Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/0bef5a619328a89b64afa4b5e809f21f3fb89d1f.roa
File:                     0bef5a619328a89b64afa4b5e809f21f3fb89d1f.roa (raw, json)
Hash identifier:          6IJf4sqkMn0gfTp/TdO7GkJbVrIBoDeUB7qh4DNtJ60=
Subject key identifier:   FF:FF:52:96:20:C8:0F:D5:8F:E0:19:34:49:31:2D:D4:83:3D:18:34
Certificate issuer:       /CN=444e0076eea4611dce8c3e39bffef12743fb4711
Certificate serial:       0D5204
Authority key identifier: EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/0bef5a619328a89b64afa4b5e809f21f3fb89d1f.roa
Signing time:             Mon 31 Jan 2022 16:55:39 +0000
ROA not before:           Mon 28 Jun 2021 03:00:00 +0000
ROA not after:            Wed 28 Jun 2023 03:00:00 +0000
asID:                     263801
IP address blocks:        189.90.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872964 (0xd5204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444e0076eea4611dce8c3e39bffef12743fb4711
        Validity
            Not Before: Jun 28 03:00:00 2021 GMT
            Not After : Jun 28 03:00:00 2023 GMT
        Subject: CN=0bef5a619328a89b64afa4b5e809f21f3fb89d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9e:27:0d:09:a9:07:ca:56:e8:53:a5:e6:54:
                    c6:e5:8c:23:08:69:b2:a9:9e:48:be:3b:ea:8d:4f:
                    37:7c:5e:9d:27:53:81:f9:6c:79:ea:a3:8f:54:79:
                    35:2e:15:b7:0d:0d:7c:98:70:8f:07:30:64:83:9d:
                    21:44:33:40:02:9b:8a:48:6b:09:22:8a:dd:79:f4:
                    4a:81:13:6e:c6:02:0e:b8:6e:86:80:15:0d:0f:6d:
                    fe:8f:cf:65:54:b4:8d:e1:92:c1:45:ba:dd:e1:8a:
                    2c:bd:8c:a1:c1:a4:cf:2a:cb:06:22:8d:a4:6c:ae:
                    dc:b8:91:2f:70:b7:f7:86:e9:3c:36:6e:e0:3f:d3:
                    aa:fd:eb:53:bd:7e:8c:63:0a:46:aa:8f:09:42:ac:
                    0e:8f:e8:f9:e0:69:51:45:48:47:a8:59:c2:ae:8d:
                    af:74:4d:8b:bc:44:c2:75:d5:ec:3e:4d:d0:2a:e3:
                    69:73:63:02:0b:dc:eb:93:0c:fa:da:5c:c8:f1:17:
                    1b:d4:9a:cd:ac:e0:8f:2b:93:b4:28:ab:7f:78:53:
                    7f:97:3f:4c:11:b2:75:64:f5:5a:4e:dd:ff:85:4b:
                    75:8a:43:bd:53:a3:45:71:08:cf:b4:11:34:d5:be:
                    ea:4d:d1:bb:5e:58:e0:94:be:42:e9:43:ce:2c:97:
                    98:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FF:52:96:20:C8:0F:D5:8F:E0:19:34:49:31:2D:D4:83:3D:18:34
            X509v3 Authority Key Identifier:
                keyid:EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/0bef5a619328a89b64afa4b5e809f21f3fb89d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/444e0076eea4611dce8c3e39bffef12743fb4711.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:51:49:74:20:fb:74:04:ad:dc:15:4c:b6:9a:55:a0:1c:78:
         78:aa:3d:e1:9c:c6:0e:cb:29:2d:93:64:5b:2a:03:51:d3:1f:
         15:e2:55:68:0e:d0:60:70:35:24:88:9a:62:ae:37:1d:cc:9b:
         e2:b4:95:79:9c:ef:11:5e:72:e5:c8:06:47:fa:97:bf:d8:61:
         5f:92:3e:31:a5:45:d3:25:f8:aa:1b:e7:0b:26:c9:0d:6e:b4:
         28:62:87:f4:b1:2d:d4:c5:81:df:39:e3:99:e2:27:a9:04:82:
         96:0a:c2:ce:37:90:bb:25:79:6d:b1:25:ca:09:07:96:25:76:
         d5:38:bf:f6:41:b3:7d:1d:68:85:c7:20:f6:55:00:b3:e8:93:
         77:d4:bd:5c:99:e7:7c:03:a7:ad:17:2f:c4:c6:9d:35:69:d6:
         94:c6:34:82:10:06:11:05:81:4b:7b:d6:05:02:f8:67:ce:aa:
         7d:9a:80:05:89:d2:dc:ec:d2:0f:0c:00:31:dd:07:db:bf:69:
         9d:cd:75:1b:ad:7b:b0:52:fa:1c:1f:d8:d5:df:7b:f4:f4:28:
         9c:87:2d:c4:43:2d:00:a2:12:4d:18:d9:5d:09:61:59:34:07:
         b0:52:e5:d9:2d:ac:e5:14:87:7f:18:6c:45:d7:9f:29:e6:9c:
         4f:6a:8a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org