Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bba8d4dcfc6fe61f2156f072e247920b559a73bd.roa
File:                     bba8d4dcfc6fe61f2156f072e247920b559a73bd.roa (raw, json)
Hash identifier:          BG5jszeNcqXI3SS0z8N+P+2q4qSRzrR9IqjFnpPA/nk=
Subject key identifier:   9E:0E:D3:58:47:0F:56:9C:10:94:E9:54:6E:77:67:9E:3E:BE:BF:AC
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       06CC32
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bba8d4dcfc6fe61f2156f072e247920b559a73bd.roa
Signing time:             Tue 08 Aug 2023 15:58:39 +0000
ROA not before:           Mon 07 Aug 2023 15:58:39 +0000
ROA not after:            Fri 08 Aug 2025 15:58:39 +0000
asID:                     16629
IP address blocks:        190.4.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445490 (0x6cc32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Aug  7 15:58:39 2023 GMT
            Not After : Aug  8 15:58:39 2025 GMT
        Subject: CN=bba8d4dcfc6fe61f2156f072e247920b559a73bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:42:8c:ed:05:30:44:37:3c:95:91:2e:1c:d3:
                    ae:a3:26:e3:79:dd:4e:ff:2e:0e:c3:71:38:90:af:
                    9f:db:c7:91:d6:78:c6:fc:ad:70:51:b3:70:31:c0:
                    56:4a:bd:b8:eb:fd:7f:b5:b1:75:83:51:2b:94:33:
                    7d:4e:2e:55:38:5e:bd:31:ee:75:ca:a5:8e:2f:f7:
                    29:6e:ea:af:5c:91:c6:cd:5a:e1:cf:ea:34:af:44:
                    78:73:24:87:b6:9e:0f:4c:0c:37:7e:3b:eb:93:4e:
                    0e:ce:c6:33:c4:63:4c:0e:bd:10:9e:54:b4:ee:43:
                    96:04:41:91:1a:40:5b:60:1b:1c:d0:42:bf:19:f3:
                    1f:e0:5c:dd:a9:b3:f9:66:51:d0:5b:f1:ee:b5:fc:
                    ef:48:a9:41:f2:25:56:41:95:98:c9:55:37:83:dc:
                    dc:c3:f2:dd:75:0c:93:48:a2:c1:a7:51:b2:fd:f0:
                    d9:5f:f1:1f:1e:05:19:58:16:ca:77:bb:e8:78:e8:
                    ba:47:4f:a5:2b:d4:b1:2a:dc:5f:e5:b7:d6:ef:d4:
                    85:eb:8d:cd:e0:36:71:7e:c0:9b:d1:70:a5:81:3e:
                    7b:aa:d8:24:f8:bc:52:6a:12:e7:7d:30:86:45:e9:
                    71:82:6f:eb:b9:f6:7c:cf:b5:47:1c:3d:de:a7:c0:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0E:D3:58:47:0F:56:9C:10:94:E9:54:6E:77:67:9E:3E:BE:BF:AC
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bba8d4dcfc6fe61f2156f072e247920b559a73bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:65:34:31:44:3e:fb:7d:86:b2:38:7f:41:71:0e:fc:85:13:
         47:44:37:07:21:64:4d:df:b0:8c:4c:b9:7b:ca:8c:b1:0d:0b:
         c8:7a:6e:8c:7c:f0:18:94:d3:45:70:cd:0f:09:66:3c:6b:d9:
         50:7b:04:87:71:68:70:99:ef:c8:67:a3:93:ef:29:34:a4:b9:
         9b:3a:e7:25:67:a2:63:82:89:a6:1e:d5:4c:0c:6b:56:b0:a5:
         a0:ba:7e:cd:5a:16:31:23:bb:4b:70:6a:5d:3a:b4:2f:a4:90:
         12:de:77:da:93:27:4c:92:87:03:e4:ca:f2:0a:d9:a4:e7:4c:
         a2:96:f9:4d:83:7a:12:c4:db:a6:00:bc:ad:19:d7:b1:22:e7:
         d0:13:1d:23:1b:0d:23:58:10:5f:3f:b5:d9:8a:5a:1a:3d:21:
         c1:ba:47:a7:ef:80:5a:3f:6f:e3:1c:68:fb:02:9a:b9:11:f1:
         70:79:05:10:4d:84:38:68:5d:ce:cf:86:a8:97:98:7f:e9:e9:
         2d:59:81:56:bd:d8:6e:05:2e:ec:a0:14:fd:5c:e0:7a:b7:07:
         58:95:72:b6:46:bc:cb:85:4d:92:53:91:41:4b:e3:b6:63:17:
         11:4d:f1:b7:ee:f9:15:62:8a:92:0e:81:44:c3:bd:c1:e2:9e:
         52:bf:bf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org