Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/794466786df6fb48984226c7318467e7e065a8e0.roa
File:                     794466786df6fb48984226c7318467e7e065a8e0.roa (raw, json)
Hash identifier:          jAs5AfZzyQE/duHOtO1VtD9E2S3dYXypxD9gPbx0CmE=
Subject key identifier:   47:55:8D:CF:01:CD:EE:E8:3D:48:C1:5F:FB:42:C9:E3:93:FB:61:47
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       239C6A
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/794466786df6fb48984226c7318467e7e065a8e0.roa
Signing time:             Thu 24 Aug 2023 21:24:08 +0000
ROA not before:           Wed 23 Aug 2023 21:24:08 +0000
ROA not after:            Sun 24 Aug 2025 21:24:08 +0000
asID:                     262191
IP address blocks:        190.242.100.0/24 maxlen: 24
                          190.242.101.0/24 maxlen: 24
                          190.242.107.0/24 maxlen: 24
                          190.242.108.0/24 maxlen: 24
                          190.242.110.0/24 maxlen: 24
                          190.242.111.0/24 maxlen: 24
                          190.242.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333802 (0x239c6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: Aug 23 21:24:08 2023 GMT
            Not After : Aug 24 21:24:08 2025 GMT
        Subject: CN=794466786df6fb48984226c7318467e7e065a8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:da:4f:48:2d:a5:ff:14:48:f0:40:58:b3:46:
                    5a:75:e5:2e:a2:65:61:fb:e2:21:44:41:5d:00:11:
                    03:8f:66:c2:1c:6f:17:f6:8e:5b:ad:da:d5:06:9d:
                    aa:48:1e:9e:f3:aa:f5:31:ae:44:9c:06:59:5b:8b:
                    62:ea:1b:87:44:92:dc:ac:57:a4:e4:ee:a5:21:67:
                    1e:ea:eb:86:b9:10:98:cc:be:2d:84:98:bd:a0:af:
                    a9:db:c2:2b:86:ed:ea:5f:82:74:3b:ae:c1:5c:e9:
                    65:2a:79:9a:8d:22:b8:80:0b:86:86:c5:66:34:8c:
                    c4:f7:6c:ea:d8:b6:35:de:f4:aa:5b:c2:2a:e2:56:
                    ea:a2:29:a2:66:da:ee:e4:4e:69:ef:c5:92:91:ec:
                    6b:16:73:d4:71:2a:0c:95:6e:95:48:85:de:da:2b:
                    63:1a:ee:4e:6c:f0:33:cd:e7:0e:88:f2:d2:74:ca:
                    8b:9a:b2:75:eb:03:24:b7:24:0a:4d:a6:8f:6c:5f:
                    14:a8:4d:52:26:9d:aa:e7:1c:87:4c:e2:1a:5f:5d:
                    e1:d1:2c:ef:bc:68:ca:58:da:f4:b6:0f:04:38:ca:
                    1c:5e:85:a5:ce:b6:9c:fb:24:78:db:0c:aa:06:b9:
                    7f:f9:33:0a:a7:ea:5a:47:86:9f:85:c1:54:ec:a3:
                    63:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:55:8D:CF:01:CD:EE:E8:3D:48:C1:5F:FB:42:C9:E3:93:FB:61:47
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/794466786df6fb48984226c7318467e7e065a8e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.100.0/23
                  190.242.107.0-190.242.108.255
                  190.242.110.0/23
                  190.242.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:c9:b2:53:5d:98:aa:77:b8:0a:a5:6a:74:27:9d:10:72:8f:
         b7:e7:a2:87:8c:51:bb:4e:f6:84:23:e3:c7:5f:2c:f5:5e:e1:
         63:27:82:d0:70:71:2c:11:7a:b5:58:40:27:be:8a:89:68:5d:
         9c:f1:68:33:26:8d:ec:81:22:54:3f:36:6e:40:ca:38:eb:d8:
         48:9d:a5:3b:00:03:25:2b:99:cf:f3:8b:a5:c0:91:e0:cc:3e:
         3b:76:4a:27:08:2d:5f:6c:92:fb:51:53:29:c0:38:ae:9e:58:
         1c:b6:03:5e:40:fe:12:de:32:cd:95:70:bf:6b:20:8e:b9:ec:
         09:c6:78:69:c5:b8:98:2c:0d:05:f3:69:e1:6f:be:7a:4a:63:
         b8:ba:79:ad:1d:0c:5f:46:b1:98:c7:af:8f:05:21:42:86:49:
         e4:7a:86:33:0b:57:4f:28:af:e9:13:f3:1a:3c:7a:99:a6:6c:
         f9:6e:27:c1:de:d4:d4:78:a5:4a:cc:9b:d5:2f:28:e2:00:5d:
         d8:ba:21:23:68:fd:81:93:ce:6d:b2:4d:03:82:f9:43:35:28:
         31:cf:1a:68:fe:7c:3b:68:f0:ce:65:41:2c:d9:2b:72:a1:c2:
         ef:0e:85:6f:8b:5a:fe:27:23:b5:6b:9c:6c:d7:d0:88:e9:5c:
         7d:0c:e2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:24:42 2024 by rpki-client on console-ams.rpki-client.org