Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/4b7d6b378803baff5cf5ded98a399b06ee88de72.roa
File:                     4b7d6b378803baff5cf5ded98a399b06ee88de72.roa (raw, json)
Hash identifier:          C3WOKmquCUNScMPZTg8X6eP4rk/r2sE8LeXmW4k4Gvc=
Subject key identifier:   37:B8:AF:37:8E:4E:89:36:9D:6C:F0:82:F5:FB:08:12:55:35:A7:45
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       23F018
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/4b7d6b378803baff5cf5ded98a399b06ee88de72.roa
Signing time:             Mon 04 Sep 2023 21:12:26 +0000
ROA not before:           Sun 03 Sep 2023 21:12:26 +0000
ROA not after:            Thu 04 Sep 2025 21:12:26 +0000
asID:                     52286
IP address blocks:        190.242.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2355224 (0x23f018)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: Sep  3 21:12:26 2023 GMT
            Not After : Sep  4 21:12:26 2025 GMT
        Subject: CN=4b7d6b378803baff5cf5ded98a399b06ee88de72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:38:85:9f:87:96:eb:be:09:a6:19:91:e1:f3:
                    e9:8a:fa:d6:9d:79:7c:27:07:e4:f0:43:62:f9:9d:
                    35:89:8c:ae:95:57:97:a8:12:40:50:ee:ee:76:53:
                    1a:8f:c9:05:46:a4:82:bc:c6:0e:9d:d7:20:9d:2c:
                    2b:9a:6d:f7:aa:87:44:e1:e9:d5:12:a7:4d:54:97:
                    f8:c5:bf:73:59:0d:8f:dd:01:b9:d4:1e:99:c4:60:
                    50:03:56:d4:7d:85:a2:fa:94:08:40:84:51:22:76:
                    59:aa:53:d3:ab:01:62:ff:99:1c:4a:c8:2e:61:a9:
                    b7:85:d0:40:2a:33:e1:d5:a6:53:b9:52:68:8c:d5:
                    b9:52:6a:84:36:d4:f1:1c:c6:64:05:61:80:6d:3c:
                    1a:2e:41:ad:2d:69:46:4d:bc:67:19:f1:57:16:0f:
                    4c:cd:b3:ca:8d:02:47:16:b5:1f:32:93:5f:e5:f5:
                    74:4c:e5:d1:e3:ac:35:2b:f8:d9:4e:ea:3d:f7:a6:
                    b1:9f:4c:55:71:71:aa:eb:ec:25:41:0e:9e:fe:0a:
                    bd:2b:e8:f3:47:a1:63:f4:2b:f8:17:83:b5:cb:e7:
                    ae:08:a0:c8:96:51:88:9a:96:af:15:70:41:b1:84:
                    2b:f3:4f:82:d1:4e:4b:c0:d4:bd:48:34:e5:39:53:
                    d6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B8:AF:37:8E:4E:89:36:9D:6C:F0:82:F5:FB:08:12:55:35:A7:45
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/4b7d6b378803baff5cf5ded98a399b06ee88de72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:fc:32:47:68:cf:3e:ed:09:df:02:5b:bb:a0:75:4f:58:0c:
         49:4b:95:cd:94:f1:c7:ca:fd:e3:83:9a:be:34:62:63:75:14:
         a4:3f:f0:8b:e1:eb:c4:22:2c:2e:38:f5:7d:43:6a:5e:bb:9c:
         32:55:59:76:60:15:1f:c5:9a:e3:03:13:8c:ee:96:b3:32:49:
         bb:68:3e:93:8d:c9:9a:a0:84:07:6f:d4:7c:7e:1e:e3:fc:11:
         a5:58:a3:35:ec:9b:02:75:31:43:e2:33:df:95:01:08:91:e1:
         96:d3:30:36:ff:01:40:70:7e:c8:5f:76:f7:63:25:69:76:e4:
         55:d4:76:7b:d7:81:30:d1:bb:7a:5d:32:b2:c6:ef:69:2f:d6:
         29:c0:2d:24:16:10:fe:ed:3e:07:56:f3:53:fd:a8:d8:14:f8:
         27:01:87:cd:ef:50:2c:63:32:5c:14:d4:2e:25:10:ad:c4:ad:
         f1:8f:92:06:9f:da:d2:10:a9:41:48:12:1a:15:c3:15:dc:1d:
         e1:51:4a:97:a3:7d:2d:fa:2b:05:9c:35:be:bd:b2:6d:8e:75:
         30:91:51:39:ee:b7:f4:85:9d:c5:dc:c4:dd:1d:48:e1:cc:50:
         03:f9:7d:df:51:bb:22:2c:0b:3c:bd:a8:86:6e:2e:a1:54:2b:
         b4:bc:93:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:07:04 2024 by rpki-client on console-fra.rpki-client.org