Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/9da2d155c324b6e467d043700cd46694c128a7fe.roa
File:                     9da2d155c324b6e467d043700cd46694c128a7fe.roa (raw, json)
Hash identifier:          sKcXip1pT+15cwbKmmeZkslMFPoHTtrCKTpyehuyxfQ=
Subject key identifier:   5F:91:EA:5C:8C:2B:0F:A7:8A:EF:29:34:3A:2D:7B:56:AB:72:56:D1
Certificate issuer:       /CN=790cd68fd041d01c15b1368a3b5f2d42f13ca563
Certificate serial:       24C888
Authority key identifier: 0C:CD:A9:0A:43:B3:74:BC:62:CC:95:26:B5:66:D3:06:D7:48:C6:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/790cd68fd041d01c15b1368a3b5f2d42f13ca563.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/9da2d155c324b6e467d043700cd46694c128a7fe.roa
Signing time:             Fri 29 Sep 2023 14:57:38 +0000
ROA not before:           Thu 28 Sep 2023 14:57:38 +0000
ROA not after:            Mon 29 Sep 2025 14:57:38 +0000
asID:                     27813
IP address blocks:        200.81.120.0/21 maxlen: 24
                          190.2.96.0/19 maxlen: 24
                          181.199.144.0/20 maxlen: 24
                          190.151.160.0/20 maxlen: 24
                          200.3.216.0/21 maxlen: 24
                          170.238.124.0/22 maxlen: 24
                          2803:9f00:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2410632 (0x24c888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790cd68fd041d01c15b1368a3b5f2d42f13ca563
        Validity
            Not Before: Sep 28 14:57:38 2023 GMT
            Not After : Sep 29 14:57:38 2025 GMT
        Subject: CN=9da2d155c324b6e467d043700cd46694c128a7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:b9:41:9b:f3:52:82:05:aa:42:aa:99:2e:
                    a2:f6:bd:62:7c:54:a1:02:e2:48:a5:0f:d0:7c:eb:
                    ac:b1:64:9f:19:48:53:23:f3:45:7a:8b:b9:aa:d4:
                    d3:d2:64:14:cf:ca:a1:ac:03:8e:44:c6:41:a5:ac:
                    2a:ac:dc:16:a6:57:ff:5f:44:9b:67:be:e0:ec:5b:
                    5f:58:6a:88:63:36:ea:e8:61:1a:9f:ab:0f:bd:34:
                    b6:47:4a:48:33:42:db:c7:97:56:b6:3f:30:31:de:
                    b5:e2:45:0d:d5:5d:59:06:aa:f7:e5:8e:46:ed:44:
                    23:a5:5a:15:b4:3e:32:6e:8f:e9:35:3a:eb:b6:da:
                    79:f8:7d:f0:fd:35:bd:1a:50:56:01:af:33:c2:ea:
                    e6:ad:cf:c6:ff:30:a8:ee:fe:48:73:88:12:82:9d:
                    9e:16:6e:31:38:90:b2:7b:4b:b9:93:89:98:b2:95:
                    83:88:b1:64:e0:04:4d:ce:61:88:60:0e:65:fd:59:
                    2d:da:d8:19:76:ed:b0:d6:dd:7c:8b:89:d0:88:65:
                    5a:4d:1c:d6:34:98:ea:bb:24:1e:24:64:37:c9:fa:
                    e5:79:0d:b6:7e:45:c3:88:4e:04:f5:c6:e8:28:a4:
                    f5:ff:1d:69:b9:7c:c7:71:04:83:66:84:12:db:e9:
                    61:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:91:EA:5C:8C:2B:0F:A7:8A:EF:29:34:3A:2D:7B:56:AB:72:56:D1
            X509v3 Authority Key Identifier:
                keyid:0C:CD:A9:0A:43:B3:74:BC:62:CC:95:26:B5:66:D3:06:D7:48:C6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/790cd68fd041d01c15b1368a3b5f2d42f13ca563.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/9da2d155c324b6e467d043700cd46694c128a7fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5876fc17-9a0a-47f7-a44a-9e6a45af9e61/790cd68fd041d01c15b1368a3b5f2d42f13ca563.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.124.0/22
                  181.199.144.0/20
                  190.2.96.0/19
                  190.151.160.0/20
                  200.3.216.0/21
                  200.81.120.0/21
                IPv6:
                  2803:9f00:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:53:d8:6f:c2:6e:5d:04:a7:3b:8e:de:d8:7a:87:b7:82:88:
         1a:12:da:42:ca:7a:6c:6a:83:71:82:a5:b9:a2:7a:8d:2a:b1:
         1c:ce:23:04:ab:97:fb:1c:ff:60:eb:74:da:7b:1a:4e:eb:ef:
         6d:35:a2:ad:9e:a7:00:2b:a4:7a:e0:15:46:99:c5:dc:f4:d9:
         e7:69:96:5f:b6:39:d6:8b:f5:3e:83:08:fc:f7:d0:55:03:61:
         00:1b:76:db:13:6c:98:2b:25:93:00:34:e1:56:54:78:f9:1a:
         b4:b9:e2:2a:70:16:b2:21:2c:3e:4f:94:30:88:e7:c6:cd:66:
         14:77:cd:35:d3:63:62:be:af:99:62:ff:88:58:33:95:c8:3c:
         80:4c:e2:49:03:fb:ca:c2:84:8c:9b:8c:4a:2f:bc:56:8a:0f:
         fa:31:fb:75:ba:84:80:9e:ca:19:17:db:16:fd:08:dd:1b:b4:
         0c:27:3c:fb:28:ef:64:3a:a2:41:a2:18:39:ef:69:e4:3b:eb:
         ba:8c:48:26:25:d7:7f:24:96:10:53:f8:8c:23:13:6f:2a:ab:
         ff:5b:95:1d:8f:af:3c:aa:ec:f8:f6:89:43:6a:80:8d:1d:de:
         09:ff:af:05:de:15:8d:71:7c:35:69:7a:ce:1b:96:1e:30:bd:
         81:c4:67:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org