Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21fb162d-aabe-4def-9aee-8edef86525f2/7de38052769d03580a59037e58462d821a296d0e.roa
File:                     7de38052769d03580a59037e58462d821a296d0e.roa (raw, json)
Hash identifier:          LjcHnE/mqCC3Bed+ER+x3o3O98a50mnviTIsc7HNtCs=
Subject key identifier:   90:4A:EF:55:D1:5B:92:D9:DA:FF:7F:C9:13:7B:C7:37:E2:9D:2E:80
Certificate issuer:       /CN=ec1523bbfba437489e206b8b056d0290c63fddbc
Certificate serial:       0603B6
Authority key identifier: DC:B8:CB:8E:D8:B0:05:B6:A3:D6:60:45:E4:4B:58:E4:D3:BF:13:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec1523bbfba437489e206b8b056d0290c63fddbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21fb162d-aabe-4def-9aee-8edef86525f2/7de38052769d03580a59037e58462d821a296d0e.roa
Signing time:             Mon 05 Feb 2024 17:18:39 +0000
ROA not before:           Mon 05 Feb 2024 17:18:39 +0000
ROA not after:            Thu 05 Feb 2026 17:18:39 +0000
asID:                     265816
IP address blocks:        190.115.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394166 (0x603b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec1523bbfba437489e206b8b056d0290c63fddbc
        Validity
            Not Before: Feb  5 17:18:39 2024 GMT
            Not After : Feb  5 17:18:39 2026 GMT
        Subject: CN=7de38052769d03580a59037e58462d821a296d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:24:e4:e9:61:b5:3d:da:9d:9e:6b:23:07:32:
                    cd:ed:81:10:2d:76:85:52:e0:68:de:18:80:e4:35:
                    20:c1:fb:5e:c3:8b:ba:69:df:2a:3b:87:bb:22:cc:
                    7e:c5:f9:e7:28:b5:95:87:ce:a9:4a:b2:58:86:bb:
                    16:56:2f:2a:ba:53:f4:97:72:62:1e:d8:bf:b1:56:
                    bc:5a:07:25:d3:e7:c8:15:ff:16:3a:a0:8c:c8:a1:
                    0b:84:03:b7:a7:ca:8e:ab:44:09:b7:b4:fb:ca:71:
                    95:11:0b:65:0d:80:bd:0b:d4:2b:1d:c8:93:f8:1d:
                    91:d7:a8:63:9f:b6:00:b8:f2:52:1a:66:8e:8a:57:
                    eb:95:2c:a0:29:30:ca:ec:be:68:16:ca:98:ab:e0:
                    0c:90:d1:66:72:a0:29:66:b6:56:27:2d:ec:74:60:
                    c0:67:d5:f7:6e:e7:ee:c8:ec:65:ae:ae:21:8f:58:
                    d9:6e:89:31:44:3c:61:a8:8c:76:c2:be:75:2b:69:
                    66:24:28:6d:28:d9:6d:2e:92:d6:89:bd:49:5e:ec:
                    85:fc:b4:9b:95:22:62:94:d0:1b:92:27:b5:a6:15:
                    2c:bc:2f:b9:7e:cb:78:f0:45:58:eb:88:de:6e:ea:
                    90:92:3e:aa:b9:a7:23:60:d9:b2:d4:c8:47:0d:fe:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4A:EF:55:D1:5B:92:D9:DA:FF:7F:C9:13:7B:C7:37:E2:9D:2E:80
            X509v3 Authority Key Identifier:
                keyid:DC:B8:CB:8E:D8:B0:05:B6:A3:D6:60:45:E4:4B:58:E4:D3:BF:13:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec1523bbfba437489e206b8b056d0290c63fddbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21fb162d-aabe-4def-9aee-8edef86525f2/7de38052769d03580a59037e58462d821a296d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21fb162d-aabe-4def-9aee-8edef86525f2/ec1523bbfba437489e206b8b056d0290c63fddbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:05:4d:60:9e:fd:3c:0a:5b:b2:df:49:28:4b:36:9a:c8:57:
         6e:3e:d7:e5:ac:69:ef:0b:14:29:8b:cd:82:c8:7e:4d:d8:5b:
         7a:ec:78:0d:49:57:7c:c7:e5:cd:a6:f7:09:a8:18:38:2b:01:
         2b:c2:01:b2:4e:3c:a8:b4:4f:00:3b:3a:13:93:7e:8a:93:6c:
         39:f0:ad:70:80:b4:95:3a:3e:40:81:d8:38:fb:e9:4a:ef:6e:
         04:99:83:d5:44:f6:9d:bd:4a:fc:ae:b4:a0:39:d2:32:3c:fb:
         cf:b7:9e:f7:83:7e:10:e3:62:a5:07:f2:3e:0a:8f:17:5a:8d:
         84:03:3b:44:30:c8:38:3b:07:5c:e1:e0:88:bc:c9:62:f7:d3:
         88:c4:79:15:58:48:3b:d3:65:42:04:8f:31:bd:9d:4d:f2:7f:
         6e:74:15:17:55:ec:47:ab:8d:ae:9c:0f:4a:b2:9a:8d:3f:7b:
         b0:41:72:02:34:f3:13:31:31:0b:35:e8:26:a9:5b:02:45:d1:
         22:98:04:22:1e:e8:c8:26:5e:06:9a:b3:5e:17:ec:02:27:a6:
         63:a4:01:63:a1:ed:96:47:dc:04:c0:48:97:ab:ef:1f:6b:e1:
         ac:87:01:06:57:c2:dc:06:4e:bf:80:87:01:dd:7c:b2:b6:50:
         71:c4:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org