Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/5e67a8fca5f6c146b5542e43309f3924906a9b20.roa
File:                     5e67a8fca5f6c146b5542e43309f3924906a9b20.roa (raw, json)
Hash identifier:          9Vxmga4ZnNPWDLDYxeitag3z9/IoYbmITPyIOYqsBGY=
Subject key identifier:   80:5F:0C:14:72:88:F6:8C:B5:DE:B2:99:31:CC:EB:78:0B:65:C8:31
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       20A058
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/5e67a8fca5f6c146b5542e43309f3924906a9b20.roa
Signing time:             Fri 12 May 2023 19:37:17 +0000
ROA not before:           Thu 11 May 2023 19:37:17 +0000
ROA not after:            Mon 12 May 2025 19:37:17 +0000
asID:                     14080
IP address blocks:        190.242.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138200 (0x20a058)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: May 11 19:37:17 2023 GMT
            Not After : May 12 19:37:17 2025 GMT
        Subject: CN=5e67a8fca5f6c146b5542e43309f3924906a9b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:1d:a2:22:f5:c5:3b:21:1d:37:a8:23:a6:
                    c1:26:75:e9:5f:ac:b2:18:3a:7b:09:da:eb:b5:59:
                    f5:90:04:6e:bf:0d:49:0e:08:68:af:2c:76:a2:7e:
                    f6:83:ea:b7:72:c4:55:28:b9:d4:4f:d6:69:e0:4a:
                    97:f5:c0:78:35:31:dd:0b:cc:db:fc:53:79:db:d0:
                    59:93:45:8f:48:d5:01:e7:4e:bd:82:2c:27:e4:d7:
                    ae:88:61:97:dc:3e:58:a7:74:3e:47:29:13:c8:6c:
                    97:86:ff:ae:92:09:4f:a2:c8:d0:77:49:72:42:22:
                    ff:6d:ec:cb:00:88:6d:59:bd:36:e2:0a:80:5a:1d:
                    1c:1b:b7:09:1e:49:86:69:48:21:e4:34:97:fe:d8:
                    f3:b5:bb:32:da:1b:ed:74:74:86:0c:bd:16:8f:d9:
                    bf:12:7e:0e:a2:eb:bd:2d:7c:14:3f:90:a5:d1:d1:
                    6d:4f:d7:c5:ee:48:a7:7e:87:e9:6d:a5:f0:fe:87:
                    52:c9:d5:7b:78:3a:c6:2b:ea:af:df:aa:8b:54:a9:
                    ba:8f:55:72:7a:96:d0:8d:9e:16:80:b2:7f:ff:08:
                    7b:6b:cd:38:2b:d5:8c:46:4e:36:58:89:0e:35:ae:
                    2a:fb:18:35:c8:9b:e9:8b:b1:05:fa:68:36:5f:20:
                    bb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5F:0C:14:72:88:F6:8C:B5:DE:B2:99:31:CC:EB:78:0B:65:C8:31
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/5e67a8fca5f6c146b5542e43309f3924906a9b20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:78:55:e5:08:d2:c9:b9:6d:4a:e5:91:a5:ae:1a:a2:0a:ac:
         bd:e3:70:d3:55:c1:a6:24:fe:d9:29:0b:f4:dd:f8:36:3d:b4:
         36:14:20:7d:41:bb:32:f6:11:77:8c:75:b5:d2:14:18:f0:d5:
         eb:a7:d7:3b:ba:33:8a:85:ef:1d:2e:4a:2f:8a:3c:ac:c0:00:
         89:c2:d3:bb:14:8b:fa:5a:3f:84:64:53:b0:ac:b9:a7:7f:09:
         47:ae:d8:b6:e0:15:5e:99:49:30:af:39:5b:b3:d6:fb:53:83:
         ee:5c:10:eb:44:7f:f7:d6:7e:05:d1:dc:a9:80:18:70:51:0e:
         df:85:75:42:af:dc:c4:c6:72:1f:a6:f0:50:cc:d1:6c:87:d4:
         2b:f4:b4:b8:5b:0a:5c:4c:4a:a8:1b:81:41:c8:c5:17:9f:31:
         4e:58:df:90:52:59:ca:1f:2a:f8:35:b1:e2:b5:8d:be:95:d3:
         10:cc:dd:82:80:56:42:89:53:49:f1:26:07:25:07:18:a0:c1:
         e8:40:40:9a:fc:04:0f:38:25:eb:24:d1:4a:11:77:76:37:c0:
         f7:54:2e:18:19:e4:16:92:c9:50:27:3d:96:ec:c3:59:21:b4:
         82:8a:12:2c:e2:53:fa:9f:ab:63:bc:07:55:0e:85:98:60:d0:
         df:d2:73:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org