Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/72d2963f277c318d7111c062fdde708ae6a7de78.roa
File:                     72d2963f277c318d7111c062fdde708ae6a7de78.roa (raw, json)
Hash identifier:          3yucSUTQlmIVTnl+1ZFnOhmjhTcKkt+qiMPDbbyLg8Y=
Subject key identifier:   5C:E4:42:C9:4D:68:6A:A0:22:E2:21:A2:31:D9:84:92:B1:29:73:A8
Certificate issuer:       /CN=425b31fb70180b4aa636c240ebd5276c722716f7
Certificate serial:       206C1B
Authority key identifier: D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/72d2963f277c318d7111c062fdde708ae6a7de78.roa
Signing time:             Sat 08 Apr 2023 08:30:00 +0000
ROA not before:           Fri 07 Apr 2023 08:30:00 +0000
ROA not after:            Sun 06 Apr 2025 08:30:00 +0000
asID:                     263699
IP address blocks:        190.94.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124827 (0x206c1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425b31fb70180b4aa636c240ebd5276c722716f7
        Validity
            Not Before: Apr  7 08:30:00 2023 GMT
            Not After : Apr  6 08:30:00 2025 GMT
        Subject: CN=72d2963f277c318d7111c062fdde708ae6a7de78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:f6:d3:40:01:30:fd:b5:7c:1e:0e:0b:74:
                    9a:75:cc:e6:e1:2b:1e:5c:e0:dc:98:a8:08:75:90:
                    61:fa:30:37:84:77:f7:69:ed:8a:98:59:a6:c7:da:
                    fd:00:b0:b3:ba:ce:f7:dd:39:4b:56:74:1d:af:5c:
                    cb:b5:e4:b9:00:f8:68:97:4d:81:a4:ea:c3:8f:b1:
                    6e:bb:34:27:47:87:18:d2:d7:d3:53:44:8b:01:e1:
                    84:7f:a8:88:45:a2:b9:6e:6b:d9:1a:0b:d2:76:c0:
                    2d:a0:08:a8:38:a0:a1:ae:55:64:0f:41:51:fc:a0:
                    a0:c2:16:60:53:bb:96:0c:fa:a9:1f:84:6d:d0:c5:
                    5d:d1:7c:27:d7:d4:66:c3:32:d6:ad:d8:6f:e8:7b:
                    7c:0d:f5:1a:b8:cf:b7:58:06:a8:00:15:00:bf:80:
                    ac:77:94:ac:06:f1:62:3c:1a:ed:85:b7:7b:d8:7d:
                    a4:2d:f9:8c:c3:a5:6b:02:e4:12:34:2d:cd:40:b0:
                    89:67:39:51:14:27:11:2a:62:b3:c5:f7:4a:a9:4e:
                    0c:95:b3:7e:f9:09:7c:cf:89:b7:3c:b3:aa:90:5a:
                    d4:d6:78:17:7a:75:71:d4:3a:82:50:4f:cb:40:69:
                    99:79:21:a7:4e:d0:ed:61:3f:e5:a0:bc:b7:5c:97:
                    b9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E4:42:C9:4D:68:6A:A0:22:E2:21:A2:31:D9:84:92:B1:29:73:A8
            X509v3 Authority Key Identifier:
                keyid:D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/72d2963f277c318d7111c062fdde708ae6a7de78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/425b31fb70180b4aa636c240ebd5276c722716f7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:db:35:c5:77:61:3f:7a:39:29:28:70:5d:27:c8:c9:77:19:
         4f:11:6e:8d:bb:ab:64:28:c9:db:67:f6:3f:af:41:4f:8f:b9:
         16:96:6b:59:5b:d2:c8:54:a5:0d:21:30:fa:20:87:b5:de:7a:
         cf:25:64:9c:8c:8b:f0:85:4a:63:52:e5:90:6a:68:bc:05:56:
         60:37:64:46:ac:14:af:e2:fb:81:74:ee:6c:26:2d:d0:50:20:
         07:a9:c5:c9:c2:1d:6a:e5:27:03:6f:73:1d:3d:95:f4:83:04:
         28:82:6e:74:9d:4a:96:cf:70:f1:85:fc:78:d0:a1:4c:2c:93:
         fc:82:c6:c1:74:dc:7b:c8:91:d7:1c:56:c0:c1:2a:7a:e3:ef:
         e6:6e:69:79:72:35:5d:2d:f0:c6:9e:37:cf:3c:c7:10:32:bb:
         e9:61:23:70:f4:3a:8b:d5:db:c2:48:80:f0:d9:23:2b:ee:42:
         ba:ba:18:62:9c:2f:84:de:f5:4b:e9:fe:0f:a3:c6:85:df:79:
         b0:0f:cc:42:8b:4b:c0:cb:9a:f1:66:06:51:64:21:f7:e5:00:
         f2:af:67:f9:4e:c0:d7:5b:0c:67:82:57:18:97:0d:84:af:63:
         46:48:af:88:75:a8:61:e5:20:5c:83:01:23:16:da:59:ad:05:
         69:e4:54:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org