Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/b63e230f7ab3c5a82cdb1a88d436ce92802859a3.roa
File:                     b63e230f7ab3c5a82cdb1a88d436ce92802859a3.roa (raw, json)
Hash identifier:          vrOmP1woYPJowasvdZLoVRJVIxLaX8XvtrRk5pxzAgY=
Subject key identifier:   80:50:8D:12:E6:B3:7E:2A:F8:C4:59:7E:6B:8C:42:02:2E:FA:8A:BB
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       19F1C7
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/b63e230f7ab3c5a82cdb1a88d436ce92802859a3.roa
Signing time:             Tue 19 Jul 2022 13:53:20 +0000
ROA not before:           Tue 19 Jul 2022 13:53:19 +0000
ROA not after:            Mon 19 Jul 2027 13:53:19 +0000
asID:                     262264
IP address blocks:        190.210.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1700295 (0x19f1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jul 19 13:53:19 2022 GMT
            Not After : Jul 19 13:53:19 2027 GMT
        Subject: CN=b63e230f7ab3c5a82cdb1a88d436ce92802859a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:22:e3:38:5d:ca:a5:10:37:30:28:eb:ce:5e:
                    0d:3a:c2:54:25:87:8a:45:95:c5:f7:24:2d:bb:b8:
                    69:3d:5b:e9:5b:51:1f:83:1e:e2:23:bf:a6:bc:ab:
                    4f:c1:fc:90:7c:ac:14:04:8f:c5:7e:b3:7d:27:e1:
                    e6:c2:3c:ef:dc:0c:3b:ce:8d:76:32:41:75:26:1b:
                    ab:60:4c:4b:46:4c:b8:1e:d2:5b:d5:23:62:9f:05:
                    ac:43:55:a5:6d:0a:1e:e8:5a:cd:a8:e9:d1:71:47:
                    f4:db:31:ae:17:40:24:ff:e6:02:ae:cf:19:a3:48:
                    be:b3:25:87:30:8d:00:5d:84:10:02:f7:79:30:a1:
                    86:cc:13:61:31:10:cd:0c:21:8a:5c:60:e8:93:84:
                    99:b4:a4:85:3e:39:96:08:37:a0:5d:40:16:55:87:
                    42:d9:dc:99:c0:7f:4b:46:1f:ef:6c:ee:40:39:93:
                    08:df:b7:46:b9:a7:78:82:c4:88:64:04:3e:94:d5:
                    cd:2c:d7:66:11:c6:db:1f:95:6e:d9:cf:b7:6d:ec:
                    58:77:68:61:f1:65:19:36:1e:85:2d:18:86:33:04:
                    97:fb:7e:50:9e:42:a2:f9:90:85:ec:bf:df:52:55:
                    eb:32:7c:c8:6c:32:22:5f:92:b3:a6:23:75:a4:6f:
                    49:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:50:8D:12:E6:B3:7E:2A:F8:C4:59:7E:6B:8C:42:02:2E:FA:8A:BB
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/b63e230f7ab3c5a82cdb1a88d436ce92802859a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:12:ba:fb:ca:e4:36:b6:6e:eb:12:a8:95:7b:91:73:a2:bb:
         2d:a6:db:72:a6:43:86:35:17:8e:29:5b:40:bc:65:90:62:5a:
         f7:03:ca:3f:27:c8:ff:01:16:2d:7d:4d:8d:0c:2b:9d:61:f9:
         bf:69:45:b8:c6:dc:59:94:43:22:47:f4:a9:bd:0d:d3:5e:5f:
         28:b5:67:78:b9:b9:c4:bb:10:83:f6:ec:83:6b:9f:3d:66:03:
         43:5e:70:ee:34:fe:01:0e:a3:39:9d:6c:71:08:10:ef:0d:d1:
         c2:29:fe:68:ff:e1:f1:41:43:80:fa:ab:3a:51:3e:ff:c6:87:
         15:46:27:fc:0a:bf:8f:b5:f5:2b:25:70:6b:b4:65:ee:bc:06:
         d1:52:8d:e6:22:a2:bc:84:b5:f6:b6:53:59:73:0b:16:9c:eb:
         2f:84:bb:ba:49:cf:22:99:bf:38:9f:7b:14:62:d2:71:e6:b3:
         9f:5b:a1:35:70:2d:5d:8b:ee:63:60:56:a0:7c:b8:6c:bf:c3:
         7d:f2:0f:db:4e:ca:75:bd:b6:5a:2e:47:fa:08:9c:49:9b:1f:
         6f:cc:10:ec:5c:7f:a1:bf:30:b1:dd:49:98:29:dc:b2:bf:06:
         9b:cc:cb:df:78:c9:4e:af:59:b5:a2:4b:de:9c:6d:da:8a:3f:
         01:f9:3d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org