Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/c5ffd10c6c50e343bdb4cd8d8cd6316b3d922aaf.roa
File:                     c5ffd10c6c50e343bdb4cd8d8cd6316b3d922aaf.roa (raw, json)
Hash identifier:          kd5R4iyPe5ERJvAdKHEbOkkgEqWesiXzEni6AmuNRl8=
Subject key identifier:   D3:A3:EE:A2:C5:CB:32:EE:CB:82:99:89:C7:2E:74:F9:7E:64:16:84
Certificate issuer:       /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial:       092379
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/c5ffd10c6c50e343bdb4cd8d8cd6316b3d922aaf.roa
Signing time:             Fri 15 Mar 2024 12:47:33 +0000
ROA not before:           Fri 15 Mar 2024 12:47:22 +0000
ROA not after:            Thu 15 Mar 2029 12:47:22 +0000
asID:                     6503
IP address blocks:        189.205.0.0/17 maxlen: 24
                          200.36.96.0/19 maxlen: 24
                          189.205.128.0/17 maxlen: 24
                          207.249.128.0/19 maxlen: 24
                          189.213.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598905 (0x92379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Validity
            Not Before: Mar 15 12:47:22 2024 GMT
            Not After : Mar 15 12:47:22 2029 GMT
        Subject: CN=c5ffd10c6c50e343bdb4cd8d8cd6316b3d922aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:c6:aa:12:32:26:6f:2d:60:20:ff:b4:69:
                    43:90:02:fb:5c:b3:75:70:7d:6e:9c:0b:83:07:77:
                    3b:e3:fa:2c:8f:5c:4a:e9:cc:48:89:6b:b5:f4:68:
                    b1:44:95:73:b5:b1:83:bb:89:1d:69:97:1c:19:df:
                    11:3d:2b:98:1b:77:f0:ce:68:a4:13:4c:ed:f4:6b:
                    bd:45:4b:3e:fa:97:f4:03:67:f6:bd:1d:bf:92:a3:
                    3f:9c:fd:6b:e4:10:cf:a0:e7:cb:0d:32:53:b6:1c:
                    93:bd:4b:13:92:a7:5b:2e:23:ca:7c:fd:08:e5:7f:
                    17:ae:01:ad:85:4c:92:50:5c:06:26:c7:4f:78:f8:
                    03:b4:ef:05:cd:4f:c5:0b:98:91:ce:7b:a5:38:4e:
                    f3:ee:d8:f1:21:8e:df:fe:9e:54:e3:55:6d:c2:20:
                    ee:2f:13:ff:a8:ac:0a:ce:7f:d7:02:aa:13:22:f7:
                    fa:58:88:df:58:86:1f:2b:dc:7b:d8:ff:87:8d:47:
                    90:f9:22:a5:97:9b:13:d6:35:1b:ce:f2:48:d1:5d:
                    b8:da:e0:d0:c3:87:26:0b:da:21:d4:90:2a:d9:38:
                    b9:c9:9f:3c:93:7a:ae:c0:2e:46:c7:c5:a4:b9:c5:
                    e2:c8:78:00:3f:4c:47:04:c6:a7:40:ca:82:f2:f3:
                    54:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A3:EE:A2:C5:CB:32:EE:CB:82:99:89:C7:2E:74:F9:7E:64:16:84
            X509v3 Authority Key Identifier:
                keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/c5ffd10c6c50e343bdb4cd8d8cd6316b3d922aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.205.0.0/16
                  189.213.0.0/17
                  200.36.96.0/19
                  207.249.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5e:48:8d:6c:48:fa:ba:d7:ae:c1:d2:14:6e:59:33:11:1e:06:
         8e:aa:ed:39:b4:44:1a:53:f4:28:56:64:0f:c6:5c:3f:16:e8:
         56:ff:bf:62:f0:24:a2:d2:88:70:83:0b:a4:d9:56:86:f9:a7:
         a8:fa:93:a6:ea:dc:2d:c8:3d:87:15:b1:d5:4e:aa:70:97:10:
         74:12:2c:64:06:d8:62:e4:26:f6:6c:88:95:9c:68:50:ff:df:
         e8:ca:84:c2:36:46:20:10:25:a2:1d:8b:c1:d6:0c:69:17:dc:
         61:97:f7:5e:10:25:0c:99:50:c3:ce:21:4f:7c:1f:25:3a:3f:
         e9:8c:07:11:ca:53:d0:06:97:09:a7:70:d5:f6:98:f6:8e:58:
         7a:92:cb:10:3a:1c:8f:24:f1:f7:4d:81:af:2a:65:50:28:d1:
         e9:fc:16:60:40:34:1c:c7:a8:37:7f:ec:6d:5d:e3:c5:2a:d4:
         19:a9:99:cf:10:e9:c8:6e:ea:03:5f:90:e8:1a:5d:d5:6c:14:
         e6:41:7d:a0:a6:0e:43:9f:43:cb:01:c4:2a:62:fb:41:93:35:
         9f:a9:ea:a8:a0:bb:1c:f4:b2:73:a4:28:77:ce:e7:d2:3d:ce:
         01:84:44:33:8c:24:05:61:07:5d:92:54:a3:88:07:c6:80:8c:
         2d:66:30:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org