Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/9dcf8aa9533904fd2a674af5083764cd2e454906.roa
File:                     9dcf8aa9533904fd2a674af5083764cd2e454906.roa (raw, json)
Hash identifier:          jOjsoqaQ9X6SYuMy8dIdFvXCK1NZy/dpXUHfLa3dj7Q=
Subject key identifier:   C3:7F:98:60:CF:42:91:0A:71:D0:A1:51:C7:FD:B2:6D:0D:40:EF:C1
Certificate issuer:       /CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
Certificate serial:       20C290
Authority key identifier: 48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/9dcf8aa9533904fd2a674af5083764cd2e454906.roa
Signing time:             Mon 08 May 2023 17:06:32 +0000
ROA not before:           Sun 07 May 2023 17:06:31 +0000
ROA not after:            Thu 08 May 2025 17:06:31 +0000
asID:                     262248
IP address blocks:        190.14.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2146960 (0x20c290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29194fbdbd11c97181ad21546cc92fc2d0e3857a
        Validity
            Not Before: May  7 17:06:31 2023 GMT
            Not After : May  8 17:06:31 2025 GMT
        Subject: CN=9dcf8aa9533904fd2a674af5083764cd2e454906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:b0:56:07:06:b4:53:00:c8:24:02:5f:c5:
                    b0:85:1c:02:54:38:30:c5:81:34:74:34:36:1a:10:
                    84:3a:09:f0:4f:11:ad:0d:e4:df:c6:a3:3f:f5:66:
                    6b:7c:01:aa:fd:0e:cb:64:c2:be:13:77:ee:34:af:
                    77:64:06:a0:bf:5d:b5:43:f4:81:48:97:ec:eb:66:
                    15:b9:50:16:2a:de:3c:4b:ef:7c:98:e0:76:55:d3:
                    76:cc:16:92:6e:a1:0d:46:d0:c0:64:ca:f0:85:d8:
                    f3:cb:72:5d:ed:81:82:b0:87:5d:6b:3a:73:65:94:
                    77:38:15:7c:35:30:2d:53:0a:15:1e:5b:86:c9:2d:
                    7d:79:6a:f7:9e:28:12:20:55:9a:83:ee:5b:0f:8a:
                    f5:67:c3:fb:b9:fa:ba:15:47:fc:5c:16:01:66:55:
                    4d:86:d9:8d:1e:7b:42:c0:3f:5d:8e:c4:30:78:97:
                    fb:f6:8d:a3:67:f2:b1:13:79:2b:0f:ba:31:ae:c0:
                    f1:86:88:e4:89:ba:cd:84:79:37:3c:b0:da:99:04:
                    bb:73:b4:4c:9f:a2:03:fe:15:79:02:69:5b:03:1f:
                    b8:42:48:5d:19:8c:e8:4e:b2:e9:39:a9:00:f2:6d:
                    fc:5d:6a:5e:0f:80:44:e1:64:6d:13:12:65:10:d3:
                    9e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7F:98:60:CF:42:91:0A:71:D0:A1:51:C7:FD:B2:6D:0D:40:EF:C1
            X509v3 Authority Key Identifier:
                keyid:48:F9:63:04:80:AE:04:85:2E:87:A6:87:F3:2E:19:51:75:61:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29194fbdbd11c97181ad21546cc92fc2d0e3857a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/9dcf8aa9533904fd2a674af5083764cd2e454906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f93ae70-4edf-4086-bc00-248f54525fb8/29194fbdbd11c97181ad21546cc92fc2d0e3857a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:ce:84:86:63:95:71:cf:87:c4:2d:81:b4:71:5d:1e:43:15:
         d7:50:0c:df:b1:b5:a0:c8:d3:af:d1:c1:17:90:83:98:c4:be:
         15:3d:e2:27:f9:a3:00:1d:d3:60:7e:bb:c6:d6:16:5b:9e:17:
         7b:b5:b8:12:ba:7b:c2:e0:3a:6b:1c:69:20:7e:66:62:eb:cd:
         9a:c1:31:f3:ee:e3:e1:e3:23:da:c2:27:d2:d3:30:e8:ef:c0:
         32:e1:c8:2f:f7:fb:59:41:be:36:94:44:d0:50:02:48:24:21:
         16:1b:f2:02:66:0f:a4:ba:5f:5d:85:16:1a:a8:1c:b7:df:e1:
         f7:dc:71:35:2c:64:98:92:ad:35:01:53:94:c9:c0:e0:40:df:
         f9:1a:b3:33:48:9a:f3:37:a5:c7:b7:a1:8c:ac:c3:14:86:27:
         fb:5c:61:78:7a:7c:8d:f6:18:6f:31:6f:95:59:49:61:ef:ac:
         8e:d9:b6:87:9b:17:93:bb:fb:a1:00:b3:44:57:35:7e:29:1b:
         86:a3:9b:13:ec:5f:61:19:80:c4:4c:3d:c5:a2:1e:b5:6e:60:
         3d:e5:95:7a:ce:81:de:2d:cd:02:16:00:b4:5f:ec:d3:1a:31:
         34:52:94:b1:59:15:1e:56:ee:2c:ce:e6:d8:0e:c2:a9:5d:90:
         94:95:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org