Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/fd409358bb15966e3e33abcfceac76a44b104f9f.roa
File:                     fd409358bb15966e3e33abcfceac76a44b104f9f.roa (raw, json)
Hash identifier:          imXHbeGcFkrFmNMpjdeEbBy6bziY9F5nR6ylt4yd8R8=
Subject key identifier:   F0:96:7F:95:8B:42:4C:19:86:A4:DC:8A:F1:5F:68:87:AD:02:A7:7A
Certificate issuer:       /CN=4165db8f57caba312629e89d611ea1f393351415
Certificate serial:       0B3069
Authority key identifier: 56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/fd409358bb15966e3e33abcfceac76a44b104f9f.roa
Signing time:             Tue 06 Feb 2024 19:09:22 +0000
ROA not before:           Tue 06 Feb 2024 19:09:22 +0000
ROA not after:            Fri 06 Feb 2026 19:09:22 +0000
asID:                     262191
IP address blocks:        190.109.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733289 (0xb3069)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4165db8f57caba312629e89d611ea1f393351415
        Validity
            Not Before: Feb  6 19:09:22 2024 GMT
            Not After : Feb  6 19:09:22 2026 GMT
        Subject: CN=fd409358bb15966e3e33abcfceac76a44b104f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:47:ca:d5:a1:15:69:8e:08:ef:df:95:24:d0:
                    68:78:a5:c4:76:c3:d2:b2:03:3c:e9:27:16:1e:dc:
                    1f:1d:74:40:76:d8:af:aa:ef:0c:88:85:59:a4:dc:
                    05:f8:bd:d6:d6:38:70:80:94:38:5e:c2:ec:60:0d:
                    3a:36:b3:88:8a:61:c4:57:e1:67:ac:2e:a3:71:5e:
                    25:df:bf:4f:24:42:c5:44:db:e7:a6:d5:06:ba:11:
                    86:53:5c:7b:95:43:5d:57:45:83:cf:16:49:95:a2:
                    eb:fb:ea:98:cc:9d:4c:08:8a:35:6c:28:69:9e:fc:
                    61:45:1c:0f:53:17:5c:bf:5c:18:f4:c4:4f:9a:df:
                    90:ab:a2:bb:ff:87:23:b2:10:e9:c8:71:8f:39:df:
                    a2:65:0a:be:15:f9:d4:4d:61:b1:7f:25:b2:2e:bd:
                    dc:d3:3f:72:ee:90:00:b7:be:1e:99:9a:91:22:96:
                    2b:60:e1:01:32:28:b6:eb:92:ee:96:13:e6:f7:23:
                    fc:1f:7c:ec:ee:86:fd:ba:48:fb:f2:4a:fc:a4:f3:
                    a0:0d:f8:c7:47:4f:92:2d:90:a0:04:18:1b:c0:e2:
                    3a:7a:97:0a:ae:3f:ff:f1:03:9d:14:b9:71:ce:3a:
                    fa:a7:c6:a8:d0:39:f4:df:c4:eb:9b:6f:dd:86:8a:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:96:7F:95:8B:42:4C:19:86:A4:DC:8A:F1:5F:68:87:AD:02:A7:7A
            X509v3 Authority Key Identifier:
                keyid:56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/fd409358bb15966e3e33abcfceac76a44b104f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:09:0d:68:f3:26:3a:d4:9e:2a:f7:8e:24:81:5b:21:3b:da:
         bc:4c:f9:89:68:55:10:a1:98:d6:91:d3:4c:05:f3:19:d0:1d:
         0d:02:f1:bb:23:6b:33:84:fe:9e:70:a3:c1:9a:09:2e:59:c3:
         e7:56:12:33:82:98:02:00:1a:da:05:72:05:da:1e:86:18:f3:
         27:08:ef:54:9e:c4:25:b3:38:ef:be:86:00:0e:83:ad:35:f5:
         38:23:c7:e6:f8:49:cb:13:24:c8:ac:0c:2d:dc:94:9f:7b:0b:
         6b:82:ea:d8:7c:c3:7f:d9:5d:e8:e6:b9:45:05:46:14:14:18:
         8c:14:b1:29:ff:3a:b6:02:93:3d:ea:58:68:60:09:62:ae:02:
         f8:3c:a5:12:9b:54:65:cf:0b:5d:73:92:85:a4:18:5d:a2:ee:
         65:eb:42:15:b7:f2:db:52:a2:6c:f7:26:33:3a:b2:40:f3:06:
         08:24:aa:aa:52:76:78:af:24:e5:18:18:b0:b4:d6:04:e6:6e:
         65:a6:38:41:54:f4:0b:33:b8:7d:dd:64:74:6c:f2:29:f5:63:
         12:81:fc:57:54:61:b6:d6:f9:ef:38:16:3b:f4:c7:23:c3:96:
         9c:8f:a4:69:b5:79:ba:c9:04:47:cc:8b:43:29:da:22:00:43:
         8c:80:30:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org