Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/3931d259f39730528c589094b23bebbab61231b7.roa
File:                     3931d259f39730528c589094b23bebbab61231b7.roa (raw, json)
Hash identifier:          ZxUs2Jdts+KgBcUyheCofWz7kG/aHOBDwTEH9dUUm+k=
Subject key identifier:   D0:C6:1F:DD:C2:8C:10:90:1D:33:7D:95:04:14:C4:1E:BB:15:8A:4D
Certificate issuer:       /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial:       281B66
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/3931d259f39730528c589094b23bebbab61231b7.roa
Signing time:             Mon 12 Feb 2024 15:10:26 +0000
ROA not before:           Mon 12 Feb 2024 15:09:57 +0000
ROA not after:            Mon 12 Feb 2029 15:09:57 +0000
asID:                     262255
IP address blocks:        190.242.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2628454 (0x281b66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
        Validity
            Not Before: Feb 12 15:09:57 2024 GMT
            Not After : Feb 12 15:09:57 2029 GMT
        Subject: CN=3931d259f39730528c589094b23bebbab61231b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:6a:bd:c9:dd:f4:df:13:9f:e7:58:df:49:
                    27:7b:37:c7:9d:69:9f:e5:c1:f5:db:d6:36:84:04:
                    9d:dd:57:b1:22:54:6c:2a:dc:43:e4:93:2b:a2:bf:
                    d6:46:09:07:e0:5f:c0:15:0a:2e:bc:e7:60:24:ca:
                    7a:b4:8c:2d:86:11:2f:56:cc:ec:22:0c:d8:4b:3e:
                    b9:e0:8b:e2:7d:c5:5f:0a:28:49:1d:e4:4c:4b:d3:
                    f4:d7:3a:0f:70:0f:cf:21:72:f0:c1:fa:ad:68:60:
                    f0:41:a6:4c:c2:0c:b2:9d:6a:7e:1f:d9:6c:32:87:
                    44:c4:f6:d6:7d:3d:dd:5c:34:58:6a:d4:ae:08:0e:
                    77:ea:a2:21:6d:16:9a:1c:ab:0f:15:47:0f:5a:a5:
                    e9:39:13:13:5f:d1:38:ad:72:c3:3d:c8:5a:cd:eb:
                    c1:02:23:17:ae:e8:44:d2:bf:28:b1:dc:2f:8f:59:
                    c2:19:f1:9a:48:fc:17:09:34:e2:11:83:d0:90:3d:
                    a4:1b:c8:2c:7a:6b:bb:fb:7d:c9:eb:d6:f5:d5:29:
                    5d:f6:e4:69:fa:38:ec:08:61:c8:5b:01:93:98:f3:
                    3a:b6:d9:3a:8f:80:31:5b:6c:2e:92:c2:cf:78:98:
                    9e:3a:ba:6f:61:e7:8a:93:c9:39:57:d4:90:94:5c:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C6:1F:DD:C2:8C:10:90:1D:33:7D:95:04:14:C4:1E:BB:15:8A:4D
            X509v3 Authority Key Identifier:
                keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/3931d259f39730528c589094b23bebbab61231b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:39:a9:f1:ce:2e:50:f1:45:84:c4:95:b9:2f:1a:cb:7c:71:
         92:f3:62:2d:fb:6f:ce:8b:74:d8:d8:04:1b:42:f6:d7:8f:c3:
         61:84:39:41:f5:fd:e9:20:bc:cc:a0:2c:88:2e:b5:e8:50:90:
         7b:fb:d6:7f:00:e7:38:8c:2f:ae:fc:ba:18:bf:0a:ea:88:5f:
         c3:18:51:a0:2f:2e:3c:5c:7d:5b:e3:4b:cf:f1:57:b4:71:87:
         ab:fc:64:05:f3:3f:64:ad:ea:bc:7f:bb:ea:67:b1:bd:d9:e7:
         6b:38:f2:fe:e7:1a:c0:87:a1:34:5f:17:90:28:21:df:6f:86:
         e4:19:b9:fb:51:a7:71:22:46:82:cf:49:22:3f:e8:a3:27:4a:
         0c:57:f8:74:19:1a:08:51:7d:70:68:4a:6b:80:c2:6e:8c:cf:
         31:cf:45:f6:3f:18:8a:2f:9c:6b:1d:a2:81:2f:ed:46:70:b4:
         46:c9:a1:da:15:07:5a:bd:89:b8:b5:b0:e5:03:94:9b:0c:f2:
         7e:d6:1f:74:2c:19:3e:c2:c3:a4:d3:1c:6b:14:27:0e:a0:3a:
         33:ef:8b:23:bf:4f:df:8a:80:3b:90:e3:2a:6d:b8:23:96:63:
         78:38:11:fe:c5:9b:ab:1f:44:14:06:71:8a:cc:90:f4:f6:5c:
         f0:a6:a7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org