Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/f26fb093afbb292dc6c1343a20b187814ebb8c0c.roa
File:                     f26fb093afbb292dc6c1343a20b187814ebb8c0c.roa (raw, json)
Hash identifier:          o24u+Bwb2vL/UfFaW8Y+Kmh2CoMDE6kOpEXpq4FusUQ=
Subject key identifier:   F9:BA:0C:73:2A:F0:05:83:34:38:DD:06:C5:7F:19:9F:90:75:BC:9E
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       2162E3
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/f26fb093afbb292dc6c1343a20b187814ebb8c0c.roa
Signing time:             Thu 01 Jun 2023 15:42:37 +0000
ROA not before:           Wed 31 May 2023 15:42:27 +0000
ROA not after:            Sun 01 Jun 2025 15:42:27 +0000
asID:                     262191
IP address blocks:        190.242.98.0/24 maxlen: 24
                          190.242.103.0/24 maxlen: 24
                          190.242.104.0/23 maxlen: 24
                          190.242.109.0/24 maxlen: 24
                          190.242.112.0/23 maxlen: 24
                          190.242.115.0/24 maxlen: 24
                          190.242.117.0/24 maxlen: 24
                          190.242.125.0/24 maxlen: 24
                          190.242.22.0/23 maxlen: 24
                          190.242.129.0/24 maxlen: 24
                          190.242.130.0/24 maxlen: 24
                          190.242.36.0/22 maxlen: 24
                          190.242.40.0/21 maxlen: 24
                          190.242.54.0/23 maxlen: 24
                          190.242.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188003 (0x2162e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: May 31 15:42:27 2023 GMT
            Not After : Jun  1 15:42:27 2025 GMT
        Subject: CN=f26fb093afbb292dc6c1343a20b187814ebb8c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:66:bd:10:79:24:28:13:3a:fe:85:24:4c:
                    ee:08:88:a3:ec:15:0c:55:a2:73:d5:8e:f1:be:b4:
                    32:7f:a0:52:4a:93:b5:2e:7a:a7:3b:70:a9:57:15:
                    17:e0:b2:66:94:c8:1a:4c:cb:12:b9:fe:0e:9e:c7:
                    31:e1:09:bb:bf:82:29:2e:45:89:c2:c5:85:e7:33:
                    e3:68:d6:23:28:b5:44:dc:2e:8e:dc:85:cd:ad:08:
                    9d:6c:3e:30:bd:97:3b:19:cc:67:29:92:df:83:2b:
                    69:6c:4d:7d:b7:e2:9f:09:ad:2f:b4:db:02:5b:9c:
                    c5:27:36:5d:7d:e2:4f:bd:75:8a:4e:9d:74:78:6d:
                    9c:ac:20:f3:33:00:e8:e7:9b:7d:b2:cb:a9:f6:8a:
                    6b:a5:8d:6b:df:1a:0a:78:81:cb:b6:17:2a:70:88:
                    67:d6:5b:7b:41:60:23:72:67:2d:0d:4e:de:38:b4:
                    a9:8e:0b:c1:fc:4e:94:23:9e:ec:70:0a:6d:50:80:
                    e3:8b:dd:02:f8:72:a0:1c:47:eb:5b:de:c4:3e:5a:
                    01:25:46:57:c5:ff:af:4a:cf:70:7d:f0:1b:b1:04:
                    d5:ac:13:25:0d:63:d4:6a:6d:50:11:80:d1:9b:bf:
                    0b:0b:c1:a4:a3:c7:74:0d:12:cb:97:e4:b7:89:30:
                    d3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BA:0C:73:2A:F0:05:83:34:38:DD:06:C5:7F:19:9F:90:75:BC:9E
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/f26fb093afbb292dc6c1343a20b187814ebb8c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.22.0/23
                  190.242.36.0-190.242.47.255
                  190.242.54.0/23
                  190.242.60.0/22
                  190.242.98.0/24
                  190.242.103.0-190.242.105.255
                  190.242.109.0/24
                  190.242.112.0/23
                  190.242.115.0/24
                  190.242.117.0/24
                  190.242.125.0/24
                  190.242.129.0-190.242.130.255

    Signature Algorithm: sha256WithRSAEncryption
         0a:8f:53:be:15:75:7f:b8:4f:64:d5:7a:57:37:eb:c1:c3:af:
         d6:48:53:9e:0b:a4:4b:1d:24:e3:cd:d5:d7:1f:8d:ac:3b:32:
         22:88:be:ee:ba:f5:91:32:c3:b6:12:05:9d:3b:d4:c2:b9:a2:
         45:03:79:3f:de:db:ef:6c:6b:83:1d:38:18:8c:af:f5:78:e5:
         2d:1d:51:6a:fc:4b:c5:ee:44:56:f3:c8:22:1b:ea:fb:cf:2a:
         a8:43:16:cd:73:4a:cd:f0:1f:4d:91:b1:aa:ac:b4:a2:2c:58:
         15:b4:7c:f0:41:7e:f2:20:ff:5e:b4:83:ea:f6:50:60:da:b6:
         78:0c:7b:26:4d:30:20:9c:57:a1:4a:59:42:63:22:3e:26:a3:
         bb:7a:ee:c8:af:87:81:5b:64:5f:46:60:79:79:ac:7b:30:6e:
         5a:06:32:ce:00:44:b2:e2:f6:da:15:45:e1:69:60:01:ea:1e:
         eb:6d:0c:9e:e7:f2:62:61:f3:72:78:e0:4c:f5:d2:57:61:1f:
         1b:44:bb:10:09:52:6c:3a:91:5b:f0:0f:50:36:bc:15:f7:dc:
         53:9a:82:bc:c2:8f:a1:13:5c:d2:cd:70:2e:39:41:d8:a0:a8:
         9d:a7:50:c6:78:43:13:cc:e6:4b:0b:a6:c3:e8:ad:38:01:e7:
         e9:0c:de:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 12 18:24:43 2024 by rpki-client on console-ams.rpki-client.org