Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/e408beaefee2a83806e657494c8134fad7233a24.roa
File:                     e408beaefee2a83806e657494c8134fad7233a24.roa (raw, json)
Hash identifier:          Mz7mlHCtXinDTWYtB0/utL4OsM+zfPVYorYpBNN5YBY=
Subject key identifier:   78:67:50:31:3D:80:8B:7C:DA:5E:89:7C:4E:2A:58:7A:56:EF:74:CB
Certificate issuer:       /CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
Certificate serial:       2B32DA
Authority key identifier: 2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/e408beaefee2a83806e657494c8134fad7233a24.roa
Signing time:             Thu 15 Feb 2024 21:18:42 +0000
ROA not before:           Thu 15 Feb 2024 21:18:29 +0000
ROA not after:            Thu 15 Feb 2029 21:18:29 +0000
asID:                     28000
IP address blocks:        190.112.52.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2831066 (0x2b32da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
        Validity
            Not Before: Feb 15 21:18:29 2024 GMT
            Not After : Feb 15 21:18:29 2029 GMT
        Subject: CN=e408beaefee2a83806e657494c8134fad7233a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:ad:50:e8:cc:2f:fa:c7:65:48:cb:b7:a3:
                    e7:58:76:62:a9:f5:be:ef:cb:8b:b4:07:6d:7b:20:
                    19:e4:14:08:1a:6c:70:a5:d6:d0:ee:76:0b:4b:0f:
                    06:8a:c1:9a:f8:de:31:b1:78:3e:8a:58:e9:43:04:
                    93:57:01:ad:0b:0b:66:26:db:95:1a:28:86:af:38:
                    fa:93:34:7a:2a:d1:8e:21:85:06:59:f3:a5:68:cb:
                    26:1b:92:ac:13:b4:47:b8:e6:f7:f9:1e:f0:56:dc:
                    c4:1f:6f:53:55:06:25:d1:3e:c3:2d:f3:5b:1b:4b:
                    5d:29:32:18:36:ef:41:bb:93:47:66:63:3b:91:c5:
                    0b:db:4c:4d:00:b3:4d:06:31:eb:c4:a3:08:8a:0b:
                    b9:25:67:58:ff:e0:97:66:35:ad:8a:37:11:05:5f:
                    cf:68:7a:52:9e:b5:28:23:ea:92:83:c0:48:57:70:
                    b3:72:a4:8f:c0:fc:c2:89:29:3d:62:56:ed:fc:30:
                    6d:49:4c:52:11:64:a9:fe:fe:ef:26:c3:14:49:7f:
                    3d:19:51:f8:60:8a:0d:93:63:3c:e6:bc:bd:b4:cc:
                    d9:c5:64:a4:db:44:e0:59:d6:66:61:0c:92:08:ef:
                    a3:8d:1d:0c:ff:08:18:1f:74:1c:fd:95:d7:51:85:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:67:50:31:3D:80:8B:7C:DA:5E:89:7C:4E:2A:58:7A:56:EF:74:CB
            X509v3 Authority Key Identifier:
                keyid:2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/e408beaefee2a83806e657494c8134fad7233a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:e5:48:4a:a8:54:00:05:ee:dc:48:89:65:42:25:7a:3e:0f:
         8e:9a:76:f0:c2:fc:d4:3a:c2:19:a9:2c:af:09:e7:24:07:1c:
         a0:fe:22:5f:77:6d:e0:35:80:c5:a9:ea:1b:db:18:e0:89:e7:
         56:21:c2:da:46:e6:61:fc:db:17:48:0b:89:af:e6:30:20:0b:
         9e:73:b6:8e:0e:ec:d2:31:4e:76:d7:6d:d5:85:b1:8a:da:9b:
         7a:36:0c:48:53:6c:30:06:38:68:e3:21:f6:2d:36:d5:7a:be:
         71:63:82:7e:b7:79:82:c1:25:9e:67:0a:4b:53:11:5f:53:91:
         69:01:e7:9c:54:c6:7e:35:9d:27:c5:f3:53:33:cc:39:1b:99:
         fa:6b:0d:c7:b1:c0:00:07:55:c3:6d:29:4b:bb:20:6b:24:f6:
         c4:5c:0e:09:e5:43:61:6f:7b:d8:8f:b4:04:74:18:77:08:c4:
         8a:31:11:ac:3a:da:29:e9:8f:a2:d8:3b:75:24:e5:a3:8e:29:
         99:05:79:96:ad:ac:af:12:b2:56:f8:85:5f:d7:d8:38:d5:fc:
         5a:dc:ca:c0:0b:97:68:b8:88:b8:0b:18:9c:97:7e:9b:87:b1:
         2d:0a:f5:1f:8b:26:52:c7:c7:39:84:d4:58:54:b9:6d:e8:21:
         60:94:a8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org