Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/174d8e20-6eaf-4b11-a9f3-dc3626a9b736/63ecce0118ecede67f60e4af963ce12a52252f32.roa
File:                     63ecce0118ecede67f60e4af963ce12a52252f32.roa (raw, json)
Hash identifier:          Mr8r49QorAi+RYKUyq+kahb2sWFwNA6bS3cJTnSecx8=
Subject key identifier:   52:04:B6:9F:87:EF:D6:69:B1:87:75:76:FA:51:C8:00:CC:98:EC:58
Certificate issuer:       /CN=ede5db541032308f013d787d037b94dae9d93c0e
Certificate serial:       1110FA
Authority key identifier: CC:BF:E1:1E:30:B4:CD:09:64:00:FA:99:75:96:72:29:B0:B1:A4:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ede5db541032308f013d787d037b94dae9d93c0e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/174d8e20-6eaf-4b11-a9f3-dc3626a9b736/63ecce0118ecede67f60e4af963ce12a52252f32.roa
Signing time:             Thu 01 Jun 2023 15:11:30 +0000
ROA not before:           Wed 31 May 2023 15:11:30 +0000
ROA not after:            Sun 01 Jun 2025 15:11:30 +0000
asID:                     19905
IP address blocks:        161.190.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1118458 (0x1110fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5db541032308f013d787d037b94dae9d93c0e
        Validity
            Not Before: May 31 15:11:30 2023 GMT
            Not After : Jun  1 15:11:30 2025 GMT
        Subject: CN=63ecce0118ecede67f60e4af963ce12a52252f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ab:d8:d8:78:24:8f:f4:78:3f:37:12:9c:94:
                    1f:15:52:18:b5:66:b3:4e:4b:a2:cd:bc:70:b2:35:
                    4a:40:be:fb:e4:01:5f:db:8a:dd:fd:92:70:86:b3:
                    ef:21:a0:28:2d:af:78:ec:a7:63:73:ed:26:d4:b9:
                    34:6a:51:db:c7:c9:61:ca:e9:f4:a9:a0:ff:74:0e:
                    a2:35:bb:98:52:4a:39:f7:ea:24:ed:5d:45:4d:aa:
                    cd:93:f9:96:51:4c:bc:21:a9:7f:f6:44:da:7b:70:
                    2f:93:39:c7:40:2d:13:08:d2:5d:11:b8:48:bd:55:
                    5d:78:65:c0:5e:6a:62:6c:75:81:89:e8:8c:81:54:
                    d3:93:ab:48:63:d3:29:89:4f:d7:de:aa:1d:b7:1c:
                    4f:1d:79:64:fb:23:16:45:22:dc:6f:d5:d4:76:f1:
                    3f:9f:49:6f:68:d2:4a:a3:b0:0e:7a:16:41:9f:d9:
                    0b:19:3b:7a:66:46:80:ee:8b:8c:61:c6:88:90:21:
                    27:0d:14:3b:71:58:5d:03:4d:5e:5d:8d:2b:00:a7:
                    64:da:86:8a:0a:05:40:b5:20:83:17:d0:c1:8c:26:
                    29:45:d8:2c:4d:f6:02:fc:47:3e:11:89:33:b1:21:
                    35:73:0a:8a:9b:8f:9e:72:d0:71:70:c3:96:c4:6d:
                    5c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:04:B6:9F:87:EF:D6:69:B1:87:75:76:FA:51:C8:00:CC:98:EC:58
            X509v3 Authority Key Identifier:
                keyid:CC:BF:E1:1E:30:B4:CD:09:64:00:FA:99:75:96:72:29:B0:B1:A4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ede5db541032308f013d787d037b94dae9d93c0e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/174d8e20-6eaf-4b11-a9f3-dc3626a9b736/63ecce0118ecede67f60e4af963ce12a52252f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/174d8e20-6eaf-4b11-a9f3-dc3626a9b736/ede5db541032308f013d787d037b94dae9d93c0e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         71:c8:f6:72:a8:63:76:18:a2:7c:a2:ff:7b:f6:a0:7c:0d:2c:
         aa:95:7a:03:db:69:ef:b6:e9:56:1a:d4:f3:11:ea:7b:b0:59:
         76:86:e3:df:da:4f:94:3f:80:a0:eb:8e:b0:08:a6:e4:13:dd:
         05:f8:5d:23:96:07:5a:fe:72:25:a6:7c:ab:d5:47:e3:0b:2a:
         b4:93:c7:21:83:64:a2:54:09:99:6e:bc:3d:15:bf:67:ec:eb:
         e9:16:2a:a0:8a:e7:32:3c:0b:91:75:6f:f8:6d:a0:55:9e:a2:
         b4:44:97:93:b6:6d:0b:8e:4a:f6:ac:86:b5:b8:4e:e5:47:a9:
         8e:18:d8:78:cd:78:97:a7:b6:15:a5:97:6a:ba:63:81:bd:39:
         b0:47:3d:78:de:87:43:7e:f0:1e:e3:c3:e0:e9:6d:61:8b:ff:
         49:4e:c3:25:de:b6:21:fe:24:c5:43:bf:1c:81:33:09:f2:d9:
         7c:03:b1:98:c4:df:c7:98:75:90:8c:ea:9a:47:2d:2e:1b:e0:
         2f:f0:a5:da:d5:7e:c2:c2:0e:00:af:2c:3a:a6:9f:53:74:63:
         e3:37:06:31:ba:2f:d0:43:e3:3a:59:68:ed:e1:c7:2c:0b:d3:
         62:12:ba:66:b9:28:8b:80:21:3a:63:e6:c1:76:8c:17:28:8f:
         65:fb:51:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org