Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/76e9f6d2f216484bd869b8d735ae8cc71fcbd85b.roa
File:                     76e9f6d2f216484bd869b8d735ae8cc71fcbd85b.roa (raw, json)
Hash identifier:          zpDf0meiAPInsJZlK5t9zu3LKwCS0fl3Rx691ohGujQ=
Subject key identifier:   D0:7B:C5:5F:4B:DC:A6:0B:1E:51:BB:B7:6A:1D:88:A3:00:24:0B:5E
Certificate issuer:       /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial:       281E9A
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/76e9f6d2f216484bd869b8d735ae8cc71fcbd85b.roa
Signing time:             Mon 12 Feb 2024 15:10:29 +0000
ROA not before:           Mon 12 Feb 2024 15:09:57 +0000
ROA not after:            Mon 12 Feb 2029 15:09:57 +0000
asID:                     27910
IP address blocks:        190.242.184.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2629274 (0x281e9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
        Validity
            Not Before: Feb 12 15:09:57 2024 GMT
            Not After : Feb 12 15:09:57 2029 GMT
        Subject: CN=76e9f6d2f216484bd869b8d735ae8cc71fcbd85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:81:9d:eb:d9:1f:1e:9f:6e:64:4e:37:a0:60:
                    c3:01:f5:88:b3:04:fc:5f:22:75:13:e7:50:83:e7:
                    48:c3:ef:58:bc:ec:65:8c:8e:c8:b4:02:78:4c:e6:
                    0b:df:d8:b0:06:dc:c4:46:eb:7f:33:73:3f:0b:38:
                    db:08:b1:41:14:7c:42:62:32:46:d7:e4:91:56:be:
                    0c:80:f9:3e:b9:51:1c:df:63:82:d9:43:df:85:d6:
                    e3:81:66:f9:e7:19:de:5e:15:74:a1:98:93:35:40:
                    07:04:d6:c7:c8:e9:38:d1:0c:95:c5:55:5c:c4:bb:
                    2d:3b:73:05:b6:27:62:7a:b5:77:0a:ce:7e:5c:59:
                    ff:bc:f5:e6:da:df:a6:3c:91:58:bc:c7:34:6e:ce:
                    4d:fa:6c:ba:7f:08:d7:5f:aa:9a:ac:70:dc:52:6e:
                    11:9c:08:37:73:a2:25:5f:bb:34:31:b4:f5:10:f5:
                    c5:9b:e5:80:ec:30:cf:be:9b:54:63:a8:1b:59:74:
                    c2:65:3f:72:ca:8b:26:3c:e0:eb:ce:d6:71:e2:f4:
                    c0:1b:9f:a2:3c:7e:2a:99:c6:18:11:86:f5:65:69:
                    57:48:b4:dc:96:c6:8f:80:20:b2:a8:10:d4:a4:38:
                    56:6b:78:15:ec:09:83:24:61:54:6f:63:49:22:29:
                    77:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:C5:5F:4B:DC:A6:0B:1E:51:BB:B7:6A:1D:88:A3:00:24:0B:5E
            X509v3 Authority Key Identifier:
                keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/76e9f6d2f216484bd869b8d735ae8cc71fcbd85b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:08:49:fd:66:ab:7c:1d:2c:33:a7:31:fa:cc:6b:21:7d:54:
         41:28:8a:67:08:b8:6c:5a:e5:e5:a3:dd:e7:f1:36:1f:49:58:
         7d:2a:ee:83:07:0e:78:47:5d:11:5f:71:1a:77:6e:c8:a0:6a:
         45:7a:d6:16:3c:55:18:f9:b6:0e:17:4f:21:41:4d:42:4e:cd:
         fd:01:42:02:cc:de:b3:a7:43:9f:af:5d:4a:30:86:a1:6a:0d:
         21:ce:64:b1:50:9c:3e:65:3d:6c:8a:5c:5c:f9:42:84:b9:42:
         fa:e0:c4:80:a7:44:b3:5b:75:50:99:05:d4:84:68:7c:a5:37:
         65:fb:6b:ab:ef:55:b2:fd:38:60:56:d8:2e:65:2b:0e:56:fd:
         09:c5:fb:a9:18:34:10:27:d8:d7:d7:db:6e:4e:bf:be:ce:08:
         26:4c:c4:1f:fb:d7:a1:74:03:15:6a:b3:85:a5:5b:b4:2d:f0:
         a0:90:f5:1c:d3:1c:2c:64:e6:4a:a8:76:53:80:8a:41:d9:e3:
         ba:58:86:ab:fb:d9:e1:bd:c3:dc:19:45:3a:6e:32:5d:52:50:
         79:95:0d:3c:fb:6d:90:33:02:66:ee:cb:d8:0b:71:f5:37:c8:
         85:7e:68:ce:c3:f5:c5:3d:2a:88:8b:c2:96:cc:0a:23:89:6a:
         17:9c:7e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org