Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/236780d948a9960172afb36c93c752d19af77e92.roa
File:                     236780d948a9960172afb36c93c752d19af77e92.roa (raw, json)
Hash identifier:          9hrjMxknbis2FjKXRBZ3F31lKAfsjzRloKePJftKlNg=
Subject key identifier:   3D:45:35:49:5F:F8:B9:D5:5F:CE:E6:FC:D2:FA:13:19:B1:81:B2:F0
Certificate issuer:       /CN=e023bb317eecb014b8f7048b5b30535732897c94
Certificate serial:       0784CC
Authority key identifier: B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/236780d948a9960172afb36c93c752d19af77e92.roa
Signing time:             Wed 07 Feb 2024 01:09:59 +0000
ROA not before:           Wed 07 Feb 2024 01:09:59 +0000
ROA not after:            Sat 07 Feb 2026 01:09:59 +0000
asID:                     6503
IP address blocks:        189.205.0.0/17 maxlen: 24
                          200.36.96.0/19 maxlen: 24
                          189.205.128.0/17 maxlen: 24
                          207.249.128.0/19 maxlen: 24
                          189.213.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492748 (0x784cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e023bb317eecb014b8f7048b5b30535732897c94
        Validity
            Not Before: Feb  7 01:09:59 2024 GMT
            Not After : Feb  7 01:09:59 2026 GMT
        Subject: CN=236780d948a9960172afb36c93c752d19af77e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d8:4a:02:a1:a6:0f:fe:8f:c1:ef:ba:c7:f9:
                    66:2f:cc:60:a3:c3:4a:36:f5:aa:e2:64:55:a1:d7:
                    a4:b2:12:ea:85:9e:82:cc:2e:73:81:45:2a:59:4f:
                    7d:6c:f8:c6:73:85:cc:25:60:85:52:59:31:2b:27:
                    22:f6:2e:21:a4:d0:e6:5d:bc:8f:9d:e1:62:d3:82:
                    25:77:1e:04:3f:90:37:ae:65:80:13:bf:47:f7:94:
                    e0:08:40:a9:6a:d0:02:00:f4:2a:e5:3f:1a:be:f1:
                    a4:3c:6a:35:d0:b8:5c:4e:21:f6:bb:ab:e1:de:33:
                    3f:c5:7b:b2:55:f4:96:aa:7e:7f:ca:b0:b8:01:5c:
                    8a:62:84:bb:4f:f2:6e:b4:e5:d3:6a:f0:f8:fa:80:
                    43:e7:79:3c:5c:7f:ee:02:7b:52:db:9f:2c:55:3a:
                    28:6e:79:17:5f:31:63:0d:25:8f:53:5b:ae:2f:5a:
                    06:a5:f6:27:e5:1c:71:4b:2a:11:f2:5c:0f:d4:49:
                    e9:07:b4:f5:ca:ca:ef:18:d9:9b:fa:af:2b:f8:26:
                    0b:fa:fc:38:ed:e9:d0:9a:19:90:86:c0:88:b8:e4:
                    4c:f6:e6:72:17:7a:4e:bd:81:d7:eb:29:57:65:10:
                    c4:5e:13:ae:e9:7d:81:2a:96:d5:90:16:83:7a:15:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:45:35:49:5F:F8:B9:D5:5F:CE:E6:FC:D2:FA:13:19:B1:81:B2:F0
            X509v3 Authority Key Identifier:
                keyid:B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/236780d948a9960172afb36c93c752d19af77e92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/e023bb317eecb014b8f7048b5b30535732897c94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.205.0.0/16
                  189.213.0.0/17
                  200.36.96.0/19
                  207.249.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3b:bd:d4:96:63:ea:d3:98:b6:9a:89:c4:d1:45:8f:14:b1:b3:
         af:c2:d7:26:d4:87:1e:a4:38:a5:28:3c:ab:18:9e:16:a3:9f:
         08:a5:7c:b2:45:9b:74:00:08:85:57:48:fb:fb:53:5c:f8:2a:
         e8:d8:d6:00:73:39:b6:cf:9a:84:04:2d:26:a6:7b:2e:e5:22:
         66:3d:d9:2c:b5:2d:39:d4:82:0e:e7:0d:49:37:75:2a:50:5c:
         5c:cc:59:b0:d6:b9:33:c2:9c:e7:07:74:96:8d:d9:33:52:20:
         90:8b:27:97:a6:60:e5:fc:da:0f:1f:78:38:05:e9:20:2b:d8:
         eb:ff:ff:99:dd:2c:97:41:85:3a:46:1b:82:d2:f0:8e:f3:28:
         a5:f6:5e:8a:b3:e4:9b:4e:92:b9:ce:97:62:b0:de:33:09:82:
         f8:7f:b1:b8:ea:05:42:4b:cb:5c:aa:5c:85:39:b3:10:63:98:
         98:b0:73:9b:ee:7d:d6:12:07:79:fe:b0:81:7e:67:ef:f3:37:
         41:75:23:be:99:1a:ec:cd:67:db:2a:7d:0b:76:83:03:74:a9:
         bf:05:a4:04:18:ad:85:63:a9:98:f8:df:c2:2c:2d:c0:d2:a9:
         45:a8:69:5e:7a:27:75:56:86:d0:70:f5:ec:83:c9:59:9c:c9:
         3e:af:03:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org