Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/d279a20a51c7b08a71a5df1db2207c699c9d2ecc.roa
File:                     d279a20a51c7b08a71a5df1db2207c699c9d2ecc.roa (raw, json)
Hash identifier:          5sNrdCYZDr36Khcm5krOFqbsYTz8m6td5/5DHNjHEQE=
Subject key identifier:   F7:39:3C:52:20:A9:4F:99:4E:54:16:99:AF:47:52:AD:F6:FA:83:73
Certificate issuer:       /CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
Certificate serial:       19F8F6
Authority key identifier: 2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/d279a20a51c7b08a71a5df1db2207c699c9d2ecc.roa
Signing time:             Mon 24 Oct 2022 11:37:47 +0000
ROA not before:           Tue 23 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269827
IP address blocks:        190.97.237.0/24 maxlen: 24
                          190.97.243.0/24 maxlen: 24
                          2803:d760:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1702134 (0x19f8f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1
        Validity
            Not Before: Mar 23 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=d279a20a51c7b08a71a5df1db2207c699c9d2ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4f:1f:8a:ed:fd:cd:9f:41:db:2c:29:03:ef:
                    71:c5:5a:8e:e6:88:f3:0f:a7:94:2a:cc:fa:89:1b:
                    c5:b9:ad:5e:0f:55:22:f5:5b:b2:75:b3:f0:ca:88:
                    86:c5:46:40:55:b9:b1:9e:f0:f5:38:50:6e:56:fd:
                    95:9e:bc:6a:cd:9a:e4:17:c5:5c:d7:29:09:35:8f:
                    94:96:7e:7e:40:a8:bf:3c:fd:43:de:cf:be:54:70:
                    38:0c:8b:63:5a:ac:81:84:01:de:19:ea:fc:92:c7:
                    95:ba:71:10:8a:c0:d7:31:4f:c9:51:b4:83:00:67:
                    02:06:c8:3e:30:5d:ec:da:6e:ec:1f:3c:f0:b6:64:
                    c6:17:56:04:b7:4d:e4:a0:5e:78:fb:b3:10:05:9e:
                    8d:e2:26:87:35:99:9b:2e:1d:c3:7c:e5:ce:6d:67:
                    ad:c7:60:5d:6d:ed:35:2a:bb:d2:0a:bc:49:16:74:
                    d9:4c:c7:30:c3:cf:22:8c:74:5a:d0:3d:76:40:d4:
                    14:28:fa:63:e4:dd:ac:4d:00:89:30:79:b3:a4:e0:
                    2e:c2:ca:6c:5a:c0:e6:c8:fa:d2:19:20:30:d4:cd:
                    f5:14:ea:84:b9:b8:39:a5:ce:17:96:7c:c4:2e:1e:
                    0f:93:b2:4a:ec:bc:55:39:aa:90:17:fe:3a:c2:87:
                    ef:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:39:3C:52:20:A9:4F:99:4E:54:16:99:AF:47:52:AD:F6:FA:83:73
            X509v3 Authority Key Identifier:
                keyid:2D:42:EE:B8:29:52:68:88:0F:E1:47:1B:41:3F:1F:76:05:D0:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/d279a20a51c7b08a71a5df1db2207c699c9d2ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dc23055-9466-495e-9798-37a33f50c137/cc9bbc61309ceb6c2cf2a3e41fde35abea2bd2c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.237.0/24
                  190.97.243.0/24
                IPv6:
                  2803:d760:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         18:1e:bc:f5:84:7f:a1:2c:5c:dc:3c:cb:a2:e3:b1:b2:50:92:
         25:f6:d5:f6:30:db:a9:98:7d:bb:de:7c:13:16:91:b1:0e:cd:
         5b:37:82:b6:3b:fd:12:6c:35:5e:3d:b6:87:18:1c:51:29:26:
         0a:cd:56:80:77:76:43:25:16:45:ab:af:87:93:21:97:42:02:
         89:20:cb:90:c5:21:bb:57:b6:c4:61:c1:b7:70:b6:06:7f:5f:
         9e:dd:79:c3:17:d5:da:1c:9c:b0:d3:39:12:a1:c1:92:d3:51:
         19:40:a2:cf:14:23:05:9e:20:dc:9e:d2:f2:f3:5b:90:7f:c3:
         9e:a9:ef:7d:96:2c:b7:9f:73:4f:12:30:6d:1f:e2:de:25:a1:
         c5:44:07:2e:c4:11:9d:33:eb:73:f2:e4:e9:39:33:a9:9d:0f:
         42:f3:86:16:6d:da:71:9a:4d:13:69:fd:e0:b6:d6:13:b7:12:
         16:9f:6b:2a:1c:d4:25:97:0c:4b:f4:ff:c2:32:b1:55:08:24:
         97:af:94:06:75:41:6d:a0:37:3b:28:56:25:d9:42:cd:e8:34:
         1e:32:63:f7:5d:e2:94:33:e0:03:ce:cf:30:c6:07:14:8d:3d:
         ee:31:0a:f9:60:f1:24:88:54:a4:1c:10:8e:91:b5:b9:ba:f8:
         f3:b0:54:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org