Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/193fb796fe20739a3e1e49c4caddabf19a12a361.roa
File:                     193fb796fe20739a3e1e49c4caddabf19a12a361.roa (raw, json)
Hash identifier:          u46dD9sHwIAIBYI4UwyxgvC8qpRp3BvBxMvx9HgVuww=
Subject key identifier:   22:74:21:A0:37:38:43:3F:66:20:78:C7:C9:DE:5C:5E:1B:CE:DE:6A
Certificate issuer:       /CN=3f0c9202d1972a5deab032862dbcc1d9d5c5e87f
Certificate serial:       1C3D12
Authority key identifier: D6:B8:B5:8E:04:3A:41:7E:2B:D9:31:F2:B7:7D:CC:06:F1:82:60:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/193fb796fe20739a3e1e49c4caddabf19a12a361.roa
Signing time:             Fri 05 May 2023 08:30:01 +0000
ROA not before:           Thu 04 May 2023 08:30:01 +0000
ROA not after:            Sat 03 May 2025 08:30:01 +0000
asID:                     27895
IP address blocks:        190.104.128.0/18 maxlen: 24
                          200.3.248.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1850642 (0x1c3d12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f0c9202d1972a5deab032862dbcc1d9d5c5e87f
        Validity
            Not Before: May  4 08:30:01 2023 GMT
            Not After : May  3 08:30:01 2025 GMT
        Subject: CN=193fb796fe20739a3e1e49c4caddabf19a12a361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0b:6b:f9:c7:2d:ff:08:50:37:83:20:96:c3:
                    63:4c:f8:a0:5d:2c:a3:f3:2c:8e:05:fd:8a:f9:e5:
                    38:67:30:60:4c:d9:df:ca:f6:07:a1:c0:9a:31:6d:
                    9c:08:ac:90:46:ff:61:b9:29:1e:b4:ba:a2:24:f5:
                    7e:fe:bf:d0:27:79:73:9a:29:b4:be:93:dc:94:00:
                    e4:5f:9f:58:7c:48:ec:e6:8e:8c:74:6c:44:fe:ac:
                    37:11:df:c8:cc:bf:1e:d6:a7:eb:1e:0d:e3:a0:ae:
                    16:09:16:a1:a6:23:a6:4f:94:17:10:93:0f:52:c6:
                    21:a2:17:7c:c6:4c:f1:86:00:c9:df:e1:0c:54:cc:
                    3d:f1:b3:82:bf:ca:56:f1:43:88:87:43:b3:3a:c1:
                    63:7a:25:e6:a3:2e:64:13:0d:49:a4:df:a0:a0:69:
                    3a:9f:d6:51:13:b8:13:ce:6e:2a:96:a3:dd:0c:d2:
                    e4:7a:00:1d:d4:d8:fd:8f:e1:3a:0f:5b:76:1f:e9:
                    a7:3b:70:74:24:c9:ed:b9:cc:b2:99:02:82:94:ed:
                    3e:c4:ef:21:05:52:2c:02:7a:ad:52:ed:95:51:5c:
                    77:04:88:0c:80:69:b9:96:34:36:92:a0:85:41:7b:
                    d1:3f:ae:04:27:70:23:30:e4:b8:a4:c6:c9:7f:6b:
                    b8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:74:21:A0:37:38:43:3F:66:20:78:C7:C9:DE:5C:5E:1B:CE:DE:6A
            X509v3 Authority Key Identifier:
                keyid:D6:B8:B5:8E:04:3A:41:7E:2B:D9:31:F2:B7:7D:CC:06:F1:82:60:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/193fb796fe20739a3e1e49c4caddabf19a12a361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.128.0/18
                  200.3.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:f3:cd:a4:c6:15:c4:bc:42:54:0d:2f:fe:2c:da:b6:10:01:
         3b:ff:0f:01:da:e5:71:b7:3f:68:fe:67:b4:36:ed:c2:1d:86:
         f8:6f:7e:4d:20:b3:37:db:3a:be:1f:38:2f:b7:1d:c2:b3:10:
         34:08:e7:00:6d:88:32:b4:9f:c2:e5:c5:ff:b9:02:fe:f8:02:
         53:9d:02:93:af:82:39:b7:16:c1:ad:7d:0c:3b:8d:42:71:54:
         6d:3f:d6:e2:b0:d3:59:ce:38:22:15:cf:80:fb:ad:eb:0c:23:
         02:dd:2f:b3:f5:1a:ce:f1:16:72:1e:77:f2:fa:9d:3f:df:30:
         0f:57:7b:42:b3:b3:30:5b:fb:ef:b6:7b:10:a8:19:ca:f3:c9:
         37:8e:cc:e8:d4:fa:15:bd:c0:a7:17:50:5d:3a:66:db:78:e5:
         c9:b7:05:62:55:10:88:04:06:ea:58:32:73:62:c9:2e:18:57:
         76:dc:ae:38:12:f3:c8:2c:3b:91:ab:bb:8d:56:62:51:17:dd:
         53:83:39:d8:bc:c0:55:7b:64:16:e5:3b:e1:05:dc:11:62:c5:
         52:f9:65:dc:73:58:19:7d:dc:24:e4:ee:5f:7e:7d:d1:58:3f:
         b5:7f:c4:68:09:4e:17:82:52:4f:47:9f:f5:03:82:7d:27:c1:
         a0:28:ac:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org