Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/da9266f87c3123ce40fc6cc9e8ba66e4cedf6685.roa
File:                     da9266f87c3123ce40fc6cc9e8ba66e4cedf6685.roa (raw, json)
Hash identifier:          xPUPd8dXUaVSSC4QZKlQVxvmJM+HsWznI+NZatHww7I=
Subject key identifier:   2A:37:04:D8:A9:FE:3D:4B:9F:DD:73:92:23:25:0F:4A:0F:A4:5C:1F
Certificate issuer:       /CN=0fd41aeb6fb8aebe0877d653310ce6d90a678fb9
Certificate serial:       116E
Authority key identifier: A6:58:88:B0:DB:2B:35:05:6A:2A:8C:70:B6:C0:14:BC:4E:66:9F:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/da9266f87c3123ce40fc6cc9e8ba66e4cedf6685.roa
Signing time:             Tue 05 Jul 2022 22:43:17 +0000
ROA not before:           Tue 05 Jul 2022 03:00:00 +0000
ROA not after:            Fri 05 Jul 2024 03:00:00 +0000
asID:                     52341
IP address blocks:        190.107.224.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4462 (0x116e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fd41aeb6fb8aebe0877d653310ce6d90a678fb9
        Validity
            Not Before: Jul  5 03:00:00 2022 GMT
            Not After : Jul  5 03:00:00 2024 GMT
        Subject: CN=da9266f87c3123ce40fc6cc9e8ba66e4cedf6685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:49:a0:d4:dd:d6:cb:16:f0:62:d3:88:52:e7:
                    1b:ca:d5:64:aa:55:a5:1f:77:1d:44:03:7d:94:d9:
                    4a:13:1e:e8:d2:78:e4:74:57:34:af:ec:91:d8:c8:
                    f8:c9:db:ad:ce:bf:6b:2a:dd:25:c2:36:6f:0a:53:
                    15:ed:97:a7:7e:87:92:ea:c2:7f:fb:7b:27:5e:3b:
                    0f:6e:9a:5c:e1:75:f1:ea:ce:9f:32:39:21:85:ed:
                    4f:c4:e3:e1:fa:65:76:fe:71:73:54:d0:3b:ec:95:
                    a1:9e:35:8a:1f:b2:36:39:41:0f:b5:07:48:95:68:
                    d7:b4:b0:77:eb:a1:76:40:84:f3:04:0a:a9:b5:94:
                    04:b0:4a:3e:7f:46:00:d4:16:1c:59:e7:05:2a:27:
                    3a:d4:8e:b5:0d:be:41:eb:69:0a:ac:7d:35:18:a0:
                    e4:b2:84:35:92:4e:12:6d:e7:83:41:9b:1d:64:fc:
                    cd:94:31:06:c0:a3:54:a8:47:b4:66:ce:1a:cd:c4:
                    f1:d0:0f:27:7d:6f:db:94:94:75:f6:9b:10:28:de:
                    98:ce:a8:3d:fc:01:fd:48:cd:0f:0d:37:6b:ec:db:
                    41:5a:a5:14:dc:d5:74:40:ee:cd:49:2e:72:dc:c5:
                    d3:2d:b2:5a:e6:25:70:23:e9:45:4e:30:ff:a1:90:
                    84:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:37:04:D8:A9:FE:3D:4B:9F:DD:73:92:23:25:0F:4A:0F:A4:5C:1F
            X509v3 Authority Key Identifier:
                keyid:A6:58:88:B0:DB:2B:35:05:6A:2A:8C:70:B6:C0:14:BC:4E:66:9F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/da9266f87c3123ce40fc6cc9e8ba66e4cedf6685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35cd56e5-06e9-4af1-90d4-5164a6144f55/0fd41aeb6fb8aebe0877d653310ce6d90a678fb9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:36:6b:f1:de:50:a2:91:e4:53:03:fc:96:25:1b:7d:ef:70:
         98:12:79:7a:39:86:f1:f4:c4:9b:f3:55:52:79:ed:d4:5f:95:
         cc:ad:9b:79:a3:51:db:6e:19:9d:d9:2f:da:67:ac:42:78:42:
         3f:42:da:7a:1e:ce:f2:ca:4a:dd:47:87:a5:e5:20:a7:05:27:
         51:8f:cf:ae:92:59:c6:87:27:b8:10:df:4d:7a:e8:b1:df:24:
         36:bb:e7:3d:0d:55:cc:24:c1:6f:51:94:52:fe:89:1e:d6:a8:
         47:a4:af:fc:27:e4:aa:c0:6a:0f:70:f8:5b:88:51:ed:ef:68:
         bc:45:42:73:65:20:96:1b:33:fa:7c:80:f6:0b:68:97:7f:0c:
         1a:20:8e:23:e9:e7:9e:f6:98:c0:e6:46:1e:57:b0:0c:00:92:
         00:e6:6e:3e:a2:f8:28:bf:63:34:2e:ec:b4:c6:d3:26:a8:72:
         3e:c7:b1:0e:8e:51:36:e8:80:a7:9f:a3:7d:0c:39:89:4d:9d:
         f5:d7:04:89:c9:f0:5e:2f:61:d0:0a:e4:b9:bf:34:06:e8:f0:
         9c:6d:18:85:0e:e7:2f:d5:05:6d:63:00:dc:41:cd:ed:74:e7:
         57:49:dc:41:1e:a1:63:c2:84:3a:af:6e:2d:10:dd:19:05:0d:
         68:40:91:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org