Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/e074bb9967d1c69a846907f62052e8706e36d118.roa
File:                     e074bb9967d1c69a846907f62052e8706e36d118.roa (raw, json)
Hash identifier:          N5PfD78ALhY39BxdnCYC55p2LhkuWsC0StjipgUCm74=
Subject key identifier:   14:0E:A7:FC:EC:BF:BB:BF:F0:17:43:6C:24:12:5A:94:86:8F:A3:89
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       21BF2F
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/e074bb9967d1c69a846907f62052e8706e36d118.roa
Signing time:             Tue 04 Jul 2023 08:30:22 +0000
ROA not before:           Mon 03 Jul 2023 08:30:22 +0000
ROA not after:            Wed 02 Jul 2025 08:30:22 +0000
asID:                     263173
IP address blocks:        190.54.112.0/23 maxlen: 24
                          190.208.8.0/24 maxlen: 24
                          2800:3b0:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211631 (0x21bf2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Jul  3 08:30:22 2023 GMT
            Not After : Jul  2 08:30:22 2025 GMT
        Subject: CN=e074bb9967d1c69a846907f62052e8706e36d118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:05:44:15:7e:eb:52:02:a7:8e:fa:71:9b:
                    d0:82:62:3b:64:e1:f2:0d:36:d2:2a:aa:35:c9:57:
                    76:c8:34:bc:c5:14:df:89:c7:43:be:c9:75:58:2b:
                    4b:0a:02:89:0a:5f:a4:b8:ea:da:f0:e9:c1:e8:d8:
                    17:09:92:87:08:75:c9:84:10:92:8a:5c:06:8c:1b:
                    d7:7c:d7:28:00:86:27:3f:54:74:76:12:3a:b4:20:
                    6c:20:8c:c0:8e:2c:81:0b:3b:bd:5c:b2:a6:b2:cf:
                    55:dd:3e:72:13:db:65:91:2b:f3:ad:9a:e0:ee:68:
                    6f:8a:a1:5b:ff:8d:26:0b:fd:1d:a3:0c:92:d3:1f:
                    d9:7c:6a:26:95:52:8a:43:f1:e1:13:d0:58:6f:80:
                    bf:be:c3:90:dc:9f:24:3d:27:78:83:37:cb:07:c7:
                    5b:ce:b1:57:bb:2a:d0:03:0c:0f:e2:e7:39:79:df:
                    12:c4:04:9e:42:52:3d:03:e2:b7:0b:27:19:c3:dd:
                    6d:0c:26:11:cb:4d:fc:c0:f0:b0:da:51:4e:f1:1b:
                    a6:39:91:94:dd:84:73:55:e0:a2:eb:3c:70:3f:8a:
                    f4:82:bb:df:dd:c3:a7:6a:6b:0a:57:cd:a8:c4:93:
                    17:2b:55:3f:2a:18:46:4a:8c:cc:e8:36:b3:fd:fc:
                    1a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0E:A7:FC:EC:BF:BB:BF:F0:17:43:6C:24:12:5A:94:86:8F:A3:89
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/e074bb9967d1c69a846907f62052e8706e36d118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.112.0/23
                  190.208.8.0/24
                IPv6:
                  2800:3b0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         13:16:b6:12:34:9e:8b:d0:23:36:1c:35:58:41:63:e7:39:15:
         05:26:51:6c:a3:4e:55:96:c4:92:26:13:d3:80:4e:5a:02:71:
         50:5f:02:66:98:06:6b:38:f9:25:76:9b:a0:aa:e6:ae:1c:f6:
         f8:28:c0:d5:df:3d:e6:c8:6d:3b:83:19:10:cb:b5:a7:f8:80:
         2c:cc:30:57:ae:ba:89:a9:ac:09:4f:9a:bf:bf:8c:df:2b:46:
         c0:d4:e5:02:d9:22:53:c0:2b:45:8d:36:fc:71:a7:af:0a:01:
         de:55:83:43:83:af:36:a7:21:d0:f2:31:92:7b:8f:45:8a:37:
         a1:42:4f:58:54:8e:7a:54:b5:b9:2e:f1:b4:c2:87:fc:1b:dd:
         52:00:32:30:7e:72:f2:1b:73:17:f9:99:d1:f5:c5:29:d0:ad:
         b9:51:70:a3:10:9b:2b:4e:18:21:83:50:a7:21:d4:ff:7a:8b:
         bb:f8:d7:04:59:09:98:3a:2b:05:08:31:de:bc:44:6e:b1:f2:
         27:58:d8:df:4d:31:bf:4f:2c:d9:01:75:79:8e:1b:a7:44:e8:
         fe:c5:6e:53:3f:0c:78:b0:57:21:eb:d3:51:d4:30:2c:f8:37:
         0f:a4:c2:08:e7:0a:74:ce:77:b0:5c:40:11:dd:4b:c0:fc:06:
         dd:cc:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org