Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/36b7fa7b322440705e1965970a4b9ec30ae4859f.roa
File:                     36b7fa7b322440705e1965970a4b9ec30ae4859f.roa (raw, json)
Hash identifier:          5urgk1RS/mdt0CkyiPGuKGkiDPQfGnHhlrmUB1Exs6A=
Subject key identifier:   69:4A:9F:D8:D2:D9:36:D6:9F:AD:D8:18:13:ED:D9:5C:01:A4:32:55
Certificate issuer:       /CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
Certificate serial:       261B7A
Authority key identifier: 6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/36b7fa7b322440705e1965970a4b9ec30ae4859f.roa
Signing time:             Thu 18 Jan 2024 12:35:15 +0000
ROA not before:           Thu 18 Jan 2024 12:35:15 +0000
ROA not after:            Sun 18 Jan 2026 12:35:15 +0000
asID:                     60022
IP address blocks:        190.121.208.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2497402 (0x261b7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
        Validity
            Not Before: Jan 18 12:35:15 2024 GMT
            Not After : Jan 18 12:35:15 2026 GMT
        Subject: CN=36b7fa7b322440705e1965970a4b9ec30ae4859f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:24:26:13:05:67:fb:eb:4f:3f:9d:e0:dc:ac:
                    a9:61:2e:da:88:da:fc:b5:8a:8f:01:bb:5b:df:a1:
                    08:ae:b0:25:55:a3:04:6f:ac:14:a3:82:a0:db:2f:
                    59:4d:a4:f3:8a:3b:96:ce:8d:e6:9c:c1:f3:ab:34:
                    68:8d:d5:e5:ad:80:60:50:e3:91:a3:62:bd:22:2d:
                    c3:0c:d2:25:90:7b:37:db:21:ff:f3:df:1d:df:5d:
                    64:2a:92:f9:ed:6e:38:17:49:80:d6:d1:1e:9b:97:
                    52:aa:f8:db:77:24:73:5a:a5:b8:cb:ca:50:89:12:
                    12:4b:b2:95:0b:6c:cf:0a:db:48:78:6a:b4:3f:c4:
                    6b:37:a3:3b:2f:c2:32:df:c5:bc:c2:34:77:ef:c8:
                    0a:cb:37:a8:9b:ed:67:c1:5b:a0:a7:56:22:fb:8d:
                    25:a0:d7:6c:1e:18:2d:72:6a:9e:d2:e1:c9:38:98:
                    59:e7:9b:eb:05:64:20:8b:31:c0:de:ea:d4:4c:d0:
                    08:d0:f7:5d:b3:f9:97:32:a6:4a:14:15:cf:6c:f4:
                    1e:de:89:35:df:72:1d:b2:c3:ba:f9:c1:ab:42:af:
                    05:a0:6c:f2:47:21:71:ae:ad:3c:a5:42:7b:97:d5:
                    06:a7:99:6c:da:c2:4f:a0:af:ea:58:2c:df:79:21:
                    9a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4A:9F:D8:D2:D9:36:D6:9F:AD:D8:18:13:ED:D9:5C:01:A4:32:55
            X509v3 Authority Key Identifier:
                keyid:6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/36b7fa7b322440705e1965970a4b9ec30ae4859f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/4ec9e37ddb578cbbdc4e2281b37679864d80672b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:5e:07:bc:1a:8e:00:a8:5a:b5:c5:3a:de:c6:b8:2c:6c:5c:
         db:b6:40:e8:b7:1c:55:4a:aa:0b:1a:b4:81:3e:31:c1:8d:6a:
         8d:30:ce:33:10:e2:e8:fd:f4:c9:88:c6:26:1f:1d:68:75:89:
         78:f5:0f:09:fe:6f:03:37:38:5d:4b:f6:f5:27:8d:54:6f:a7:
         09:40:0b:68:ea:28:23:86:a5:88:79:a1:82:55:c0:68:c0:d5:
         a0:6f:85:d4:20:86:47:a0:8b:ab:64:f9:0b:98:0f:cb:58:b0:
         40:27:eb:11:0a:9e:7c:63:72:0d:85:e5:a2:e1:cc:7e:10:49:
         0f:21:08:c2:81:32:03:cc:c7:1b:ab:79:0f:cc:64:6d:43:97:
         ab:08:3b:01:dc:53:ec:1e:9a:c5:d4:32:4d:d1:78:08:a5:e8:
         01:40:fe:99:d9:1e:ed:dd:2f:8f:01:fb:43:a8:52:52:60:b0:
         e1:c1:f2:47:0f:63:6f:da:7b:a5:cf:45:98:7a:29:62:57:43:
         45:e7:5e:a9:33:ac:14:9f:50:db:5a:9f:fd:a3:99:95:97:29:
         ab:20:37:6d:d3:1c:26:de:88:d6:15:73:db:0c:9b:97:0a:14:
         13:57:af:53:31:1d:00:88:c8:2e:12:d3:e6:da:d9:c3:ee:7b:
         8a:13:46:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org