Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/8759bca9b4c4d1977078c11c4477b893205a75d0.roa
File:                     8759bca9b4c4d1977078c11c4477b893205a75d0.roa (raw, json)
Hash identifier:          voB1IxGCIRZBuVP7BwzMucGjCwpYUWM0urrmOR8+chk=
Subject key identifier:   17:47:D4:07:39:D2:20:97:41:98:53:A6:23:29:F5:54:0D:BE:1A:CD
Certificate issuer:       /CN=444e0076eea4611dce8c3e39bffef12743fb4711
Certificate serial:       19B681
Authority key identifier: EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/8759bca9b4c4d1977078c11c4477b893205a75d0.roa
Signing time:             Thu 15 Jun 2023 14:42:41 +0000
ROA not before:           Wed 14 Jun 2023 14:42:40 +0000
ROA not after:            Sun 15 Jun 2025 14:42:40 +0000
asID:                     27988
IP address blocks:        189.90.228.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685121 (0x19b681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444e0076eea4611dce8c3e39bffef12743fb4711
        Validity
            Not Before: Jun 14 14:42:40 2023 GMT
            Not After : Jun 15 14:42:40 2025 GMT
        Subject: CN=8759bca9b4c4d1977078c11c4477b893205a75d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:e6:54:e1:ec:71:88:59:cc:18:04:5f:c0:
                    3d:27:62:03:28:6f:2d:1b:e8:13:05:87:e0:22:08:
                    a1:54:a1:94:b0:66:3a:08:2d:94:96:13:14:54:96:
                    34:ce:c5:da:de:39:05:ab:70:3d:c7:34:05:31:64:
                    a6:3c:e6:39:69:79:50:ca:f0:82:14:24:02:cf:fd:
                    19:23:b2:27:3b:4c:27:35:80:9b:31:99:c4:93:9e:
                    b6:d1:e0:c4:72:e1:fe:a9:75:18:73:67:28:39:3c:
                    b5:5a:b6:f9:3a:30:a4:99:89:50:38:9e:0e:9a:91:
                    26:7f:59:2b:1e:61:96:71:ec:49:ed:36:49:aa:93:
                    ea:2e:11:63:c1:c6:8e:39:62:79:a7:36:e4:84:1d:
                    ac:84:6a:17:1a:b5:67:65:dd:c0:70:25:ea:a6:9e:
                    46:c6:df:1f:01:c1:1d:4a:09:af:eb:52:8f:4a:33:
                    3b:2a:46:6f:fe:72:2b:5b:0c:47:a6:5d:2a:30:26:
                    e0:87:ec:21:cf:8b:96:45:02:1a:01:24:be:22:88:
                    7c:9f:ac:c4:1b:c1:e4:68:b7:64:85:8d:0f:fb:f3:
                    5f:57:62:c0:18:13:65:02:1f:90:9d:3a:94:c7:6a:
                    3e:b1:83:e6:4d:82:3a:74:d0:5e:d7:d2:a5:ff:13:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:47:D4:07:39:D2:20:97:41:98:53:A6:23:29:F5:54:0D:BE:1A:CD
            X509v3 Authority Key Identifier:
                keyid:EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/8759bca9b4c4d1977078c11c4477b893205a75d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/444e0076eea4611dce8c3e39bffef12743fb4711.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:f8:06:08:f2:1e:f9:34:af:83:29:6b:e7:ea:6c:62:0f:7a:
         70:6b:02:94:b6:96:fe:fc:a3:cc:64:ee:0d:43:0a:8f:0f:a1:
         97:f9:86:cd:87:78:97:92:2e:4e:34:56:67:50:f7:d3:7e:c4:
         c4:74:f2:f2:a1:3e:2e:4c:c6:00:cf:f0:ec:5d:aa:7f:87:e5:
         66:f5:60:06:a4:1b:94:0b:14:6f:d4:de:d2:93:f4:3c:9a:2f:
         fd:e6:76:77:c8:b2:29:fd:93:60:79:b3:62:9d:87:99:1a:0a:
         54:a9:73:6a:b7:ff:c1:07:92:35:5a:0f:5e:3d:2c:d9:ce:6f:
         27:c5:98:e3:3a:a8:b6:20:e6:85:a7:8c:97:8b:00:ba:f8:6c:
         83:38:bf:28:b9:21:45:fd:ac:f1:34:5d:9a:01:48:2d:60:0b:
         09:be:44:b5:18:67:a1:97:c1:d9:47:c1:79:2e:13:1e:ed:d5:
         7e:07:60:7e:b1:62:5d:d9:b6:f5:c0:9f:19:60:29:08:b3:78:
         0c:84:07:66:93:92:e7:2b:3b:d6:4b:b3:0b:65:93:97:eb:de:
         2e:46:6e:99:d3:cf:cd:71:fd:20:02:e8:f6:ce:f1:08:21:0b:
         a1:3d:ee:22:f6:d6:6f:1d:6c:f3:08:91:b8:9c:0c:dd:85:b1:
         51:c7:92:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org