Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/0cb74ecb454a882a210e73ea4d6666fcee055866.roa
File:                     0cb74ecb454a882a210e73ea4d6666fcee055866.roa (raw, json)
Hash identifier:          Ht+BbgPAhBLghKKxS/Ptgk4Z5oH5Faa7YE9/lNUQXxE=
Subject key identifier:   90:65:76:63:1E:C4:C5:0B:86:19:09:D6:72:59:E2:BC:C0:A3:F3:40
Certificate issuer:       /CN=47b57565cafdf0ca1cb66c80d161a63b2210edb7
Certificate serial:       0C7119
Authority key identifier: 9D:C4:18:74:7F:F1:0D:DA:96:04:92:C5:03:61:48:94:E9:6D:BD:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b57565cafdf0ca1cb66c80d161a63b2210edb7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/0cb74ecb454a882a210e73ea4d6666fcee055866.roa
Signing time:             Thu 23 Nov 2023 19:05:42 +0000
ROA not before:           Thu 23 Nov 2023 19:05:42 +0000
ROA not after:            Sun 23 Nov 2025 19:05:42 +0000
asID:                     52425
IP address blocks:        190.92.104.0/22 maxlen: 24
                          190.92.108.0/23 maxlen: 24
                          190.92.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 815385 (0xc7119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b57565cafdf0ca1cb66c80d161a63b2210edb7
        Validity
            Not Before: Nov 23 19:05:42 2023 GMT
            Not After : Nov 23 19:05:42 2025 GMT
        Subject: CN=0cb74ecb454a882a210e73ea4d6666fcee055866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:99:08:24:8f:c4:13:ba:d8:74:98:3d:d8:cf:
                    44:e7:81:d0:68:79:19:d2:98:5a:2a:92:3b:83:c2:
                    af:d1:28:8f:f8:cd:83:77:6f:64:38:c9:aa:d3:d6:
                    5e:d6:c3:3c:81:08:8d:74:a8:09:e9:04:8e:07:56:
                    71:38:b9:34:65:1c:46:7e:18:ba:16:f8:dc:fd:22:
                    b9:84:4d:bc:db:8e:da:1c:b7:80:fc:a0:39:ca:a3:
                    70:5c:67:c3:f2:03:bd:f8:32:77:e9:bc:01:f0:5c:
                    1b:c4:e7:85:e3:f2:a7:a5:e0:55:20:17:04:26:cd:
                    57:08:fb:e7:3c:57:55:23:bb:30:57:74:48:50:a3:
                    59:a6:a2:e8:76:90:d3:9a:1c:03:fd:62:2f:b4:83:
                    cd:f9:d4:ee:8b:76:99:56:c3:b5:98:49:8c:4d:41:
                    7d:30:79:6a:0e:be:7d:7c:b6:4a:38:24:f3:3c:04:
                    b6:c4:2b:75:52:85:09:9a:b5:e2:4e:f8:8b:1f:cb:
                    41:87:56:6a:99:6a:6f:21:81:cf:bc:4a:6e:f7:a1:
                    ea:bc:3f:27:1d:55:a5:75:a1:8a:6e:5e:a9:a2:5b:
                    46:99:b1:c2:36:ad:80:3a:5e:8b:55:76:ef:da:03:
                    39:eb:db:ed:8d:bc:8e:00:31:78:b7:64:dc:18:c1:
                    f8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:65:76:63:1E:C4:C5:0B:86:19:09:D6:72:59:E2:BC:C0:A3:F3:40
            X509v3 Authority Key Identifier:
                keyid:9D:C4:18:74:7F:F1:0D:DA:96:04:92:C5:03:61:48:94:E9:6D:BD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47b57565cafdf0ca1cb66c80d161a63b2210edb7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/0cb74ecb454a882a210e73ea4d6666fcee055866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/325c1253-f44b-40a9-a805-8dce5975d864/47b57565cafdf0ca1cb66c80d161a63b2210edb7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.104.0-190.92.110.255

    Signature Algorithm: sha256WithRSAEncryption
         64:ad:24:6a:e6:86:ea:5b:86:e3:87:c9:d3:3f:9a:87:85:25:
         af:82:e8:8f:49:c0:d6:6d:e9:50:05:21:1c:f8:6a:55:ef:25:
         c3:eb:c4:26:19:1a:20:55:2c:cf:4e:07:25:72:a3:a3:cd:21:
         48:df:36:22:a3:c3:57:81:7b:f1:7a:41:40:ab:6f:12:0e:33:
         97:5f:c9:22:5a:77:a4:32:a7:64:a7:da:b7:f6:b0:0a:30:1f:
         94:1e:b6:17:96:97:e4:e9:23:10:c8:dd:ff:e7:81:db:83:84:
         4e:fa:5f:16:3f:6f:f2:a0:2f:20:5c:d7:67:97:83:c3:14:64:
         5a:07:08:09:f1:65:a0:e4:83:d1:d6:db:8a:03:56:0d:15:74:
         e9:fd:8c:2c:dd:33:63:2d:a6:6c:b1:75:83:7d:de:dc:71:bb:
         8e:5e:f2:f6:fa:26:57:07:a7:84:2e:0e:53:e2:48:86:7e:71:
         4b:97:04:a9:74:3d:48:0f:91:a4:fa:76:3a:04:ee:3c:25:14:
         83:4f:0f:88:8a:c8:be:3f:3e:7f:7f:0e:2c:f4:41:a8:bc:0c:
         58:e7:51:8c:2c:73:8c:d9:43:ac:65:bd:d8:89:21:61:1b:c6:
         39:20:64:84:ed:2e:32:9c:5a:5d:01:98:80:fd:fc:8d:68:43:
         9b:1a:8b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org