Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b3d1bda27896ce2abf1805ba04da33e9ef59c673.roa
File:                     b3d1bda27896ce2abf1805ba04da33e9ef59c673.roa (raw, json)
Hash identifier:          +U3MhKSkwkiHVI08QtCi8sM+Ci7HN+Jhr6NVCYS/B2c=
Subject key identifier:   EA:62:FA:4D:B4:B1:57:FA:14:1F:56:CB:B3:2B:90:9B:37:3A:92:F8
Certificate issuer:       /CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
Certificate serial:       2B4500
Authority key identifier: 2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b3d1bda27896ce2abf1805ba04da33e9ef59c673.roa
Signing time:             Thu 15 Feb 2024 21:18:49 +0000
ROA not before:           Thu 15 Feb 2024 21:18:29 +0000
ROA not after:            Thu 15 Feb 2029 21:18:29 +0000
asID:                     28002
IP address blocks:        190.112.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2835712 (0x2b4500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
        Validity
            Not Before: Feb 15 21:18:29 2024 GMT
            Not After : Feb 15 21:18:29 2029 GMT
        Subject: CN=b3d1bda27896ce2abf1805ba04da33e9ef59c673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:fa:5b:e0:de:5a:7c:16:c1:21:f5:2d:88:
                    84:7d:0f:41:2c:44:22:c2:92:c2:32:df:21:81:54:
                    b8:ed:39:e2:f8:55:fe:c5:71:fa:f6:b2:6a:d9:2b:
                    ab:9b:ef:9f:23:ba:45:71:e5:9a:2e:07:51:ae:70:
                    25:5d:e7:f5:5d:6f:1c:de:84:b1:54:0a:0a:84:32:
                    dc:a2:04:20:4d:24:cc:64:94:d2:86:72:14:f5:91:
                    ea:b9:3c:b9:b0:97:6c:bb:7d:9f:7f:a5:e0:ef:76:
                    a0:df:ee:33:05:2f:fb:fd:56:3d:a7:f1:b5:dc:6b:
                    a6:c3:c4:8f:4f:36:c0:41:3e:c1:73:7a:19:17:ce:
                    12:d3:98:3d:c4:af:60:e2:17:c9:29:25:b8:02:48:
                    06:6e:91:3b:f5:d8:25:03:f4:6c:db:23:7c:46:e5:
                    38:2c:25:b9:ae:e7:f5:52:7c:c4:7c:61:1d:9a:3f:
                    a8:a5:31:d2:cc:54:80:bd:a2:32:8d:08:9d:15:9e:
                    f1:d1:22:6d:ba:ae:28:59:5b:bd:f6:bf:08:15:84:
                    08:2c:f2:71:60:94:be:fa:80:19:49:d7:63:89:bb:
                    b9:38:14:68:47:af:0e:5b:8e:76:44:a4:fa:e2:fd:
                    0d:02:96:f4:0e:1c:10:51:d4:03:90:4d:06:db:f8:
                    3e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:62:FA:4D:B4:B1:57:FA:14:1F:56:CB:B3:2B:90:9B:37:3A:92:F8
            X509v3 Authority Key Identifier:
                keyid:2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/b3d1bda27896ce2abf1805ba04da33e9ef59c673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:86:82:3c:a2:63:2b:13:83:a0:4a:e0:82:97:23:f3:df:ed:
         b8:5d:93:ed:cb:f2:11:c4:27:19:7a:4c:53:4f:65:94:8e:70:
         39:d9:a4:38:f0:f0:ea:c8:58:90:bc:b4:73:62:dc:38:0c:94:
         53:f9:0e:0b:e8:59:66:69:62:08:de:62:6f:63:4a:fe:9b:09:
         d3:cb:55:e1:76:54:4b:01:12:c5:45:da:22:c9:4e:65:09:c8:
         98:fa:d7:7b:d4:67:8d:20:69:b7:95:59:df:38:43:7d:4b:8a:
         e0:58:cd:4b:c4:f6:cf:41:cf:b3:9d:e0:7e:47:71:25:08:42:
         22:6b:e7:f3:85:85:21:10:f9:e9:1b:2d:7b:c6:74:fa:cb:bb:
         1c:25:1b:b9:8e:38:a1:ea:59:fc:f9:76:4d:c5:e6:19:ac:25:
         0d:f6:cd:4e:f7:4d:3f:07:40:01:64:ae:4e:9b:f3:f7:e8:96:
         7d:40:c4:c3:7a:21:21:24:13:1c:73:cc:3f:94:8f:f3:f0:49:
         63:c1:9c:ed:6f:29:d6:09:0c:7c:57:9a:38:88:e4:8d:e2:72:
         09:5c:ac:47:8d:23:da:d8:2c:8c:55:d6:50:9d:5a:2d:f9:b6:
         0b:8a:81:09:f2:91:b0:26:80:d5:b6:38:1b:c4:b8:3b:f3:44:
         b9:cd:0f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org