Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/6638391c623299ce75498a3ae67dace7e02605a5.roa
File:                     6638391c623299ce75498a3ae67dace7e02605a5.roa (raw, json)
Hash identifier:          Jh+x8p652Ct6RkE+G2Z0CA9S2OKZDpDsHAuPsI0li1E=
Subject key identifier:   E9:F3:3B:1C:D9:7C:E1:4B:28:E8:F7:85:9D:25:4E:BB:60:95:AA:C6
Certificate issuer:       /CN=035480923cfb3fc749b393f95a7b72c277263815
Certificate serial:       16AC08
Authority key identifier: 68:6A:59:4F:A9:67:FB:ED:13:5E:25:44:95:AE:8C:D6:9E:21:09:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/035480923cfb3fc749b393f95a7b72c277263815.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/6638391c623299ce75498a3ae67dace7e02605a5.roa
Signing time:             Fri 24 Mar 2023 08:31:31 +0000
ROA not before:           Thu 23 Mar 2023 08:31:31 +0000
ROA not after:            Sat 22 Mar 2025 08:31:31 +0000
asID:                     269953
IP address blocks:        190.89.128.0/24 maxlen: 24
                          190.89.129.0/24 maxlen: 24
                          190.89.130.0/24 maxlen: 24
                          190.89.131.0/24 maxlen: 24
                          2803:46e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485832 (0x16ac08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=035480923cfb3fc749b393f95a7b72c277263815
        Validity
            Not Before: Mar 23 08:31:31 2023 GMT
            Not After : Mar 22 08:31:31 2025 GMT
        Subject: CN=6638391c623299ce75498a3ae67dace7e02605a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:1e:74:09:8b:ce:05:50:61:07:77:51:49:
                    32:aa:c7:43:5e:a9:af:e9:cb:3f:9e:46:7d:d1:45:
                    66:ee:65:d7:3f:da:a7:3f:4a:84:95:fa:eb:b6:ff:
                    01:34:b1:3b:a9:0f:a2:32:ae:aa:f4:8e:db:2f:0e:
                    92:df:4e:ce:04:72:32:b9:2f:65:12:0e:e5:96:4e:
                    af:2a:01:0b:d2:d4:9b:8e:25:7f:ba:e8:78:3d:d1:
                    27:66:09:b7:3d:21:5f:b0:08:33:d4:ed:eb:99:4c:
                    b2:60:c0:5f:c5:12:24:dd:43:99:f2:f1:47:df:dc:
                    b7:10:95:3c:16:16:f0:c8:a3:5d:62:5c:77:c6:aa:
                    98:35:d1:c8:c9:ed:63:b2:81:3e:c8:f1:49:ee:85:
                    a4:dc:47:5d:ac:5e:ac:64:14:63:b8:3c:2a:de:fd:
                    86:eb:b2:67:05:5c:e1:d1:da:35:3e:d1:ae:50:ed:
                    75:a9:a7:47:c3:6f:c9:a8:0b:24:72:6b:70:6a:f8:
                    7f:d9:35:4c:fa:38:bd:72:68:0b:d7:2a:bf:cd:d8:
                    4b:06:f5:dc:58:ff:9f:66:5a:6a:14:73:60:0e:37:
                    3a:11:1c:35:89:8a:4d:be:59:cb:b5:fc:b4:17:0a:
                    a5:59:b3:78:11:ea:55:a2:86:95:5a:63:18:d4:74:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F3:3B:1C:D9:7C:E1:4B:28:E8:F7:85:9D:25:4E:BB:60:95:AA:C6
            X509v3 Authority Key Identifier:
                keyid:68:6A:59:4F:A9:67:FB:ED:13:5E:25:44:95:AE:8C:D6:9E:21:09:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/035480923cfb3fc749b393f95a7b72c277263815.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/6638391c623299ce75498a3ae67dace7e02605a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/035480923cfb3fc749b393f95a7b72c277263815.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.128.0/22
                IPv6:
                  2803:46e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:a7:4f:43:f4:a4:1b:81:71:0d:99:22:f2:88:9b:31:62:c3:
         ab:b2:17:62:fa:9e:ca:40:aa:a7:f3:1d:9a:8d:bb:fe:5c:7b:
         58:af:5d:d9:35:df:6b:b4:45:40:7d:d5:06:67:fe:d6:0d:51:
         45:ab:b4:7a:34:9f:63:f6:e6:39:bd:72:0f:be:75:0f:9f:30:
         e7:1a:39:47:4e:a0:11:ee:c3:2a:53:21:c0:96:fa:b0:38:7d:
         bb:cb:d9:63:4f:82:0d:d8:5e:63:43:31:b6:4b:49:de:1e:cb:
         46:e7:5b:6a:48:09:16:d3:24:47:08:4b:7a:b8:1b:de:18:19:
         a9:d0:db:12:c1:42:45:40:7e:58:2f:70:5b:6f:b4:aa:53:cd:
         be:a5:e9:35:94:7e:04:ac:8c:6a:5f:cf:82:8e:b6:6e:bb:1c:
         f6:5b:b4:58:e5:2a:70:12:ec:c2:a1:e0:a7:2b:2e:85:a4:bb:
         57:13:f6:75:24:91:af:ec:08:2a:0e:51:b9:9c:f7:d6:81:c1:
         1f:56:99:18:b9:a6:df:c9:5f:89:60:1f:cc:f8:57:4d:cd:c2:
         c2:8f:ee:ee:36:f4:91:5b:7d:9c:68:18:50:8b:8c:57:2c:97:
         d1:e0:97:63:59:38:6a:5c:32:2e:a7:6b:f1:a0:f5:b0:94:d8:
         75:75:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org