Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/1f3479ba3db75898d54dd6f4e7736dbaa20ae299.roa
File:                     1f3479ba3db75898d54dd6f4e7736dbaa20ae299.roa (raw, json)
Hash identifier:          Bvgeh4GDfOMOXbbSGmms04AzpxFuPmhd40Gs7KnEI6s=
Subject key identifier:   EB:60:77:D4:77:74:DD:7A:6F:41:21:85:94:55:77:B6:D3:26:77:F3
Certificate issuer:       /CN=44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca
Certificate serial:       2421F5
Authority key identifier: D9:E2:2D:FB:2E:DB:03:3D:7E:61:3B:B3:22:76:2A:C6:40:ED:53:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/1f3479ba3db75898d54dd6f4e7736dbaa20ae299.roa
Signing time:             Tue 06 Jun 2023 15:25:57 +0000
ROA not before:           Mon 05 Jun 2023 15:25:57 +0000
ROA not after:            Fri 06 Jun 2025 15:25:57 +0000
asID:                     11830
IP address blocks:        190.171.10.0/23 maxlen: 24
                          190.171.12.0/22 maxlen: 24
                          190.171.20.0/23 maxlen: 24
                          190.171.30.0/23 maxlen: 24
                          196.40.32.0/23 maxlen: 24
                          190.10.80.0/20 maxlen: 24
                          190.10.96.0/20 maxlen: 24
                          190.10.112.0/21 maxlen: 24
                          190.10.124.0/22 maxlen: 24
                          190.10.36.0/22 maxlen: 24
                          190.10.40.0/21 maxlen: 24
                          190.10.48.0/20 maxlen: 24
                          190.10.72.0/22 maxlen: 24
                          190.241.124.0/23 maxlen: 24
                          190.241.136.0/22 maxlen: 24
                          190.241.140.0/23 maxlen: 24
                          190.241.74.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367989 (0x2421f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca
        Validity
            Not Before: Jun  5 15:25:57 2023 GMT
            Not After : Jun  6 15:25:57 2025 GMT
        Subject: CN=1f3479ba3db75898d54dd6f4e7736dbaa20ae299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:73:e6:46:08:e7:f6:3c:89:3e:ff:29:33:8c:
                    21:56:e3:85:4f:6f:ea:ea:c2:91:34:b3:ce:27:d9:
                    ad:20:22:27:8e:81:ae:33:77:91:25:79:e5:f4:1d:
                    10:76:61:1f:76:cf:33:09:fd:8c:cd:e5:75:da:ea:
                    6d:eb:c7:e0:60:f4:c8:f8:63:39:58:9e:fe:e2:3d:
                    4a:88:3e:80:2c:d8:c3:6f:e8:b6:6d:43:c7:27:f8:
                    91:43:a8:08:83:7e:c2:2e:8e:fe:a2:12:e5:52:ce:
                    48:66:68:6b:fa:ca:79:20:73:68:a4:17:64:5d:1a:
                    6b:fd:77:6a:bd:5f:3b:16:3c:0c:48:36:03:25:9a:
                    eb:c3:cf:3f:e7:d8:c6:4c:c4:7e:94:37:7a:eb:c3:
                    e2:d3:07:f6:af:c3:23:73:72:ed:4b:3f:6f:1a:dd:
                    5f:b3:d7:35:82:1c:1f:dd:5a:38:4f:31:81:7b:f2:
                    12:e8:9e:59:d1:b0:33:5e:57:ef:95:fa:0a:30:e7:
                    e0:08:ae:fe:98:86:24:1f:c4:db:10:6d:78:e4:17:
                    01:b3:34:01:c2:b4:54:47:07:24:19:9f:7d:4a:5f:
                    42:13:f7:8b:50:b2:96:4f:f6:6c:f7:8f:25:db:1b:
                    57:9e:c0:99:52:19:6d:ad:98:0a:05:08:ec:37:83:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:60:77:D4:77:74:DD:7A:6F:41:21:85:94:55:77:B6:D3:26:77:F3
            X509v3 Authority Key Identifier:
                keyid:D9:E2:2D:FB:2E:DB:03:3D:7E:61:3B:B3:22:76:2A:C6:40:ED:53:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/1f3479ba3db75898d54dd6f4e7736dbaa20ae299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.36.0-190.10.63.255
                  190.10.72.0/22
                  190.10.80.0-190.10.119.255
                  190.10.124.0/22
                  190.171.10.0-190.171.15.255
                  190.171.20.0/23
                  190.171.30.0/23
                  190.241.74.0/23
                  190.241.124.0/23
                  190.241.136.0-190.241.141.255
                  196.40.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:5d:db:44:12:32:39:c3:d5:de:28:a1:6b:19:1c:82:a6:95:
         e2:0d:02:75:63:d7:0c:4d:c0:22:7b:4d:8d:14:73:6f:47:1f:
         5a:23:c3:81:cd:3f:59:5c:34:8e:2e:09:fe:5c:c2:96:10:81:
         26:c0:a7:2c:84:3d:b0:7d:0b:e3:ea:2f:03:69:6e:47:6f:f3:
         a5:e2:09:12:e4:80:75:10:7b:8a:95:2d:34:8e:06:0a:5a:b3:
         f4:86:c0:a9:5a:c7:cb:45:87:d5:5f:46:13:43:59:a8:39:8e:
         88:07:1a:40:10:83:d9:70:e8:60:31:28:75:cf:75:98:6c:94:
         ce:af:4c:30:7c:1b:9d:7b:e0:93:1d:a1:83:55:4a:cf:17:1b:
         45:5a:d7:7e:06:cd:37:5c:30:dc:5e:71:76:42:be:3c:9d:76:
         04:fc:e3:f7:8f:19:f0:a8:06:97:fe:f6:35:19:b4:25:c2:47:
         d7:73:44:94:d8:85:9a:53:5a:e2:ba:13:02:33:45:79:71:fe:
         73:04:97:ab:97:fc:68:b2:b8:4b:ab:6e:74:c9:f0:09:bb:bc:
         d5:90:3c:65:a3:60:2a:84:85:82:ed:10:1d:df:08:1a:ca:d4:
         34:05:83:a6:0d:15:12:83:ba:74:a1:ee:ce:ba:54:28:88:83:
         a7:7b:c5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org