Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7499afb491f7c0391c32852402dc409e7684200.roa
File:                     a7499afb491f7c0391c32852402dc409e7684200.roa (raw, json)
Hash identifier:          ALfAeAn8wpko0dQnYt8x23mydBtnvQ8CogBpoMvTL2U=
Subject key identifier:   AA:DD:08:32:47:FC:E2:16:45:0A:89:40:07:4D:19:A9:66:5D:32:8C
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       214430
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7499afb491f7c0391c32852402dc409e7684200.roa
Signing time:             Thu 01 Jun 2023 15:42:27 +0000
ROA not before:           Wed 31 May 2023 15:42:27 +0000
ROA not after:            Sun 01 Jun 2025 15:42:27 +0000
asID:                     14080
IP address blocks:        190.242.72.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2180144 (0x214430)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: May 31 15:42:27 2023 GMT
            Not After : Jun  1 15:42:27 2025 GMT
        Subject: CN=a7499afb491f7c0391c32852402dc409e7684200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:e1:52:fa:14:5b:58:fc:bd:de:0a:c4:89:
                    71:41:2e:ec:94:c1:c3:65:cb:8e:5f:be:d2:2e:84:
                    9b:af:6d:97:6b:0a:67:dd:7d:6d:41:fa:a5:f9:39:
                    34:08:7a:5a:6d:ed:4c:41:46:d4:93:1c:97:03:5f:
                    39:be:d2:46:f7:39:a4:65:66:63:31:8f:dc:d3:cd:
                    5c:b0:5f:24:db:df:47:b9:42:7c:ba:c5:5e:06:a9:
                    e6:0d:f5:62:7c:83:44:be:57:ac:9f:4b:90:fa:4d:
                    a9:96:07:b4:e5:b4:25:4a:82:85:c0:44:79:1f:cf:
                    e7:ad:c4:30:54:77:57:a3:fc:f9:b1:8f:75:03:ba:
                    5b:c7:02:4c:39:97:30:77:16:56:7c:ad:60:8b:bb:
                    56:aa:37:f0:a8:c0:22:f3:f6:9e:49:8a:e4:47:64:
                    74:0c:f9:87:6f:a2:7c:5d:5c:bc:d3:3b:e0:a6:cd:
                    84:cd:f4:6e:60:5e:fc:eb:b0:5f:b7:3b:88:62:b4:
                    72:d8:9e:98:19:2b:d2:e3:0c:24:dd:72:ff:60:9a:
                    8e:2b:77:a6:8e:90:42:e5:7e:09:76:d9:98:7e:e0:
                    84:be:02:4b:f7:62:26:59:13:5e:e8:34:12:a8:f9:
                    32:f8:6a:65:4b:2d:9a:0e:7c:a4:35:7b:57:90:c2:
                    74:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DD:08:32:47:FC:E2:16:45:0A:89:40:07:4D:19:A9:66:5D:32:8C
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7499afb491f7c0391c32852402dc409e7684200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:5e:49:8b:9f:57:ca:db:e2:06:ae:71:7c:c0:90:a1:01:07:
         8e:7b:a4:e0:ec:d8:c8:a0:e7:f9:0d:df:91:60:41:a3:9a:a6:
         3e:27:88:e5:02:9d:ae:14:2b:71:9c:5a:b4:e6:13:7d:eb:34:
         84:c0:cf:5f:28:04:4d:77:ba:81:98:1e:d4:31:55:f1:0a:aa:
         6e:7a:e5:c0:ad:bb:37:31:55:6c:62:6e:db:f7:24:2f:54:b8:
         e2:32:91:5d:26:7a:95:cd:80:bd:58:b8:19:4d:4a:29:bc:12:
         3e:c8:62:96:bc:ac:f5:2f:70:75:68:e5:b7:a9:8f:bd:4c:b7:
         60:b6:9a:d6:77:66:66:08:8d:5e:42:fe:f4:cb:59:e7:16:4e:
         52:93:0b:4d:bd:d3:bd:ae:65:b8:41:8c:05:3d:48:4e:9f:5b:
         24:b9:f0:f5:59:98:e5:43:43:de:ee:90:fe:43:24:f3:fe:62:
         a0:0f:1f:db:61:d1:81:47:bd:7b:46:e7:ca:04:42:95:30:ca:
         c7:86:f1:14:86:6f:45:eb:7c:55:46:af:e4:66:5f:2f:73:63:
         e0:b1:e2:9f:70:7c:ab:65:51:62:06:73:e6:05:c0:23:96:91:
         ca:ba:b4:c7:96:f4:07:e4:4b:74:8f:50:6f:17:72:69:60:05:
         76:30:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:07:04 2024 by rpki-client on console-fra.rpki-client.org