Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/434796739c89fcd5a743ca98423528c21ea65949.roa
File:                     434796739c89fcd5a743ca98423528c21ea65949.roa (raw, json)
Hash identifier:          0E3eLINMwhJr0rLePmY6il2UNgdgIND6DePZfmiO1vk=
Subject key identifier:   24:71:A4:A9:14:24:B1:F4:8F:31:0B:06:66:74:4E:BB:61:B8:C1:BB
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A55A6
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/434796739c89fcd5a743ca98423528c21ea65949.roa
Signing time:             Wed 07 Sep 2022 20:52:53 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1725862 (0x1a55a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=434796739c89fcd5a743ca98423528c21ea65949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:43:88:d3:40:09:7f:2d:3b:3f:ae:29:71:
                    25:97:05:e5:92:fc:50:b6:13:7c:40:1f:e5:ee:fa:
                    22:b8:8a:f5:4e:a7:f2:a0:31:cb:ae:5d:40:3f:72:
                    4e:04:36:72:c6:59:ab:56:c1:86:b0:50:be:98:ab:
                    f3:27:4a:ef:19:4e:7b:0f:ae:c8:f3:65:9f:40:6e:
                    af:86:57:78:a8:51:d5:91:5c:5e:38:c5:c9:34:bd:
                    54:a9:b9:b1:19:53:83:b0:77:69:32:73:09:60:d7:
                    00:b0:83:af:7e:81:01:1a:3c:ee:d5:c5:18:6f:8b:
                    14:ed:2e:67:de:80:25:a2:5d:32:02:ba:cc:02:41:
                    5e:be:81:82:74:64:04:19:b0:75:7c:08:82:fe:7a:
                    05:69:2a:f1:b0:16:da:8b:95:cb:52:cb:1b:c5:02:
                    f3:b8:b5:a3:d3:b9:4a:20:39:e1:47:bd:59:28:39:
                    7d:65:90:9e:47:84:3e:32:89:29:99:92:45:94:50:
                    01:3c:3f:29:1e:6d:f2:11:d6:85:7f:be:28:f9:58:
                    7e:05:54:ac:54:af:ab:de:ab:ac:03:ed:e4:93:3a:
                    e2:ca:97:98:16:c6:9a:51:a5:0b:f2:2b:8b:a9:6f:
                    de:32:f9:9a:ad:10:38:49:e7:5b:c7:61:af:05:34:
                    42:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:71:A4:A9:14:24:B1:F4:8F:31:0B:06:66:74:4E:BB:61:B8:C1:BB
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/434796739c89fcd5a743ca98423528c21ea65949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:33:c9:37:3c:5f:75:95:04:69:90:5c:a7:e4:15:8b:ca:bc:
         15:67:ac:8f:33:95:ce:7b:11:1e:79:e9:be:b6:9e:6d:aa:74:
         e2:a2:70:65:c3:59:a7:ea:db:ed:68:13:2f:df:c2:98:8a:fc:
         d6:26:df:c0:f9:67:0a:f3:47:a7:8d:53:7e:05:40:db:10:6a:
         f9:8f:37:92:1f:57:f5:00:1c:17:1f:a2:e4:ed:85:6e:68:04:
         7c:66:ee:b2:35:c7:b9:eb:7b:ed:1d:7a:09:7a:0c:3c:c1:e8:
         3d:96:1b:49:9f:c9:e8:d8:63:d3:c2:41:c0:43:f7:4a:4a:34:
         61:b3:37:1b:f8:9b:53:af:f7:d5:5f:0a:ee:b5:bb:98:c6:c3:
         38:f6:bc:a4:97:7a:95:ad:96:a1:03:a3:fe:c6:fd:f6:b8:d9:
         d4:01:15:92:2c:db:45:f7:e4:c6:b2:88:84:35:47:b8:fe:72:
         cd:e6:a0:12:7e:74:dd:22:17:3b:1f:df:64:69:e7:93:eb:bb:
         0b:97:e7:b0:51:b7:bf:c6:33:a1:e6:9e:d5:17:8d:36:23:7f:
         e1:67:68:10:d5:06:2a:da:1f:4c:fa:5f:7c:fc:cd:f7:b3:78:
         d2:0d:27:3c:07:e5:50:45:0a:35:d6:45:d9:ff:f2:fd:90:ec:
         71:f8:64:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org