Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/e230338a07b838f4c568401ca9aa506558d76f03.roa
File:                     e230338a07b838f4c568401ca9aa506558d76f03.roa (raw, json)
Hash identifier:          Y/lk2/KSDoDkMzHu2kYSxH4lpX9BRbMtEUdoE2kwRgY=
Subject key identifier:   62:93:A8:B4:9B:8D:F4:46:A3:34:A1:91:25:95:29:15:DB:10:A9:B7
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       039596
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/e230338a07b838f4c568401ca9aa506558d76f03.roa
Signing time:             Tue 11 Jul 2023 13:02:40 +0000
ROA not before:           Mon 10 Jul 2023 13:02:40 +0000
ROA not after:            Fri 11 Jul 2025 13:02:40 +0000
asID:                     7418
IP address blocks:        190.21.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234902 (0x39596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 13:02:40 2023 GMT
            Not After : Jul 11 13:02:40 2025 GMT
        Subject: CN=e230338a07b838f4c568401ca9aa506558d76f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dd:2c:f2:e4:7a:58:29:40:68:f5:3b:db:c5:
                    fa:f9:5b:01:1a:16:7b:49:0e:67:72:66:08:0f:b9:
                    5a:d4:1f:29:df:5c:be:04:57:69:be:c2:1b:65:5b:
                    07:1f:99:a1:87:4c:da:d1:4b:07:6d:2b:20:3d:ab:
                    bf:5d:0e:cc:85:e1:9e:de:a1:8f:ce:31:8f:19:00:
                    e0:0a:5b:fe:f1:ff:89:12:89:a4:98:92:18:c7:6c:
                    cd:7c:93:9d:ec:98:50:91:ba:56:c5:10:0f:ee:29:
                    02:9a:36:a9:31:2f:8c:f3:72:82:a2:0b:36:d7:92:
                    5d:e0:d3:7e:7d:22:97:60:65:b5:8d:d7:65:d4:2b:
                    cc:d7:a5:4c:c8:00:5d:9a:de:6d:9b:24:0e:da:fe:
                    de:ea:bf:92:66:5b:1f:2e:d8:46:d0:66:f5:1b:d5:
                    40:04:76:10:bc:c9:0d:90:b7:75:f6:dd:2a:3a:34:
                    b8:3f:8b:51:fc:c2:8a:d0:b5:59:09:02:c9:e6:cb:
                    54:d5:3b:94:c1:26:cd:6d:9b:9a:9e:d0:d0:08:f5:
                    da:57:49:28:ab:fe:80:cc:3c:54:de:65:10:88:67:
                    44:32:0d:2f:20:24:98:95:01:7a:7d:f3:8d:85:c5:
                    73:19:75:b1:92:14:22:aa:e3:e7:44:7b:6a:8c:dd:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:93:A8:B4:9B:8D:F4:46:A3:34:A1:91:25:95:29:15:DB:10:A9:B7
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/e230338a07b838f4c568401ca9aa506558d76f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.21.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:e1:90:02:f7:ce:32:d3:ec:a9:8f:86:50:46:e9:dc:5b:48:
         b8:42:0f:37:4e:78:77:93:71:d0:99:52:0c:52:27:a6:09:25:
         06:f5:c1:1d:f4:22:d8:f6:4e:69:e0:99:c4:1c:43:9f:e1:a9:
         69:5a:03:cf:f1:48:d2:85:87:b5:f3:e5:ff:9e:ed:28:e7:54:
         5f:d6:61:c8:44:75:5b:97:3f:a4:47:cc:d6:e9:1c:38:33:a5:
         cc:ba:14:92:5a:eb:44:0c:19:b9:54:03:85:ae:54:1b:ae:f8:
         0a:df:f5:82:5f:fe:eb:45:0d:8d:4e:6c:2e:f9:c1:ce:b7:82:
         bf:5d:82:c4:a2:82:32:c4:41:d5:23:84:a6:5c:7e:b5:e6:94:
         4b:53:ed:ff:9f:55:9c:ce:a6:bb:a9:9e:b1:3e:ee:cc:ed:e9:
         55:89:e0:bd:23:eb:73:e6:66:58:ff:6e:31:ac:b7:3e:ae:e4:
         36:ae:ff:75:03:c6:46:9a:7d:65:56:f5:b0:d1:d0:b9:87:51:
         2f:d3:85:4a:34:45:a7:d9:06:9d:f0:a5:c2:d2:4e:18:67:f7:
         b0:e8:19:d8:e9:ef:8e:de:93:d3:8d:82:f6:1c:23:7c:62:27:
         e2:35:e2:b7:39:bc:b9:b9:ac:d4:26:0f:b3:f3:8f:e4:d7:f4:
         07:6c:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org