Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/37a8d8d0804361cd0ca05582d1b6cd03f624c54c.roa
File:                     37a8d8d0804361cd0ca05582d1b6cd03f624c54c.roa (raw, json)
Hash identifier:          shqNiWWCIAZJyjJEwhTGdkwIYBiPmaCZ3JtA1WqaPwE=
Subject key identifier:   10:2E:F6:BF:58:D8:58:C8:50:E2:84:10:EF:2A:63:C8:DB:F1:95:3F
Certificate issuer:       /CN=88d7383c300e83d93154f3c84351e1ca3d9bc1cf
Certificate serial:       12E4BB
Authority key identifier: 9B:AA:DD:15:A2:30:8A:D4:E7:B4:F6:39:67:EA:AE:1A:60:25:40:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d7383c300e83d93154f3c84351e1ca3d9bc1cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/37a8d8d0804361cd0ca05582d1b6cd03f624c54c.roa
Signing time:             Sat 29 Jul 2023 08:30:07 +0000
ROA not before:           Fri 28 Jul 2023 08:30:07 +0000
ROA not after:            Sun 27 Jul 2025 08:30:07 +0000
asID:                     271926
IP address blocks:        190.113.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1238203 (0x12e4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d7383c300e83d93154f3c84351e1ca3d9bc1cf
        Validity
            Not Before: Jul 28 08:30:07 2023 GMT
            Not After : Jul 27 08:30:07 2025 GMT
        Subject: CN=37a8d8d0804361cd0ca05582d1b6cd03f624c54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:72:e3:d7:b2:e8:95:a6:be:e5:37:4a:5c:
                    7b:71:13:19:55:39:87:df:7e:17:8d:8f:f8:06:13:
                    14:a2:67:6a:e4:76:83:da:f0:a9:ae:db:8b:59:8e:
                    da:92:c3:a2:e1:09:e4:a7:7b:0b:a4:4a:a2:42:3a:
                    74:66:6d:a1:7b:77:29:f9:37:a4:fd:18:f2:bd:26:
                    fd:33:15:67:7d:56:78:5c:24:55:9c:e5:15:64:ae:
                    cc:a2:3d:63:02:04:b0:dc:fc:08:e4:3a:98:8b:c6:
                    2b:2a:ef:5d:d2:ea:e0:e4:2a:68:c0:86:50:ec:ed:
                    2e:a3:47:c7:df:de:62:98:53:8c:64:db:0d:7f:7e:
                    ca:25:9d:26:3d:1c:d2:d5:b7:c7:3d:5e:11:a8:a5:
                    1e:2a:2e:a0:ac:24:e2:9b:e4:2f:e9:91:73:76:e5:
                    0d:78:75:85:ea:38:04:fd:c2:ae:37:6f:9c:f7:bf:
                    4c:99:05:ac:e8:87:cb:37:79:14:b1:c2:2e:62:96:
                    74:31:ba:7a:a8:66:57:62:37:1f:f6:ea:b0:8c:fa:
                    4c:0b:2f:06:6c:91:2b:f9:1b:fa:22:27:09:39:48:
                    60:c3:4f:8c:7a:7b:af:cd:7d:2b:a1:a3:b5:ac:34:
                    44:80:24:ba:75:fa:f1:6a:72:54:01:9f:9b:b3:c9:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2E:F6:BF:58:D8:58:C8:50:E2:84:10:EF:2A:63:C8:DB:F1:95:3F
            X509v3 Authority Key Identifier:
                keyid:9B:AA:DD:15:A2:30:8A:D4:E7:B4:F6:39:67:EA:AE:1A:60:25:40:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d7383c300e83d93154f3c84351e1ca3d9bc1cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/37a8d8d0804361cd0ca05582d1b6cd03f624c54c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/88d7383c300e83d93154f3c84351e1ca3d9bc1cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:17:43:86:10:cd:ca:50:ec:14:32:4f:54:15:cf:32:84:51:
         d6:4e:09:0f:e0:cc:9e:73:f3:65:93:3e:0a:d4:70:67:e9:65:
         4c:66:7d:3c:24:36:96:c1:01:ed:e2:9d:7e:05:ef:05:07:a7:
         31:8e:26:a1:d6:46:47:41:59:6b:ea:1d:1c:0e:60:5e:d3:b9:
         6c:da:db:b5:6d:94:6a:54:fc:c2:9f:6b:7b:7c:1f:28:33:06:
         22:b6:f3:12:de:13:ce:1c:22:ca:a3:39:71:83:f8:87:f9:28:
         b8:8f:14:a6:ba:98:64:3f:05:8c:2a:62:d5:36:0f:77:4e:0b:
         40:4c:b5:2c:95:30:02:fa:15:bb:00:81:60:31:78:12:d1:c1:
         33:6b:5a:0b:fe:6a:4d:9f:2e:fc:25:25:60:68:ca:ad:5b:47:
         9f:a7:0f:30:79:1a:5d:e8:95:b0:c3:9b:4b:15:7c:3c:3d:c9:
         2e:8a:06:70:d1:6d:98:c8:11:4e:cb:b4:d4:33:ee:19:24:e4:
         1c:ac:01:b3:f9:5a:b0:af:33:e3:53:31:2d:dc:37:28:bc:ae:
         4f:76:cd:4b:7f:2b:f2:15:87:3f:24:1a:25:d6:cc:1c:b5:4a:
         12:b3:c7:72:42:77:2f:76:2e:a2:59:d7:4d:5b:91:05:0a:97:
         5f:e0:1d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org