Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/0ab6f4b7986c097ac030c51d0599bf3bf11afbd0.roa
File:                     0ab6f4b7986c097ac030c51d0599bf3bf11afbd0.roa (raw, json)
Hash identifier:          YRuu2yBNSF710gBef6sRQf2lQ1KasjtbUaksyTeRPiA=
Subject key identifier:   C6:5C:39:0F:FA:A4:1F:73:34:D2:A4:D2:A1:D6:41:B8:4C:3A:C4:DD
Certificate issuer:       /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial:       2AB611
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/0ab6f4b7986c097ac030c51d0599bf3bf11afbd0.roa
Signing time:             Thu 15 Feb 2024 20:41:47 +0000
ROA not before:           Thu 15 Feb 2024 20:41:24 +0000
ROA not after:            Thu 15 Feb 2029 20:41:24 +0000
asID:                     52399
IP address blocks:        200.50.191.0/24 maxlen: 24
                          190.110.250.0/23 maxlen: 24
                          190.114.102.0/24 maxlen: 24
                          190.110.224.0/24 maxlen: 24
                          190.110.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2799121 (0x2ab611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
        Validity
            Not Before: Feb 15 20:41:24 2024 GMT
            Not After : Feb 15 20:41:24 2029 GMT
        Subject: CN=0ab6f4b7986c097ac030c51d0599bf3bf11afbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:3f:8b:41:c7:d6:d6:f5:f8:d3:8e:50:8e:
                    48:8b:63:28:33:0d:a3:f9:3d:a0:4a:51:db:08:5a:
                    3d:a2:ae:99:07:45:a0:f1:ac:15:6e:ee:28:7a:41:
                    98:51:03:ee:d6:74:02:c0:77:2d:03:fa:63:e6:a8:
                    58:6c:57:b2:51:ff:74:67:49:64:93:da:4a:49:33:
                    c6:c8:ed:ad:06:38:f4:06:d8:d6:81:11:35:03:e8:
                    51:07:69:f6:66:a6:66:c2:57:3b:bd:24:93:55:94:
                    54:2d:f9:8b:82:b0:07:df:f8:64:78:9e:d9:2f:36:
                    0b:3f:85:cd:e6:74:c4:ec:a1:02:80:a0:55:08:15:
                    8e:30:50:71:44:15:cb:ca:07:ce:bf:0e:96:7b:06:
                    ce:a7:24:4c:5e:df:12:4a:99:a4:3a:19:58:da:b1:
                    43:64:9d:c6:95:f7:9e:37:3f:33:04:66:f5:f0:ae:
                    23:3b:c9:bd:aa:2c:39:ea:fe:06:96:70:33:e0:1f:
                    d2:2b:01:40:46:69:1b:22:57:49:dc:27:97:15:62:
                    95:c5:fb:ab:bd:b0:b0:cc:7c:f0:be:5e:af:59:c2:
                    78:9a:9d:2e:4c:5a:db:d7:ed:af:4e:fa:78:cc:90:
                    f1:f7:f1:60:f9:b2:f6:f1:8d:79:60:02:ec:81:19:
                    ab:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5C:39:0F:FA:A4:1F:73:34:D2:A4:D2:A1:D6:41:B8:4C:3A:C4:DD
            X509v3 Authority Key Identifier:
                keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/0ab6f4b7986c097ac030c51d0599bf3bf11afbd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.224.0/24
                  190.110.232.0/22
                  190.110.250.0/23
                  190.114.102.0/24
                  200.50.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:89:db:c4:e2:3e:66:aa:3d:db:13:34:0a:f1:01:10:aa:37:
         9a:80:9b:ef:c5:cd:32:e0:b6:2b:ff:b7:e4:e0:15:27:07:58:
         ba:d4:bb:11:62:50:98:3e:55:72:45:2e:3f:6d:18:e4:bb:81:
         71:d8:20:17:b5:4e:a0:e8:02:fa:96:0c:ed:22:eb:23:08:9f:
         8f:7e:63:8e:e3:b3:cf:cc:cb:1d:53:00:05:c0:e2:92:d4:49:
         48:2f:2d:70:fc:15:f1:2e:ad:b8:1d:fe:18:7b:e3:72:f7:86:
         2e:38:ae:1a:b1:a8:9b:57:48:35:fb:ce:97:10:15:f1:df:f6:
         f8:12:bc:74:27:58:85:ce:31:f5:30:6e:62:02:f9:e6:18:ad:
         c6:c8:f6:ec:35:f3:3b:65:40:42:bb:24:aa:32:44:9e:f3:54:
         80:83:fd:0d:f5:b2:de:76:0c:b5:07:cd:28:6c:17:de:72:5c:
         a1:ef:5b:b8:9a:70:8c:f1:62:84:18:da:53:af:a8:23:d0:30:
         16:69:9f:f3:89:96:a0:1d:ab:8d:9d:50:f9:49:53:c4:f7:c0:
         b6:96:bd:ea:9b:a0:1e:bc:85:4a:bb:7f:c1:92:ff:64:cc:47:
         e3:31:b2:3c:95:32:26:74:f5:82:71:ce:7b:82:13:41:d0:ab:
         0f:bd:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org