Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/44994cb7bcb324320547587508de3c5e6d9b2283.roa
File:                     44994cb7bcb324320547587508de3c5e6d9b2283.roa (raw, json)
Hash identifier:          Nx1jh2jLDduwzVGlZ8IQ7niYEOqTUnE9lPW0bldOT3I=
Subject key identifier:   AC:38:21:30:2D:9B:C6:4E:9A:FF:20:B7:02:6B:B0:59:25:14:39:A7
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       0DF80B
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/44994cb7bcb324320547587508de3c5e6d9b2283.roa
Signing time:             Wed 24 Mar 2021 14:47:14 +0000
ROA not before:           Wed 24 Mar 2021 14:47:14 +0000
ROA not after:            Tue 24 Mar 2026 14:47:14 +0000
asID:                     28002
IP address blocks:        190.112.52.0/22 maxlen: 22
                          200.0.86.0/23 maxlen: 23
                          2001:13c7:7003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915467 (0xdf80b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 14:47:14 2021 GMT
            Not After : Mar 24 14:47:14 2026 GMT
        Subject: CN=44994cb7bcb324320547587508de3c5e6d9b2283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:87:da:2a:6c:80:df:70:ba:79:fe:9c:20:46:
                    18:d9:a9:9c:e7:d9:99:ba:0e:19:fd:c8:de:4e:c2:
                    67:91:b7:d7:aa:0c:df:9a:28:01:4b:5f:b0:ee:40:
                    18:42:36:87:c0:ff:2d:c8:f0:6c:0e:5f:ee:29:69:
                    cb:80:51:ce:64:6f:12:b3:9b:14:2c:9b:eb:ca:e3:
                    fb:9d:a5:e5:98:c5:18:9c:d6:77:3d:89:70:13:f8:
                    82:4a:9c:9a:7c:10:ee:cf:56:5d:c9:1e:fa:a5:9e:
                    22:65:89:b6:50:25:48:cd:00:02:a5:25:ac:8a:b1:
                    b7:06:ea:46:02:a7:a9:bd:5a:32:34:b2:16:31:c6:
                    2b:42:bb:c4:29:71:6e:9e:bd:18:d7:ee:0b:13:3d:
                    ab:5e:d1:2f:0d:33:85:ec:bb:11:34:bb:ae:e3:dd:
                    02:5d:ce:db:37:d1:22:74:9b:60:03:46:cf:cb:32:
                    4e:57:be:cc:ae:74:24:58:5d:db:7e:34:46:d5:21:
                    97:d4:24:93:60:3d:2f:5a:aa:bc:24:78:c1:6d:86:
                    d9:6e:12:2f:d1:8d:d0:c6:f6:56:7d:6d:eb:51:07:
                    58:a9:a2:8a:3a:88:48:ba:9a:f7:75:50:45:b2:8b:
                    c8:3f:7b:05:f5:8b:54:1c:83:5b:9f:44:97:c0:4f:
                    4e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:38:21:30:2D:9B:C6:4E:9A:FF:20:B7:02:6B:B0:59:25:14:39:A7
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/44994cb7bcb324320547587508de3c5e6d9b2283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22
                  200.0.86.0/23
                IPv6:
                  2001:13c7:7003::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:c7:11:4c:1a:0d:f5:fa:4e:68:12:de:57:99:89:8c:1c:12:
         dd:9a:73:d1:1e:59:c2:08:9e:ed:bd:c2:18:2b:90:bd:62:7e:
         2b:11:12:c7:57:43:d4:a3:f7:16:a5:d4:33:77:ef:de:4d:6b:
         20:d6:10:d1:62:ba:86:39:dd:05:5d:d8:5c:49:98:4a:25:95:
         fd:74:67:b0:2d:c2:05:33:6c:75:e8:17:8b:60:bd:0d:ed:dc:
         f9:72:1f:d0:1d:04:eb:da:4d:b4:dc:31:da:77:6b:c2:b6:eb:
         5d:aa:bd:c6:aa:ff:53:df:e8:87:fe:67:d8:4c:79:a2:be:09:
         2e:f4:df:12:9b:88:26:c4:63:96:de:df:56:5f:fa:cc:b1:b1:
         2a:05:67:94:eb:cf:3d:c9:29:2f:02:d7:a1:d8:69:d4:0e:0f:
         fc:a9:f9:ea:45:d0:a6:55:1d:db:c3:05:2c:9d:48:a9:e6:ca:
         a1:a2:57:16:58:a7:10:cb:6c:d5:0b:fb:35:37:30:c6:a1:4b:
         7a:78:3f:39:73:b0:1b:fd:11:a6:e4:7e:4e:ed:48:7e:68:8f:
         7b:f2:fa:b2:f0:c0:d6:23:41:2a:26:cb:c3:01:cd:ef:e7:10:
         49:6c:b6:0b:80:d7:25:27:c2:2b:4e:31:27:b6:92:7c:13:81:
         30:5c:fe:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org