Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/a0437ff603cc5d30285121355ebb44afdf1d4b4f.roa
File:                     a0437ff603cc5d30285121355ebb44afdf1d4b4f.roa (raw, json)
Hash identifier:          jkd8+z4aIbIPbYbj2PGvvdiZBpFNw/bjWWCuM00Fp5w=
Subject key identifier:   A3:07:2D:70:56:E4:F6:1B:A1:8E:14:C3:1C:AC:8D:FE:99:AC:EB:1E
Certificate issuer:       /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial:       27ECF3
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/a0437ff603cc5d30285121355ebb44afdf1d4b4f.roa
Signing time:             Wed 08 Nov 2023 15:01:00 +0000
ROA not before:           Wed 08 Nov 2023 15:00:37 +0000
ROA not after:            Wed 08 Nov 2028 15:00:37 +0000
asID:                     52399
IP address blocks:        200.50.191.0/24 maxlen: 24
                          190.110.250.0/23 maxlen: 24
                          190.114.102.0/24 maxlen: 24
                          190.110.224.0/24 maxlen: 24
                          190.110.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2616563 (0x27ecf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
        Validity
            Not Before: Nov  8 15:00:37 2023 GMT
            Not After : Nov  8 15:00:37 2028 GMT
        Subject: CN=a0437ff603cc5d30285121355ebb44afdf1d4b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:61:7c:f8:d5:d0:05:ef:37:18:8f:8f:dd:41:
                    81:e9:c8:34:d9:02:0f:95:66:01:a8:a3:d1:3c:f6:
                    61:35:c3:01:71:bb:04:44:02:0c:92:71:c0:ee:2d:
                    dc:06:3f:53:b9:54:bb:f8:20:a6:30:80:51:7b:a5:
                    87:3f:5f:b1:4a:12:47:1f:c5:b4:a5:3b:74:d8:24:
                    87:6b:6c:d8:32:f0:5c:6c:73:16:02:68:f5:51:9d:
                    17:2c:ee:6d:91:9a:97:05:c9:61:0a:32:02:b6:06:
                    ff:41:ae:2a:d1:15:79:d3:cc:4f:e2:97:8d:ec:00:
                    4c:1c:c0:ab:44:5c:6e:c8:b3:45:5c:fb:23:3b:a8:
                    ee:d2:8e:a0:ea:e9:ed:f9:96:67:86:4e:11:70:48:
                    70:5e:e3:1e:e4:b9:69:39:cc:4a:4b:ac:36:37:93:
                    22:aa:af:a8:4e:c7:f1:82:f2:26:02:ba:0f:75:be:
                    aa:0a:3c:1d:ae:ee:ef:47:85:45:42:7a:0f:2d:9f:
                    0d:d0:70:20:11:d3:f5:cc:3f:8d:65:f7:1b:42:e6:
                    e3:f2:91:23:35:4b:8d:2f:8e:0e:ca:4a:07:dc:b1:
                    b5:eb:c7:82:b2:71:c1:82:ec:d2:bb:5c:f4:47:84:
                    16:7a:b4:7b:3c:cd:85:78:6b:2d:bb:9f:57:1e:77:
                    e1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:07:2D:70:56:E4:F6:1B:A1:8E:14:C3:1C:AC:8D:FE:99:AC:EB:1E
            X509v3 Authority Key Identifier:
                keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/a0437ff603cc5d30285121355ebb44afdf1d4b4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.224.0/24
                  190.110.232.0/22
                  190.110.250.0/23
                  190.114.102.0/24
                  200.50.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:3d:cd:b2:19:bb:3a:f8:d7:96:e8:02:d3:31:fb:5a:b5:82:
         a0:f3:7d:99:3b:19:07:b1:d2:b2:e1:91:61:21:f7:37:7c:b3:
         ae:e7:59:f1:38:71:b9:ec:10:f5:0c:2b:99:7a:6a:6e:51:07:
         1e:a6:ad:12:c7:5d:14:4b:42:33:01:28:6a:95:47:4c:74:32:
         9d:a7:08:bb:d2:47:26:9a:72:09:6a:00:8d:37:b3:76:2a:9b:
         20:1d:9c:5f:37:92:98:b4:6d:78:8a:37:9a:9b:d2:9e:4c:d5:
         43:06:7d:5a:38:a1:94:b3:db:27:e1:ee:61:73:44:53:91:88:
         2b:ed:f7:9a:22:e8:a7:76:25:1e:8e:dd:c2:b2:34:51:7d:44:
         e4:31:63:fd:80:4f:2d:6c:6b:e6:f1:bc:1f:9a:1a:34:0c:14:
         69:87:6a:ef:aa:8e:5d:c2:b7:7a:b6:72:e6:de:c5:94:1f:11:
         67:f4:d5:ce:d0:1a:9e:5f:02:94:a6:6c:83:7d:ac:78:e8:eb:
         e4:5c:a3:dd:66:5a:85:09:cf:33:ee:47:aa:b0:1d:2b:32:39:
         5a:c7:80:c0:55:60:36:61:65:d0:1b:9f:6d:13:bc:9d:32:1e:
         c6:6d:63:ad:ec:29:fa:f0:18:70:a9:98:8c:6e:b7:c0:b6:b8:
         f3:f2:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 20:09:03 2024 by rpki-client on console-ams.rpki-client.org