Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/e0c535ce50ef4677837d1acef1b10d36020d49ea.roa
File:                     e0c535ce50ef4677837d1acef1b10d36020d49ea.roa (raw, json)
Hash identifier:          E4FfdWreZjIg1BMB1nzy+0B4BsWz+NIfzbTKZiEy65s=
Subject key identifier:   34:11:BE:2C:BC:D3:3C:0E:70:74:4A:67:06:95:63:9A:51:E4:D7:9C
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       21457D
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/e0c535ce50ef4677837d1acef1b10d36020d49ea.roa
Signing time:             Thu 01 Jun 2023 15:42:28 +0000
ROA not before:           Wed 31 May 2023 15:42:27 +0000
ROA not after:            Sun 01 Jun 2025 15:42:27 +0000
asID:                     23520
IP address blocks:        190.242.105.0/24 maxlen: 24
                          190.242.36.0/22 maxlen: 24
                          190.242.40.0/23 maxlen: 24
                          190.242.46.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2180477 (0x21457d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: May 31 15:42:27 2023 GMT
            Not After : Jun  1 15:42:27 2025 GMT
        Subject: CN=e0c535ce50ef4677837d1acef1b10d36020d49ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:6e:65:7b:97:ce:d5:da:d7:80:f5:65:61:
                    cf:8c:76:24:a4:5e:ac:f6:48:46:6a:a0:32:5d:54:
                    4b:5f:74:10:fb:8f:de:c7:51:2e:c4:d8:6c:a5:84:
                    ae:bf:9e:1a:e5:7c:b6:0f:7e:2d:3d:e6:1b:0c:35:
                    72:39:83:07:86:b5:3b:34:ee:95:43:cf:a3:29:78:
                    19:0a:22:6f:cd:b5:fa:4f:1a:11:f5:87:77:2b:76:
                    01:4a:ba:98:30:47:a6:ea:c8:f6:8a:4a:d1:d6:48:
                    34:f0:71:d9:a8:31:ef:7a:e2:5a:c2:c6:68:69:ed:
                    b1:84:20:4f:b9:e6:e7:fa:65:6e:d1:dd:62:c3:ea:
                    59:48:fe:6c:82:2c:24:38:87:9a:4f:ea:b5:55:03:
                    57:64:7d:47:75:e1:63:38:9a:5e:dd:2c:42:4c:40:
                    a2:72:d5:d2:01:dc:77:10:66:05:b5:ff:42:65:99:
                    6b:c9:ad:fe:78:de:dc:bf:45:e8:3c:9d:d4:87:d7:
                    69:de:46:84:47:42:4b:87:ec:43:f5:e3:6b:1e:74:
                    36:8a:c8:19:53:60:92:9d:40:4c:3f:d6:b0:2b:ac:
                    dd:eb:6f:e0:50:8f:77:85:98:6c:bd:58:01:78:49:
                    75:f8:06:a5:10:05:03:03:52:94:0b:dd:1f:46:6c:
                    c8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:11:BE:2C:BC:D3:3C:0E:70:74:4A:67:06:95:63:9A:51:E4:D7:9C
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/e0c535ce50ef4677837d1acef1b10d36020d49ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.36.0-190.242.41.255
                  190.242.46.0/23
                  190.242.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:0e:db:a5:75:0d:1a:1f:9c:95:4c:86:60:22:c5:35:c9:48:
         a2:0e:cf:09:28:22:e1:68:03:74:e6:6f:46:a4:23:72:83:e9:
         8d:d6:c7:5c:25:c0:ea:bd:99:ba:4e:5e:28:d5:2d:99:96:98:
         83:f6:eb:cd:3a:e7:82:07:54:4d:45:ac:9c:55:75:7f:c7:1a:
         05:b7:dd:63:1a:95:cd:62:a0:2e:e8:de:4d:40:9e:eb:40:15:
         84:c0:b3:ab:54:73:dd:94:8a:80:57:60:a6:13:b9:a3:af:cd:
         0c:24:b8:f3:4a:c5:a3:4e:75:40:52:ee:69:cc:3b:2b:10:c7:
         2e:0b:31:3d:c8:1f:2c:1b:7f:9a:c7:8d:fa:57:ff:59:90:fb:
         31:00:ee:f2:26:eb:ff:a0:2a:7d:ce:08:23:51:45:35:92:b6:
         21:1c:81:76:2f:8c:3f:c7:7c:5a:9d:dc:32:2f:56:1e:42:d7:
         e8:12:6a:5a:1d:0b:53:26:19:ad:4c:02:b8:16:ac:80:ee:22:
         0f:28:71:77:55:7a:70:67:af:d6:d7:f0:e3:33:55:b3:61:a8:
         ea:0b:ef:aa:2b:b6:ec:bc:34:73:56:fd:a8:4e:1e:24:76:f0:
         16:92:05:00:a5:bb:a9:59:ce:ca:86:6a:ca:5e:ed:6b:2d:48:
         ab:f3:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:24:42 2024 by rpki-client on console-ams.rpki-client.org