Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/e76f4c5e5b8cbd267342e2ef28d457ee105d3675.roa
File:                     e76f4c5e5b8cbd267342e2ef28d457ee105d3675.roa (raw, json)
Hash identifier:          x/AeDZk98/t0JjiwZNVeHCZLX9DtKBCg722H6/Br1V0=
Subject key identifier:   81:61:0F:FF:A1:DD:21:7F:23:65:05:A6:3E:02:E3:53:92:D7:7F:A4
Certificate issuer:       /CN=c4935075ec435dbda09406df9fa324ff802f1d14
Certificate serial:       27322D
Authority key identifier: 76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/e76f4c5e5b8cbd267342e2ef28d457ee105d3675.roa
Signing time:             Wed 24 Jan 2024 17:07:15 +0000
ROA not before:           Wed 24 Jan 2024 17:07:15 +0000
ROA not after:            Sat 24 Jan 2026 17:07:15 +0000
asID:                     23243
IP address blocks:        190.14.7.0/24 maxlen: 24
                          190.14.8.0/24 maxlen: 24
                          190.14.9.0/24 maxlen: 24
                          190.14.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2568749 (0x27322d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4935075ec435dbda09406df9fa324ff802f1d14
        Validity
            Not Before: Jan 24 17:07:15 2024 GMT
            Not After : Jan 24 17:07:15 2026 GMT
        Subject: CN=e76f4c5e5b8cbd267342e2ef28d457ee105d3675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:a6:87:8a:25:cb:8d:59:9b:d3:1a:7d:65:
                    78:c2:16:33:94:1b:87:9d:65:40:65:48:e8:8b:c1:
                    11:34:72:45:05:dd:fd:7f:d1:b4:be:a8:18:b4:a8:
                    fd:97:a3:07:ad:da:1c:aa:6b:48:9b:cf:cf:ae:ca:
                    3f:56:37:d9:4b:5d:b4:6f:ad:b3:b8:18:a3:10:21:
                    e3:38:9f:f3:b4:c5:65:a0:db:60:f0:80:4b:4c:47:
                    03:30:f3:cd:87:52:9a:2b:ca:46:34:a0:c5:37:ff:
                    7d:b3:c3:f8:5b:07:b8:4a:2f:2e:f8:3f:d1:87:2f:
                    df:b6:c8:21:a5:13:57:68:a1:69:58:bb:cb:bb:1e:
                    82:78:d2:65:b7:da:e4:15:8c:df:34:c2:24:f6:6a:
                    b9:18:cc:84:ac:78:63:4c:af:7e:0d:89:d4:d7:0d:
                    e0:c9:cc:8d:84:32:bc:b9:b5:8a:a2:b0:33:89:99:
                    a5:27:bf:8c:68:9b:e3:0a:67:31:40:3a:38:72:08:
                    36:39:1d:6c:12:0f:bf:3a:2d:c7:45:75:99:38:8c:
                    b4:e7:8a:32:c1:bc:6c:8a:fb:40:50:36:7a:70:11:
                    a7:ee:e5:6c:05:8c:bb:d8:39:0b:5f:14:6d:26:78:
                    8c:4f:1b:0d:c2:cc:a5:7d:e2:f2:eb:8d:36:8c:b7:
                    77:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:61:0F:FF:A1:DD:21:7F:23:65:05:A6:3E:02:E3:53:92:D7:7F:A4
            X509v3 Authority Key Identifier:
                keyid:76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/e76f4c5e5b8cbd267342e2ef28d457ee105d3675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.7.0-190.14.10.255

    Signature Algorithm: sha256WithRSAEncryption
         6e:47:df:06:3d:a3:d5:d0:72:6e:10:46:d2:0f:23:29:3c:1f:
         ec:fe:5c:47:17:e5:0e:f0:1b:8b:a6:7a:4a:66:ee:78:eb:0a:
         6c:77:13:06:02:a5:87:92:77:9a:06:df:20:36:a6:50:c1:72:
         4e:e6:8e:c6:7c:a8:d6:e2:5f:25:df:55:42:ce:1b:99:72:fb:
         1a:00:84:6a:1f:dd:db:25:f7:25:37:57:14:88:70:20:fb:4c:
         1a:61:42:dc:f4:24:c8:ba:dc:26:37:a8:62:d4:fa:a2:90:a1:
         9e:2a:5e:00:a7:6f:3b:eb:94:e6:4f:ee:81:40:29:eb:9c:6e:
         90:52:96:d5:a5:3d:9b:3b:f7:ad:48:01:92:31:14:6c:43:c8:
         ed:5a:95:65:6a:ce:be:39:3c:2b:8d:44:a3:4e:7c:38:07:dd:
         7d:08:77:a1:f7:c9:57:e1:b6:34:77:50:27:7e:93:de:96:0b:
         0c:3a:45:56:99:7a:52:9d:4f:76:45:e9:da:90:a9:df:ac:9b:
         33:5b:4e:dd:79:67:3b:9e:e0:f9:d6:32:88:b5:1b:98:ce:e8:
         84:83:3a:f5:b5:92:66:e7:12:b0:9a:d6:ca:7d:09:e8:d1:06:
         2e:23:ff:c9:3f:01:82:f4:36:24:1c:fb:80:32:fd:02:78:53:
         ca:88:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org