Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/867574aac7453aa481f377006ffa93b1441ecc4a.roa
File:                     867574aac7453aa481f377006ffa93b1441ecc4a.roa (raw, json)
Hash identifier:          ZTDYn+HNM0Lt8Q2jGHmxFrSo/PQYweIqO1dx60yBbzI=
Subject key identifier:   01:3F:42:AF:F7:72:ED:9D:B0:BA:E3:B7:BE:CD:26:AB:1E:A5:CB:F9
Certificate issuer:       /CN=425b31fb70180b4aa636c240ebd5276c722716f7
Certificate serial:       1A3A5D
Authority key identifier: D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/867574aac7453aa481f377006ffa93b1441ecc4a.roa
Signing time:             Wed 10 Aug 2022 19:44:52 +0000
ROA not before:           Fri 09 Apr 2021 03:00:00 +0000
ROA not after:            Sun 09 Apr 2023 03:00:00 +0000
asID:                     262589
IP address blocks:        190.94.177.0/24 maxlen: 24
                          190.94.178.0/24 maxlen: 24
                          190.94.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1718877 (0x1a3a5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425b31fb70180b4aa636c240ebd5276c722716f7
        Validity
            Not Before: Apr  9 03:00:00 2021 GMT
            Not After : Apr  9 03:00:00 2023 GMT
        Subject: CN=867574aac7453aa481f377006ffa93b1441ecc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:1e:9f:a7:ee:4f:ee:42:5c:29:7d:b0:f3:
                    6e:fd:36:ef:a0:52:99:1a:c9:61:29:2c:d2:32:7e:
                    06:61:38:db:a9:27:7f:d0:0e:7a:5b:b7:62:09:59:
                    b2:f8:ad:6f:80:09:a9:6b:76:67:ac:7a:a5:a5:67:
                    17:11:5f:03:9c:0d:e9:4a:73:f0:07:53:ea:ac:5d:
                    15:7e:9e:2b:be:c4:ca:79:52:98:1e:d3:3d:63:c8:
                    a3:65:68:a1:2d:ee:85:de:29:6b:11:32:dc:5a:69:
                    eb:df:ba:94:d8:1e:8f:f1:5f:fb:95:d5:0a:13:1c:
                    0d:33:33:23:19:e0:d8:9c:2c:f1:f6:fb:e6:fa:c8:
                    3b:d3:a8:2e:f6:c2:6a:9c:2e:c3:92:0e:14:3d:7d:
                    c1:73:78:d7:ed:3b:fa:c0:5a:0d:fc:77:bf:3b:38:
                    b7:10:fb:06:3d:f8:01:cf:bc:42:1f:3e:8b:41:3b:
                    d2:1e:f0:5f:b9:9d:77:35:f6:b7:4d:a2:78:d3:2f:
                    2c:f4:74:2d:b2:80:ec:2e:0a:52:3b:69:46:bc:42:
                    f7:df:b7:a9:13:3d:c8:3e:10:26:ed:e6:a7:e2:8e:
                    86:9a:aa:cd:10:1e:9b:f2:95:19:00:fb:9c:ce:57:
                    5c:b9:63:6c:77:24:f5:95:4d:98:61:8c:2b:5e:21:
                    ff:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3F:42:AF:F7:72:ED:9D:B0:BA:E3:B7:BE:CD:26:AB:1E:A5:CB:F9
            X509v3 Authority Key Identifier:
                keyid:D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/867574aac7453aa481f377006ffa93b1441ecc4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/425b31fb70180b4aa636c240ebd5276c722716f7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.177.0-190.94.178.255
                  190.94.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:b8:f7:5c:25:43:65:81:ba:6c:c1:2b:01:06:a9:41:b6:f4:
         41:f8:51:8e:cf:46:06:d5:7d:8b:63:4d:3d:1e:fd:05:53:7a:
         cf:3d:0d:62:70:95:8a:55:14:cb:16:3c:87:c2:65:b4:ab:71:
         de:ef:9e:c7:fb:58:73:82:bd:5f:11:e7:c8:1e:30:44:34:82:
         c5:da:4e:b7:e0:78:03:73:9d:1b:aa:0a:e9:89:28:3e:cf:97:
         6f:5b:55:17:90:25:62:59:1f:67:4a:2c:a0:07:1f:2e:61:f6:
         a2:36:87:b1:9f:c4:fa:e7:2d:7c:49:7c:32:7a:0d:ad:2a:26:
         10:9c:20:56:5d:92:92:30:85:a1:89:b2:2a:e3:d9:1d:af:05:
         03:3d:3e:80:a5:eb:9c:71:97:ff:e9:6c:39:81:17:3a:03:7b:
         09:1f:16:68:ce:80:ad:9d:8d:3c:ef:49:5d:73:40:83:4b:c8:
         7c:44:f0:56:20:74:8f:5a:68:46:84:bc:11:d6:39:af:72:fb:
         85:e5:20:d3:65:9a:f2:74:ca:94:8e:ec:fb:c6:f1:7e:34:de:
         e2:d0:a2:a3:88:8e:48:cf:c0:26:53:6d:cc:fb:d1:2d:d0:5a:
         b0:7a:c9:1c:3e:5a:e9:ba:8f:19:19:f6:4b:79:ca:1e:86:53:
         51:54:6d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org