Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/3e6e7a4e924be93d79fac1527799fc13f56d4ffa.roa
File:                     3e6e7a4e924be93d79fac1527799fc13f56d4ffa.roa (raw, json)
Hash identifier:          /ss1WowzenZ3WVMYg4A8l/8TDREo1jG6yXnYVuhfiAY=
Subject key identifier:   A8:62:31:2D:C6:8F:89:F4:26:74:75:22:D4:10:7E:23:65:10:65:9A
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       1EB4D4
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/3e6e7a4e924be93d79fac1527799fc13f56d4ffa.roa
Signing time:             Tue 10 Jan 2023 15:33:20 +0000
ROA not before:           Mon 09 Jan 2023 15:33:13 +0000
ROA not after:            Fri 10 Jan 2025 15:33:13 +0000
asID:                     28075
IP address blocks:        190.113.185.0/24 maxlen: 24
                          198.12.46.0/23 maxlen: 24
                          198.12.52.0/24 maxlen: 24
                          198.12.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012372 (0x1eb4d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Jan  9 15:33:13 2023 GMT
            Not After : Jan 10 15:33:13 2025 GMT
        Subject: CN=3e6e7a4e924be93d79fac1527799fc13f56d4ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1d:d3:d3:19:ce:f9:f7:f8:6c:cb:5d:82:41:
                    0c:20:88:68:32:24:3a:9f:60:ad:1c:18:11:4e:66:
                    70:7d:72:9f:f6:04:9d:00:47:19:2d:e8:f9:d5:32:
                    ec:9d:68:a0:ea:50:8d:46:8e:65:c0:3f:2e:e7:f7:
                    3d:08:0c:93:de:d8:b5:79:60:ff:f4:2d:c9:de:29:
                    b5:dd:a9:fc:2d:0b:a8:49:11:9e:9b:8a:9e:f5:8a:
                    b8:7b:ab:a8:00:68:d9:3a:a4:8d:31:f2:42:04:8d:
                    3f:75:29:81:b9:f0:0a:8e:53:a6:64:f3:84:1c:9b:
                    b6:6e:b3:7b:2b:77:11:4c:4f:a9:de:ab:de:ad:f3:
                    1e:bc:53:6b:df:53:96:fd:47:17:52:8c:e9:c2:69:
                    4a:7d:ed:b5:b6:af:6d:43:4d:d3:0d:07:22:74:b9:
                    50:ed:9a:12:0a:ed:1d:98:c2:b8:67:f5:63:c8:d3:
                    7f:2d:e3:28:b3:4d:4d:96:34:8a:a5:01:3e:0e:2e:
                    e8:85:8e:4a:8f:f2:06:38:c2:f8:e4:89:cb:9a:51:
                    fe:dc:d2:15:1e:e0:ea:2e:00:e3:f8:98:22:9b:ab:
                    af:20:52:7a:e1:78:74:11:42:ec:0c:5c:e4:81:5e:
                    7c:eb:ee:9e:b3:f2:8f:99:c4:ab:f8:0f:63:89:1a:
                    c7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:62:31:2D:C6:8F:89:F4:26:74:75:22:D4:10:7E:23:65:10:65:9A
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/3e6e7a4e924be93d79fac1527799fc13f56d4ffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.185.0/24
                  198.12.46.0/23
                  198.12.52.0/24
                  198.12.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:4c:1b:01:3f:6a:b9:6d:4c:2d:be:77:e8:e7:88:1f:31:aa:
         76:70:85:5a:ee:e7:45:2b:e2:ea:83:af:a9:db:7a:97:8c:7a:
         42:97:5c:70:13:17:12:d5:33:02:62:74:57:39:c2:49:f9:20:
         d6:54:9f:8b:99:e6:c1:d8:ef:91:b7:70:eb:ae:0c:7d:e3:34:
         62:c0:b9:34:a1:d6:c4:be:b9:76:bf:d6:b5:d4:15:4d:6b:c6:
         27:f7:2a:0a:d1:41:69:7e:a6:85:38:c4:0b:bb:2e:4d:e2:60:
         e5:27:53:ad:73:9f:73:2a:0e:25:f1:9c:b0:16:ca:36:66:0d:
         67:34:44:14:a3:e0:40:28:9b:ad:c9:f2:0c:da:6c:14:0f:8f:
         03:a5:64:93:53:1d:e9:5d:16:bd:f2:98:e7:cc:1d:99:68:2d:
         58:81:4d:ef:81:a3:91:ef:cd:83:65:e5:ad:fc:e0:bc:ea:75:
         62:49:81:ad:0c:96:f0:10:11:98:9c:56:e9:de:ce:c8:61:21:
         82:95:5e:b3:fd:81:8b:b9:88:e7:52:ae:8a:2e:22:9f:65:3d:
         c4:c8:06:27:5d:32:aa:2b:9e:c1:ba:2f:d1:dd:03:c8:a2:1c:
         37:84:ae:45:51:80:0b:d5:f8:38:fb:49:cb:0e:5b:bc:b5:9f:
         eb:2b:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:42 2024 by rpki-client on console-ams.rpki-client.org