Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ba9ac0442b41bf723e745d92f8205d4f56c51c91.roa
File:                     ba9ac0442b41bf723e745d92f8205d4f56c51c91.roa (raw, json)
Hash identifier:          dUCJhayrRNKKjTOo3zjDKG1hpvHiYerzB3gI4kVBV7w=
Subject key identifier:   64:94:49:5B:B7:1A:B5:30:CD:DA:CF:2F:87:BF:6E:01:8C:96:F1:FB
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       27837D
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ba9ac0442b41bf723e745d92f8205d4f56c51c91.roa
Signing time:             Mon 17 Apr 2023 13:01:34 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     263777
IP address blocks:        190.227.188.0/22 maxlen: 24
                          190.228.44.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2589565 (0x27837d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=ba9ac0442b41bf723e745d92f8205d4f56c51c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:dc:1e:86:0d:b0:a2:4a:71:0c:a4:e3:c8:
                    12:44:3f:84:9a:67:8f:89:97:12:fe:24:77:23:cc:
                    53:f0:88:6c:51:a0:f8:ef:13:0a:b7:41:80:3d:eb:
                    d5:85:fe:9e:1f:66:8c:be:1b:91:1d:95:07:a4:42:
                    83:49:fb:23:f0:c4:1d:97:ca:bc:f1:e1:5f:c2:2f:
                    79:a8:65:e7:7e:6c:8a:c1:a0:7e:05:ee:7d:b6:f6:
                    fd:3a:bc:c8:1a:30:12:b0:5f:f8:ff:99:9c:81:a2:
                    90:02:eb:1d:58:f0:e2:22:6d:a5:c0:ee:34:f6:5c:
                    12:96:1d:eb:ef:57:0e:94:ad:4a:84:07:83:a0:aa:
                    a9:f5:9c:3d:44:61:70:bb:8e:2c:7c:3f:2a:9a:a4:
                    bd:a1:57:6c:b6:08:6a:23:20:c1:93:47:16:64:14:
                    85:ec:0c:57:e5:d8:53:7c:c7:39:7c:f6:1a:f8:34:
                    a0:3b:7f:a0:c5:e2:15:4e:07:52:9f:d0:27:da:b6:
                    b6:b0:05:19:ac:d4:59:b6:ca:4c:8c:0a:50:29:7d:
                    34:f5:b0:63:02:4c:fb:a8:6f:3b:59:de:10:b4:83:
                    bb:a4:09:2b:e5:e4:6a:45:ca:3a:38:03:9d:7b:82:
                    a3:44:8a:fe:dd:96:8a:4d:13:14:a2:31:db:7a:8c:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:94:49:5B:B7:1A:B5:30:CD:DA:CF:2F:87:BF:6E:01:8C:96:F1:FB
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ba9ac0442b41bf723e745d92f8205d4f56c51c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.227.188.0/22
                  190.228.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:0a:37:24:9e:12:29:17:f3:4d:98:15:ba:5b:ac:52:93:2f:
         62:a7:8b:78:ad:cc:ed:14:de:86:d9:4e:a2:9a:9c:8c:34:27:
         02:e4:3e:d7:3f:d6:b7:ab:a9:3a:8e:d6:39:89:58:ad:c8:3b:
         d9:ed:e5:ea:78:71:b1:a3:07:9d:a7:11:b6:1b:f0:24:79:37:
         1f:61:49:32:6a:4c:a8:cd:e9:52:a2:c6:e9:10:7b:a5:b0:0e:
         60:1c:f0:fd:41:01:fe:1a:c8:d0:e0:78:42:f2:6b:76:f7:93:
         2b:2f:74:9b:57:cb:45:03:1b:4f:32:f0:4f:21:ce:be:b0:20:
         c9:79:58:d5:c6:d8:c2:30:d0:38:7b:3d:13:e0:9f:96:11:30:
         11:42:cb:83:be:69:03:6a:fe:6b:85:f1:1e:08:f3:bf:af:df:
         d1:b3:a6:8e:85:08:6e:ef:4f:3f:a3:26:66:19:1b:e0:b7:6f:
         0a:b9:ac:f7:c8:73:9f:fa:8d:ba:c7:ee:3d:da:4a:9a:a6:1f:
         f7:97:68:d1:c0:5a:1c:7f:fa:7d:d7:15:17:44:36:7c:f0:ab:
         9f:ae:41:89:8c:c0:a7:2e:5d:dd:97:4f:ec:b1:b4:1a:33:3b:
         c6:0b:74:81:30:4b:52:df:be:da:07:15:0e:af:65:de:eb:88:
         4d:6e:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org