Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0697c4ffa480712dd89c6f27722285c2cf9f1024.roa
File:                     0697c4ffa480712dd89c6f27722285c2cf9f1024.roa (raw, json)
Hash identifier:          JIXb6OiBdnvHjU+RiunChL4XBEb9jUSOGFNWY5+POrA=
Subject key identifier:   14:DC:DD:10:FF:E3:D9:D9:04:4F:2B:6B:9D:4F:B9:29:E1:F1:24:18
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       0470AD
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0697c4ffa480712dd89c6f27722285c2cf9f1024.roa
Signing time:             Tue 18 Jul 2023 18:43:37 +0000
ROA not before:           Mon 17 Jul 2023 18:43:37 +0000
ROA not after:            Fri 18 Jul 2025 18:43:37 +0000
asID:                     7418
IP address blocks:        190.22.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290989 (0x470ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 17 18:43:37 2023 GMT
            Not After : Jul 18 18:43:37 2025 GMT
        Subject: CN=0697c4ffa480712dd89c6f27722285c2cf9f1024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:59:b6:e0:c4:39:6d:7b:36:50:85:55:a0:
                    bd:26:2b:71:9b:46:d0:7f:eb:21:f8:fc:13:67:b9:
                    a6:35:37:dd:34:17:9c:e6:f8:fd:e6:9c:79:75:98:
                    60:93:4b:b3:24:56:1b:53:05:90:b2:12:8d:d2:4a:
                    c2:d6:7c:72:94:22:a7:9e:72:6a:7c:de:c0:a9:64:
                    b1:e6:f8:20:99:01:24:d3:e5:c7:f9:40:6b:39:10:
                    74:c8:22:30:52:ef:17:d0:95:b8:5c:63:67:65:bd:
                    93:2b:2f:47:47:b2:b7:95:5a:6b:ee:1f:3f:84:95:
                    33:19:96:e3:d8:21:92:5a:9e:75:ec:de:05:8b:85:
                    32:0b:e4:b0:ab:91:c0:58:4f:55:f4:01:d6:34:81:
                    db:26:f9:c6:0c:de:c5:59:35:df:4f:1e:f5:3e:dc:
                    0c:c5:68:ab:e3:1a:4e:5d:45:2e:7f:ad:27:f4:f9:
                    7d:c9:4f:73:5f:6c:ca:1d:d7:9f:a0:ae:17:51:b1:
                    2f:3d:66:a3:61:db:79:23:f4:39:3e:e7:e8:29:48:
                    17:21:96:ce:cf:20:45:9e:85:40:66:e5:54:be:43:
                    da:f5:a8:23:a5:cc:f4:5a:8e:dd:c0:72:b5:c9:02:
                    80:be:08:20:11:4d:79:6d:e2:0b:b0:a8:48:a4:b2:
                    3a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DC:DD:10:FF:E3:D9:D9:04:4F:2B:6B:9D:4F:B9:29:E1:F1:24:18
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/0697c4ffa480712dd89c6f27722285c2cf9f1024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.22.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         30:2e:f7:fb:fe:b5:29:35:29:de:1a:1d:77:95:7c:53:9f:88:
         5d:e9:6b:5c:58:c1:cc:2f:48:1d:4d:1e:06:a5:65:ea:02:ac:
         98:c4:a6:a7:ce:16:80:96:c9:8e:a1:f6:0e:0a:c8:a8:c8:2c:
         18:01:53:9a:7c:e2:02:e4:df:f8:c1:bf:16:2e:56:d4:5a:a4:
         fc:c7:31:a6:a2:2e:4e:a8:3e:1d:6b:04:4c:db:6e:12:89:97:
         65:21:4c:da:44:7b:97:f7:e8:a4:0d:16:18:67:48:ee:88:07:
         1d:26:55:45:30:e8:eb:85:e6:94:77:38:8a:e3:a7:b2:0a:5e:
         3d:15:91:96:dc:ab:df:d9:e1:3f:3b:c0:4b:09:5c:1c:03:e8:
         29:15:7f:02:82:fc:ad:d4:72:07:2b:82:13:ea:cd:0c:2a:c5:
         73:1e:c5:3a:61:f7:63:15:de:7b:98:64:58:1c:9d:f7:a3:7f:
         f2:f1:e9:fb:77:19:fa:a0:67:c7:43:2e:12:72:bf:4c:67:0b:
         bd:b1:c0:70:e8:18:7a:ed:8b:6f:b4:18:78:0b:46:9c:05:3f:
         36:e9:cd:c2:88:cf:4a:5e:4b:fc:6e:30:30:c7:54:8a:ff:31:
         2b:71:dc:0f:ee:cd:b3:5a:42:08:6a:70:64:2d:33:fc:ae:20:
         aa:31:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org