Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/c46b9d6dcb1514e8a53cf84f0b05a1c7d08b7e53.roa
File:                     c46b9d6dcb1514e8a53cf84f0b05a1c7d08b7e53.roa (raw, json)
Hash identifier:          rR6EbA69FSrVyv940sG0KNoSS1ba+drArRHzaEElhmw=
Subject key identifier:   E8:DB:83:75:90:17:BF:9A:E5:D5:69:74:26:F3:2B:0D:7E:52:AB:57
Certificate issuer:       /CN=120d3f1dd0412637d6cfe87a0a26d34c0665388a
Certificate serial:       21CCC3
Authority key identifier: B7:61:B5:F2:74:4F:DB:FF:C7:B9:E6:F9:E6:02:F4:76:CD:77:30:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/120d3f1dd0412637d6cfe87a0a26d34c0665388a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/c46b9d6dcb1514e8a53cf84f0b05a1c7d08b7e53.roa
Signing time:             Fri 18 Aug 2023 18:43:46 +0000
ROA not before:           Thu 17 Aug 2023 18:43:46 +0000
ROA not after:            Mon 18 Aug 2025 18:43:46 +0000
asID:                     52232
IP address blocks:        190.114.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2215107 (0x21ccc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120d3f1dd0412637d6cfe87a0a26d34c0665388a
        Validity
            Not Before: Aug 17 18:43:46 2023 GMT
            Not After : Aug 18 18:43:46 2025 GMT
        Subject: CN=c46b9d6dcb1514e8a53cf84f0b05a1c7d08b7e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:08:c9:bc:4d:01:d2:1e:2a:31:db:48:84:ee:
                    e0:35:8b:ed:17:91:10:e4:f3:85:bd:a5:09:f5:bc:
                    ca:fc:57:a1:91:f8:d3:ba:15:4e:ef:12:38:41:85:
                    20:10:9f:7e:29:fc:ec:08:b6:07:5e:37:72:58:72:
                    d9:12:26:43:e1:0a:2d:b3:cd:bd:e5:f6:43:91:49:
                    cc:75:8b:0b:80:32:4a:5b:b6:48:4a:cb:dd:96:54:
                    9f:bc:ea:e5:4c:8c:e9:ad:61:5e:57:16:87:39:f4:
                    f8:1d:cd:8f:04:a8:6b:3b:8c:c3:ec:7c:51:b7:be:
                    92:c8:90:4e:f4:2b:d3:41:9b:2f:cc:fc:8e:d1:29:
                    a3:bc:a3:96:66:2a:0c:fa:8e:77:30:f0:0b:46:17:
                    d0:42:d0:a1:e8:c8:80:b4:cc:f7:b8:d4:f0:df:25:
                    b0:ba:e2:6a:38:ea:7a:ca:58:f0:5d:7c:3f:1d:5e:
                    56:9b:a9:1a:99:d0:42:b9:71:58:f7:54:cc:aa:be:
                    2f:cc:5f:42:ac:b1:35:58:d1:9b:39:6d:b7:96:2b:
                    9d:31:f2:6a:d1:32:b9:c5:a5:59:b4:21:f7:19:35:
                    05:cf:af:59:97:6c:8b:c9:54:ad:9a:ec:77:e1:44:
                    70:39:37:71:d9:02:02:70:9b:60:5f:82:ac:b7:6c:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DB:83:75:90:17:BF:9A:E5:D5:69:74:26:F3:2B:0D:7E:52:AB:57
            X509v3 Authority Key Identifier:
                keyid:B7:61:B5:F2:74:4F:DB:FF:C7:B9:E6:F9:E6:02:F4:76:CD:77:30:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/120d3f1dd0412637d6cfe87a0a26d34c0665388a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/c46b9d6dcb1514e8a53cf84f0b05a1c7d08b7e53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/120d3f1dd0412637d6cfe87a0a26d34c0665388a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:f0:b7:e5:86:67:1f:50:d8:10:f6:9a:0d:9c:9a:30:78:4f:
         34:e0:29:fa:12:b2:0c:30:01:93:f8:17:dd:04:02:41:ff:bb:
         59:e4:50:17:9f:9b:b9:e7:a0:9f:50:1d:3f:81:30:32:d0:bf:
         b4:3e:5c:bc:b1:c9:39:0d:51:11:cd:40:bd:79:e7:f4:e4:7b:
         bf:1f:06:69:10:2c:fc:43:ff:c0:45:40:7b:b7:8b:79:67:2f:
         da:9b:dc:aa:cf:d5:e3:77:a9:f3:f2:d6:3a:54:e8:3e:3a:db:
         a9:99:2e:89:4a:be:b1:6f:36:78:d3:fb:a0:b5:0e:10:58:82:
         03:6b:83:88:6e:47:9d:8d:90:92:57:b3:38:ba:6f:bc:5c:f9:
         f6:43:fd:d5:ac:41:e7:96:71:15:8b:24:e2:28:82:d9:ca:97:
         93:c4:61:b3:8e:3b:b3:82:97:79:64:c6:15:b8:68:b7:ee:47:
         c6:6f:60:e4:17:84:bf:ab:af:18:89:7b:8c:d7:0c:be:22:0b:
         69:17:45:19:c9:e4:d2:30:02:7c:23:37:d8:af:ee:75:e8:27:
         3d:f7:f9:25:52:5f:9f:e2:e9:d3:26:6e:8d:16:54:76:fd:30:
         53:d3:d7:83:07:0f:ee:72:66:3d:15:78:39:a6:1c:d1:c5:1e:
         3d:4a:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org