Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/dc5b3edcd19b01857d47203fdae2c80249b57bee.roa
File:                     dc5b3edcd19b01857d47203fdae2c80249b57bee.roa (raw, json)
Hash identifier:          /NyBAfZYhJLNi1pPdRhDQkP0UAHr7kpr8MRamZPTF2c=
Subject key identifier:   7F:C5:8A:EA:BC:BF:8A:94:8B:7E:E4:26:E2:06:71:A6:EB:2C:54:9D
Certificate issuer:       /CN=619037b36cd18d11904cb9935ece4cb8ee755731
Certificate serial:       0BE7DD
Authority key identifier: 35:66:10:B7:BB:39:08:4B:FC:26:DF:D1:C8:D4:2A:71:EC:52:82:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/619037b36cd18d11904cb9935ece4cb8ee755731.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/dc5b3edcd19b01857d47203fdae2c80249b57bee.roa
Signing time:             Mon 13 Jun 2022 13:04:16 +0000
ROA not before:           Mon 13 Jun 2022 13:04:13 +0000
ROA not after:            Sun 13 Jun 2027 13:04:13 +0000
asID:                     269905
IP address blocks:        190.112.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780253 (0xbe7dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=619037b36cd18d11904cb9935ece4cb8ee755731
        Validity
            Not Before: Jun 13 13:04:13 2022 GMT
            Not After : Jun 13 13:04:13 2027 GMT
        Subject: CN=dc5b3edcd19b01857d47203fdae2c80249b57bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:78:12:a0:8c:1c:cb:97:96:d4:86:f5:59:79:
                    d8:a8:17:d3:61:d5:56:90:b1:dd:ad:be:62:56:15:
                    5e:36:e3:18:6b:00:76:4e:0f:bc:e0:be:b9:a3:63:
                    88:7b:0c:eb:47:d8:df:5d:b4:e6:57:2a:49:6b:9e:
                    e7:04:91:be:dc:66:ab:5c:4a:2b:82:54:a4:47:98:
                    bb:0a:2a:ce:ec:74:83:22:a3:34:3f:15:3c:6e:be:
                    43:44:94:0d:9a:e1:98:da:80:4a:36:fd:b9:44:db:
                    d5:fa:46:d9:5f:0f:00:a1:89:d4:72:78:15:0d:db:
                    68:7d:2a:d4:30:fd:7d:a4:64:14:cd:0f:d5:9c:fe:
                    28:0d:71:15:c3:31:57:9f:45:ca:dc:1d:d8:5e:3f:
                    c5:36:78:e9:24:16:91:2c:13:72:0e:fe:e4:40:71:
                    fa:2e:7b:98:a6:a7:6c:0f:c1:7d:20:cd:d1:ae:63:
                    a3:b5:a0:b6:ac:d3:6a:6e:55:2b:a3:e8:aa:5b:76:
                    56:49:96:1e:61:db:a5:e2:2c:73:42:8f:d0:60:3c:
                    0d:ad:33:ae:21:51:d1:79:34:8c:ee:2f:82:ef:90:
                    c5:f0:8d:85:ec:9a:2b:81:49:2d:4d:7c:ca:c2:69:
                    9c:fe:b2:12:a6:85:bb:97:25:2e:72:e3:ad:e4:d4:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C5:8A:EA:BC:BF:8A:94:8B:7E:E4:26:E2:06:71:A6:EB:2C:54:9D
            X509v3 Authority Key Identifier:
                keyid:35:66:10:B7:BB:39:08:4B:FC:26:DF:D1:C8:D4:2A:71:EC:52:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/619037b36cd18d11904cb9935ece4cb8ee755731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/dc5b3edcd19b01857d47203fdae2c80249b57bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/619037b36cd18d11904cb9935ece4cb8ee755731.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:b4:24:99:17:d4:17:21:70:16:bb:6e:3e:94:27:08:1f:fc:
         37:7f:b0:69:83:9f:40:1e:98:41:f0:a3:57:98:bc:e6:9c:5f:
         25:a3:b9:b1:36:d2:93:c2:8b:fd:27:4c:07:c3:38:0d:0b:51:
         21:be:b4:b9:6b:ad:c9:cb:ff:68:7d:b5:97:48:d9:bf:e7:80:
         fa:38:f0:9d:d8:69:1f:8a:a7:7e:00:e2:48:77:2e:d2:a7:21:
         2a:fb:88:cc:91:7e:08:a6:4c:ab:d2:6f:bf:4d:3b:46:e3:ba:
         aa:d3:b4:0e:87:39:71:f9:78:d1:11:c6:af:4d:b5:fa:4a:be:
         af:86:cc:c3:dd:c6:58:8d:21:5f:2a:55:d7:1e:1a:0d:15:41:
         a4:18:a9:b9:f6:89:35:8e:b0:0a:3b:cc:9a:ed:1f:e4:9d:fc:
         62:84:d1:60:7b:74:2a:b8:01:40:0b:a1:b0:29:05:39:d0:2b:
         83:e3:32:55:02:17:72:29:dc:40:61:98:6f:ca:da:09:6a:92:
         de:48:04:ad:5d:0f:8f:3f:22:37:30:1b:5a:dd:5f:c4:c4:84:
         0d:f0:da:cb:45:62:e3:a3:3d:61:b9:c4:99:02:71:67:e2:d4:
         07:22:08:8a:1b:c6:74:a1:a3:0f:0c:85:94:d7:40:23:0a:a0:
         d7:36:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org