Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/0112a8171a99bf4c2199acb6f8ffb55a657a8326.roa
File:                     0112a8171a99bf4c2199acb6f8ffb55a657a8326.roa (raw, json)
Hash identifier:          GEJdjgHdqhPLxWsyyhzPPxLXLgr0km1CkvOpQwu+HZs=
Subject key identifier:   7E:51:73:35:6E:9A:D0:D3:05:3A:CF:10:A0:8B:54:DC:8B:12:88:34
Certificate issuer:       /CN=3df0f837110e45a0ac8477d5992bac317ed138f1
Certificate serial:       216588
Authority key identifier: 59:14:75:7C:51:DF:E1:FD:F9:5B:86:6B:FB:67:B3:16:F7:67:87:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3df0f837110e45a0ac8477d5992bac317ed138f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/0112a8171a99bf4c2199acb6f8ffb55a657a8326.roa
Signing time:             Thu 31 Aug 2023 14:55:43 +0000
ROA not before:           Wed 30 Aug 2023 14:55:42 +0000
ROA not after:            Sun 31 Aug 2025 14:55:42 +0000
asID:                     11340
IP address blocks:        190.110.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188680 (0x216588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df0f837110e45a0ac8477d5992bac317ed138f1
        Validity
            Not Before: Aug 30 14:55:42 2023 GMT
            Not After : Aug 31 14:55:42 2025 GMT
        Subject: CN=0112a8171a99bf4c2199acb6f8ffb55a657a8326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:23:68:dc:88:fd:74:07:02:5f:fb:bc:32:
                    e9:44:79:71:3a:2d:9b:61:1b:16:cb:1b:04:72:1b:
                    bc:f9:9a:e9:11:68:2b:10:b9:ce:ee:d1:c5:b1:1e:
                    f4:77:01:17:4f:77:94:7a:59:6c:48:67:1b:3a:7f:
                    06:81:b6:ca:c1:38:b4:5a:17:e8:76:8f:e3:ff:b2:
                    c9:4f:ba:34:e5:10:7b:dc:0f:8b:d3:84:a9:1a:79:
                    7e:90:73:23:5f:b4:cb:5d:89:45:b0:65:46:96:f7:
                    c7:47:ea:b1:ad:c5:a9:f4:7c:af:75:45:32:cb:7f:
                    8c:c6:de:fc:5d:5f:07:23:f5:56:ed:81:c9:de:83:
                    81:5e:20:17:36:41:4f:cb:43:12:52:da:e8:5d:56:
                    a5:88:bc:3f:72:1b:d9:05:b7:30:4c:e6:3e:e4:f0:
                    f2:4e:c6:59:37:90:0f:7b:12:bd:37:ca:1c:df:e4:
                    85:66:d2:4e:35:99:bc:72:b5:40:45:26:fe:af:f9:
                    d4:2e:26:24:cb:58:33:3e:1c:f1:af:40:79:65:6e:
                    af:67:15:f4:32:41:af:25:7f:75:67:4b:38:4a:48:
                    31:33:a5:02:ea:ba:0d:22:49:d7:2d:b0:78:cc:be:
                    46:8e:53:d4:d3:35:10:31:e1:60:23:46:47:3a:86:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:51:73:35:6E:9A:D0:D3:05:3A:CF:10:A0:8B:54:DC:8B:12:88:34
            X509v3 Authority Key Identifier:
                keyid:59:14:75:7C:51:DF:E1:FD:F9:5B:86:6B:FB:67:B3:16:F7:67:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3df0f837110e45a0ac8477d5992bac317ed138f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/0112a8171a99bf4c2199acb6f8ffb55a657a8326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/3df0f837110e45a0ac8477d5992bac317ed138f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:65:f0:c2:39:60:85:89:a3:bb:bb:34:60:04:65:e1:24:93:
         37:bc:c2:9b:70:eb:58:28:9a:d3:d8:69:a0:96:25:6b:97:bb:
         22:8b:f1:1b:7a:9d:1a:bf:c3:b9:6a:2e:b8:1c:88:41:09:3c:
         80:71:a8:c7:f7:50:e8:14:8e:19:a3:c6:74:ba:20:af:87:5c:
         a8:58:55:11:c6:34:9b:ba:f8:4d:fa:5d:08:74:bc:0f:94:e9:
         ca:1e:24:2a:ad:15:d7:fb:3a:dd:5f:a8:c8:21:da:8f:44:81:
         15:2e:d7:f8:19:47:f8:66:b0:49:ef:cd:65:00:2f:0b:c1:6f:
         86:e9:ba:83:ad:66:a9:d1:50:26:d1:c0:f1:e5:b1:30:03:31:
         cf:0b:f7:57:28:91:cd:04:54:9a:4e:87:af:cd:41:99:48:25:
         c3:55:07:87:07:d1:d1:07:04:df:f4:6f:0d:43:98:24:7a:4e:
         5a:d7:bd:12:2b:81:a5:e6:27:da:db:bc:7a:7e:04:d4:5f:7e:
         51:78:3c:4f:75:16:5d:12:27:cb:88:23:71:70:04:9d:f7:ca:
         96:c6:59:05:12:fb:01:63:60:52:2d:f7:2d:6d:fe:ff:49:85:
         ed:9b:55:c9:c4:53:d5:70:f8:de:17:82:5b:9f:00:9a:e8:5f:
         96:00:83:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org