Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84ca4a46-921c-423b-95b3-483990f131e7/f3125de199598e76085498e5d55b04b3531046a0.roa
File:                     f3125de199598e76085498e5d55b04b3531046a0.roa (raw, json)
Hash identifier:          LUZKVwkSyKwjJ+65sFLUzGIusy7saT4To/W1BmD9+S8=
Subject key identifier:   79:AE:06:1E:C5:18:75:D2:A9:06:47:42:2D:44:C6:3D:B1:D0:A0:61
Certificate issuer:       /CN=9c368afe09296bcb4b3b2e5244ed71e85b0700e5
Certificate serial:       02ED61
Authority key identifier: 4D:71:31:8E:AA:E7:BF:B3:9D:B3:21:55:AD:B0:7B:16:2F:63:10:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c368afe09296bcb4b3b2e5244ed71e85b0700e5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84ca4a46-921c-423b-95b3-483990f131e7/f3125de199598e76085498e5d55b04b3531046a0.roa
Signing time:             Tue 05 Apr 2022 15:49:43 +0000
ROA not before:           Tue 05 Apr 2022 03:00:00 +0000
ROA not after:            Fri 05 Apr 2024 03:00:00 +0000
asID:                     264628
IP address blocks:        190.120.248.0/24 maxlen: 24
                          190.120.249.0/24 maxlen: 24
                          190.120.250.0/24 maxlen: 24
                          190.120.251.0/24 maxlen: 24
                          190.120.252.0/24 maxlen: 24
                          190.120.253.0/24 maxlen: 24
                          190.120.254.0/24 maxlen: 24
                          190.120.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191841 (0x2ed61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c368afe09296bcb4b3b2e5244ed71e85b0700e5
        Validity
            Not Before: Apr  5 03:00:00 2022 GMT
            Not After : Apr  5 03:00:00 2024 GMT
        Subject: CN=f3125de199598e76085498e5d55b04b3531046a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9d:a4:a7:9e:cf:ed:15:e2:8f:a0:25:14:7d:
                    83:28:86:d2:47:e4:d7:bb:4b:9e:47:69:82:2c:a6:
                    9f:cb:4a:5e:a6:f1:54:8e:1d:ab:06:89:86:9b:74:
                    c5:79:79:8b:7c:72:51:8a:d8:33:03:69:66:95:7e:
                    bf:48:76:63:a3:18:29:9d:aa:9d:92:e8:05:d5:20:
                    67:fb:a7:1e:dc:4d:fe:7f:34:7a:1d:10:a3:79:8a:
                    0f:c0:0f:49:8a:7a:4e:2c:1c:e1:52:0d:9e:b3:df:
                    c0:61:0d:3f:0c:19:86:98:e1:12:84:ac:1c:f7:24:
                    75:f8:d0:44:a0:24:32:5d:bd:4c:ab:d4:2c:ba:f4:
                    ab:b7:a4:69:66:ba:a4:fd:b2:7a:83:a0:e9:10:1a:
                    68:d7:76:31:98:37:47:34:fa:57:46:e4:80:b2:10:
                    ff:07:db:a9:69:4d:f6:13:70:c0:97:4c:b8:ad:52:
                    ca:90:17:f9:ec:b9:32:ea:9c:d8:cb:f4:31:5d:cf:
                    74:ed:35:3f:61:ca:d3:df:ab:38:13:47:53:67:46:
                    71:8e:72:c8:52:3a:21:f2:7f:36:22:2f:4c:a9:d1:
                    21:0b:49:9b:dc:43:9a:a9:1f:33:cc:3a:c1:35:d5:
                    ce:4b:95:3a:a3:1e:63:5c:df:b6:31:50:91:82:89:
                    1b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AE:06:1E:C5:18:75:D2:A9:06:47:42:2D:44:C6:3D:B1:D0:A0:61
            X509v3 Authority Key Identifier:
                keyid:4D:71:31:8E:AA:E7:BF:B3:9D:B3:21:55:AD:B0:7B:16:2F:63:10:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c368afe09296bcb4b3b2e5244ed71e85b0700e5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84ca4a46-921c-423b-95b3-483990f131e7/f3125de199598e76085498e5d55b04b3531046a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84ca4a46-921c-423b-95b3-483990f131e7/9c368afe09296bcb4b3b2e5244ed71e85b0700e5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:cb:c0:b9:bc:22:af:83:ea:1b:a7:65:97:73:79:9c:9d:9b:
         ae:90:78:b9:73:18:57:89:d2:8f:b1:ea:4e:20:ef:95:f6:8b:
         20:f5:4b:10:8d:33:74:1f:c0:00:0f:89:dd:80:ea:95:9b:44:
         ff:9e:ce:25:b6:ca:b3:a2:27:fa:5c:dc:64:c0:bb:19:03:25:
         d6:7b:d8:b1:42:54:02:68:d6:52:7d:42:60:d4:0a:a7:1b:94:
         ed:dc:23:fc:0e:75:b8:e8:a1:15:81:6d:1e:b3:7c:92:22:d8:
         58:ee:0e:5b:fa:19:8c:06:34:b6:19:e6:2e:5f:ec:59:0f:83:
         93:61:a2:3d:0a:f9:66:58:53:9f:8c:cd:01:00:7b:6f:2f:dd:
         e5:a6:a6:1e:30:51:98:e1:30:de:b4:52:da:20:a1:4c:a9:04:
         17:98:c2:39:fd:82:d8:49:c1:01:0e:03:99:b0:ed:16:84:1e:
         d2:27:0c:82:98:d0:e2:d6:1e:86:80:e7:d8:67:46:9d:a7:cf:
         a9:4b:e0:eb:3b:ca:a0:1a:ac:4a:45:8f:76:a7:f8:0a:48:47:
         63:21:63:ef:1b:de:d0:cf:2f:2a:34:87:82:c5:80:a7:24:25:
         59:bb:0d:75:36:ee:1b:d9:28:3c:36:2c:f7:00:8f:52:c5:48:
         4c:16:0a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:29 2023 by rpki-client on console-fra.rpki-client.org