Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0660d337-0aef-454c-a658-62d790871876/634dd03cacf9b861d91744eb67b03a42b142cb9f.roa
File:                     634dd03cacf9b861d91744eb67b03a42b142cb9f.roa (raw, json)
Hash identifier:          qGISLTbKybznEmWrV/ZqE4j+7x7ZKPZKwTVhcpjPKz0=
Subject key identifier:   E1:8D:F2:FC:06:8B:F2:CF:5B:05:40:64:BF:16:2A:57:C5:55:72:C9
Certificate issuer:       /CN=daf03b5f2aa056a2e408167aec0955b11e79bf2b
Certificate serial:       182CA7
Authority key identifier: 82:BB:7F:17:20:E8:F3:5F:E0:95:09:12:C7:88:B6:62:F6:26:CF:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/daf03b5f2aa056a2e408167aec0955b11e79bf2b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0660d337-0aef-454c-a658-62d790871876/634dd03cacf9b861d91744eb67b03a42b142cb9f.roa
Signing time:             Sat 13 May 2023 08:30:00 +0000
ROA not before:           Fri 12 May 2023 08:30:00 +0000
ROA not after:            Sun 11 May 2025 08:30:00 +0000
asID:                     262231
IP address blocks:        190.103.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1584295 (0x182ca7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daf03b5f2aa056a2e408167aec0955b11e79bf2b
        Validity
            Not Before: May 12 08:30:00 2023 GMT
            Not After : May 11 08:30:00 2025 GMT
        Subject: CN=634dd03cacf9b861d91744eb67b03a42b142cb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:fd:d4:db:c2:c2:26:39:47:41:52:25:65:
                    0f:33:f2:94:ad:47:60:fc:96:7d:4d:c5:3f:81:c0:
                    d8:59:e7:7a:77:1a:97:6d:86:08:17:68:b7:c4:4d:
                    1c:67:03:bf:c7:cc:dc:47:d9:84:cd:e7:2c:ae:b5:
                    54:3e:54:47:53:b1:2a:ba:eb:87:ef:9f:fc:ed:a8:
                    2f:44:85:3a:fc:83:9f:54:34:de:c1:fe:c8:0e:42:
                    88:b2:fc:67:fa:48:67:7e:69:52:c5:cb:e7:5d:72:
                    8a:83:c4:9b:33:21:07:9a:e7:06:33:0b:ac:c2:d8:
                    71:28:c1:a6:1c:72:06:96:c2:a9:c4:b2:24:56:c4:
                    84:82:52:f3:5e:53:8d:4e:93:c2:0d:11:a6:a1:6c:
                    3c:e4:90:0a:6f:18:80:c0:66:62:c0:b9:8d:f2:1d:
                    c6:07:51:34:ef:c0:e2:9f:dc:9a:c6:d9:f9:82:82:
                    21:22:59:f6:5b:d1:4e:de:0e:e9:96:61:a4:db:57:
                    98:8e:a0:3f:f4:30:86:ce:77:56:4f:8f:62:76:9e:
                    7a:48:35:36:da:72:58:77:6b:c2:ba:5d:aa:43:4e:
                    73:b7:1f:06:c8:a8:0f:15:d4:6b:83:a1:0c:38:1d:
                    11:3b:0a:28:0d:39:39:d7:c0:b9:02:fd:bd:2f:5e:
                    ce:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8D:F2:FC:06:8B:F2:CF:5B:05:40:64:BF:16:2A:57:C5:55:72:C9
            X509v3 Authority Key Identifier:
                keyid:82:BB:7F:17:20:E8:F3:5F:E0:95:09:12:C7:88:B6:62:F6:26:CF:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/daf03b5f2aa056a2e408167aec0955b11e79bf2b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0660d337-0aef-454c-a658-62d790871876/634dd03cacf9b861d91744eb67b03a42b142cb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0660d337-0aef-454c-a658-62d790871876/daf03b5f2aa056a2e408167aec0955b11e79bf2b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:e7:60:69:9a:ac:dc:fc:82:47:6c:da:ed:fa:f7:b5:f1:92:
         d6:0d:f5:76:cb:c3:21:2e:f3:75:88:cc:a3:46:90:c2:c8:64:
         cc:67:80:e0:94:88:5e:7f:d9:fe:a7:00:a4:f8:3e:30:0a:b5:
         1b:c7:17:74:a3:1d:80:3d:eb:ba:17:f3:df:34:8f:8d:5a:47:
         b0:ef:14:65:0c:c9:5a:07:a2:5a:51:cb:e6:2e:03:8f:38:79:
         4e:8c:27:f5:8e:da:fd:d9:0e:b6:eb:b5:99:c4:c7:56:e1:5a:
         b5:eb:ef:74:18:1a:59:36:18:b9:04:38:71:e4:c9:16:79:e3:
         32:df:e6:5d:61:90:98:b3:19:07:73:a9:b7:e6:5c:6a:9a:1d:
         a9:dd:f6:e5:68:b9:53:9a:6b:3c:39:e4:14:e3:b7:f8:d7:9b:
         25:b2:ca:aa:f9:dd:68:a0:40:15:d3:03:bf:fc:bb:56:5d:41:
         55:9b:ec:33:f1:61:34:ee:ee:37:62:0c:d5:92:ba:29:4c:af:
         d1:94:33:a0:8b:45:bc:5d:aa:aa:34:51:14:80:98:09:76:27:
         60:e1:f7:20:a1:29:23:ff:67:b3:43:e0:55:b6:4b:71:e0:b7:
         8c:d8:a3:ae:cc:ee:03:88:37:67:ca:1d:c8:e2:d6:67:f9:93:
         3d:6d:97:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org