Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/46ab5bcb8fbb67be8cf7d5386b83d16ca9baf1da.roa
File:                     46ab5bcb8fbb67be8cf7d5386b83d16ca9baf1da.roa (raw, json)
Hash identifier:          D57smf68ykPLGG0wJAWk1qVsnbPC1culzH7fxYZ5Cn4=
Subject key identifier:   DF:CD:92:B0:49:3E:B4:C0:47:16:AC:02:D0:25:06:52:F6:E1:C6:59
Certificate issuer:       /CN=ef50a919c38d29bb33866e24d668a0b386609323
Certificate serial:       1C6E0C
Authority key identifier: A2:7E:F9:12:D9:A3:A0:AE:2C:D2:E1:59:04:73:E0:80:98:E6:0D:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef50a919c38d29bb33866e24d668a0b386609323.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/46ab5bcb8fbb67be8cf7d5386b83d16ca9baf1da.roa
Signing time:             Mon 26 Sep 2022 00:35:15 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269827
IP address blocks:        190.97.227.0/24 maxlen: 24
                          190.97.229.0/24 maxlen: 24
                          190.97.237.0/24 maxlen: 24
                          190.97.238.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1863180 (0x1c6e0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef50a919c38d29bb33866e24d668a0b386609323
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=46ab5bcb8fbb67be8cf7d5386b83d16ca9baf1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:b2:04:a3:ae:85:e5:eb:a3:43:9c:ee:00:
                    7f:22:c5:40:34:20:78:45:13:9c:db:1f:c8:15:68:
                    2e:b1:08:8d:d2:83:00:2e:ac:92:9d:6f:a4:fa:d8:
                    d2:de:66:8c:25:cc:14:e3:56:12:e2:fe:23:8a:83:
                    87:8d:ea:3b:0f:75:c9:0a:72:a8:bb:b0:4e:23:6e:
                    63:4c:aa:f9:b4:c4:f1:10:b7:c6:88:de:c3:0a:4e:
                    f1:65:9b:41:7b:5f:6e:09:b0:c6:75:2f:79:e2:0e:
                    e6:d1:36:25:5d:cf:09:cb:79:04:91:a7:4e:73:87:
                    de:85:6a:35:df:45:7a:6e:21:8b:fc:79:8f:fe:08:
                    79:65:fb:39:9b:a8:66:c8:4f:fb:17:ec:8b:6d:de:
                    2c:c8:64:50:46:88:34:7a:16:42:5b:42:3a:c9:dc:
                    15:ab:53:0c:eb:b4:c1:b1:09:a7:5c:e3:d4:a1:81:
                    47:94:17:83:2e:5a:16:ff:91:20:c1:77:a8:c2:28:
                    9e:a6:ff:1a:fc:2f:74:d2:ef:d9:70:e9:fb:64:81:
                    68:05:10:e1:5a:19:02:8b:f1:ed:02:cd:f7:9f:33:
                    93:78:df:45:e8:5d:28:5e:e5:1b:f8:fa:05:ab:00:
                    a8:bc:1a:fa:19:63:fe:06:d0:b5:d9:2e:37:6d:f9:
                    30:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CD:92:B0:49:3E:B4:C0:47:16:AC:02:D0:25:06:52:F6:E1:C6:59
            X509v3 Authority Key Identifier:
                keyid:A2:7E:F9:12:D9:A3:A0:AE:2C:D2:E1:59:04:73:E0:80:98:E6:0D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef50a919c38d29bb33866e24d668a0b386609323.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/46ab5bcb8fbb67be8cf7d5386b83d16ca9baf1da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/ef50a919c38d29bb33866e24d668a0b386609323.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.227.0/24
                  190.97.229.0/24
                  190.97.237.0-190.97.239.255

    Signature Algorithm: sha256WithRSAEncryption
         59:61:41:5e:55:e4:f3:f4:82:d9:a0:ca:0f:76:fa:26:19:68:
         2a:d0:ea:d6:18:bb:7c:3c:67:71:39:c1:a4:d1:8d:98:19:02:
         f5:a1:c1:1b:b4:53:fb:c3:7d:98:f3:44:45:1f:89:18:15:30:
         3a:f5:73:8c:3c:c8:8b:5b:bd:f8:9b:6a:f4:eb:26:90:79:35:
         a4:c6:5e:0d:90:70:d9:12:7b:b4:28:8e:a1:31:eb:44:21:b6:
         0f:0c:72:de:df:fd:2e:d0:fe:71:b9:e5:79:3c:96:ab:cc:4d:
         95:e1:e4:9d:c1:87:73:30:38:f7:5f:e8:94:7a:4b:30:ff:23:
         f3:0a:7d:dd:ed:04:41:09:fe:ec:27:31:10:b6:e9:dc:c4:95:
         66:51:46:9b:57:f3:2e:ee:24:60:98:27:b2:3c:16:e9:12:ec:
         2e:34:48:79:30:8c:38:5f:f2:5e:e4:87:b7:fa:c6:8f:b1:06:
         26:7a:9b:54:f2:4e:b7:04:89:26:29:c3:af:1e:98:c5:6f:83:
         10:83:03:61:31:9f:ba:a2:4c:21:57:32:cf:10:b9:9c:ae:32:
         fe:bd:26:36:73:5e:0b:f1:fd:fa:07:ca:ee:e8:6b:f0:0b:c6:
         12:fd:5c:e8:f5:d5:19:b2:66:3c:88:92:55:fb:f8:7b:9c:67:
         32:e0:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org