Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/236a4fd36f12afdf13353db26bf410c691392c48.roa
File:                     236a4fd36f12afdf13353db26bf410c691392c48.roa (raw, json)
Hash identifier:          Xunn3Cvo150Xfda6dEYdcYjLg5Tm6hyv30xoCp6aLkw=
Subject key identifier:   C2:13:BA:D0:61:74:2F:A9:76:4F:CF:88:CD:F8:27:6D:4A:64:5A:48
Certificate issuer:       /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial:       2A82DA
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/236a4fd36f12afdf13353db26bf410c691392c48.roa
Signing time:             Thu 15 Feb 2024 20:41:25 +0000
ROA not before:           Thu 15 Feb 2024 20:41:24 +0000
ROA not after:            Thu 15 Feb 2029 20:41:24 +0000
asID:                     263699
IP address blocks:        190.114.96.0/22 maxlen: 24
                          190.114.96.0/22 maxlen: 24
                          190.114.100.0/23 maxlen: 24
                          200.123.36.0/22 maxlen: 24
                          200.123.40.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2786010 (0x2a82da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
        Validity
            Not Before: Feb 15 20:41:24 2024 GMT
            Not After : Feb 15 20:41:24 2029 GMT
        Subject: CN=236a4fd36f12afdf13353db26bf410c691392c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:63:e3:33:1b:8f:46:e2:9f:a2:ae:7d:f1:
                    1e:01:ab:34:ce:8e:17:74:6e:2c:85:77:e5:8c:1e:
                    7a:98:02:92:5d:64:4c:0b:80:a0:f2:00:f9:a1:7c:
                    c8:fb:51:9e:82:2a:52:73:79:22:de:57:46:63:42:
                    57:a7:c8:77:d1:a5:ae:58:78:ae:0c:27:40:ed:aa:
                    6c:fe:6b:d3:84:5a:52:fe:d4:7b:0f:a5:c2:a1:ec:
                    f0:94:0d:c3:82:e6:09:a2:71:2b:27:78:1e:38:12:
                    7a:51:72:75:4b:61:c7:68:aa:35:ed:10:b0:fa:9e:
                    5a:14:95:9e:4e:20:14:d8:b3:66:b9:9c:72:3b:03:
                    61:22:e2:e6:e4:5d:10:92:4c:d2:cc:bd:fa:f9:f7:
                    6a:24:4e:42:b3:23:f0:be:a9:36:bb:66:9b:8f:41:
                    d4:da:c6:24:c5:9f:dc:f7:99:1d:fb:57:82:ec:93:
                    69:86:7a:e8:62:4d:89:08:2c:6b:64:23:0a:35:d6:
                    58:6b:11:90:15:f9:48:9e:19:f3:a0:95:d2:ef:23:
                    af:c3:1c:e8:25:d0:28:d4:4a:6a:6f:0c:91:08:e5:
                    8a:c3:ae:45:75:ac:ab:32:3e:5d:e9:46:ab:ce:44:
                    db:2f:59:56:73:92:68:93:34:0d:8a:f6:b3:4b:09:
                    6e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:13:BA:D0:61:74:2F:A9:76:4F:CF:88:CD:F8:27:6D:4A:64:5A:48
            X509v3 Authority Key Identifier:
                keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/236a4fd36f12afdf13353db26bf410c691392c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.96.0-190.114.101.255
                  200.123.36.0-200.123.47.255

    Signature Algorithm: sha256WithRSAEncryption
         46:95:57:12:af:90:85:6d:fc:6f:9e:f0:0a:4a:c0:85:f2:78:
         c2:74:32:ce:44:53:d5:86:94:04:26:1e:bd:3e:51:bf:1c:c3:
         b9:f8:75:57:74:17:c4:50:df:2a:ee:e2:af:2b:16:e6:e3:16:
         23:79:f4:1f:8f:b8:2a:f7:09:38:ac:c3:de:5e:6e:71:f8:c3:
         64:73:67:3f:24:ef:15:5e:b1:81:c0:e2:24:32:29:7e:91:80:
         69:55:c0:8a:b9:09:b7:6d:c5:66:fb:3b:25:78:ef:cf:80:29:
         a8:82:2e:f2:41:77:83:08:07:f6:e4:cc:56:72:95:fd:fd:46:
         89:a1:98:51:aa:45:56:bf:8a:c6:2e:b3:23:4e:97:c8:b7:00:
         13:d0:ff:f5:d7:19:38:0d:df:0b:9c:fd:1d:5f:cb:40:a6:39:
         2d:55:d4:96:d3:96:60:90:37:c3:53:55:45:8c:ad:3e:8c:35:
         8c:53:dd:ff:08:66:4c:35:01:1e:ea:b5:a9:7e:c7:9b:9f:56:
         59:be:2f:92:a0:c0:99:0e:53:b7:a6:b6:a6:d3:11:6d:f7:7c:
         d4:4d:eb:0f:0b:4c:01:87:77:4e:33:f2:0c:ab:8d:f8:ad:84:
         6e:68:0b:27:25:39:e9:a2:2e:ba:c2:79:23:47:b6:75:70:9a:
         95:ad:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org