Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/13eb9e50bae71a6780b45517ed1b6703f3969518.roa
File:                     13eb9e50bae71a6780b45517ed1b6703f3969518.roa (raw, json)
Hash identifier:          DT5aFFMAQD5BE5a8Qxat0VHUaAqzKn5S8YvvE+SPv4M=
Subject key identifier:   9C:3A:48:95:56:FB:15:32:27:AD:DA:65:5A:16:81:FB:B5:3D:9C:61
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B7D10
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/13eb9e50bae71a6780b45517ed1b6703f3969518.roa
Signing time:             Wed 07 Feb 2024 18:04:37 +0000
ROA not before:           Wed 07 Feb 2024 18:04:37 +0000
ROA not after:            Sat 07 Feb 2026 18:04:37 +0000
asID:                     262191
IP address blocks:        190.109.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752912 (0xb7d10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  7 18:04:37 2024 GMT
            Not After : Feb  7 18:04:37 2026 GMT
        Subject: CN=13eb9e50bae71a6780b45517ed1b6703f3969518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:17:45:8d:43:75:ea:e2:4e:52:fc:94:59:ab:
                    10:a4:45:55:3e:7b:7a:f4:a0:60:cf:b0:8f:f7:f2:
                    89:5e:da:a2:64:7b:e8:c4:56:ca:38:28:c4:c3:63:
                    37:07:6a:ab:fa:a8:f4:97:01:b2:19:bf:f9:df:21:
                    57:5e:e9:f5:d5:31:9e:ae:18:2c:04:ac:16:15:77:
                    f7:03:06:85:eb:bf:e7:3e:dc:4b:6a:78:41:3a:6d:
                    bd:57:8b:c5:c7:83:17:ac:ee:1f:dd:78:e1:f7:50:
                    5d:fd:63:b4:00:73:cf:06:ad:3e:ee:db:d3:29:21:
                    40:59:c9:01:33:4b:b9:91:b0:4c:53:14:38:33:f1:
                    6e:0a:66:34:63:26:b4:21:e8:cc:f3:a1:ad:c1:98:
                    d5:8f:bf:d3:54:b9:ae:97:14:22:34:b4:a8:d3:c3:
                    0d:8b:f7:9c:30:3e:63:a0:16:f4:f5:cc:99:81:84:
                    b6:68:3b:41:42:c4:43:ac:79:77:73:b8:8b:34:36:
                    34:ec:c6:e6:e5:36:0a:c4:87:ef:f1:f2:d6:6f:c8:
                    f2:2f:a6:3b:08:50:9d:1f:44:8b:69:7a:fc:d8:e2:
                    6b:0f:02:55:23:4a:09:ef:f1:66:ce:a8:3e:ac:2d:
                    60:d9:be:9e:6c:99:29:ab:33:c9:c8:84:33:57:33:
                    2c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3A:48:95:56:FB:15:32:27:AD:DA:65:5A:16:81:FB:B5:3D:9C:61
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/13eb9e50bae71a6780b45517ed1b6703f3969518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:cf:00:8c:31:32:7d:97:0d:c4:6d:38:7b:13:ae:c0:a3:
         36:a0:a0:61:03:94:67:f4:78:4e:b3:28:36:35:99:5c:8e:e7:
         96:75:3f:50:1c:54:55:35:1f:6b:82:6b:ee:75:96:40:81:30:
         e1:bd:52:22:82:9e:61:0c:41:85:f6:0b:ac:77:97:54:1a:fe:
         39:3c:70:2b:80:de:f5:ed:3e:d6:6d:01:90:de:45:7f:d5:26:
         4c:7b:6e:bf:b8:ef:6c:3f:66:9d:b6:70:ce:cd:3e:db:a1:97:
         03:d7:86:14:df:e1:3e:26:b7:14:59:e5:99:d0:2a:cc:3a:81:
         b3:19:21:c9:6f:aa:26:8a:32:e9:90:e0:76:d1:0d:9b:27:93:
         f2:e1:3d:84:29:9b:57:0b:82:1c:08:46:80:d4:91:d1:d7:ec:
         3a:27:f0:bc:9f:68:05:db:9f:d9:b9:df:7c:7c:5d:1b:86:24:
         0a:0a:0e:ea:39:6f:25:79:e4:bf:66:37:ae:22:a0:2a:3e:8d:
         aa:2b:45:ec:08:a5:51:b2:8b:03:82:46:bf:ee:a0:d1:9d:50:
         82:1d:d7:ea:28:a6:07:40:3c:ad:7f:c7:61:d9:51:d1:af:2c:
         9c:f1:d6:c9:95:f4:5a:26:09:63:8e:8f:0d:63:63:17:12:4a:
         a9:a4:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org