Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a20c32060df0fa594753446b0b71d04e5de597de.roa
File:                     a20c32060df0fa594753446b0b71d04e5de597de.roa (raw, json)
Hash identifier:          27jg1VSp3K/ERnf5Wrl4hWL66RNWKPrC0BiYi+RBdbQ=
Subject key identifier:   B3:83:A7:71:7C:EA:3F:73:2C:AF:4F:41:49:EA:4A:E6:A3:47:F6:88
Certificate issuer:       /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial:       2DBE5A
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a20c32060df0fa594753446b0b71d04e5de597de.roa
Signing time:             Thu 07 Dec 2023 12:42:26 +0000
ROA not before:           Thu 07 Dec 2023 12:41:57 +0000
ROA not after:            Thu 07 Dec 2028 12:41:57 +0000
asID:                     27813
IP address blocks:        190.30.242.0/24 maxlen: 24
                          190.227.182.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2997850 (0x2dbe5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Validity
            Not Before: Dec  7 12:41:57 2023 GMT
            Not After : Dec  7 12:41:57 2028 GMT
        Subject: CN=a20c32060df0fa594753446b0b71d04e5de597de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:ad:d2:ba:25:28:17:39:79:e5:8c:fe:fc:
                    77:e4:59:c0:40:f9:e1:33:73:7b:81:23:ed:bd:03:
                    97:93:df:37:0b:fe:66:73:46:b6:0c:6e:5e:5c:01:
                    a8:9c:cb:50:fc:4f:86:4d:2b:78:cd:dd:c4:f7:f8:
                    31:5e:9c:ea:e0:96:40:c5:1c:d6:09:e0:6a:af:ca:
                    95:44:a5:d2:b5:55:ed:5d:fc:84:b4:26:b1:43:61:
                    ec:54:d5:9e:43:1f:db:5b:d0:d4:69:e1:b3:07:0b:
                    02:81:6b:32:52:e0:7d:c7:b3:b8:37:91:70:70:1a:
                    7d:b6:4d:b9:34:8a:20:1a:44:5f:1a:c8:3b:40:fd:
                    a7:96:c3:d8:d6:e6:21:a2:f7:bb:d3:2d:35:46:3a:
                    e8:d0:a0:78:41:98:e4:36:d3:1b:73:3b:67:4b:c8:
                    87:0a:c8:b1:fc:4c:f7:1a:87:fe:c8:b9:cb:3b:f8:
                    9c:9b:d7:7c:01:46:5a:f4:c4:81:9b:82:d3:3c:c7:
                    38:60:dc:db:3f:80:e9:59:3f:63:47:9e:09:29:d4:
                    28:cf:7c:24:db:59:15:eb:a3:7d:3b:2d:94:eb:d9:
                    34:06:86:95:d3:cd:db:f6:82:43:68:b6:13:cf:0e:
                    77:be:99:67:98:4f:39:bd:56:aa:cc:95:3d:3f:75:
                    ed:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:83:A7:71:7C:EA:3F:73:2C:AF:4F:41:49:EA:4A:E6:A3:47:F6:88
            X509v3 Authority Key Identifier:
                keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a20c32060df0fa594753446b0b71d04e5de597de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.30.242.0/24
                  190.227.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:e9:e1:da:88:f6:30:ae:fe:f3:97:42:47:a0:ba:21:4b:10:
         d5:4b:bb:c9:0e:b1:e6:cd:3d:92:8a:bf:69:dc:29:70:d1:1d:
         b8:c8:1d:82:be:08:66:f7:5b:ef:23:98:aa:f4:d6:51:f7:c9:
         3f:fe:22:0f:aa:38:99:ea:b0:ea:87:43:83:84:00:65:b4:61:
         1a:a8:a1:4c:05:8f:bc:08:70:f3:99:1f:5e:43:80:f4:83:35:
         21:7f:9a:d4:71:97:89:87:6e:ca:3d:71:18:be:65:af:10:30:
         69:1d:8c:4e:56:75:65:3e:43:54:eb:80:37:ad:77:96:00:ab:
         28:d5:43:53:1f:9d:c5:28:a8:4f:ca:f4:33:86:ea:1f:6c:97:
         11:89:67:c8:a7:93:d6:0f:f6:6b:a3:b9:8a:b3:2d:29:8d:e8:
         96:ed:4e:c9:36:bc:26:d3:32:e7:a1:e6:d5:59:1c:7c:ee:b6:
         f2:0e:31:80:0e:f8:56:1b:90:89:28:ba:5e:af:8d:16:fc:6c:
         72:4e:a7:16:e2:44:5a:a2:ec:e6:23:2b:1c:d8:63:ac:ae:3b:
         5f:6d:be:24:40:9f:e9:cf:5d:3f:0f:a7:22:6e:e0:ab:e5:f4:
         f7:5b:bc:26:74:84:22:a3:0e:6b:e1:93:e1:96:2e:f8:30:02:
         26:33:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org