Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/73a470d070220b13c38e1ee376d0281ce3327c0c.roa
File:                     73a470d070220b13c38e1ee376d0281ce3327c0c.roa (raw, json)
Hash identifier:          30tGjBAg4bchnupGlkcnIAD8xYg9k8TLjUHyXG3vpXY=
Subject key identifier:   FA:E8:C4:16:7C:25:42:9D:68:AC:03:95:68:AD:EE:2E:7A:67:AB:C8
Certificate issuer:       /CN=88d7383c300e83d93154f3c84351e1ca3d9bc1cf
Certificate serial:       12CF5F
Authority key identifier: 9B:AA:DD:15:A2:30:8A:D4:E7:B4:F6:39:67:EA:AE:1A:60:25:40:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d7383c300e83d93154f3c84351e1ca3d9bc1cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/73a470d070220b13c38e1ee376d0281ce3327c0c.roa
Signing time:             Sat 29 Jul 2023 08:30:01 +0000
ROA not before:           Fri 28 Jul 2023 08:30:01 +0000
ROA not after:            Sun 27 Jul 2025 08:30:01 +0000
asID:                     271926
IP address blocks:        190.113.48.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1232735 (0x12cf5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d7383c300e83d93154f3c84351e1ca3d9bc1cf
        Validity
            Not Before: Jul 28 08:30:01 2023 GMT
            Not After : Jul 27 08:30:01 2025 GMT
        Subject: CN=73a470d070220b13c38e1ee376d0281ce3327c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:37:2b:b4:5d:49:6e:8e:4a:db:14:b1:7f:
                    5a:08:5d:f8:77:1c:38:bc:44:af:eb:f3:76:7c:23:
                    da:9c:2a:59:e3:a3:54:d5:9d:00:4f:7d:2d:97:eb:
                    82:01:bc:dc:3a:15:17:a7:8e:ad:4b:a6:6b:0a:f4:
                    d9:27:45:42:05:24:78:02:d7:e8:02:30:dd:8f:a2:
                    8c:17:64:ff:01:3d:f0:14:ae:74:8b:ab:31:aa:00:
                    a5:70:32:65:e9:04:fe:63:37:06:bd:3c:15:e0:8d:
                    f4:8a:64:3c:a8:71:68:fa:7b:3f:b5:2e:29:e6:ca:
                    88:2e:28:ae:40:2a:c5:fa:6b:0d:2c:cc:5f:67:90:
                    67:7d:62:c0:15:96:d5:7e:9d:48:56:d7:c9:2c:85:
                    e6:a8:2c:cb:42:ae:ae:54:da:83:4d:d4:5d:69:33:
                    8a:0f:15:ba:62:39:af:b8:e4:cb:68:4b:bf:35:aa:
                    4e:54:29:eb:58:3a:17:ab:60:35:af:fa:fe:c6:44:
                    8b:a2:08:15:32:2c:54:42:a7:6b:4e:a4:b1:40:da:
                    e8:3c:3d:fc:05:74:13:3c:3b:7e:e7:bd:ab:3f:a0:
                    44:36:59:46:32:1a:5c:a8:5f:1f:94:b2:61:ea:2c:
                    81:ee:ce:27:16:e4:8e:59:4c:b1:7b:2a:a9:c6:d3:
                    d9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E8:C4:16:7C:25:42:9D:68:AC:03:95:68:AD:EE:2E:7A:67:AB:C8
            X509v3 Authority Key Identifier:
                keyid:9B:AA:DD:15:A2:30:8A:D4:E7:B4:F6:39:67:EA:AE:1A:60:25:40:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d7383c300e83d93154f3c84351e1ca3d9bc1cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/73a470d070220b13c38e1ee376d0281ce3327c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ca362ff-5192-411a-820e-7b46068f2947/88d7383c300e83d93154f3c84351e1ca3d9bc1cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:1d:78:a4:c8:7f:f0:81:3b:46:44:f8:e3:4e:74:a1:ed:06:
         8f:c1:09:cd:54:eb:44:aa:03:b1:09:00:ba:d9:74:d7:b9:b9:
         dc:3a:a0:99:da:37:71:2b:9a:a5:c2:fd:b8:e1:9c:8b:5f:86:
         29:a5:c9:b4:c2:e8:33:d7:8d:46:40:2d:d2:19:1b:17:2f:19:
         2c:df:c7:db:47:c7:ab:fd:93:ff:4f:83:e7:ee:ed:16:ac:61:
         1c:e7:9f:2b:75:ce:ea:80:d9:88:b7:96:fc:4f:80:ec:86:c2:
         bb:7a:e8:86:8d:89:9e:04:39:ee:2f:04:0b:ba:16:00:ab:87:
         17:37:4c:5e:03:63:79:8b:97:b9:60:88:e0:d3:96:aa:e0:44:
         5a:d1:61:cf:a6:b8:93:8d:a1:f2:aa:7e:91:aa:d8:91:32:d0:
         b3:6c:a2:e0:e2:af:25:2b:1a:9f:c8:0e:95:cf:28:3d:05:e0:
         6f:d6:f1:85:a7:a3:56:0a:28:db:4d:9c:4e:65:d5:36:e5:9c:
         91:42:31:c5:e9:a6:1d:c6:ee:47:81:2f:12:3d:8e:90:d2:ac:
         a6:b8:f5:cb:c2:7a:b2:4d:e7:5b:ee:e5:49:1e:45:a3:d7:c5:
         6b:75:68:4c:3e:2d:5c:e2:de:5d:6b:a9:4b:47:91:15:84:1f:
         ef:c5:65:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org