2:c6:23:8a:
                    33:e3:e7:71:f5:62:03:59:ee:91:59:20:48:63:f1:
                    05:01:91:8f:72:46:c2:ce:e5:13:21:7a:ac:90:32:
                    24:4a:68:45:e1:70:6c:3b:42:5b:13:6e:86:2e:e1:
                    3b:a2:e4:4a:63:50:de:1c:dc:77:4a:a0:3c:77:f5:
                    7b:98:3b:90:e2:10:48:a7:4f:8b:15:5f:9b:d5:62:
                    1b:0f:ec:1b:59:d4:d1:8c:a3:12:3d:e3:c4:1a:fd:
                    98:08:86:8a:72:4b:a5:4d:5c:77:6f:79:10:30:5c:
                    5b:a5:f7:d1:8f:d4:cf:2f:23:ea:21:b6:eb:62:3c:
                    3e:35:3d:7a:7c:bd:8a:c5:d4:35:31:83:91:cd:e4:
                    66:22:45:e0:78:10:4d:c6:fa:71:43:28:a2:a3:9b:
                    26:81:23:98:93:cc:ae:5d:67:a2:7a:fa:b0:25:a8:
                    c3:51:49:91:3a:84:dd:4e:13:6e:e5:1b:0a:c0:a4:
                    b8:e6:f9:62:7b:1b:45:cf:6a:e2:ed:f6:6b:a4:03:
                    c0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1C:87:A9:6C:47:F8:00:CA:29:8D:C9:78:22:C3:5C:50:C1:5C:DE
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/3c5eec8d655053ab930e9d4870eccd8cca967232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:52:cd:60:6c:1f:c8:ff:22:a3:97:42:e9:8c:69:e2:37:28:
         85:90:9f:a7:16:cd:52:15:60:05:21:6a:0c:1c:f0:7d:9a:b0:
         0b:95:81:c5:8d:b2:19:84:a2:7e:c1:85:57:dd:6c:32:3f:db:
         cb:da:f8:cc:6e:b7:8c:80:94:3e:0b:0a:3b:53:1d:c5:04:47:
         c2:07:2e:18:fb:9b:cd:cd:61:98:a0:4c:7e:9e:b4:78:99:55:
         5a:57:c2:fc:fe:b4:a5:03:ae:89:18:e2:14:c7:8d:66:ab:6f:
         4f:85:64:06:a5:96:21:13:ec:4a:ef:97:b1:3b:d2:c2:36:2f:
         2e:5c:20:1c:66:4a:19:60:79:6f:be:15:f5:6b:07:b5:a3:13:
         73:bc:65:8e:f4:ab:13:ce:51:b1:68:b5:2f:82:03:ec:b7:ff:
         d2:57:df:2c:c7:01:7b:73:d1:86:d3:00:ff:13:90:b2:61:d0:
         ee:d7:3d:2c:42:df:3e:44:c9:32:ff:8c:e0:c4:b1:20:00:3c:
         17:36:bf:78:73:7b:a4:45:b5:bf:b4:bb:08:b9:5c:18:a7:d9:
         ef:b8:66:d6:5a:f3:0e:f9:b7:23:e0:00:c8:5c:51:99:af:7d:
         df:7c:8e:78:a7:b3:87:96:e8:33:17:30:3e:a4:5c:e8:df:29:
         0d:e1:a5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org