Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/46d0bccfeaadda4edf998dcf9507d8bfb6830961.roa
File:                     46d0bccfeaadda4edf998dcf9507d8bfb6830961.roa (raw, json)
Hash identifier:          kRGjK9/U5hzO99vfgXhZ+XCv6Ie+ROg7ccaVzPGWICg=
Subject key identifier:   9D:6D:18:DF:F5:47:50:FE:DE:13:A9:81:B6:C1:B6:26:4D:44:AD:03
Certificate issuer:       /CN=450e05696920146d80a6cffd7e47b4df43d2b64a
Certificate serial:       2688AB
Authority key identifier: 14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/46d0bccfeaadda4edf998dcf9507d8bfb6830961.roa
Signing time:             Wed 24 Jan 2024 03:13:09 +0000
ROA not before:           Wed 24 Jan 2024 03:13:09 +0000
ROA not after:            Sat 24 Jan 2026 03:13:09 +0000
asID:                     263783
IP address blocks:        190.57.7.0/24 maxlen: 24
                          190.57.16.0/24 maxlen: 24
                          190.57.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2525355 (0x2688ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450e05696920146d80a6cffd7e47b4df43d2b64a
        Validity
            Not Before: Jan 24 03:13:09 2024 GMT
            Not After : Jan 24 03:13:09 2026 GMT
        Subject: CN=46d0bccfeaadda4edf998dcf9507d8bfb6830961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:ea:c9:6b:d8:03:15:8a:72:29:a3:09:07:
                    a2:79:c6:c4:8c:f8:d5:38:6f:86:aa:49:34:13:66:
                    45:0c:6e:c8:cc:42:fd:44:00:7b:5c:aa:3c:22:e5:
                    c6:fa:fa:a6:ef:d3:66:0f:e4:0b:7c:c8:cb:c1:ab:
                    13:f2:57:20:e1:13:7b:87:6b:d6:76:47:cc:61:29:
                    9e:69:f8:e5:48:f4:67:ef:66:ea:05:68:d6:4c:de:
                    e0:f1:5e:7f:af:9c:02:5b:22:14:d8:78:b9:51:ed:
                    eb:01:0b:ff:d9:c9:50:46:c1:27:1e:22:e0:bb:45:
                    b7:7b:e2:f8:00:29:ef:ae:fb:b5:25:b3:0f:9b:38:
                    86:56:71:9e:9b:6f:25:7e:31:58:0b:fd:29:2e:6c:
                    69:8c:9b:af:42:17:95:a6:0a:f2:fe:46:56:7c:d1:
                    d0:a5:a8:51:98:3d:40:ba:87:4b:19:54:7f:7c:1c:
                    99:c9:fb:b8:db:14:a8:77:05:ad:1e:5e:cc:be:5f:
                    d6:a9:f3:b1:3f:b7:54:a7:04:60:b1:cc:83:c6:cf:
                    1d:c7:48:f6:08:38:6d:9b:ff:f0:46:58:9f:6d:bf:
                    af:fd:c3:9e:a0:6e:6f:7a:44:bf:46:73:37:35:92:
                    ab:a8:db:31:2e:5b:ac:a1:c5:4a:ae:2f:dd:43:f4:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6D:18:DF:F5:47:50:FE:DE:13:A9:81:B6:C1:B6:26:4D:44:AD:03
            X509v3 Authority Key Identifier:
                keyid:14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/46d0bccfeaadda4edf998dcf9507d8bfb6830961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.7.0/24
                  190.57.16.0/24
                  190.57.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:4d:93:d6:c8:c8:eb:2c:83:a7:ce:d9:4d:ef:9a:c8:fd:38:
         ee:7b:dd:ca:47:99:7a:1a:15:97:4f:81:ff:5d:60:6c:e1:4a:
         39:28:1a:ed:3d:c3:01:5f:a7:28:ec:44:7b:66:ad:45:46:16:
         d5:e2:7d:16:17:fc:7e:72:bc:d9:ad:4c:0c:0f:40:1a:48:50:
         d2:69:a5:bc:df:7c:3b:29:64:73:a6:92:a7:52:44:06:d2:a2:
         ab:94:a7:14:99:dc:3d:b2:58:61:3b:92:39:be:2e:54:e5:17:
         4a:bd:be:8c:5b:6b:19:85:44:14:9d:b9:25:81:b4:9e:44:0e:
         fd:ba:a3:aa:2e:ea:4c:1f:cd:c1:03:6e:0b:d3:f8:b4:9c:cb:
         1a:07:d6:09:d9:3f:e2:2c:a0:62:e5:21:84:10:11:9d:05:b3:
         5e:75:e2:b1:2b:0a:00:ae:56:b1:e0:3d:c3:fb:3d:17:1b:89:
         4b:2a:09:e9:98:f1:91:84:17:f3:e1:cd:fb:72:f3:a4:5c:3a:
         63:b6:bb:f3:46:82:24:b5:6c:58:e7:ca:a1:e0:0f:3e:a0:c3:
         61:27:04:14:81:99:6b:91:df:b6:ab:32:e7:9b:61:01:2e:45:
         60:ae:7c:f6:01:69:c9:b5:b7:8a:66:97:a1:8e:31:df:00:e4:
         9e:09:8f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org