Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/b05db711963b90f4d38c9e5f0c6fe263afa0755f.roa
File:                     b05db711963b90f4d38c9e5f0c6fe263afa0755f.roa (raw, json)
Hash identifier:          q4bXxNhES3RwbLtWE1aKbhTFCBGSMVMLxOxaVUTaS/Q=
Subject key identifier:   44:47:EB:72:D5:A1:8D:19:09:15:31:48:9D:6C:11:B2:16:DE:56:26
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       216CD3
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/b05db711963b90f4d38c9e5f0c6fe263afa0755f.roa
Signing time:             Thu 01 Jun 2023 15:42:40 +0000
ROA not before:           Wed 31 May 2023 15:42:27 +0000
ROA not after:            Sun 01 Jun 2025 15:42:27 +0000
asID:                     28094
IP address blocks:        190.242.32.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190547 (0x216cd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: May 31 15:42:27 2023 GMT
            Not After : Jun  1 15:42:27 2025 GMT
        Subject: CN=b05db711963b90f4d38c9e5f0c6fe263afa0755f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ab:5d:f8:d7:e1:fd:c5:72:2c:af:31:48:23:
                    4f:26:7d:d0:90:db:34:a6:e9:24:2b:57:a2:0c:78:
                    c9:25:75:8d:0a:a3:7c:32:e3:4b:86:2f:cf:0f:bd:
                    37:27:ae:a9:aa:7a:6c:a9:be:36:dc:19:ef:4f:de:
                    9a:4e:4c:0a:c4:96:9d:79:32:f0:77:57:67:14:8a:
                    6b:a1:9a:a7:e6:6c:23:78:7d:b7:ab:76:97:b0:7e:
                    a3:49:ca:a0:74:93:32:f6:af:72:c4:90:d0:fb:ec:
                    d7:17:4f:94:98:f3:75:e5:8c:93:ef:44:82:c6:e0:
                    77:7c:1f:b3:eb:8f:28:ed:e7:48:5c:62:73:eb:b4:
                    b7:d8:be:84:eb:eb:91:aa:16:cc:5c:17:37:54:64:
                    cf:42:b4:67:04:04:29:b9:72:1a:18:87:4f:72:1e:
                    5c:41:6e:ce:61:a8:bb:5f:13:ac:54:ca:54:1d:93:
                    c4:1a:42:b4:18:e3:ef:c5:2f:1a:49:2c:7e:dd:89:
                    e9:59:dc:bb:8b:9a:d6:94:d2:6b:30:cc:b9:31:31:
                    39:62:0d:3f:a0:46:84:58:75:6b:d4:b1:71:db:de:
                    d0:b8:b0:99:4e:c2:11:8a:39:a1:34:95:6f:22:aa:
                    fe:20:b9:44:91:c5:b5:b8:9f:11:20:c7:12:95:9a:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:47:EB:72:D5:A1:8D:19:09:15:31:48:9D:6C:11:B2:16:DE:56:26
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/b05db711963b90f4d38c9e5f0c6fe263afa0755f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:fe:28:50:3a:e5:8a:91:bd:19:0a:3a:c4:4e:23:47:c2:7e:
         18:23:a1:9f:c0:dd:16:66:ca:a8:20:f0:94:f2:76:a6:6f:91:
         8c:6b:68:9c:75:c2:3c:23:db:a9:b5:4f:64:06:3b:df:9f:57:
         d3:dc:cb:18:72:c0:56:26:54:f2:5f:25:dd:28:b0:e0:03:fa:
         72:2c:5a:f2:b4:bd:6c:a1:8b:04:c0:5b:99:cf:8c:15:bc:c5:
         e6:77:c5:7e:7c:82:15:7e:92:37:fa:ff:51:cc:6b:22:e5:fd:
         9c:af:cd:27:56:d3:fb:0c:00:ad:f2:82:b8:33:27:e8:13:90:
         5f:db:cc:6d:71:2f:c3:bf:fd:05:ed:b3:23:df:f8:e5:94:23:
         d6:d2:a3:1b:54:ab:51:58:8f:30:3b:15:2b:40:ee:b6:38:b2:
         85:5f:0a:82:8b:37:4a:f5:c4:cc:c8:5b:24:99:f2:74:71:cc:
         3f:ee:a5:78:7c:53:1c:60:1e:0a:72:1f:e9:55:b4:10:f6:cf:
         9c:50:5c:db:48:bb:22:13:6a:fc:00:49:1f:be:fc:d2:d0:d5:
         ae:0e:67:c6:9d:da:60:25:bd:61:62:5c:33:8a:d8:2c:67:b1:
         d6:31:db:74:eb:e8:03:7c:d7:93:3c:3f:f5:bd:53:1b:3b:0a:
         b0:c5:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:24:42 2024 by rpki-client on console-ams.rpki-client.org