Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/0b8f9b68d501c7965faa66265a947f740674b12c.roa
File:                     0b8f9b68d501c7965faa66265a947f740674b12c.roa (raw, json)
Hash identifier:          6aNLezbDVwJcu/P9UoWnWlsumpGWBVF41MYmtvUtWpE=
Subject key identifier:   CF:BB:C1:50:70:01:23:22:E8:B6:F9:D9:BE:58:D0:DB:F6:AB:75:45
Certificate issuer:       /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial:       2966E6
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/0b8f9b68d501c7965faa66265a947f740674b12c.roa
Signing time:             Fri 29 Mar 2024 00:12:19 +0000
ROA not before:           Fri 29 Mar 2024 00:12:19 +0000
ROA not after:            Sun 29 Mar 2026 00:12:19 +0000
asID:                     27910
IP address blocks:        190.242.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2713318 (0x2966e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
        Validity
            Not Before: Mar 29 00:12:19 2024 GMT
            Not After : Mar 29 00:12:19 2026 GMT
        Subject: CN=0b8f9b68d501c7965faa66265a947f740674b12c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:e5:90:81:a4:89:5b:6b:b0:2e:83:93:a8:
                    1b:3f:c9:cf:0a:81:f8:3d:fe:20:50:47:6b:7b:a5:
                    d3:00:03:6a:83:64:d2:9b:8d:bb:52:80:f3:7f:36:
                    33:04:b4:1f:90:4e:28:ff:5b:a0:db:13:cb:d7:36:
                    53:ed:f1:c4:0b:81:1a:82:a5:dd:ab:fc:00:a5:95:
                    00:be:40:44:41:fb:0b:9b:04:95:27:b7:58:bf:49:
                    02:6b:69:5b:2d:59:b0:9c:7f:f4:ad:e1:90:1a:4a:
                    fe:11:b1:a5:1a:55:a9:55:7d:0e:73:4e:a4:71:89:
                    3b:da:43:c9:28:fa:2e:fe:8c:72:e7:d7:d2:f7:40:
                    3f:42:4f:1b:83:77:e9:d3:c4:c0:fd:dd:7a:ec:a7:
                    f0:f2:a1:6a:eb:59:f2:72:34:6d:7b:7d:5b:52:72:
                    8c:17:65:27:3f:ca:4e:7f:e4:3d:2c:39:94:21:1e:
                    f0:06:8c:da:07:52:68:22:1f:3d:2b:ba:2e:03:c7:
                    95:80:27:7a:7f:d2:54:f2:e4:9a:f4:c9:b1:67:b1:
                    54:16:20:30:29:a5:13:0b:ab:a9:b5:49:93:07:c8:
                    cd:5d:01:9f:59:53:f4:1b:37:84:e2:c4:7e:3e:22:
                    bd:cf:d8:70:cf:6e:28:bf:6d:4e:6c:0a:4e:2a:90:
                    d9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BB:C1:50:70:01:23:22:E8:B6:F9:D9:BE:58:D0:DB:F6:AB:75:45
            X509v3 Authority Key Identifier:
                keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/0b8f9b68d501c7965faa66265a947f740674b12c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:e0:f3:4b:59:3c:01:7e:23:8b:78:29:1a:b9:0d:3e:2f:aa:
         d5:9a:37:22:c8:97:b7:7d:98:ac:86:49:c5:e5:d7:7d:a9:d4:
         cb:a0:87:ed:41:f5:89:a1:a1:8d:7c:df:f2:21:06:61:21:52:
         9d:9e:30:b4:2d:d5:1b:c8:e1:22:61:19:9b:56:d9:38:de:aa:
         ab:95:84:82:2b:15:71:95:8e:4e:99:09:eb:3e:62:4f:07:42:
         a4:38:7e:96:b6:82:52:81:e6:75:80:75:d8:57:0a:87:f4:b2:
         b4:eb:c0:76:d5:0f:4e:45:1c:b7:e4:52:7d:23:d8:1b:e1:08:
         13:55:48:dc:82:92:d4:cd:32:bc:fd:99:7f:85:b0:99:ea:8c:
         6e:68:84:4c:6e:e1:16:c9:77:db:01:6b:55:ca:32:b7:9a:85:
         66:d2:8a:8b:2c:fe:65:50:36:05:96:8e:6a:20:29:91:22:b4:
         0f:88:41:91:df:e0:3b:2d:05:5e:b8:97:f0:db:a1:4a:4b:e9:
         08:cf:7e:59:5e:c3:be:3b:99:0a:2f:c3:9c:2e:fe:51:f4:ee:
         b7:c6:92:ff:58:c8:bb:d0:1c:02:a5:2f:7c:ec:f2:52:1e:95:
         f6:59:d8:c2:c9:d1:03:d1:40:fd:d5:3e:c7:6c:30:c6:da:b3:
         d8:cf:06:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org