Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4defb1ba917e9d059234a14cf237dfc5e657ddc6.roa
File:                     4defb1ba917e9d059234a14cf237dfc5e657ddc6.roa (raw, json)
Hash identifier:          FQtqQiI40TakxMUPrfYBwN4F+TxB5suvZ5jKslgjkSM=
Subject key identifier:   DE:B0:05:3C:EF:77:12:C5:7A:8B:65:91:E2:2E:1E:65:9F:BF:C4:A9
Certificate issuer:       /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial:       144E6B
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4defb1ba917e9d059234a14cf237dfc5e657ddc6.roa
Signing time:             Tue 17 Oct 2023 17:17:14 +0000
ROA not before:           Mon 16 Oct 2023 17:17:14 +0000
ROA not after:            Fri 17 Oct 2025 17:17:14 +0000
asID:                     52362
IP address blocks:        190.14.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330795 (0x144e6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
        Validity
            Not Before: Oct 16 17:17:14 2023 GMT
            Not After : Oct 17 17:17:14 2025 GMT
        Subject: CN=4defb1ba917e9d059234a14cf237dfc5e657ddc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:05:a6:3d:d7:a9:2f:a7:ad:88:01:75:6c:
                    bd:d3:ef:5a:19:6a:6f:f4:b8:41:4f:88:72:5b:13:
                    0c:b5:53:2f:cc:4a:98:21:f1:19:cf:2d:7d:a6:71:
                    0a:30:6c:8c:6d:07:a2:40:e4:85:f6:09:d0:04:57:
                    80:d7:53:a7:26:e4:8b:05:99:48:03:04:35:6a:45:
                    b6:38:29:97:51:6a:96:ac:3c:bb:e0:33:ea:c4:0f:
                    32:7f:de:f5:9f:a9:54:ef:7e:c4:af:55:eb:ca:b5:
                    e1:7d:ea:1f:f4:2f:66:3a:1c:f4:72:21:4f:4e:ea:
                    ae:2b:8a:5f:72:9b:68:e5:63:3e:b5:2c:c4:da:8e:
                    5b:2d:ca:29:24:38:07:52:ef:8a:55:19:c5:d2:56:
                    2d:85:48:18:0c:5f:09:d9:94:99:cb:65:6f:c1:e3:
                    27:11:45:df:ac:12:c3:70:53:e2:5f:cf:d3:a7:b8:
                    8a:59:64:c8:74:11:37:9d:9a:c5:ff:3d:b7:20:a9:
                    21:49:59:14:2a:6e:b8:2b:40:63:25:97:c4:d4:46:
                    41:21:f5:25:a4:73:04:21:95:43:53:47:bd:d7:8a:
                    c6:ac:15:86:e7:27:e8:2a:0b:11:30:ff:c3:01:5a:
                    65:e6:6c:dc:34:36:af:5a:48:3a:53:35:34:11:30:
                    27:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B0:05:3C:EF:77:12:C5:7A:8B:65:91:E2:2E:1E:65:9F:BF:C4:A9
            X509v3 Authority Key Identifier:
                keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4defb1ba917e9d059234a14cf237dfc5e657ddc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:57:0d:e9:3f:40:88:69:6a:7d:03:72:c2:80:4f:0c:af:77:
         15:07:79:49:1d:97:37:b6:77:80:98:d2:2d:07:52:2d:f0:3a:
         23:c8:81:01:93:05:9e:52:05:18:34:07:31:f1:8b:3d:27:03:
         c9:29:83:45:19:1c:36:7e:1a:11:ee:d8:6c:a6:bc:86:c6:c5:
         60:27:26:f6:40:85:56:3a:bf:da:3f:f7:96:ed:49:94:d6:12:
         b4:9d:35:95:16:bb:5e:31:43:9c:56:8a:b0:06:1e:92:a6:e3:
         34:70:83:28:87:24:a5:f6:64:db:44:b3:29:47:e2:5d:b1:83:
         57:48:a5:d6:a3:15:af:d9:e0:24:83:71:ea:f4:74:c6:88:e4:
         4a:6e:1a:58:6b:c4:1a:c2:fe:f5:69:cb:7a:1a:1d:4f:59:f8:
         c9:33:d4:62:eb:64:72:6b:cc:b6:6b:bd:15:d6:50:8f:12:ee:
         71:4c:33:d7:8e:c7:45:ae:a5:0b:08:df:4b:2f:53:c4:b6:6e:
         6d:5e:e0:5b:6b:e2:6e:5a:fc:6a:0a:aa:9a:63:c5:99:e4:96:
         b2:08:24:78:be:a4:95:7c:f9:49:4e:06:9a:f7:63:de:4f:d7:
         a5:a8:ce:46:96:79:5a:c0:82:80:a7:a5:d0:f7:84:a8:f4:14:
         10:6b:54:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org