Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/7eaed55ca810fc1adf76b99c1bb2c11c2097f2c4.roa
File:                     7eaed55ca810fc1adf76b99c1bb2c11c2097f2c4.roa (raw, json)
Hash identifier:          FrLE/wdZmMIvtPNtlFGHCrbdZcwPCOxpZVbgnm20GPw=
Subject key identifier:   15:CB:53:CE:9E:FE:AE:80:85:1F:29:11:0F:F7:C9:FB:6B:34:90:31
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       2185FD
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/7eaed55ca810fc1adf76b99c1bb2c11c2097f2c4.roa
Signing time:             Sun 23 Apr 2023 08:30:00 +0000
ROA not before:           Sat 22 Apr 2023 08:30:00 +0000
ROA not after:            Mon 21 Apr 2025 08:30:00 +0000
asID:                     18809
IP address blocks:        201.218.250.0/24 maxlen: 24
                          201.218.218.0/24 maxlen: 24
                          190.5.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2196989 (0x2185fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Apr 22 08:30:00 2023 GMT
            Not After : Apr 21 08:30:00 2025 GMT
        Subject: CN=7eaed55ca810fc1adf76b99c1bb2c11c2097f2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9b:cb:f2:1e:e1:f6:19:9d:7a:25:96:5f:ce:
                    82:ef:1d:b5:44:6c:17:e3:e1:1b:bb:b6:2a:50:50:
                    4d:c8:8d:a3:c4:a3:32:bb:10:0a:90:8d:6c:d3:ba:
                    9f:cb:1e:ba:84:90:ad:c1:88:5d:cf:b9:f9:27:91:
                    cd:a7:76:75:f0:a6:13:12:55:a3:48:96:cf:14:e3:
                    f1:e8:00:29:e9:02:da:5d:5e:75:80:2e:58:ab:57:
                    23:be:58:6c:9d:82:a9:12:a3:04:16:c0:51:1d:2b:
                    78:55:63:56:3f:43:a7:66:c8:05:72:ac:f5:69:e1:
                    26:68:96:fa:c6:fc:b6:ee:cc:05:d5:da:ae:d4:b2:
                    de:8b:9a:f5:9c:cc:e9:95:c5:c3:02:79:aa:74:a4:
                    3b:30:da:4b:68:df:b8:f9:32:a5:db:ee:af:bd:29:
                    1f:d9:0a:ee:dc:40:e3:78:ce:94:6b:92:d9:45:4e:
                    85:0a:e5:cf:7f:86:a8:d0:77:14:48:cf:e7:f8:31:
                    2c:b7:df:7e:f6:6c:cd:01:6a:bb:dd:c3:7e:6c:dc:
                    4d:fe:9e:16:bc:fc:2b:9e:69:37:ed:7a:a6:74:34:
                    3f:08:82:ed:bb:29:c3:33:45:22:1a:e3:f7:19:63:
                    12:60:68:0b:89:eb:0c:75:42:15:cc:0a:24:9b:dd:
                    16:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CB:53:CE:9E:FE:AE:80:85:1F:29:11:0F:F7:C9:FB:6B:34:90:31
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/7eaed55ca810fc1adf76b99c1bb2c11c2097f2c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.248.0/24
                  201.218.218.0/24
                  201.218.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:54:3a:a0:0b:6f:21:fd:4b:c7:b1:9f:65:59:bb:a8:e1:60:
         a0:a6:e9:b8:e0:89:6b:a9:af:49:99:66:e6:85:8e:ea:e3:36:
         d1:ab:e1:5b:bd:33:f0:04:9e:2e:a7:15:f7:aa:4f:52:11:a6:
         5f:7a:5f:22:4c:d8:a5:12:3d:8e:53:67:fd:ca:bb:9b:62:e1:
         2d:df:7c:e9:56:49:60:1b:a6:8b:24:af:c6:4b:82:1d:56:c4:
         82:97:a8:da:2c:02:78:c2:ef:1a:75:47:60:fa:ff:ad:a0:63:
         8d:dd:24:a3:74:62:1f:5e:43:be:2d:29:0a:45:fe:f0:95:f3:
         7b:46:e4:16:ac:0e:f6:4c:8a:ea:d2:65:49:63:f1:13:d0:24:
         8d:05:f7:92:81:8d:ca:e4:ce:b7:77:7e:85:df:8a:36:a9:57:
         c8:3d:fc:97:e0:5a:04:f4:1f:51:98:07:d8:8e:13:27:f8:f7:
         75:7f:ac:93:9d:6d:ed:22:80:7d:b5:a5:a2:41:63:0b:4d:36:
         fa:e8:eb:cf:fb:9d:ce:90:40:f4:60:9f:75:43:b0:ba:7e:26:
         2c:ea:29:a6:63:8d:2e:14:77:92:33:52:2d:4a:0a:a9:c2:c2:
         6d:b5:1f:8d:0a:94:fd:bd:30:70:2b:3d:79:b5:88:f6:b9:82:
         e2:62:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org