Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4a90308d-60c3-4c5e-8e83-a1b940289fba/dd4701c4f5a06ba4e732d54b2910e65a7a980c48.roa
File:                     dd4701c4f5a06ba4e732d54b2910e65a7a980c48.roa (raw, json)
Hash identifier:          x/Iz2K4aMCVEzcZ+EXIQOHYDKsYh6ZaTYvXmw4HlAWg=
Subject key identifier:   4C:75:56:3C:B7:0B:59:0C:80:F9:3B:0A:81:A9:16:69:9A:A2:31:55
Certificate issuer:       /CN=d9e912e96bbf3562ad510bb79dcae95926afc83d
Certificate serial:       2069D3
Authority key identifier: 99:13:4D:E8:7E:A8:F2:1E:EA:9D:7D:E1:50:8C:83:C8:9B:07:33:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9e912e96bbf3562ad510bb79dcae95926afc83d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4a90308d-60c3-4c5e-8e83-a1b940289fba/dd4701c4f5a06ba4e732d54b2910e65a7a980c48.roa
Signing time:             Wed 03 May 2023 16:46:12 +0000
ROA not before:           Tue 02 May 2023 16:46:11 +0000
ROA not after:            Sat 03 May 2025 16:46:11 +0000
asID:                     14754
IP address blocks:        186.151.94.0/24 maxlen: 32
                          186.26.112.0/20 maxlen: 32
                          200.119.151.0/24 maxlen: 32
                          200.119.152.0/23 maxlen: 32
                          190.149.134.0/24 maxlen: 32
                          190.148.85.0/24 maxlen: 32
                          190.149.152.0/24 maxlen: 32
                          2803:f340::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124243 (0x2069d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e912e96bbf3562ad510bb79dcae95926afc83d
        Validity
            Not Before: May  2 16:46:11 2023 GMT
            Not After : May  3 16:46:11 2025 GMT
        Subject: CN=dd4701c4f5a06ba4e732d54b2910e65a7a980c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:06:b2:11:2a:ee:a9:25:b8:e8:53:9f:6f:
                    10:83:34:db:4d:a5:18:e6:18:3c:d7:3e:d8:b1:90:
                    bc:af:27:01:76:cd:df:fe:46:64:c0:d2:b8:10:ec:
                    7d:9e:ad:31:05:83:40:45:36:5f:ac:b8:c9:0c:d9:
                    ff:b1:73:fe:02:08:c9:ff:c4:50:9e:65:97:d6:91:
                    ef:ed:c8:5a:f6:5c:1c:f3:9e:b5:cd:f7:bb:4e:20:
                    ad:d1:4a:be:52:17:40:94:c1:4d:b6:9d:9c:fa:85:
                    75:c0:fb:12:2e:80:40:e7:96:05:e9:ac:01:a9:dc:
                    9e:e6:11:89:80:51:08:a7:20:5e:0c:e0:b6:bc:12:
                    19:a5:a6:3f:49:0c:35:36:d0:5f:98:f0:6d:75:4c:
                    d6:13:07:f0:46:dc:ad:3e:00:47:51:b8:18:8f:bc:
                    93:fd:bf:4a:2f:83:82:12:08:bc:3c:a6:ce:69:0e:
                    c4:ab:ec:4a:d1:0e:11:da:0c:0a:07:e4:65:65:30:
                    b3:dd:7a:b0:e9:67:f9:c8:97:99:be:2e:c0:77:0e:
                    3f:6b:50:8f:25:7a:87:43:ed:5b:4d:12:3d:2f:07:
                    ce:73:85:0a:a8:6c:8e:87:19:57:4b:5d:53:86:67:
                    a6:2f:b5:35:d7:a4:63:93:8c:6e:40:d0:1f:db:d1:
                    9c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:75:56:3C:B7:0B:59:0C:80:F9:3B:0A:81:A9:16:69:9A:A2:31:55
            X509v3 Authority Key Identifier:
                keyid:99:13:4D:E8:7E:A8:F2:1E:EA:9D:7D:E1:50:8C:83:C8:9B:07:33:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9e912e96bbf3562ad510bb79dcae95926afc83d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4a90308d-60c3-4c5e-8e83-a1b940289fba/dd4701c4f5a06ba4e732d54b2910e65a7a980c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4a90308d-60c3-4c5e-8e83-a1b940289fba/d9e912e96bbf3562ad510bb79dcae95926afc83d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.112.0/20
                  186.151.94.0/24
                  190.148.85.0/24
                  190.149.134.0/24
                  190.149.152.0/24
                  200.119.151.0-200.119.153.255
                IPv6:
                  2803:f340::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:b2:58:91:bd:f5:09:e8:30:d8:05:8d:81:95:e0:5b:8e:
         1c:cc:16:99:73:73:7d:1c:e2:b5:3f:46:56:13:1c:e4:a9:e3:
         20:62:18:01:ec:51:9c:b7:5c:d0:20:94:84:12:65:d1:12:ea:
         e7:d5:6a:db:14:2e:67:6f:bd:7d:2b:e9:90:51:b3:aa:2b:df:
         02:b0:19:25:03:93:0d:3b:56:29:a0:ab:41:3f:35:af:b4:4f:
         b9:af:30:61:f1:f3:5c:0c:a4:39:3a:57:ae:bb:15:80:71:ad:
         3b:10:31:49:91:b8:14:07:0a:c1:6f:d1:1f:66:f3:02:cc:8e:
         b2:23:ca:bb:90:60:90:2b:44:0e:e8:09:5a:51:43:77:f8:87:
         52:34:f6:2a:55:9a:55:87:e1:be:3f:57:10:32:45:86:d4:9a:
         df:3c:13:65:3d:17:ff:2b:a9:f1:94:03:bd:0a:0f:02:5c:e8:
         70:7d:c1:93:21:b2:0d:44:cc:46:36:a4:e4:85:35:f2:2b:f8:
         a3:09:6a:cc:b2:d7:8e:dc:21:99:f2:19:7c:4d:0c:19:ac:7e:
         11:b0:a5:60:d8:ed:c2:4e:dd:33:e1:32:2c:83:dd:78:79:45:
         b2:a5:39:b6:7a:01:ca:9a:7d:14:c0:20:40:16:f6:87:68:c3:
         a5:71:27:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:16 2024 by rpki-client on console-fra.rpki-client.org