Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d6084aed50fc0e381f4baeffb4a660b6d412b5ea.roa
File:                     d6084aed50fc0e381f4baeffb4a660b6d412b5ea.roa (raw, json)
Hash identifier:          a/UP56lJ5qt0x3+WqK2z76KgKTWpDHpbQqNduvp+Ils=
Subject key identifier:   CF:AC:E3:90:1C:CA:93:14:32:60:EA:1B:75:8C:99:D4:F4:72:D3:3B
Certificate issuer:       /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial:       2E2FDC
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d6084aed50fc0e381f4baeffb4a660b6d412b5ea.roa
Signing time:             Thu 07 Dec 2023 13:00:54 +0000
ROA not before:           Thu 07 Dec 2023 13:00:46 +0000
ROA not after:            Thu 07 Dec 2028 13:00:46 +0000
asID:                     263808
IP address blocks:        190.228.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3026908 (0x2e2fdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Validity
            Not Before: Dec  7 13:00:46 2023 GMT
            Not After : Dec  7 13:00:46 2028 GMT
        Subject: CN=d6084aed50fc0e381f4baeffb4a660b6d412b5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:85:51:2a:23:3f:23:5d:6a:8e:fc:75:2a:10:
                    06:b6:79:1a:ae:df:60:23:f2:4e:2b:c3:c5:48:f4:
                    de:0d:ad:66:49:77:0a:b9:54:68:de:94:e6:ef:d7:
                    e6:dc:79:2e:99:f9:ae:46:aa:b6:21:88:4b:69:17:
                    fd:3d:49:b9:98:9d:bb:d0:33:44:dd:7b:6d:4e:1c:
                    3f:6d:e0:dc:c0:e8:d2:13:65:02:b9:23:a6:10:e9:
                    7f:0f:1b:ee:a3:02:75:e6:84:06:07:98:c3:52:fb:
                    0c:63:25:a4:43:c2:b8:f3:92:82:08:b8:33:71:01:
                    4e:7f:fd:19:95:49:3c:6c:53:70:87:8e:67:61:af:
                    cb:79:4a:0d:b5:2c:de:5b:fe:b7:a4:3c:f5:d1:2a:
                    a1:14:c7:01:3c:3b:6c:88:3d:af:d0:a4:0e:5b:74:
                    06:53:24:e4:fb:13:99:0b:1f:d5:93:f8:02:c4:d2:
                    ad:1a:4f:7f:31:f0:44:c8:ab:03:73:5f:c4:81:e8:
                    7d:db:80:03:8a:96:ea:4c:bc:bd:33:7f:82:07:7a:
                    98:9f:f7:a6:92:3f:78:a3:79:fe:07:d9:1d:77:a9:
                    5e:ad:c7:5e:06:a7:ed:2e:85:da:ac:19:a3:28:f2:
                    ef:ee:e4:b1:5b:a4:95:5b:c0:fe:fe:c5:a5:25:22:
                    86:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:AC:E3:90:1C:CA:93:14:32:60:EA:1B:75:8C:99:D4:F4:72:D3:3B
            X509v3 Authority Key Identifier:
                keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d6084aed50fc0e381f4baeffb4a660b6d412b5ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.228.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:5d:cc:89:4e:da:a0:b4:ab:65:74:e8:df:f9:f0:a6:9c:f2:
         5f:38:82:20:0b:b7:1c:5e:7a:c3:2f:1a:b6:78:d6:92:6d:c2:
         15:ec:42:9a:c2:ae:2a:25:0e:05:1a:b3:7d:a7:6d:ed:f9:29:
         46:5b:06:6a:4a:15:48:e2:0e:79:40:ba:6c:23:21:65:69:b2:
         61:02:85:98:3d:63:f4:72:61:af:9f:19:e7:fc:8a:fa:f6:30:
         2b:e2:a5:e3:bb:88:71:59:8c:24:a9:4c:71:61:47:4c:30:b8:
         70:f2:66:f5:d6:d5:91:ff:7c:ad:63:0b:29:64:49:28:58:08:
         78:03:4c:65:ad:65:83:2d:d8:0a:7f:4e:f4:d9:dc:50:78:8e:
         36:95:4b:f5:9f:62:cb:73:2e:88:9b:6b:1b:a0:6c:c2:69:f1:
         ab:b5:a7:d8:94:f4:d5:9d:0e:09:ff:53:04:50:8c:b3:a3:73:
         08:92:92:bc:d5:bb:3a:d9:41:86:1d:56:24:97:e8:52:3f:a0:
         b4:73:a9:4e:dd:12:b8:aa:60:69:78:6a:9b:43:66:84:30:44:
         1e:a2:58:54:dd:66:30:7f:43:74:3a:48:54:48:2e:09:74:d8:
         4a:35:82:be:63:f8:e1:93:b9:a3:f1:ee:59:b2:4f:a3:26:93:
         61:2d:3b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org