Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/1274d5fcfd124a4ac267c7a2b278cb6412baf365.roa
File:                     1274d5fcfd124a4ac267c7a2b278cb6412baf365.roa (raw, json)
Hash identifier:          uNd6zp+TLJdxWKEpOl5pYLNHzgC/dF9s1HdIjV2AKd8=
Subject key identifier:   E2:3C:69:96:3C:F9:FD:24:1A:05:BE:31:8C:E3:78:9C:D7:0C:8F:39
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       2914FC
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/1274d5fcfd124a4ac267c7a2b278cb6412baf365.roa
Signing time:             Fri 05 Apr 2024 22:30:54 +0000
ROA not before:           Fri 05 Apr 2024 22:30:54 +0000
ROA not after:            Sun 05 Apr 2026 22:30:54 +0000
asID:                     52468
IP address blocks:        190.60.112.104/30 maxlen: 30
                          190.60.113.36/30 maxlen: 30
                          190.60.113.48/29 maxlen: 29
                          190.60.116.92/30 maxlen: 30
                          190.60.193.216/30 maxlen: 30
                          190.60.200.24/29 maxlen: 29
                          190.60.203.136/29 maxlen: 29
                          190.60.243.96/28 maxlen: 28
                          190.60.243.128/28 maxlen: 28
                          190.60.243.144/29 maxlen: 29
                          200.91.204.148/30 maxlen: 30
                          200.91.204.152/29 maxlen: 29
                          200.91.204.168/29 maxlen: 29
                          200.91.204.180/30 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2692348 (0x2914fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Apr  5 22:30:54 2024 GMT
            Not After : Apr  5 22:30:54 2026 GMT
        Subject: CN=1274d5fcfd124a4ac267c7a2b278cb6412baf365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:52:5d:5c:c8:d3:57:e2:ca:8c:c0:b3:44:
                    99:12:fe:21:54:2d:4e:e5:e5:58:74:fa:ee:45:52:
                    85:d8:1d:ec:f8:bf:8d:48:20:c8:65:ea:ae:e8:1d:
                    10:7f:86:37:5a:f2:21:0f:c4:e0:ff:46:f8:4b:21:
                    97:b1:e1:bb:e9:5f:56:88:30:51:2b:a5:ea:cd:f9:
                    a6:b8:4f:86:b4:61:bf:82:c6:c0:03:6e:c3:ae:99:
                    06:84:16:dc:85:24:d4:bf:34:16:27:4e:ef:52:1d:
                    0f:36:9f:d5:e2:03:9f:69:9a:94:f3:18:3b:9d:c4:
                    dd:6a:35:13:4b:e3:f2:a3:15:2b:a3:ce:87:5d:89:
                    68:cb:dd:75:63:2d:06:02:4b:ad:e5:87:7d:9c:35:
                    5f:ae:9c:4f:0a:4d:69:3c:05:a8:5c:35:de:81:d0:
                    35:ab:43:8c:df:0a:53:23:d8:2b:20:c4:41:a1:03:
                    ee:91:35:b8:26:96:c3:72:89:f0:6a:8f:57:0f:a8:
                    88:48:f2:12:8e:8b:a9:8e:99:ac:bd:85:21:3c:90:
                    18:fe:b8:29:9f:10:94:5a:00:43:bb:23:aa:a0:0c:
                    e3:bb:6d:0f:9d:b7:11:62:54:5d:0c:91:21:cf:c6:
                    20:42:4b:6f:5c:5b:5a:93:93:85:b8:8f:bc:ea:06:
                    c2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3C:69:96:3C:F9:FD:24:1A:05:BE:31:8C:E3:78:9C:D7:0C:8F:39
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/1274d5fcfd124a4ac267c7a2b278cb6412baf365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.112.104/30
                  190.60.113.36/30
                  190.60.113.48/29
                  190.60.116.92/30
                  190.60.193.216/30
                  190.60.200.24/29
                  190.60.203.136/29
                  190.60.243.96/28
                  190.60.243.128-190.60.243.151
                  200.91.204.148-200.91.204.159
                  200.91.204.168/29
                  200.91.204.180/30

    Signature Algorithm: sha256WithRSAEncryption
         bc:5c:40:5c:27:71:fc:48:bf:57:18:de:f8:07:65:b4:20:71:
         90:22:6d:1a:a6:38:16:c2:2f:a3:4f:51:9b:4f:b4:f6:3e:6e:
         a0:58:67:25:88:a7:2d:6c:05:a1:ee:9b:e2:28:27:bf:2e:e7:
         00:cc:db:d7:b5:0f:5f:c2:c7:16:8f:c9:8c:3f:ba:cd:06:4b:
         e4:16:1e:dc:c3:3b:d8:7a:78:a2:ca:72:c1:f0:73:dd:f6:5e:
         bc:99:d2:38:c7:68:3b:80:e7:3a:af:9f:62:70:57:75:ab:96:
         d3:0f:dc:46:98:91:84:0b:6f:68:7d:33:82:6b:aa:40:6a:9d:
         c1:9e:a9:e4:7e:8e:4a:44:05:c5:bc:a7:73:cb:95:c8:96:e4:
         8a:e4:8d:92:43:69:8d:70:4e:99:15:71:f6:d2:a3:0d:8f:a9:
         d9:f8:0b:2e:34:37:46:86:aa:46:15:e0:fa:06:ac:ab:09:30:
         aa:b6:60:ea:eb:56:76:70:af:40:8c:b4:9c:e6:b1:73:83:70:
         b1:47:ec:ae:e2:a2:b0:0b:09:69:db:3a:af:aa:10:27:a1:2c:
         48:fa:d6:54:c5:e5:a7:8d:67:dc:2e:1b:71:23:ea:cb:78:42:
         9a:1d:c8:c4:b5:6a:81:98:a6:ea:15:a8:04:2d:5d:6b:43:79:
         04:70:5f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org