Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/3e7c1212073a6343744125ea8a0fdbb0a65a3ab5.roa
File:                     3e7c1212073a6343744125ea8a0fdbb0a65a3ab5.roa (raw, json)
Hash identifier:          j2N2DR7IvBPVbn2vnaxQY5LmPTAvzepUG1VlqquALgY=
Subject key identifier:   C3:98:4B:E8:53:F8:95:1B:12:AB:A3:6A:C3:CA:D2:3E:1E:F3:DD:E7
Certificate issuer:       /CN=619037b36cd18d11904cb9935ece4cb8ee755731
Certificate serial:       0BE3CE
Authority key identifier: 35:66:10:B7:BB:39:08:4B:FC:26:DF:D1:C8:D4:2A:71:EC:52:82:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/619037b36cd18d11904cb9935ece4cb8ee755731.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/3e7c1212073a6343744125ea8a0fdbb0a65a3ab5.roa
Signing time:             Mon 13 Jun 2022 13:04:15 +0000
ROA not before:           Mon 13 Jun 2022 13:04:13 +0000
ROA not after:            Sun 13 Jun 2027 13:04:13 +0000
asID:                     269905
IP address blocks:        190.112.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 779214 (0xbe3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619037b36cd18d11904cb9935ece4cb8ee755731
        Validity
            Not Before: Jun 13 13:04:13 2022 GMT
            Not After : Jun 13 13:04:13 2027 GMT
        Subject: CN=3e7c1212073a6343744125ea8a0fdbb0a65a3ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b7:02:7b:6e:0c:34:c7:b5:1d:6f:b8:ed:f7:
                    a0:9a:e3:9f:3e:b9:67:88:c5:93:37:d5:20:67:77:
                    a2:5a:50:ac:2e:f2:0a:6e:50:2c:29:b6:e8:90:ec:
                    12:41:6e:1b:33:b5:59:f5:41:0e:16:83:b5:ea:79:
                    60:d7:c9:3f:df:dd:c7:eb:bc:f2:b8:dd:89:e5:5e:
                    f1:46:a2:11:ed:20:ee:e0:c8:5c:7c:b4:04:26:01:
                    ea:31:19:87:74:69:d6:66:a9:35:e4:96:66:3f:a8:
                    ab:83:13:17:18:b2:7f:a7:42:55:b2:27:26:95:8a:
                    d5:61:32:52:a5:9d:00:be:dc:0d:17:25:8a:12:62:
                    b7:87:e3:ea:56:11:db:e7:8d:0d:6e:d8:0a:cb:f3:
                    f7:3e:94:9d:7d:10:88:58:15:b7:5d:62:f9:b9:bc:
                    0f:bf:36:d6:1a:a5:e4:8f:5c:ac:e4:6b:8c:f8:72:
                    a7:6a:7e:d2:02:e0:d7:38:02:f5:85:b2:45:e6:6e:
                    d4:d2:0a:d9:fe:9f:cf:38:06:2c:51:17:41:40:8e:
                    93:b0:89:fa:ee:ac:ed:eb:b9:10:07:77:40:e4:35:
                    dc:07:87:70:29:0e:2b:e6:de:6d:39:15:9f:e9:cd:
                    35:41:1a:52:55:a7:1f:2d:4b:33:2c:1e:d5:1c:13:
                    cb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:98:4B:E8:53:F8:95:1B:12:AB:A3:6A:C3:CA:D2:3E:1E:F3:DD:E7
            X509v3 Authority Key Identifier:
                keyid:35:66:10:B7:BB:39:08:4B:FC:26:DF:D1:C8:D4:2A:71:EC:52:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/619037b36cd18d11904cb9935ece4cb8ee755731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/3e7c1212073a6343744125ea8a0fdbb0a65a3ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/619037b36cd18d11904cb9935ece4cb8ee755731.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:52:3b:0f:bd:db:ae:b2:9c:9c:8a:90:1b:19:b3:43:0d:06:
         32:e5:12:b6:1d:9b:23:ec:34:75:60:87:2f:1f:ba:9f:dc:68:
         8c:f3:d1:2d:eb:cd:55:69:62:69:ec:b2:81:17:9c:38:5a:3d:
         84:18:ab:d3:4e:3e:ee:45:e1:de:b8:aa:03:7a:0d:dd:7c:a9:
         73:30:ec:10:2b:ab:dc:0c:2a:0a:ca:e8:52:17:3c:25:9a:ad:
         d6:9e:b9:2c:ad:fd:d8:52:4c:da:15:0d:1b:e9:9f:fb:9c:f2:
         d5:13:67:03:c8:3e:90:7e:76:26:5b:14:f9:0f:82:24:eb:ca:
         1c:97:e0:e2:e6:33:bc:47:a7:ca:f4:93:60:65:5b:09:0f:53:
         57:97:c8:55:1b:e6:7e:09:03:16:0c:a8:21:78:1f:24:13:f4:
         c4:05:38:2d:ae:7c:c7:cb:e6:f3:e9:ac:d0:94:2d:9f:52:86:
         ce:04:23:c6:29:ab:7c:d4:7e:b6:c0:a0:fb:e5:eb:d9:62:87:
         01:60:f4:e5:db:79:0c:e7:44:c5:df:79:ea:bc:60:fe:f6:80:
         1d:a5:b5:d9:a9:d9:48:e3:2b:50:d7:a0:a4:ff:58:15:f1:d2:
         e3:45:9e:b9:0c:c5:2f:8b:fc:76:79:06:9d:f9:da:cd:99:a2:
         7a:04:e1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org