Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/9b1b803700b78bd4e99e86bb02625eb426a45d04.roa
File:                     9b1b803700b78bd4e99e86bb02625eb426a45d04.roa (raw, json)
Hash identifier:          Hqn6j60MND2VYgoAgh9JaWMuYAfEyM1Pyd+d1M6bL+4=
Subject key identifier:   B7:DC:9D:F4:00:05:F3:87:4F:2C:5C:00:20:FC:75:F3:59:A1:6D:2A
Certificate issuer:       /CN=450e05696920146d80a6cffd7e47b4df43d2b64a
Certificate serial:       1FD512
Authority key identifier: 14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/9b1b803700b78bd4e99e86bb02625eb426a45d04.roa
Signing time:             Fri 21 Apr 2023 13:29:05 +0000
ROA not before:           Thu 20 Apr 2023 13:29:05 +0000
ROA not after:            Mon 21 Apr 2025 13:29:05 +0000
asID:                     12127
IP address blocks:        190.57.56.0/21 maxlen: 21
                          190.57.65.0/24 maxlen: 24
                          190.57.67.0/24 maxlen: 24
                          190.57.71.0/24 maxlen: 24
                          190.57.72.0/22 maxlen: 24
                          190.57.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2086162 (0x1fd512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450e05696920146d80a6cffd7e47b4df43d2b64a
        Validity
            Not Before: Apr 20 13:29:05 2023 GMT
            Not After : Apr 21 13:29:05 2025 GMT
        Subject: CN=9b1b803700b78bd4e99e86bb02625eb426a45d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8a:e9:19:e9:c0:00:1a:a1:d8:10:d4:3f:68:
                    82:c2:5b:27:08:c2:9b:f4:0e:ac:bc:19:ce:37:4e:
                    12:f8:f0:d1:b8:5e:e5:8f:3a:dc:c4:58:78:fe:a8:
                    40:5f:3a:6b:e9:70:a7:f0:69:1a:42:64:39:64:3f:
                    ce:a4:78:a1:90:d5:da:8f:7c:7e:a5:f5:1f:3e:75:
                    83:ed:96:3e:0b:14:57:e7:a8:1e:68:d6:f3:a5:21:
                    d9:a2:2c:a9:c9:a0:f1:ca:6d:d9:12:dd:00:5d:55:
                    60:a1:86:15:6a:0b:ec:18:46:08:ca:9a:be:40:e6:
                    e9:c1:7f:c2:17:29:38:b0:98:12:12:a2:d9:0b:4f:
                    bf:82:e2:6a:c3:91:04:f4:04:a4:88:ec:63:4d:5f:
                    37:c0:f2:f8:6c:f4:63:da:01:a5:79:7f:3c:ce:ea:
                    26:6a:54:24:14:ec:0c:01:2e:2d:0c:71:75:34:44:
                    b4:2a:6e:84:17:36:b6:3c:36:c8:86:4e:e6:8b:25:
                    35:bc:14:0b:7a:e7:d3:c0:d8:4d:08:b3:bd:b7:0e:
                    8c:1c:55:71:a5:9d:91:c0:65:6e:fa:89:d7:cc:79:
                    c8:34:c8:82:ba:9e:37:9a:50:86:d9:b4:d3:11:6c:
                    75:0b:64:c8:49:b4:fe:9f:42:86:a6:95:a2:c4:37:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DC:9D:F4:00:05:F3:87:4F:2C:5C:00:20:FC:75:F3:59:A1:6D:2A
            X509v3 Authority Key Identifier:
                keyid:14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/9b1b803700b78bd4e99e86bb02625eb426a45d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.56.0/21
                  190.57.65.0/24
                  190.57.67.0/24
                  190.57.71.0-190.57.75.255
                  190.57.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:9b:4a:55:1d:1e:d0:4b:a0:cb:10:dd:60:81:7c:f8:4e:8c:
         d5:83:fc:4e:77:2b:ab:4a:36:31:fa:b7:5c:5d:c3:e3:3a:9c:
         8d:69:d5:3d:e3:25:ed:fa:a5:b0:12:a6:89:dc:27:5b:da:9a:
         48:54:36:5b:0f:74:06:4e:2c:02:c5:9e:1f:2f:76:ce:94:c5:
         e8:aa:f4:ad:da:01:21:47:53:cd:4b:7d:16:a1:e9:e1:c0:81:
         db:82:a0:9e:fb:30:0e:f8:04:dd:cf:5c:86:51:a0:d7:c9:55:
         a4:42:9d:82:08:4f:01:6a:3e:29:1e:fc:b7:d1:2e:b3:54:bb:
         51:b0:2c:36:a0:75:1b:fc:0d:bf:71:c8:68:72:b7:92:41:bd:
         14:fe:be:e2:83:7c:41:8b:0c:cd:2c:38:88:05:07:af:ea:80:
         9a:ed:bb:1f:b4:a1:d0:81:41:1e:24:96:bb:4f:4c:31:30:95:
         35:fa:9e:45:63:01:cd:00:6e:b6:d7:75:58:db:de:3f:36:1b:
         01:b3:fa:7f:2b:95:20:10:58:59:01:d3:bc:5b:87:6f:cd:8d:
         81:e5:32:3d:39:db:0b:16:06:19:20:b4:91:13:72:2b:20:20:
         23:59:3a:ae:78:b4:33:3a:b4:37:76:1c:fb:98:31:df:cf:10:
         6b:91:74:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org