Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/3378fbe438b0b86b650687536493325746ff9e39.roa
File:                     3378fbe438b0b86b650687536493325746ff9e39.roa (raw, json)
Hash identifier:          fiCfgV/YEC9JqLxvy9GhVbX1WERm+HkCDw7x+CMVUGw=
Subject key identifier:   AB:17:10:1C:5F:F5:45:8C:C6:EE:9F:A2:5F:62:97:AE:F9:24:30:C8
Certificate issuer:       /CN=09a203b64348f1b177ff9d7141f0356733b30843
Certificate serial:       249868
Authority key identifier: C8:23:D6:7D:AD:B0:7E:45:58:BD:2F:96:39:0F:1D:91:87:F9:B9:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a203b64348f1b177ff9d7141f0356733b30843.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/3378fbe438b0b86b650687536493325746ff9e39.roa
Signing time:             Thu 26 Oct 2023 05:31:15 +0000
ROA not before:           Thu 26 Oct 2023 05:31:15 +0000
ROA not after:            Sun 26 Oct 2025 05:31:15 +0000
asID:                     27979
IP address blocks:        190.93.224.0/20 maxlen: 22
                          200.73.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2398312 (0x249868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a203b64348f1b177ff9d7141f0356733b30843
        Validity
            Not Before: Oct 26 05:31:15 2023 GMT
            Not After : Oct 26 05:31:15 2025 GMT
        Subject: CN=3378fbe438b0b86b650687536493325746ff9e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:43:16:65:cf:b4:f7:0b:0f:3f:62:eb:fa:24:
                    d3:5b:ea:33:1e:34:91:63:e4:0b:04:95:5c:43:5f:
                    16:5a:c7:98:3b:ba:47:ab:7e:9a:5f:03:55:30:6d:
                    8c:9b:ec:3d:d0:6f:05:b1:75:9a:45:34:10:af:b0:
                    35:72:43:52:7c:0d:81:41:8b:c3:90:24:df:8c:44:
                    fb:bb:f9:f1:b3:54:c1:35:32:22:d3:62:50:ff:79:
                    0e:27:2d:30:be:cb:30:23:cb:73:17:86:88:40:d7:
                    a8:89:f9:79:9f:49:de:80:a3:0b:c0:af:c4:f1:38:
                    e7:b2:f1:94:c6:73:b9:1a:41:0f:29:f3:77:fe:ff:
                    dc:23:1e:bc:51:bf:9c:53:69:12:0d:e6:93:e3:d5:
                    71:5d:22:7a:2b:fc:0c:65:7c:9c:2d:2c:18:d4:ba:
                    52:c0:df:40:9e:2a:6a:ac:e9:a3:72:55:30:f5:44:
                    bb:2b:a7:17:b1:58:cd:7e:39:51:00:55:4e:0d:6d:
                    82:63:78:91:84:ab:df:e5:f3:3b:66:d6:1e:47:6f:
                    20:81:43:82:4b:58:c2:93:d7:bc:15:ad:23:c1:9f:
                    0f:56:87:1f:bc:5b:97:14:47:3d:4d:c4:0a:d2:c2:
                    61:73:a3:5f:34:6a:74:cd:44:65:de:ee:93:d2:25:
                    12:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:17:10:1C:5F:F5:45:8C:C6:EE:9F:A2:5F:62:97:AE:F9:24:30:C8
            X509v3 Authority Key Identifier:
                keyid:C8:23:D6:7D:AD:B0:7E:45:58:BD:2F:96:39:0F:1D:91:87:F9:B9:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a203b64348f1b177ff9d7141f0356733b30843.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/3378fbe438b0b86b650687536493325746ff9e39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/09a203b64348f1b177ff9d7141f0356733b30843.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.224.0/20
                  200.73.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c4:a1:8a:a8:b5:d5:d4:22:0f:6d:56:09:48:d5:48:3c:0b:ad:
         98:9f:6e:a8:1a:86:9b:84:9a:99:5d:82:c9:8b:2f:e9:b0:93:
         85:25:70:3b:bd:3a:96:37:88:db:e1:07:94:0a:a3:e3:b4:2d:
         b2:f8:17:0e:a7:19:43:f7:54:79:b4:46:5c:c6:97:b2:70:78:
         f9:c2:d2:c5:d7:55:68:f8:53:74:dc:61:af:f7:a1:be:bb:d5:
         2b:8f:72:ee:e6:f1:e1:2d:82:d3:85:d1:72:ca:23:cb:76:a2:
         e3:3e:5b:99:0f:e0:91:3f:2c:b1:36:f5:59:f6:18:04:5b:82:
         ae:b6:05:03:80:e3:ce:3b:75:ff:5d:6e:95:d5:64:6e:1a:30:
         fe:a0:d2:3a:94:cf:f7:fd:11:a5:b2:65:c1:39:4f:fd:d9:8a:
         3a:7b:dc:9a:79:a4:32:ff:d1:05:b8:a8:a3:58:e8:e8:79:1a:
         b1:b8:fe:cb:34:94:2d:2e:35:13:38:bf:e5:ee:94:a9:6a:e5:
         9c:af:3c:ed:9e:84:45:e0:a0:d0:b3:1e:60:80:4c:c5:be:69:
         6e:6d:e6:5e:8b:2d:46:3c:7e:41:ba:28:21:ab:cb:15:10:ad:
         de:91:8b:3b:35:04:8a:a2:66:fc:35:ac:ed:b2:c0:26:fb:20:
         b4:c9:68:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org