Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/317d4116-6049-4842-bbbd-bfb462604974/640633b0a549f00b7b337f30af6b4f8d10c73736.roa
File:                     640633b0a549f00b7b337f30af6b4f8d10c73736.roa (raw, json)
Hash identifier:          exUVfszsSTr03euSTDJIYDD6b8Lfks/v4zas1WkY1Rw=
Subject key identifier:   29:79:10:19:77:F6:EB:84:CA:E4:79:D2:BC:10:94:BB:99:40:31:AD
Certificate issuer:       /CN=b727d53cb2da2681291864865e9056d1ea1c6785
Certificate serial:       05A75F
Authority key identifier: 0B:8A:DC:45:C1:91:4B:F3:83:91:A5:92:88:11:FB:A4:70:53:AB:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b727d53cb2da2681291864865e9056d1ea1c6785.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/317d4116-6049-4842-bbbd-bfb462604974/640633b0a549f00b7b337f30af6b4f8d10c73736.roa
Signing time:             Tue 21 Nov 2023 12:23:33 +0000
ROA not before:           Tue 21 Nov 2023 12:23:33 +0000
ROA not after:            Fri 21 Nov 2025 12:23:33 +0000
asID:                     13316
IP address blocks:        190.103.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370527 (0x5a75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b727d53cb2da2681291864865e9056d1ea1c6785
        Validity
            Not Before: Nov 21 12:23:33 2023 GMT
            Not After : Nov 21 12:23:33 2025 GMT
        Subject: CN=640633b0a549f00b7b337f30af6b4f8d10c73736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:58:2c:63:06:35:26:1c:81:b6:17:0a:b4:1d:
                    c3:9a:a9:b0:c0:58:91:62:88:aa:02:c8:3d:cb:39:
                    69:94:2f:7d:cc:0e:b4:7a:c2:94:2e:76:8d:e6:fb:
                    21:e1:68:cf:07:5e:ac:ee:1e:03:56:7b:77:75:62:
                    d9:f6:32:ae:14:b9:6e:26:ac:00:cd:fb:39:52:fa:
                    d3:39:f9:d4:18:60:61:ae:db:16:0e:81:bb:1a:6d:
                    a6:f2:b5:88:cb:1b:49:8b:e3:12:ba:7d:b3:0a:1b:
                    a0:4f:4c:28:f4:ac:a9:79:41:b7:41:0e:0e:14:d3:
                    b9:0d:0d:b9:d7:49:f3:c3:bc:34:42:4c:bd:a8:97:
                    87:87:54:dc:d8:ef:0f:1a:9b:8f:ee:a7:70:f6:9e:
                    c0:95:2b:d0:ef:f3:40:06:1d:93:ea:e1:23:ae:e3:
                    73:5a:84:a0:50:bc:82:57:b6:6b:33:7d:30:2f:2f:
                    17:3f:3d:3b:ca:47:04:c9:1a:48:1a:6a:75:f1:3e:
                    64:74:d7:aa:91:13:1d:86:92:f2:d9:4e:ad:bb:11:
                    36:0e:64:07:27:ed:77:bf:d3:eb:8c:3f:cb:80:6f:
                    f7:54:33:1c:0f:45:90:d7:41:05:af:06:90:72:22:
                    2f:f6:15:77:d9:03:5a:51:dc:e6:36:67:78:46:2c:
                    6c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:79:10:19:77:F6:EB:84:CA:E4:79:D2:BC:10:94:BB:99:40:31:AD
            X509v3 Authority Key Identifier:
                keyid:0B:8A:DC:45:C1:91:4B:F3:83:91:A5:92:88:11:FB:A4:70:53:AB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b727d53cb2da2681291864865e9056d1ea1c6785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/317d4116-6049-4842-bbbd-bfb462604974/640633b0a549f00b7b337f30af6b4f8d10c73736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/317d4116-6049-4842-bbbd-bfb462604974/b727d53cb2da2681291864865e9056d1ea1c6785.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:d0:6e:72:c6:17:aa:56:82:33:ff:ca:dd:d9:09:b5:e0:80:
         23:15:a2:b3:cc:bc:3d:2c:2b:29:48:a9:6c:d9:57:e9:91:69:
         6a:ab:8b:46:84:a8:63:b0:71:33:62:43:56:c8:b5:aa:8d:dd:
         17:28:cb:60:ec:bf:f0:b2:74:f9:11:9b:06:4f:c9:13:7a:37:
         63:d3:6a:05:2b:47:3d:fd:a1:05:f2:b7:cb:37:c4:d0:74:49:
         26:e9:41:ea:0b:f9:bf:6f:a9:d4:d9:78:b4:91:f1:7a:7e:27:
         fb:20:cd:ea:3c:86:b8:ba:4c:bd:a8:fe:56:8a:da:83:87:63:
         d0:62:be:c5:65:b3:10:c1:8d:a6:72:63:75:b4:f6:1e:fc:85:
         70:eb:4c:69:18:78:a5:9c:79:12:e0:7b:53:be:b4:3a:08:59:
         cb:ee:06:4c:16:5b:d3:9b:45:43:79:65:03:88:e6:66:45:df:
         f5:96:3e:92:0c:d8:a3:15:a4:aa:c0:a7:65:73:41:52:fe:93:
         bc:20:f4:43:3d:af:f7:1e:aa:db:f2:49:43:91:c4:d2:19:25:
         c7:d2:1f:c6:03:85:0f:62:11:84:7d:57:0a:8f:a9:90:c1:94:
         ac:6c:de:ad:de:2c:22:f1:85:9f:47:fc:06:e0:7c:e5:14:f7:
         65:34:bb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org