Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/23553cc53afd9bd468ede24d88dc1f7c603299c0.roa
File:                     23553cc53afd9bd468ede24d88dc1f7c603299c0.roa (raw, json)
Hash identifier:          xQFVyKXmaHDWaLiiKQAeHWAG7sEK1hxaqpfsTzmvgQc=
Subject key identifier:   93:98:A8:0A:4D:64:49:A1:68:C5:78:03:4B:8D:FE:38:E0:67:EF:BE
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B7941
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/23553cc53afd9bd468ede24d88dc1f7c603299c0.roa
Signing time:             Wed 07 Feb 2024 18:02:48 +0000
ROA not before:           Wed 07 Feb 2024 18:02:48 +0000
ROA not after:            Sat 07 Feb 2026 18:02:48 +0000
asID:                     262191
IP address blocks:        190.109.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751937 (0xb7941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  7 18:02:48 2024 GMT
            Not After : Feb  7 18:02:48 2026 GMT
        Subject: CN=23553cc53afd9bd468ede24d88dc1f7c603299c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:be:b4:d6:96:e0:1a:e0:f4:28:b5:e2:fa:d6:
                    7e:ff:00:5a:b9:a1:00:76:0f:51:1b:d6:9f:d8:99:
                    aa:fa:de:2d:3b:5f:d0:a6:a3:9f:6b:b3:a0:bd:37:
                    48:a5:5a:cc:95:2c:dc:2e:8b:88:92:36:f1:0d:0b:
                    3a:22:14:74:36:2e:53:86:59:02:63:57:c0:ec:84:
                    59:11:67:8b:fc:e3:91:be:cd:d6:4f:74:6c:cd:cc:
                    0f:d3:7f:96:a9:94:91:b0:36:07:6d:45:dc:ec:42:
                    3d:c7:89:28:db:c3:58:35:6d:61:e8:7e:db:e2:9f:
                    a0:1a:ae:2c:75:99:a6:cd:16:98:d9:5d:a0:5c:36:
                    af:1e:ef:fb:3a:e4:e7:64:f3:31:86:6e:3d:33:71:
                    bf:f9:05:88:95:be:18:9c:80:ed:8c:8d:50:ad:1d:
                    73:19:2c:61:fa:1b:49:3c:ec:be:b4:7b:11:d7:a1:
                    84:45:ff:a1:17:99:f4:79:37:a7:9f:43:e0:45:53:
                    6a:8f:e5:64:df:a9:96:7f:fd:ae:6d:bf:9e:0d:85:
                    c2:79:cc:78:c4:99:a7:7d:5b:2b:0a:22:2f:2b:4a:
                    4b:8c:52:5d:48:cc:23:a7:db:eb:b3:8f:e1:6e:ff:
                    6f:ef:f4:73:cb:09:ba:d6:1d:51:1b:28:bc:cd:5b:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:98:A8:0A:4D:64:49:A1:68:C5:78:03:4B:8D:FE:38:E0:67:EF:BE
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/23553cc53afd9bd468ede24d88dc1f7c603299c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:9c:37:fd:54:10:69:24:cb:c3:1a:06:48:05:e6:a1:6e:52:
         a4:f5:79:ac:02:48:2f:cc:53:7b:dc:cc:97:b9:38:67:5a:21:
         fe:d7:b7:55:9f:93:01:75:bc:18:5d:84:83:ae:dd:5c:b1:38:
         f5:54:a8:a9:ab:3d:c9:68:89:f9:57:44:cb:84:98:75:ed:82:
         1f:3e:f5:49:c5:05:2f:61:55:5a:3f:a0:e5:69:45:e4:15:4f:
         c7:44:89:2b:c7:7a:8a:07:6a:e2:89:21:6b:47:b9:76:02:14:
         58:24:52:20:d5:e5:c9:9b:e7:8e:c7:d4:1c:23:4c:26:49:73:
         d8:58:52:20:cf:17:93:27:1f:eb:70:9e:a9:35:cc:ad:02:f0:
         eb:59:ce:a6:4b:35:f4:4c:bc:c1:c2:54:08:71:48:a9:7f:b7:
         be:22:40:f1:b4:fa:c8:12:90:45:fe:c7:87:52:c5:e7:62:9a:
         7f:fc:fd:b8:7b:81:3b:1d:8e:20:65:21:c0:fb:a8:e6:0e:ae:
         de:7e:79:1f:b6:26:1b:f1:2d:0d:40:b4:80:2a:6e:0f:0c:35:
         9b:f0:96:77:18:35:bd:f2:98:ef:fb:75:aa:69:8e:f3:03:a7:
         fc:db:62:63:34:ac:37:f6:d3:d2:d4:6a:c1:2f:2a:16:48:21:
         e3:5f:b1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org