Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7e06469180ef122085914307e9a32a203a4e6033.roa
File:                     7e06469180ef122085914307e9a32a203a4e6033.roa (raw, json)
Hash identifier:          AwweqAWW3Z4sCepr1fi1WnUSmk6mfBkROqPyjmTNUfs=
Subject key identifier:   F3:A6:A4:0D:94:45:31:D2:71:1A:88:48:11:B2:09:B4:30:1B:6E:6F
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       17B6D7
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7e06469180ef122085914307e9a32a203a4e6033.roa
Signing time:             Mon 13 Jun 2022 16:44:00 +0000
ROA not before:           Mon 13 Jun 2022 03:00:00 +0000
ROA not after:            Thu 13 Jun 2024 03:00:00 +0000
asID:                     6429
IP address blocks:        190.54.179.0/24 maxlen: 24
                          200.29.173.0/24 maxlen: 24
                          200.29.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1554135 (0x17b6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Jun 13 03:00:00 2022 GMT
            Not After : Jun 13 03:00:00 2024 GMT
        Subject: CN=7e06469180ef122085914307e9a32a203a4e6033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:0b:20:47:a6:fc:2d:6d:97:c7:fa:6b:2c:
                    c0:4d:08:2f:95:84:cf:a9:89:98:e6:2a:c2:39:79:
                    e4:9f:4e:bc:19:9d:e1:ed:4a:42:81:60:74:19:ee:
                    f7:d8:46:1e:a1:29:1e:82:6a:1c:4d:3e:42:97:bb:
                    f3:03:c2:88:c6:eb:f2:17:dd:b2:d5:8c:31:38:51:
                    37:86:5c:a1:b2:6b:8c:80:62:14:2c:3c:f5:d4:f6:
                    b4:53:6d:97:8b:43:0f:b6:d8:f0:f4:b6:ee:9a:1d:
                    b1:9f:94:56:b7:00:43:2c:c3:69:d6:f5:de:bd:11:
                    ff:46:79:7e:f0:d5:48:e4:27:23:e7:b1:eb:1b:d7:
                    29:eb:fc:46:63:01:a1:62:24:0b:48:3a:bc:9e:f9:
                    fe:db:a3:8f:e4:70:24:d4:30:fa:e2:76:3e:ac:82:
                    ed:be:79:ee:70:ce:8e:ed:b9:11:32:7b:a4:bc:6d:
                    c6:7f:6f:f5:c1:36:29:7e:6d:e5:78:6b:c5:f5:93:
                    d0:18:77:34:f7:4e:2b:b3:dc:aa:fd:f5:e6:e2:1e:
                    4e:a4:f0:8e:69:f2:75:ec:3f:79:f2:14:f3:74:5d:
                    cb:ae:b6:15:ba:c1:14:35:1e:29:16:f9:1b:bf:47:
                    5f:12:a8:9c:32:ce:e0:85:4e:9d:4e:06:eb:3b:d1:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A6:A4:0D:94:45:31:D2:71:1A:88:48:11:B2:09:B4:30:1B:6E:6F
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/7e06469180ef122085914307e9a32a203a4e6033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.179.0/24
                  200.29.173.0/24
                  200.29.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:c5:8e:ee:dd:be:b2:5c:0b:5f:99:be:50:c6:b7:c7:eb:0b:
         af:a5:a8:e5:a2:44:b0:38:1d:86:59:4a:4a:f1:5a:fc:14:13:
         7b:b7:9e:c9:7f:51:b2:a3:61:b4:c2:5d:a1:a0:c0:bf:25:55:
         df:bb:26:ff:07:45:79:59:f2:f4:f0:15:e5:0b:14:af:bf:93:
         72:0f:9d:55:31:9b:95:c8:24:07:2e:ba:41:ec:b4:7d:7d:36:
         25:bd:87:2b:59:72:3e:00:e3:81:c5:80:26:5a:07:73:a4:0e:
         88:b9:0b:78:01:8d:70:b2:5c:42:d8:3a:28:8f:4a:e0:5f:92:
         d9:72:b7:0c:ee:51:00:95:d8:62:21:bf:84:43:5b:71:2b:cb:
         ad:f5:06:1b:d4:a0:6c:6b:49:03:3c:78:b0:94:10:c8:b1:90:
         c7:6c:2c:18:14:94:af:64:4c:a7:27:4f:f7:79:8a:dc:5e:8b:
         2a:1b:1c:52:ca:40:76:63:68:5a:d3:ab:4a:4a:13:1e:fc:b9:
         13:47:fc:66:3b:e1:e0:c4:bf:a7:e0:5e:32:ba:e2:09:af:22:
         23:4e:f7:7f:0e:80:82:87:5e:1e:55:b8:94:a2:d6:d8:5c:b5:
         2c:65:1c:b8:f8:46:8d:96:3c:07:ab:8c:5c:53:6b:71:53:99:
         c0:82:8e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org