Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/ccd573f016fbea808aec4dfdbf08392dd3258418.roa
File:                     ccd573f016fbea808aec4dfdbf08392dd3258418.roa (raw, json)
Hash identifier:          gYrDojWlxLrp4djdyvQsXEDcFyAjKJyxUL0o+7xBw/8=
Subject key identifier:   E3:05:9A:90:5C:51:C6:15:35:BA:AC:C0:C0:F7:BC:25:13:4F:5A:BF
Certificate issuer:       /CN=3df0f837110e45a0ac8477d5992bac317ed138f1
Certificate serial:       216291
Authority key identifier: 59:14:75:7C:51:DF:E1:FD:F9:5B:86:6B:FB:67:B3:16:F7:67:87:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3df0f837110e45a0ac8477d5992bac317ed138f1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/ccd573f016fbea808aec4dfdbf08392dd3258418.roa
Signing time:             Thu 31 Aug 2023 14:55:42 +0000
ROA not before:           Wed 30 Aug 2023 14:55:42 +0000
ROA not after:            Sun 31 Aug 2025 14:55:42 +0000
asID:                     7049
IP address blocks:        190.110.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187921 (0x216291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df0f837110e45a0ac8477d5992bac317ed138f1
        Validity
            Not Before: Aug 30 14:55:42 2023 GMT
            Not After : Aug 31 14:55:42 2025 GMT
        Subject: CN=ccd573f016fbea808aec4dfdbf08392dd3258418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6d:ba:04:d9:27:d5:c7:b9:ed:13:d0:2d:c3:
                    66:8b:f6:a0:1e:3f:e7:d4:39:e5:a4:36:29:1e:5b:
                    4d:8c:f4:b0:6d:7f:87:76:c0:18:99:cb:ed:8e:3a:
                    4c:fb:66:51:c6:5b:6c:ab:6d:60:81:20:d0:99:82:
                    7e:09:33:c9:5d:60:b3:e5:34:27:fc:ec:36:70:1d:
                    b5:72:da:a7:f7:66:8e:e8:45:69:23:4b:46:ac:19:
                    de:0a:a2:90:0f:cb:83:10:28:63:c3:7a:d4:ee:0f:
                    b6:8e:cf:a1:54:0d:36:cc:ba:84:c3:ea:ad:f6:04:
                    f1:c8:5e:68:78:71:06:b2:98:3a:1a:06:e5:a1:a6:
                    9a:c5:95:d5:ea:36:94:d9:cd:53:c3:fd:bb:4e:d4:
                    8f:8d:c3:1b:45:ec:8a:81:4a:bf:7f:4c:06:9c:3e:
                    05:98:42:f9:8f:62:3e:e3:05:36:5a:cc:30:c4:bb:
                    63:e9:3e:59:17:53:02:80:ed:a7:1d:bd:87:b7:d7:
                    1e:1b:27:32:0e:37:59:01:c5:12:da:06:40:3d:c5:
                    22:48:60:2b:8a:78:05:78:d4:85:f4:79:99:c1:bb:
                    75:43:16:f1:f5:c0:d3:69:a1:37:a9:26:96:e1:3f:
                    a9:2b:1d:3f:fe:0a:2b:7f:8f:88:a9:e6:6c:1a:30:
                    7c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:05:9A:90:5C:51:C6:15:35:BA:AC:C0:C0:F7:BC:25:13:4F:5A:BF
            X509v3 Authority Key Identifier:
                keyid:59:14:75:7C:51:DF:E1:FD:F9:5B:86:6B:FB:67:B3:16:F7:67:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3df0f837110e45a0ac8477d5992bac317ed138f1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/ccd573f016fbea808aec4dfdbf08392dd3258418.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5481b058-311c-4294-8619-8ddeefc5e60d/3df0f837110e45a0ac8477d5992bac317ed138f1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:2c:1f:73:a2:ba:f7:eb:81:47:54:3e:47:01:b4:e7:50:3a:
         7b:d1:17:20:6b:ed:3a:39:97:eb:31:34:9c:71:07:db:9f:af:
         8f:d9:cc:70:e8:dd:3e:4a:2f:dc:8f:99:68:5a:11:26:24:29:
         c4:ef:3b:5e:6b:1d:52:4e:78:60:5d:e2:9c:81:75:e8:97:15:
         73:b8:b5:b9:43:c0:b1:a5:b1:a3:13:87:96:35:a2:6f:fb:b0:
         5f:80:13:be:8a:6b:fc:f2:5d:77:8b:d8:d7:16:a8:9d:22:a4:
         93:ef:a9:3a:a7:35:55:ef:52:23:af:6d:45:02:86:79:31:36:
         26:94:79:ca:f1:7d:f3:1f:c7:d4:3d:6b:52:8e:40:6a:f0:9f:
         99:89:7c:51:d6:33:82:30:e7:ce:9d:1c:ec:e8:10:5a:e0:89:
         4e:8c:8a:03:b0:9c:f6:c9:ab:5d:bd:a8:ab:a5:da:70:5d:15:
         fd:c8:a4:60:24:78:ae:13:70:91:0f:df:9a:5e:5c:b5:9f:03:
         f9:e3:e6:8c:e4:27:ec:fd:87:4b:25:f4:c1:ba:98:0c:af:75:
         59:e7:c1:ea:62:5b:dd:64:6f:7e:2c:6a:e0:fa:11:62:f7:7d:
         31:f8:89:c8:52:f9:cd:bb:08:4b:86:6d:08:86:73:fc:e3:e9:
         08:29:df:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 22:37:26 2024 by rpki-client on console-ams.rpki-client.org