Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1849af7f62ed780f29d2cec1a28ad27564191b16.roa
File:                     1849af7f62ed780f29d2cec1a28ad27564191b16.roa (raw, json)
Hash identifier:          VjVbQqFqfwqkOYtCA8KMP/Nu5xtKwnd5TEOG4oQgCPc=
Subject key identifier:   BE:A3:D6:D6:EC:0D:6A:69:16:99:AC:39:FB:D7:75:56:90:B4:50:F8
Certificate issuer:       /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial:       27ADA6
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1849af7f62ed780f29d2cec1a28ad27564191b16.roa
Signing time:             Wed 08 Nov 2023 15:00:38 +0000
ROA not before:           Wed 08 Nov 2023 15:00:37 +0000
ROA not after:            Wed 08 Nov 2028 15:00:37 +0000
asID:                     263699
IP address blocks:        190.114.96.0/22 maxlen: 24
                          190.114.96.0/22 maxlen: 24
                          190.114.100.0/23 maxlen: 24
                          200.123.36.0/22 maxlen: 24
                          200.123.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2600358 (0x27ada6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
        Validity
            Not Before: Nov  8 15:00:37 2023 GMT
            Not After : Nov  8 15:00:37 2028 GMT
        Subject: CN=1849af7f62ed780f29d2cec1a28ad27564191b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:6d:83:82:6d:7f:72:a7:37:33:16:d3:65:
                    fe:71:a6:46:54:00:e7:a0:79:5e:2a:f3:28:69:4c:
                    ec:f0:37:0c:f4:ef:74:8f:30:07:70:20:d8:ef:34:
                    07:a0:0d:ed:99:ae:fc:c1:fe:b8:49:30:59:25:bd:
                    e0:37:a3:cd:e2:1a:37:56:46:48:6f:7d:4b:2f:5f:
                    f7:e1:49:15:10:d0:bc:07:7d:18:47:3f:60:92:cc:
                    0c:4f:52:77:f6:97:1c:9c:26:58:29:41:62:f5:5a:
                    85:23:94:09:a1:a2:79:69:37:fc:92:75:99:5e:4e:
                    f9:8a:ea:30:0e:c8:52:49:ba:fe:2f:f5:2e:a7:1b:
                    27:98:b9:90:90:2f:51:86:4e:f0:74:25:ac:4d:2a:
                    6f:1a:7a:b6:83:db:3b:de:ce:bd:29:b7:b4:3b:c4:
                    88:9a:8a:01:8c:38:a5:75:65:34:51:7e:74:c2:5a:
                    08:a4:77:5f:13:d4:c6:fc:13:b0:95:70:47:3d:d6:
                    8f:00:d3:3d:9a:1f:3f:68:a2:ac:11:d9:2b:d3:b3:
                    cd:bc:ee:cb:f1:95:8d:3d:58:00:de:94:af:46:d8:
                    e5:85:c0:cf:e0:7c:56:da:45:72:ef:c9:bf:31:5e:
                    30:82:74:72:3e:45:d8:f1:3a:ea:23:9a:94:c3:31:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A3:D6:D6:EC:0D:6A:69:16:99:AC:39:FB:D7:75:56:90:B4:50:F8
            X509v3 Authority Key Identifier:
                keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/1849af7f62ed780f29d2cec1a28ad27564191b16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.96.0-190.114.101.255
                  200.123.36.0-200.123.47.255

    Signature Algorithm: sha256WithRSAEncryption
         71:44:fa:34:54:73:be:6d:2a:a1:3e:16:fa:73:99:e0:d6:69:
         84:64:5e:89:ac:68:9f:72:01:b6:ca:9f:ec:2d:01:00:1e:a0:
         1e:bd:a8:9b:c8:08:bc:ad:62:33:49:12:0d:7b:96:45:cf:0b:
         ee:57:60:58:51:31:93:1d:23:f5:27:6c:f5:55:2c:06:fc:15:
         ee:62:12:c2:52:a3:06:2e:67:21:c9:f0:50:be:94:93:ab:9f:
         29:35:23:43:b1:47:f1:54:b3:3a:e0:5c:99:76:84:53:e1:5f:
         83:22:93:e9:e9:1c:74:26:5d:c0:4e:5a:67:d9:e1:fa:27:21:
         62:08:52:8a:0d:a9:02:23:28:70:95:19:01:5e:bb:09:47:d4:
         6a:7b:63:13:20:37:5d:98:c1:f5:ec:0a:a3:b6:ad:2b:7f:1c:
         3d:f5:30:1d:6d:05:93:79:45:60:c1:90:16:88:ec:03:a9:8e:
         f3:b0:f4:d2:80:62:0a:90:d2:ac:17:b7:7d:ef:c7:68:09:b3:
         84:f6:06:6c:0b:ec:69:a3:9c:a8:c2:94:09:ea:a2:c5:06:ac:
         33:cc:bd:5c:b4:e7:15:a0:dd:67:00:3f:06:26:47:67:53:e7:
         ed:16:37:1b:83:f2:2d:c1:3f:f7:74:65:6f:7c:c7:fb:ce:a5:
         5a:93:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 20:09:03 2024 by rpki-client on console-ams.rpki-client.org