Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b51197c40c2db6f894856712b3ba452715518e37.roa
File:                     b51197c40c2db6f894856712b3ba452715518e37.roa (raw, json)
Hash identifier:          MQhOu29kcxtK7J8fk2lZ1grMjiY1Ibuh8KlV/9BG0vo=
Subject key identifier:   AA:D8:3F:FC:47:3E:A4:2C:A2:0D:BB:9B:F4:9A:63:0A:4B:BF:B7:B5
Certificate issuer:       /CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Certificate serial:       194BC7
Authority key identifier: F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b51197c40c2db6f894856712b3ba452715518e37.roa
Signing time:             Fri 01 Mar 2024 13:07:40 +0000
ROA not before:           Fri 01 Mar 2024 13:07:40 +0000
ROA not after:            Sun 01 Mar 2026 13:07:40 +0000
asID:                     271773
IP address blocks:        190.13.195.0/24 maxlen: 24
                          190.13.192.0/24 maxlen: 24
                          190.13.193.0/24 maxlen: 24
                          190.13.194.0/24 maxlen: 24
                          190.13.196.0/24 maxlen: 24
                          190.13.197.0/24 maxlen: 24
                          190.13.198.0/24 maxlen: 24
                          190.13.199.0/24 maxlen: 24
                          190.13.200.0/24 maxlen: 24
                          190.13.201.0/24 maxlen: 24
                          190.13.202.0/24 maxlen: 24
                          190.13.203.0/24 maxlen: 24
                          190.13.204.0/24 maxlen: 24
                          190.13.205.0/24 maxlen: 24
                          190.13.206.0/24 maxlen: 24
                          190.13.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657799 (0x194bc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
        Validity
            Not Before: Mar  1 13:07:40 2024 GMT
            Not After : Mar  1 13:07:40 2026 GMT
        Subject: CN=b51197c40c2db6f894856712b3ba452715518e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:7e:44:e5:aa:1a:99:b0:f8:fa:93:db:88:
                    48:4c:0d:1d:27:c5:90:87:1a:64:45:d6:e1:30:b4:
                    b2:6b:d4:ac:69:87:78:56:b1:43:bf:98:97:1c:bc:
                    f8:82:c8:91:8c:68:d5:dc:12:3b:bd:68:f7:de:6d:
                    66:7d:3c:92:5a:dd:a9:32:9a:4f:46:57:fa:dd:15:
                    df:94:2c:6b:bd:2b:36:c8:01:49:b3:e0:40:83:aa:
                    f4:36:3b:8d:fc:a7:44:cc:35:ab:8e:88:ae:58:6f:
                    28:cf:d5:ed:f2:77:89:1d:43:b0:72:84:31:47:4f:
                    1e:69:e0:f2:fb:eb:82:35:e6:71:a5:99:c8:3d:04:
                    45:57:5a:c6:36:b4:83:0b:01:5c:59:8e:0c:38:cb:
                    4f:f3:6c:07:a9:e8:27:b8:fc:32:51:51:bb:2e:0c:
                    02:97:3e:af:2b:ae:82:72:02:38:db:ef:18:c6:9e:
                    1b:21:35:01:c8:5b:96:c9:a5:58:70:36:74:28:83:
                    61:a5:f6:05:de:57:74:07:26:9d:98:93:44:6f:5d:
                    5e:0e:5a:c4:60:9e:f7:86:04:cb:0c:c8:b6:00:7a:
                    25:f1:2f:0f:2d:40:d3:51:3c:d6:4d:1a:16:ed:66:
                    c5:8e:0f:e0:54:c6:6a:81:10:0a:3d:37:1f:ec:8a:
                    8d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D8:3F:FC:47:3E:A4:2C:A2:0D:BB:9B:F4:9A:63:0A:4B:BF:B7:B5
            X509v3 Authority Key Identifier:
                keyid:F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b51197c40c2db6f894856712b3ba452715518e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:f3:25:40:0b:71:71:22:c5:18:7e:a6:e1:f8:4c:79:71:61:
         06:a2:a3:c6:49:24:74:a3:fc:0b:7b:05:c1:bb:bb:b2:83:97:
         c6:d9:ce:0f:03:0b:cc:10:eb:8b:85:a1:87:bf:97:ac:16:b0:
         e2:fd:89:23:c7:42:db:33:71:ad:46:18:d1:a7:5a:35:cb:30:
         0c:19:05:df:80:e9:76:8a:88:7e:f7:8f:79:a0:a8:b0:8a:80:
         d2:be:56:32:39:6d:8d:32:a3:85:56:3a:54:e4:12:ff:a4:70:
         f6:d2:b0:e4:26:7d:2a:06:1e:24:98:c9:40:30:e0:34:55:da:
         0e:aa:5f:42:e6:d4:c7:19:96:48:6b:1e:8e:79:b1:88:6c:63:
         24:69:ff:fa:f3:a3:35:3f:8a:b4:78:8c:16:f8:ba:e9:ca:bf:
         cb:b2:b0:63:cc:27:29:a7:30:d0:10:1a:ae:7c:43:72:28:3c:
         86:2f:1e:94:85:ca:8e:6f:07:10:a8:61:29:2c:ec:d7:54:ad:
         a2:4d:10:e5:dc:57:f7:e1:f7:b2:4a:e2:32:23:8b:88:d3:6d:
         ff:40:7a:4b:30:74:c4:66:06:a0:f3:a5:6d:c4:d6:4d:c2:25:
         cd:93:fc:dd:f9:45:4b:6c:ac:4b:d1:8c:bb:66:d7:be:17:7e:
         51:71:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org