Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/560bd30c14a7bea9f4188f6aa14e25034a36047e.roa
File:                     560bd30c14a7bea9f4188f6aa14e25034a36047e.roa (raw, json)
Hash identifier:          mPrNwnFY4dqHaN3dkg6JQpNnbs9z+sNpz+14oRUDPnQ=
Subject key identifier:   26:78:00:94:9A:A5:E5:9A:0D:41:0C:F7:F7:DE:86:3A:ED:33:4B:4C
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       2A59C7
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/560bd30c14a7bea9f4188f6aa14e25034a36047e.roa
Signing time:             Wed 06 Dec 2023 07:30:03 +0000
ROA not before:           Wed 06 Dec 2023 07:30:03 +0000
ROA not after:            Fri 05 Dec 2025 07:30:03 +0000
asID:                     10620
IP address blocks:        190.158.204.0/22 maxlen: 24
                          201.221.172.0/22 maxlen: 24
                          181.57.248.0/23 maxlen: 23
                          181.57.250.0/23 maxlen: 23
                          181.52.218.0/23 maxlen: 23
                          190.145.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2775495 (0x2a59c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Dec  6 07:30:03 2023 GMT
            Not After : Dec  5 07:30:03 2025 GMT
        Subject: CN=560bd30c14a7bea9f4188f6aa14e25034a36047e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:58:a2:97:a3:ad:1b:fe:df:ff:5a:a3:1d:9f:
                    b5:ea:7a:ce:39:24:c6:a3:29:86:98:b7:22:e8:f1:
                    a1:b4:e1:9c:34:71:52:8e:80:c1:27:c7:94:bc:bc:
                    86:45:e0:c1:77:c3:1e:d6:5c:ef:17:60:4f:46:a8:
                    af:c8:91:c8:b9:0d:18:bc:5d:38:c6:4a:ed:0f:41:
                    17:88:df:f3:85:29:d0:ba:52:6c:c9:d3:3c:f1:6c:
                    9a:24:71:d8:e9:cd:c3:aa:c1:d9:8d:fb:85:34:70:
                    0a:db:33:89:e5:f8:e0:0e:90:e5:8e:ef:7b:5e:12:
                    a5:06:6a:88:77:2d:1a:1a:6a:22:26:e1:1b:4a:cd:
                    0c:ed:72:6c:91:dc:58:87:69:30:4c:cf:4a:84:3d:
                    28:12:d3:ec:c6:1b:14:45:50:ba:2d:e0:53:f2:ae:
                    36:0d:76:4c:e5:be:0c:60:88:62:04:52:22:4b:40:
                    94:c3:a3:65:f6:9c:e2:ce:c9:ef:f6:18:a2:f5:e7:
                    45:4f:a6:12:3a:a2:b3:1d:8d:3b:b3:17:f9:10:00:
                    ec:84:87:92:80:b3:fb:cb:7e:65:77:97:ad:cd:da:
                    e5:4f:27:88:38:28:30:fe:27:ff:81:07:ac:a4:9d:
                    90:50:10:8f:64:30:1e:99:3d:b9:60:e9:91:ab:69:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:78:00:94:9A:A5:E5:9A:0D:41:0C:F7:F7:DE:86:3A:ED:33:4B:4C
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/560bd30c14a7bea9f4188f6aa14e25034a36047e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.52.218.0/23
                  181.57.248.0/22
                  190.145.240.0/22
                  190.158.204.0/22
                  201.221.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:4c:33:cb:ff:ab:25:57:1e:4c:40:92:8f:61:b2:0f:ae:fb:
         f5:f1:64:e0:9a:28:ff:3a:7c:3c:5b:96:92:94:87:b3:a3:f8:
         cb:fd:9e:89:ca:b8:2c:41:15:63:10:87:e4:7f:b1:e1:37:46:
         81:e1:ef:ac:f1:6f:76:61:5e:95:7d:7e:c7:68:67:1f:b7:af:
         22:11:17:b9:d9:97:ea:00:5a:b0:06:63:16:d1:80:99:d2:5d:
         8c:22:17:65:0e:bf:14:a0:6d:a3:9b:67:e4:ad:67:c5:9d:74:
         3d:ef:1d:92:39:22:30:20:08:9e:37:93:ff:98:9e:fa:12:8e:
         41:2b:f1:86:63:ab:33:62:26:fe:28:01:0a:66:71:cc:13:97:
         ae:c2:7e:e6:33:d7:ea:23:a3:76:66:89:98:c0:e3:a7:94:d5:
         e3:79:c2:d2:ee:a0:54:da:ff:80:21:a0:fe:13:f4:d0:99:88:
         69:3c:1d:92:5c:26:f2:29:a9:74:4a:fd:61:bf:e4:7e:5e:07:
         a8:cf:23:88:ea:e0:8f:36:2b:e4:7e:ad:d0:ec:e8:55:db:0a:
         b6:56:7b:38:d5:01:f4:4a:9a:a8:84:fb:7c:bf:1d:a6:51:6a:
         b6:fa:d7:ce:50:47:64:3c:37:b0:aa:56:74:f8:ba:77:5a:7a:
         06:c7:2f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:54 2024 by rpki-client on console-ams.rpki-client.org