Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/67030cf5fd65f35c7c23711ae17ee1bc1e06ba85.roa
File:                     67030cf5fd65f35c7c23711ae17ee1bc1e06ba85.roa (raw, json)
Hash identifier:          dIULpYWaFOy3jtcjo+K+nUgBAhP1+gg9oZFWXspI9G4=
Subject key identifier:   74:0F:C5:28:22:8E:D5:D8:24:4E:C1:C3:CD:EE:E5:CE:5F:3A:C6:3B
Certificate issuer:       /CN=619037b36cd18d11904cb9935ece4cb8ee755731
Certificate serial:       151821
Authority key identifier: 35:66:10:B7:BB:39:08:4B:FC:26:DF:D1:C8:D4:2A:71:EC:52:82:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/619037b36cd18d11904cb9935ece4cb8ee755731.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/67030cf5fd65f35c7c23711ae17ee1bc1e06ba85.roa
Signing time:             Fri 02 Jun 2023 15:36:20 +0000
ROA not before:           Thu 01 Jun 2023 15:36:20 +0000
ROA not after:            Mon 02 Jun 2025 15:36:20 +0000
asID:                     269905
IP address blocks:        190.112.168.0/22 maxlen: 24
                          2803:4ce0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382433 (0x151821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619037b36cd18d11904cb9935ece4cb8ee755731
        Validity
            Not Before: Jun  1 15:36:20 2023 GMT
            Not After : Jun  2 15:36:20 2025 GMT
        Subject: CN=67030cf5fd65f35c7c23711ae17ee1bc1e06ba85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:3c:bd:b2:d1:56:ea:83:f3:bd:d3:3a:b3:
                    5f:e4:3d:54:12:51:8a:27:13:80:0b:6f:36:7f:83:
                    91:41:9f:32:45:ff:c9:d5:80:ed:2f:64:86:34:2c:
                    20:8b:eb:37:6c:4f:74:73:ad:9b:b3:03:81:a8:9c:
                    0b:5a:5a:73:f1:8f:c1:a0:85:37:8a:d6:bc:6a:b4:
                    50:91:c9:11:2e:be:dd:3b:47:9c:f4:4a:33:78:bd:
                    82:cb:9b:7f:9e:dc:d0:07:05:79:d7:a9:95:17:ee:
                    23:a3:15:12:d0:b4:50:34:f3:a7:6f:fc:f5:6b:39:
                    05:78:8d:52:f7:e1:a7:c4:1d:95:e8:e3:df:16:9a:
                    3b:2c:a8:7b:26:1d:8b:01:42:38:d7:6f:bd:53:3a:
                    1a:d9:c7:eb:c1:67:df:90:c1:b4:86:6b:dc:94:ce:
                    13:41:07:c4:37:b5:1f:97:1f:2a:e3:1f:b2:b9:b2:
                    81:2e:bf:88:db:47:64:a7:f5:ef:90:96:84:36:23:
                    f6:c6:99:84:76:07:0d:9b:b0:66:bf:ee:f6:03:d1:
                    f1:44:1c:78:2c:d9:36:5f:4d:80:10:f3:4f:07:13:
                    be:3c:fa:56:4f:8a:1e:5a:2f:e6:13:0f:14:0a:e7:
                    c7:e0:04:e0:d3:ad:6a:07:10:d9:76:a6:16:12:bb:
                    f2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0F:C5:28:22:8E:D5:D8:24:4E:C1:C3:CD:EE:E5:CE:5F:3A:C6:3B
            X509v3 Authority Key Identifier:
                keyid:35:66:10:B7:BB:39:08:4B:FC:26:DF:D1:C8:D4:2A:71:EC:52:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/619037b36cd18d11904cb9935ece4cb8ee755731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/67030cf5fd65f35c7c23711ae17ee1bc1e06ba85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/619037b36cd18d11904cb9935ece4cb8ee755731.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.168.0/22
                IPv6:
                  2803:4ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:5c:26:d8:bf:f5:56:b1:3a:53:eb:53:b1:76:ac:7d:10:03:
         cd:76:98:62:eb:ba:d9:72:6d:a4:14:2f:59:a3:77:e7:a5:bb:
         dc:e4:33:14:7a:6e:bc:c2:9d:6a:c7:3d:87:92:65:d0:28:2b:
         33:01:59:40:93:a5:a8:55:bd:68:49:66:17:2c:48:7d:90:2d:
         08:b9:9c:85:75:17:a3:ec:53:c4:6e:13:15:5a:9f:a9:3b:72:
         9e:87:43:11:34:cb:16:49:fa:ba:5d:69:1c:0b:f6:58:fc:95:
         3e:d7:11:c8:d9:ca:cb:98:27:9c:cc:a1:63:05:7d:0a:99:3d:
         3e:18:e7:df:d9:31:7f:15:a0:68:71:f2:7f:b7:ac:0f:37:4f:
         3c:3f:49:98:1c:9f:4f:8d:28:7a:9e:2f:0e:a7:28:14:d2:75:
         40:2a:44:d0:18:dd:98:58:cb:f5:3d:6a:95:19:b2:38:08:ee:
         52:c5:1c:36:71:e1:e9:87:cb:93:58:e9:67:cf:71:bf:ab:e2:
         6f:5c:ae:3d:8e:6c:17:b8:5e:97:81:d7:e1:59:2e:6c:ae:b5:
         c6:71:c3:ec:e4:a7:1e:da:d7:0a:a2:ae:53:51:f4:6e:12:a0:
         a1:f1:02:18:12:30:77:08:8a:b1:cb:a3:aa:5b:bd:18:0e:d5:
         56:07:b1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org