Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/903c772bdd44c0523490cc19ffc685b0c6f5b22b.roa
File:                     903c772bdd44c0523490cc19ffc685b0c6f5b22b.roa (raw, json)
Hash identifier:          dsuL8AibTvIbG6GJs0idsQz4Drkq95n8mAm6K1yLdMI=
Subject key identifier:   FB:96:C5:85:A5:A6:A4:57:52:E7:70:D6:01:4F:18:24:DF:E7:E4:13
Certificate issuer:       /CN=450e05696920146d80a6cffd7e47b4df43d2b64a
Certificate serial:       17CC31
Authority key identifier: 14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/903c772bdd44c0523490cc19ffc685b0c6f5b22b.roa
Signing time:             Mon 13 Jun 2022 16:27:38 +0000
ROA not before:           Mon 13 Jun 2022 03:00:00 +0000
ROA not after:            Thu 13 Jun 2024 03:00:00 +0000
asID:                     12127
IP address blocks:        190.57.20.0/24 maxlen: 24
                          190.57.27.0/24 maxlen: 24
                          190.57.31.0/24 maxlen: 24
                          190.57.63.0/24 maxlen: 24
                          190.57.104.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559601 (0x17cc31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450e05696920146d80a6cffd7e47b4df43d2b64a
        Validity
            Not Before: Jun 13 03:00:00 2022 GMT
            Not After : Jun 13 03:00:00 2024 GMT
        Subject: CN=903c772bdd44c0523490cc19ffc685b0c6f5b22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1e:76:4c:53:9d:03:1d:0e:77:c6:46:2a:ee:
                    29:45:c4:6c:97:e1:ab:fe:81:01:a4:0b:cd:2c:b9:
                    f5:79:b0:19:15:d9:52:52:4d:0d:24:f4:ec:61:8a:
                    23:75:d6:c6:91:68:ab:6a:34:a8:38:23:26:c2:57:
                    de:6e:4c:89:94:cb:1d:57:3b:4a:f8:39:de:3b:4e:
                    b2:fa:ac:85:78:4a:b3:b2:25:73:a2:f3:43:e3:3f:
                    ac:8c:23:b2:3c:3c:58:d0:a7:3c:6a:e5:b8:3e:3c:
                    a2:17:88:ec:b0:36:a5:14:69:f5:dd:60:de:5e:08:
                    13:bf:1f:4b:c2:0a:1d:12:12:d2:37:f2:b2:32:07:
                    ae:75:e6:35:52:94:e7:33:ba:6f:3a:d4:bd:ca:c5:
                    74:a6:96:ba:49:b0:47:6e:14:ea:73:45:51:a1:ed:
                    90:31:ef:c6:d0:e9:e6:52:16:07:28:46:3d:d0:02:
                    85:06:f2:49:5b:36:f7:75:2c:df:41:ea:a5:8f:f1:
                    23:ae:8d:76:80:8c:a1:36:1a:e2:6f:7f:b3:70:43:
                    81:b2:0b:7a:5c:d7:6d:7f:27:30:62:ef:7f:79:87:
                    7f:12:a2:3c:97:f6:ea:d2:a9:58:e1:7a:c8:ef:39:
                    e4:9f:61:d9:5a:d9:80:a4:0a:fa:45:f1:12:c5:d2:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:96:C5:85:A5:A6:A4:57:52:E7:70:D6:01:4F:18:24:DF:E7:E4:13
            X509v3 Authority Key Identifier:
                keyid:14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/903c772bdd44c0523490cc19ffc685b0c6f5b22b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.20.0/24
                  190.57.27.0/24
                  190.57.31.0/24
                  190.57.63.0/24
                  190.57.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:59:17:eb:50:af:f7:50:d2:7f:54:2b:9c:b5:9c:14:10:43:
         31:24:b7:75:a8:f6:32:bd:48:8b:a8:25:56:0c:f6:8e:76:23:
         5a:7d:1b:e8:57:f1:5f:02:6d:56:55:9e:67:49:22:57:95:be:
         c4:84:2a:7c:77:9d:cb:bf:65:a9:32:e4:1e:6d:4f:b4:a6:bd:
         82:49:9c:2a:10:3e:a0:71:b5:9d:35:b0:42:a6:0d:03:63:58:
         d1:a7:13:0a:ed:8d:c7:87:e8:cc:d1:a6:70:04:53:0c:fb:05:
         4d:62:14:fd:72:bc:bd:e9:c5:cc:e9:4b:d3:e7:7b:5a:1e:2f:
         e1:f7:7b:35:ee:ad:85:98:9d:27:30:0f:04:71:f5:15:da:52:
         97:58:98:98:14:8d:0d:61:f3:c9:0c:ea:df:7b:da:32:10:90:
         d3:55:b8:a9:99:3b:a4:38:8c:2e:fd:a3:2e:ac:a8:f5:61:45:
         33:56:15:f1:35:b8:25:bf:48:44:af:c6:60:33:e3:a0:fd:6c:
         dd:fa:72:ee:38:f1:3b:f9:13:68:06:f2:b3:2e:70:6d:4e:1b:
         56:d6:6e:0a:b1:2e:4a:3b:9d:da:43:72:ba:f0:4a:67:0f:a9:
         1c:f0:20:dc:3b:1c:89:d0:32:78:32:8f:c2:08:79:be:be:65:
         41:45:ed:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org