Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/83e934211bc4c72555cf42727c841a194a3aaec6.roa
File:                     83e934211bc4c72555cf42727c841a194a3aaec6.roa (raw, json)
Hash identifier:          Jo6eIzYBpsue2bSAv89ZlYMlsAKslQqyJHGkf4zg8Wo=
Subject key identifier:   4A:16:89:23:9D:0B:8F:03:78:12:A9:4D:8B:65:28:E1:86:94:59:91
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       214803
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/83e934211bc4c72555cf42727c841a194a3aaec6.roa
Signing time:             Thu 01 Jun 2023 15:42:29 +0000
ROA not before:           Wed 31 May 2023 15:42:27 +0000
ROA not after:            Sun 01 Jun 2025 15:42:27 +0000
asID:                     28064
IP address blocks:        190.242.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181123 (0x214803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: May 31 15:42:27 2023 GMT
            Not After : Jun  1 15:42:27 2025 GMT
        Subject: CN=83e934211bc4c72555cf42727c841a194a3aaec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:53:c9:92:db:5c:a1:b0:3f:f4:76:04:cd:
                    a2:c3:cb:4b:2b:50:0d:e5:90:3d:22:20:3c:e5:0f:
                    49:ab:43:bf:c8:cf:fe:49:e8:84:b1:f6:dc:4f:00:
                    1f:e4:24:08:c6:ed:be:f2:c8:c2:cc:03:5d:91:4c:
                    b6:50:1b:ca:5e:7d:74:ab:a8:61:4c:46:b9:d5:c4:
                    8f:b9:16:b9:46:e6:1b:cf:65:50:12:b9:47:c2:d0:
                    f3:5b:73:f2:a2:20:2c:07:76:0d:60:08:26:b0:94:
                    70:10:f7:e1:34:3a:b7:f8:df:3a:9e:0d:18:6a:24:
                    16:7d:6b:0c:d4:86:d0:eb:b1:2a:46:e4:a5:4c:e9:
                    1b:44:09:3b:c3:62:01:01:5e:bc:ad:07:c2:e2:9e:
                    cf:95:7b:0a:16:43:9a:11:c9:ba:0d:72:5f:38:d2:
                    7f:13:b6:f9:d5:fc:2f:d9:57:39:01:ed:b0:6e:73:
                    95:56:f1:84:1a:ef:77:0c:97:87:d1:40:e8:e5:a8:
                    f7:83:d5:54:b6:37:50:df:74:04:41:e3:5b:51:c4:
                    26:1d:8a:3c:b2:b5:42:29:ef:b6:a9:c2:f7:8b:f6:
                    0c:f8:02:87:4b:dd:b5:62:df:9c:75:8a:63:4b:9b:
                    b9:e0:d7:86:0b:37:b3:53:8e:9f:ad:1d:8d:c8:45:
                    be:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:16:89:23:9D:0B:8F:03:78:12:A9:4D:8B:65:28:E1:86:94:59:91
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/83e934211bc4c72555cf42727c841a194a3aaec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ab:4a:b8:67:df:3d:93:04:34:f8:5a:c0:b3:f8:3a:d5:a2:
         cc:7b:3b:54:b5:3d:41:32:6c:6b:d2:12:3e:9d:36:db:29:1b:
         43:28:da:d9:c5:93:12:1e:39:fd:da:10:ad:1b:36:49:fa:fa:
         e7:e8:ce:e0:c1:4b:89:8d:21:1c:65:61:f7:29:4d:88:a8:fb:
         fb:7f:ca:c7:3c:ae:3c:92:df:8c:b9:26:85:87:05:23:51:4c:
         4b:67:cf:c2:fb:91:f5:40:65:06:ec:cf:13:85:91:d8:70:6b:
         65:0c:b8:7f:56:b7:31:bb:33:47:3d:0d:d5:3c:6c:f9:cd:81:
         00:d5:5f:37:6b:2d:f6:ce:60:56:f5:80:75:64:73:05:03:71:
         4c:47:ad:64:19:9e:26:8f:76:e2:a7:02:28:4d:72:b7:e8:0e:
         57:56:12:8c:b7:45:67:49:9c:b2:02:93:5a:4b:c2:9f:1a:d0:
         5a:d6:ef:6c:1a:51:05:1a:d3:38:eb:99:04:cd:b4:7d:7a:a8:
         31:6d:1e:9b:8c:53:75:2e:c0:c4:2c:19:51:b8:d8:32:dc:53:
         bb:43:b5:38:37:b5:8a:03:10:71:84:be:4d:18:e8:31:81:05:
         31:7a:7e:02:73:26:03:04:bd:45:96:0a:16:f1:60:ca:9b:06:
         e5:61:c2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:24:42 2024 by rpki-client on console-ams.rpki-client.org