Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/723338d2-46e9-4267-8bb4-5524a9ca2af0/2ae9668f3059b99616d3bf539f6dae65eddb0554.roa
File:                     2ae9668f3059b99616d3bf539f6dae65eddb0554.roa (raw, json)
Hash identifier:          RxOqWCSXiN4xV9QfNY4WfZ1CjiOGA7df8kPUiByp4ts=
Subject key identifier:   F7:00:9B:85:65:AA:D9:16:B5:01:CF:70:B3:C8:5F:13:8C:4F:80:13
Certificate issuer:       /CN=d15d0a8a7c7078d21f558df0247ed4ea8873b0df
Certificate serial:       01DA46
Authority key identifier: CA:2E:A5:1B:6E:00:D1:EC:E1:5A:0D:8E:00:6F:7D:C8:FB:08:04:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d15d0a8a7c7078d21f558df0247ed4ea8873b0df.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/723338d2-46e9-4267-8bb4-5524a9ca2af0/2ae9668f3059b99616d3bf539f6dae65eddb0554.roa
Signing time:             Fri 30 Jun 2023 21:35:41 +0000
ROA not before:           Thu 29 Jun 2023 21:35:41 +0000
ROA not after:            Mon 30 Jun 2025 21:35:41 +0000
asID:                     266702
IP address blocks:        190.196.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121414 (0x1da46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15d0a8a7c7078d21f558df0247ed4ea8873b0df
        Validity
            Not Before: Jun 29 21:35:41 2023 GMT
            Not After : Jun 30 21:35:41 2025 GMT
        Subject: CN=2ae9668f3059b99616d3bf539f6dae65eddb0554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:c2:77:8f:a3:44:2d:65:3d:58:39:10:2e:
                    75:0a:5e:93:4b:87:9f:88:39:39:08:8f:98:33:41:
                    4e:10:3d:fd:21:4c:36:d2:6d:1f:e0:85:6c:2e:cf:
                    17:69:e5:cf:3c:cc:9b:90:58:c6:90:ec:90:32:c3:
                    01:3a:6f:a0:ad:49:c9:0f:ba:1b:95:a5:5f:29:ad:
                    69:66:63:72:53:44:43:2d:b3:1b:04:13:fe:15:4a:
                    54:b1:4c:03:c4:8b:58:38:79:ff:10:fd:10:65:b5:
                    96:80:51:57:92:51:35:71:ba:f7:5e:31:be:d1:1e:
                    8e:45:a8:11:89:1e:88:e2:5e:c7:ac:5c:89:d0:35:
                    92:4a:03:d0:e1:54:fc:e0:e5:22:71:8a:11:ea:07:
                    46:c3:45:4c:8a:ca:6e:26:84:94:5e:b4:21:17:e4:
                    a4:47:c8:d9:86:da:14:9a:76:7b:8b:1c:1d:de:a1:
                    ac:a0:25:83:e4:77:c1:ef:22:99:8f:ef:d9:17:f8:
                    94:93:ff:ca:52:e0:63:ea:50:45:56:c7:7c:1a:b5:
                    f7:c0:7d:3b:b9:d9:80:b1:58:0d:25:17:00:f3:4a:
                    8d:ac:a5:78:b3:41:fa:da:9b:e6:09:11:ae:5e:5a:
                    24:a6:3c:1b:8f:fb:5f:e0:ac:33:47:d9:15:30:b4:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:00:9B:85:65:AA:D9:16:B5:01:CF:70:B3:C8:5F:13:8C:4F:80:13
            X509v3 Authority Key Identifier:
                keyid:CA:2E:A5:1B:6E:00:D1:EC:E1:5A:0D:8E:00:6F:7D:C8:FB:08:04:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d15d0a8a7c7078d21f558df0247ed4ea8873b0df.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/723338d2-46e9-4267-8bb4-5524a9ca2af0/2ae9668f3059b99616d3bf539f6dae65eddb0554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/723338d2-46e9-4267-8bb4-5524a9ca2af0/d15d0a8a7c7078d21f558df0247ed4ea8873b0df.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:24:0e:9f:4a:4c:b9:96:0f:d7:f8:c9:c8:50:b1:14:2b:d2:
         af:cf:8e:b9:ef:5b:55:ba:14:c9:97:c5:c1:b6:69:da:12:a7:
         c4:d8:4f:ba:d5:30:0e:ef:a3:4f:e0:ea:05:5c:69:e9:45:65:
         23:85:30:1e:08:62:ba:31:c9:d6:ed:76:af:42:6f:6d:8a:9c:
         95:8d:53:10:78:d5:6a:7a:4c:d0:d8:8e:e9:45:e2:2b:6c:05:
         52:1b:7c:4c:57:b9:81:15:40:98:d0:77:21:3f:1f:06:dc:cc:
         66:45:a1:c8:65:e0:1c:f5:5e:46:42:0a:68:70:3a:c9:36:c6:
         1d:90:2c:a3:a2:f7:e0:30:34:af:f1:8c:c5:1a:ad:7a:9b:2d:
         bc:c0:bb:97:5b:04:1c:d2:1b:92:93:20:c8:ee:73:99:ee:e4:
         d6:06:9f:50:83:98:1a:e3:9e:a2:b2:02:e1:77:be:d3:36:79:
         99:04:59:8f:3e:85:78:e9:7e:85:91:d1:d6:42:ba:f1:01:a9:
         74:00:6f:7e:55:87:e7:0c:c4:2f:60:e0:d5:0d:5a:21:dd:95:
         0d:2c:be:a2:63:9d:3f:7c:49:75:80:5c:b4:05:4d:0c:ae:a6:
         a9:12:d5:7a:0d:0c:7e:83:d7:ce:77:91:9c:cb:ce:33:24:98:
         70:a3:82:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org