Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/3e831b93e295e703b67c6ce0a9c8539f8e78697d.roa
File:                     3e831b93e295e703b67c6ce0a9c8539f8e78697d.roa (raw, json)
Hash identifier:          01XNvRbr5RDzvI4mOSg0W2eWxyCQN9ZSpRYNPG8AAt8=
Subject key identifier:   D5:58:DB:50:37:42:38:2B:CF:8F:76:78:6B:4D:E9:10:13:F2:3B:17
Certificate issuer:       /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial:       2A348F
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/3e831b93e295e703b67c6ce0a9c8539f8e78697d.roa
Signing time:             Thu 18 Jan 2024 14:39:32 +0000
ROA not before:           Thu 18 Jan 2024 14:39:31 +0000
ROA not after:            Thu 18 Jan 2029 14:39:31 +0000
asID:                     264845
IP address blocks:        190.112.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2765967 (0x2a348f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
        Validity
            Not Before: Jan 18 14:39:31 2024 GMT
            Not After : Jan 18 14:39:31 2029 GMT
        Subject: CN=3e831b93e295e703b67c6ce0a9c8539f8e78697d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fe:c6:d1:32:f9:4b:99:66:4b:be:a8:05:9c:
                    33:56:02:1e:19:56:cd:e7:23:cb:04:43:e0:68:39:
                    c8:1e:8a:e3:58:4f:3a:1f:38:c3:f6:8b:05:20:20:
                    34:48:c0:f7:28:07:d9:b7:23:73:e4:b5:29:b7:91:
                    b5:50:12:d3:8f:38:8c:af:6a:99:58:00:9d:7c:c5:
                    5a:ba:85:95:04:6d:77:8f:d8:6c:64:63:f9:06:5c:
                    f4:76:cf:a0:54:09:36:ae:a2:0a:7e:23:b9:de:25:
                    c6:c2:d8:63:c4:42:81:36:3f:c1:e2:f0:b1:3e:f1:
                    48:23:c0:84:58:c2:28:5b:89:2f:ad:2c:fe:a6:cd:
                    ca:f2:a9:36:47:aa:40:44:ed:a5:fc:99:e9:17:d2:
                    bb:85:52:30:b3:ab:0b:f9:a0:7d:ea:fd:4e:bd:ad:
                    ec:f6:9d:5c:bd:99:05:3e:bc:ff:5d:b9:73:67:41:
                    13:ca:b4:93:42:d6:1d:19:da:b5:8c:86:f3:e1:db:
                    9c:1e:40:c2:31:bf:4b:15:35:fc:b0:b8:63:6a:c8:
                    08:8c:8d:26:4d:20:4d:28:f7:ba:bf:e6:94:f9:c2:
                    01:04:5e:f1:0f:42:2e:60:90:65:39:02:b4:76:9d:
                    b8:dd:d3:78:f0:78:46:b9:ca:55:5a:b0:60:76:7d:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:58:DB:50:37:42:38:2B:CF:8F:76:78:6B:4D:E9:10:13:F2:3B:17
            X509v3 Authority Key Identifier:
                keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/3e831b93e295e703b67c6ce0a9c8539f8e78697d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:d9:78:9c:ea:e6:96:4c:ff:dd:f5:59:71:e7:56:ef:2f:dc:
         a5:29:32:77:63:d2:36:b5:85:4e:de:ce:6c:bf:da:ac:73:f6:
         16:a9:67:d4:54:8d:83:66:c4:74:b9:cf:37:3e:8f:1d:e1:49:
         02:9a:b5:5c:d4:b3:61:4d:76:df:63:02:ec:f7:07:35:ae:e4:
         33:3a:5c:61:69:f5:dc:c4:a4:6d:e8:90:3f:6d:87:e1:5c:af:
         72:30:f0:16:51:f2:6f:f0:87:43:94:cc:28:3c:b4:1e:f0:5f:
         17:79:34:f1:f1:9a:29:f6:b6:0e:91:66:de:51:b2:91:8d:32:
         71:70:eb:d4:4a:29:a8:0c:ec:3f:55:8a:b9:a9:c1:21:7c:ad:
         96:03:54:14:46:2c:9b:b9:78:38:0f:af:8e:5b:1b:a8:88:2e:
         4a:ca:63:cc:e9:20:9e:06:3c:28:b2:6f:0d:92:53:c8:4f:ea:
         70:90:2d:66:80:fd:90:32:78:8a:79:3a:f7:9d:d0:e4:bb:ec:
         fb:19:2b:b0:b8:84:b1:3b:40:ea:99:cd:ea:da:23:f8:88:0a:
         f4:a9:67:33:41:76:f3:36:a8:89:88:2a:79:bb:c6:0e:c9:f3:
         a1:75:74:63:c5:c1:ab:4d:a0:ec:32:92:7f:ed:60:b6:59:87:
         01:2e:67:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 02:55:53 2024 by rpki-client on console-fra.rpki-client.org