Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/43ca923caf169315ec529442ee4365a37525284c.roa
File:                     43ca923caf169315ec529442ee4365a37525284c.roa (raw, json)
Hash identifier:          Owgu204DsJSNNwDP+h8fgoMNIIaX5OLtJWs7cRAuTXc=
Subject key identifier:   BB:FE:70:AF:37:A4:FA:F8:93:F0:43:AF:C3:3B:F2:2B:87:88:92:F6
Certificate issuer:       /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial:       135CD4
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/43ca923caf169315ec529442ee4365a37525284c.roa
Signing time:             Tue 09 Nov 2021 04:10:31 +0000
ROA not before:           Tue 09 Nov 2021 03:00:00 +0000
ROA not after:            Mon 09 Nov 2026 03:00:00 +0000
asID:                     20207
IP address blocks:        190.110.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268948 (0x135cd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
        Validity
            Not Before: Nov  9 03:00:00 2021 GMT
            Not After : Nov  9 03:00:00 2026 GMT
        Subject: CN=43ca923caf169315ec529442ee4365a37525284c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:dd:55:e9:71:ae:39:21:90:3f:b3:ec:72:
                    7e:cc:c9:90:79:33:6f:9f:76:a2:0b:de:55:67:81:
                    a1:27:71:c8:2e:58:60:ef:7e:1b:72:da:26:b9:f6:
                    c0:5d:8a:bb:ae:78:12:16:f0:9e:67:d8:c1:40:51:
                    0f:65:72:4f:e9:28:fd:f9:cb:09:9f:4e:67:ec:03:
                    a3:25:b2:31:b6:20:7b:5d:9c:0d:f2:08:5c:10:ff:
                    c3:29:49:cb:0a:08:e2:22:6e:bd:7e:e6:2f:42:87:
                    23:4f:4d:f6:df:30:5d:43:4e:cb:8e:71:14:44:ed:
                    cb:53:89:57:ba:22:14:6a:ba:46:79:80:4b:5e:a9:
                    2c:ab:01:14:5d:17:40:a1:4b:e3:08:27:e9:3e:5a:
                    fc:36:88:c2:e9:e6:77:90:b7:c0:53:3e:de:f2:53:
                    2a:1a:16:71:d5:31:2e:df:a3:34:74:d3:be:30:e5:
                    c6:29:00:6b:03:1e:d5:69:b7:69:b0:f5:c1:3a:53:
                    1b:60:26:71:1f:c2:5a:18:42:90:5c:c6:ba:e5:f0:
                    fc:06:97:af:32:95:af:16:55:63:b2:8b:2e:08:5c:
                    34:4b:6b:40:02:e5:08:19:5a:6a:cb:ff:82:18:2b:
                    bd:35:76:54:53:f5:86:b7:18:98:27:f4:6f:76:f5:
                    72:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FE:70:AF:37:A4:FA:F8:93:F0:43:AF:C3:3B:F2:2B:87:88:92:F6
            X509v3 Authority Key Identifier:
                keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/43ca923caf169315ec529442ee4365a37525284c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:9b:35:5d:bc:57:05:3d:80:31:b1:01:10:ce:a3:ac:bb:12:
         7a:2e:cd:07:1d:0b:3f:19:6e:dc:71:57:a0:66:f1:5f:5a:75:
         1c:54:2d:dd:d3:f4:20:52:b0:9c:a5:4f:0a:97:c2:cb:fb:86:
         2d:fc:f3:73:20:ff:8d:ac:e3:5c:16:52:f8:a0:37:a2:4a:26:
         49:54:15:8c:65:be:2c:c7:cd:aa:3b:7f:6b:8a:d2:45:1d:40:
         b4:64:4b:0c:ac:7e:4c:21:14:18:c6:59:42:c2:9e:23:5a:8b:
         b1:ac:65:95:25:f4:ed:85:51:3a:47:f9:0d:c9:33:40:ac:e1:
         dd:96:de:e8:6c:1d:cc:ba:40:bd:76:9d:46:e7:72:71:5a:3c:
         fb:e0:ba:55:3e:8a:93:83:22:41:4e:7f:d0:6b:7e:93:bf:4b:
         57:aa:ff:a7:f4:53:c2:fa:a6:52:6d:16:11:93:37:9c:ae:a0:
         3d:26:37:a1:04:53:4e:01:67:78:6a:a9:7b:ef:cd:28:0a:81:
         a4:84:e4:40:60:72:5d:f7:b7:8e:a6:65:38:53:36:25:b9:a7:
         7b:a2:76:66:2c:3e:12:e2:51:51:4d:85:24:98:d2:66:3a:11:
         bb:24:ef:a3:cb:e5:c0:04:fa:c0:ad:1d:44:30:7c:9f:b0:8e:
         a7:ca:5b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org