Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/7e364ef889d0bf25c828feaaf8b4d5bf3e6df59f.roa
File:                     7e364ef889d0bf25c828feaaf8b4d5bf3e6df59f.roa (raw, json)
Hash identifier:          rb3ju+yYhEIwaGKpUmfHyvLp8OysDWw9bELaER6AS1Q=
Subject key identifier:   4E:E4:47:A0:3A:4A:CF:7E:F8:A0:C7:8C:3D:74:E6:62:FB:3B:A8:C2
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       23A5F2
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/7e364ef889d0bf25c828feaaf8b4d5bf3e6df59f.roa
Signing time:             Thu 24 Aug 2023 21:58:36 +0000
ROA not before:           Wed 23 Aug 2023 21:58:36 +0000
ROA not after:            Sun 24 Aug 2025 21:58:36 +0000
asID:                     23520
IP address blocks:        190.242.173.0/24 maxlen: 24
                          190.242.177.0/24 maxlen: 24
                          190.242.178.0/24 maxlen: 24
                          190.242.179.0/24 maxlen: 24
                          190.242.181.0/24 maxlen: 24
                          190.242.20.0/24 maxlen: 24
                          190.242.255.0/24 maxlen: 24
                          190.242.31.0/24 maxlen: 24
                          190.242.48.0/24 maxlen: 24
                          190.242.49.0/24 maxlen: 24
                          190.242.56.0/23 maxlen: 24
                          190.242.57.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2336242 (0x23a5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: Aug 23 21:58:36 2023 GMT
            Not After : Aug 24 21:58:36 2025 GMT
        Subject: CN=7e364ef889d0bf25c828feaaf8b4d5bf3e6df59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:d4:99:7c:96:ab:5f:e0:bb:60:8a:0f:b6:
                    a2:8a:e3:5d:59:72:b0:b8:16:6e:f7:93:af:e7:79:
                    c9:5f:22:5c:8b:fa:4f:f0:be:e4:a9:52:a6:f6:a7:
                    cf:a1:d9:fe:7d:37:46:40:ed:fc:a9:e2:e0:43:3d:
                    e9:96:57:8a:b8:3f:3f:cb:d5:82:a0:79:fc:f3:05:
                    84:b9:d2:6b:1d:d4:b6:08:ec:4b:30:2a:1f:fd:7f:
                    da:b0:c4:d9:e6:1a:04:89:58:8b:87:e0:be:de:fa:
                    c5:69:b5:21:a6:3b:d9:5d:1e:a8:ce:3b:6e:f6:f1:
                    ec:b7:a3:77:1c:69:69:46:33:13:78:cf:04:eb:ea:
                    77:b6:af:53:e1:f1:61:e3:4e:02:95:7d:a2:64:53:
                    d5:c4:69:2e:b5:3b:6e:7c:b7:30:3c:8e:b9:b1:0e:
                    7c:3d:54:6c:cc:29:82:f3:f7:08:e5:5e:f6:ab:ca:
                    47:e1:5d:5a:b0:08:d8:0e:a0:15:95:fe:24:7b:1f:
                    f5:3a:29:29:17:a9:20:35:76:43:20:71:df:15:55:
                    c8:2d:42:26:a8:7e:6b:bf:29:79:4e:b7:ec:d8:40:
                    04:38:f4:b4:75:31:eb:97:9d:0f:8a:59:79:37:c2:
                    70:a4:c4:d7:f9:41:10:b0:e6:1b:9b:98:7e:d6:1a:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E4:47:A0:3A:4A:CF:7E:F8:A0:C7:8C:3D:74:E6:62:FB:3B:A8:C2
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/7e364ef889d0bf25c828feaaf8b4d5bf3e6df59f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.20.0/24
                  190.242.31.0/24
                  190.242.48.0/23
                  190.242.56.0/23
                  190.242.173.0/24
                  190.242.177.0-190.242.179.255
                  190.242.181.0/24
                  190.242.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:87:d1:6e:81:17:0a:61:90:d1:d4:ba:2b:da:83:3c:4d:d1:
         77:82:73:ff:2a:4a:6c:d0:e7:cb:c7:66:bb:12:74:3c:de:8c:
         d1:28:f5:2e:e5:1f:8b:a0:5d:30:ca:84:2d:a2:cb:07:b2:e9:
         b8:8d:7d:36:b9:c3:2e:06:f4:ad:42:87:7a:7e:db:a8:d2:a1:
         e5:95:5e:bd:ba:f7:06:57:e8:10:53:6f:4b:42:02:68:0a:d9:
         27:f9:ac:60:ca:0b:ce:cd:61:69:0c:3d:b2:02:e7:13:36:77:
         ec:3d:ca:cf:20:35:7f:52:60:af:b9:93:07:db:12:65:db:5d:
         0f:27:39:27:9b:91:c5:72:24:69:64:26:06:84:2c:e4:46:da:
         65:11:d4:dd:78:cf:55:22:81:23:62:24:8f:4f:a8:72:d5:4d:
         77:b5:a5:34:e7:9c:25:b5:8f:e6:b8:f8:c0:23:c2:b4:89:c4:
         aa:b7:16:16:3f:2c:26:14:1d:b7:3e:46:1d:0b:86:4d:18:9a:
         a1:95:36:ee:5c:57:bc:26:e6:23:2f:2e:91:81:fa:8c:48:80:
         af:c8:f8:e2:24:3c:83:00:38:82:4b:94:7c:b5:7e:e4:e9:89:
         ac:17:9d:60:31:f6:83:25:a3:4c:ce:b4:8a:11:72:ce:3c:18:
         43:e3:eb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:24:42 2024 by rpki-client on console-ams.rpki-client.org