Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/5cbc18208640e54a86bdd3cf33698762c78ccb6f.roa
File:                     5cbc18208640e54a86bdd3cf33698762c78ccb6f.roa (raw, json)
Hash identifier:          pmdngJxaIDDdmQF4FO62JNp8Zh7QvYKpIXqqDHukYFE=
Subject key identifier:   AD:BD:E0:8D:5A:10:A6:EA:1C:E1:82:92:84:DE:0F:C8:2A:31:36:9C
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       22AAF8
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/5cbc18208640e54a86bdd3cf33698762c78ccb6f.roa
Signing time:             Thu 22 Jun 2023 18:16:30 +0000
ROA not before:           Wed 21 Jun 2023 18:16:00 +0000
ROA not after:            Sun 22 Jun 2025 18:16:00 +0000
asID:                     61452
IP address blocks:        190.210.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2271992 (0x22aaf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jun 21 18:16:00 2023 GMT
            Not After : Jun 22 18:16:00 2025 GMT
        Subject: CN=5cbc18208640e54a86bdd3cf33698762c78ccb6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:64:e1:3d:25:50:3e:77:f3:d8:14:4e:6d:66:
                    90:89:8a:65:cb:8c:b4:79:78:54:56:c3:cd:41:76:
                    44:a0:c8:ea:94:af:64:7f:61:31:61:84:81:8e:f9:
                    b7:9d:5d:4b:3b:e0:50:79:fe:01:cd:86:ee:54:26:
                    21:53:1e:d9:30:1b:36:14:46:40:bf:2a:0d:9f:06:
                    6a:12:cc:01:0d:47:d7:f1:31:0b:60:9a:5a:69:0b:
                    b9:3d:29:23:35:da:d6:43:28:c2:d2:f5:0f:c9:24:
                    3d:a4:99:be:a3:0f:c6:3d:d2:ae:8a:8e:c4:ca:ff:
                    5a:fc:8d:01:e4:38:bd:3f:aa:61:0b:1e:64:c4:ee:
                    aa:5c:d5:44:12:de:64:62:e0:24:a6:38:4e:8e:01:
                    18:ad:d1:2d:4b:ac:c1:40:fc:31:c5:c9:5d:69:2a:
                    29:cd:45:a8:d2:46:0d:2e:81:a5:9f:bc:50:1a:4a:
                    1c:2f:c7:9e:df:fe:a1:a8:10:04:62:b1:90:2b:80:
                    fb:3b:40:9c:37:d9:1c:92:87:ab:94:79:a3:b7:4d:
                    f5:95:b7:b0:75:15:ed:56:91:d1:68:25:f3:72:b4:
                    fd:da:72:37:7e:29:91:fe:73:c9:28:4f:ed:f3:39:
                    7e:04:14:a6:dd:01:7a:04:84:2d:c5:15:a4:86:b2:
                    c5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BD:E0:8D:5A:10:A6:EA:1C:E1:82:92:84:DE:0F:C8:2A:31:36:9C
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/5cbc18208640e54a86bdd3cf33698762c78ccb6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d3:e4:e2:e0:b0:1a:9a:0b:8d:c8:bf:97:a2:47:15:80:4b:
         71:fe:e6:04:7e:2d:11:c2:cd:7d:aa:37:26:14:a9:24:7a:a4:
         c4:a6:aa:91:37:d9:2c:8c:28:84:1d:92:11:55:92:e6:25:7b:
         bd:85:f2:1d:02:ac:03:25:0e:90:74:c3:6e:9e:fe:c5:66:20:
         2c:4a:54:0a:11:f0:57:82:a6:14:7c:b2:6b:d0:e5:c9:cd:cb:
         c5:da:11:57:21:b8:c9:44:fa:75:4c:9f:62:68:53:e0:9d:27:
         de:81:f6:99:86:b7:07:3b:d0:50:d0:1f:c4:ae:58:d2:ae:f0:
         69:44:d0:7f:05:c2:ac:a2:81:96:09:08:74:bb:85:03:28:f8:
         5a:68:59:88:19:f1:31:35:17:e0:10:3e:6a:a1:e3:84:59:3c:
         3c:e8:c1:60:6d:c1:f3:b5:b4:d9:de:23:04:c8:e7:55:e9:de:
         81:d2:fb:03:f9:60:09:ad:ad:e5:e6:1e:52:18:6c:9d:61:62:
         45:d9:e7:c3:27:79:3f:e9:a3:e1:b3:d9:2c:db:35:ea:07:d7:
         e3:3f:8c:09:69:22:ea:2a:c4:3f:29:f0:65:f7:88:2d:fd:43:
         6d:79:99:1e:ad:cf:66:3f:49:84:49:e9:53:8a:70:8b:3c:2e:
         d0:e2:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org