Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/9c556e9d273993cd457a8fdc3e51b3130b7d50d7.roa
File:                     9c556e9d273993cd457a8fdc3e51b3130b7d50d7.roa (raw, json)
Hash identifier:          Q4Kw75jvtl1frXBl92rPvKVATgChhWIzWFK0sWuv6oM=
Subject key identifier:   04:B0:93:8F:A9:69:D4:1F:01:9C:01:64:82:11:97:C7:64:1B:65:5C
Certificate issuer:       /CN=ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61
Certificate serial:       201AC0
Authority key identifier: 05:61:57:E5:97:A2:CA:FD:23:C5:CC:DE:4A:3A:9F:B9:13:4F:B9:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/9c556e9d273993cd457a8fdc3e51b3130b7d50d7.roa
Signing time:             Sat 22 Apr 2023 06:53:10 +0000
ROA not before:           Fri 21 Apr 2023 06:53:10 +0000
ROA not after:            Tue 22 Apr 2025 06:53:10 +0000
asID:                     52495
IP address blocks:        190.103.64.0/20 maxlen: 22
                          190.109.224.0/19 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104000 (0x201ac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61
        Validity
            Not Before: Apr 21 06:53:10 2023 GMT
            Not After : Apr 22 06:53:10 2025 GMT
        Subject: CN=9c556e9d273993cd457a8fdc3e51b3130b7d50d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:21:2a:a9:c3:28:69:50:3f:90:64:0c:d8:
                    04:2f:ce:4b:c0:00:63:89:32:3d:3b:7b:a0:2c:c1:
                    fa:d4:2d:d9:db:78:9d:3f:78:d0:da:3b:45:5a:5a:
                    44:ed:70:37:40:b0:93:e5:b7:4a:03:76:44:c0:33:
                    12:ce:e1:5c:8f:d6:61:68:2d:3c:ae:4f:e5:2a:16:
                    db:31:8c:89:ca:0d:5b:9e:9a:4f:50:c1:3f:79:52:
                    68:43:b0:02:48:75:b5:e2:7a:98:71:39:d6:13:b7:
                    9c:6c:9b:a5:90:63:70:60:93:4d:8b:4a:65:e5:c9:
                    29:96:22:3e:ad:60:f2:3d:b8:07:72:0b:5a:64:8c:
                    ba:f7:17:a0:36:46:7d:ec:49:57:70:2b:71:a9:bc:
                    7f:85:02:95:3f:cf:b2:9f:9c:2a:76:df:23:31:c8:
                    9a:f0:21:36:35:b8:8f:ee:00:b1:66:9c:c9:56:92:
                    6d:3d:06:e9:b6:28:1a:d2:f7:76:88:72:e4:7c:88:
                    84:bd:90:43:8e:0a:ba:80:83:b1:43:5d:46:67:e0:
                    74:73:fa:18:09:67:24:4d:ef:78:e9:c0:8d:62:73:
                    9f:0d:b0:e7:6a:2b:93:d3:a1:47:91:ac:e8:e8:ee:
                    74:bc:30:a9:00:a8:2f:2d:5b:2d:47:6a:2d:bb:52:
                    c8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B0:93:8F:A9:69:D4:1F:01:9C:01:64:82:11:97:C7:64:1B:65:5C
            X509v3 Authority Key Identifier:
                keyid:05:61:57:E5:97:A2:CA:FD:23:C5:CC:DE:4A:3A:9F:B9:13:4F:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/9c556e9d273993cd457a8fdc3e51b3130b7d50d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/552354e3-a80c-4580-8cbf-0f6562928048/ab7dc6a46ac8003c06c5dcc1c44e5e334fcc4a61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.64.0/20
                  190.109.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:12:92:a7:a0:91:9c:f1:5f:02:35:70:40:97:fe:26:72:ac:
         3f:14:e1:91:f4:9f:63:39:24:65:1f:f5:a7:b6:03:8b:82:7b:
         99:f3:d7:12:53:31:2a:2a:35:e4:88:81:b9:e8:6b:c2:f9:37:
         ae:e5:f2:67:21:8a:77:3f:c0:a2:bb:f7:1d:b2:78:7b:8b:b4:
         9c:2d:ea:ac:f4:70:05:bf:82:75:c3:b4:1c:9c:e0:d5:86:0a:
         a8:47:e2:13:c4:a1:1b:24:41:45:47:e6:5a:36:69:68:3f:0e:
         58:d9:2d:2a:11:d9:bb:20:7d:5c:f1:f3:77:5f:16:29:9f:ef:
         96:74:5b:94:62:08:7e:50:47:15:f2:a8:6d:18:aa:bb:02:8d:
         1b:df:de:41:00:4f:74:44:18:df:e5:da:e0:af:36:75:8a:ca:
         27:d5:fc:34:ac:96:31:81:a0:41:9c:62:30:b8:4e:44:ce:d7:
         0b:43:32:08:4b:5c:99:7b:2c:ec:85:37:0b:55:74:e9:ab:39:
         aa:31:42:d0:4e:d9:4f:3f:03:f1:9c:ee:eb:2d:dc:20:97:04:
         d6:8f:1b:7f:14:5d:27:a6:e6:41:6f:92:11:32:07:01:89:52:
         23:ab:57:8d:76:51:f3:03:97:ae:6a:c2:7e:a3:72:45:9a:13:
         d1:8c:16:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org