Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ccdc7e96d1133f4030d9f4872dc15f2c70b4b07d.roa
File:                     ccdc7e96d1133f4030d9f4872dc15f2c70b4b07d.roa (raw, json)
Hash identifier:          XJ3D1OrSMmbryDKejkU4uAly9y4j8VQURDAf1V3klj0=
Subject key identifier:   07:3C:B2:D7:E2:B7:73:7B:BF:31:2F:A4:B9:03:D3:5A:5C:22:E7:88
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       2795C4
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ccdc7e96d1133f4030d9f4872dc15f2c70b4b07d.roa
Signing time:             Mon 17 Apr 2023 13:01:44 +0000
ROA not before:           Sun 16 Apr 2023 13:00:28 +0000
ROA not after:            Thu 17 Apr 2025 13:00:28 +0000
asID:                     52271
IP address blocks:        190.137.142.0/24 maxlen: 24
                          190.136.15.0/24 maxlen: 24
                          190.136.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2594244 (0x2795c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Apr 16 13:00:28 2023 GMT
            Not After : Apr 17 13:00:28 2025 GMT
        Subject: CN=ccdc7e96d1133f4030d9f4872dc15f2c70b4b07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:71:36:90:e2:87:17:44:70:06:2b:35:e4:
                    74:55:11:33:9e:1d:45:67:5a:d3:73:86:57:2b:68:
                    ed:8d:cb:9d:a5:41:cb:33:9a:f1:8f:d3:03:14:24:
                    47:95:a1:28:3e:f3:53:7c:c2:bf:12:ce:a3:f6:5d:
                    62:55:dd:49:cc:9c:b8:4f:f3:91:2d:cd:3a:f6:7d:
                    e6:3f:aa:a3:a1:9e:78:92:a2:bb:61:eb:5a:6e:9e:
                    e6:b8:44:0c:8b:d8:70:96:b2:7a:3f:bc:e7:17:4e:
                    89:c2:af:8c:50:a1:10:50:79:64:ed:97:50:d2:e0:
                    3d:cb:60:59:61:43:62:65:17:c9:19:c5:1a:80:b8:
                    1f:e6:da:10:e8:8f:a3:c9:8a:5f:3e:51:dc:00:51:
                    b2:56:18:dd:f1:af:08:57:1f:8d:1d:48:41:5e:3b:
                    dd:74:28:bc:40:af:70:ea:ee:49:30:47:28:56:b0:
                    ac:9a:e1:a8:52:4d:63:96:5a:6c:d3:93:ea:ca:2c:
                    cb:ef:57:cd:ac:9c:52:0a:cb:ca:44:e9:22:82:3e:
                    7b:ff:7c:cc:92:48:6e:fa:38:45:6f:f7:a5:f4:7a:
                    08:31:27:e4:63:b4:3f:49:ed:f6:8d:0c:a8:c5:ef:
                    02:f0:d8:15:37:4a:42:0b:31:ed:d2:16:9e:b2:3b:
                    e7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3C:B2:D7:E2:B7:73:7B:BF:31:2F:A4:B9:03:D3:5A:5C:22:E7:88
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/ccdc7e96d1133f4030d9f4872dc15f2c70b4b07d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.136.15.0-190.136.16.255
                  190.137.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:b1:02:91:37:e5:e9:e8:f3:65:60:1b:3a:f8:43:0c:91:0a:
         b3:5b:f5:16:18:d3:06:13:85:55:cf:13:fe:ed:41:28:af:2f:
         a1:b8:d8:94:35:e9:3d:b9:c6:ee:d5:94:b5:72:af:ec:58:ec:
         54:16:34:8d:4b:cd:74:39:f8:c9:de:49:fe:46:d9:ee:83:64:
         d7:b3:a0:f6:6d:7c:73:95:08:32:3f:8a:62:c3:8a:cd:9b:ab:
         9a:54:0c:5c:98:c3:77:bc:83:64:af:fc:0b:9b:14:ee:a5:9d:
         05:c0:3e:59:e4:e9:82:fc:22:f2:e3:4f:3f:65:fc:c0:bf:00:
         5c:ea:8c:b6:b2:d9:21:20:a9:ef:e7:97:d6:e0:33:a4:11:88:
         85:3e:90:3d:c8:2e:23:73:c2:08:b0:f4:7c:f8:0a:39:4b:a7:
         10:c3:04:13:99:7f:96:17:d8:d5:bf:74:62:4a:e0:6d:de:f7:
         b3:49:e1:61:02:1b:40:33:48:f8:70:c6:02:f0:0b:24:11:dd:
         eb:90:0e:dc:4f:fb:11:6f:5a:c8:a4:16:41:9c:13:73:30:6c:
         fc:4c:43:0c:7f:c2:1a:24:6e:64:9c:50:81:29:31:30:14:b2:
         65:38:e8:6b:db:b7:21:ce:38:d0:5a:bd:3d:33:d3:17:f5:e6:
         6b:8a:24:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:04:53 2023 by rpki-client on console-ams.rpki-client.org