Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/76179540dfbe17749ddaaaa44a3bcbd76c79ff54.roa
File:                     76179540dfbe17749ddaaaa44a3bcbd76c79ff54.roa (raw, json)
Hash identifier:          DaA0V8pf0KosS23xPFajPD0cDWi0LRW0Z2GZR9pWN1A=
Subject key identifier:   DA:35:3A:42:A9:58:81:AA:F2:70:8E:C5:52:59:2E:22:73:78:D3:D1
Certificate issuer:       /CN=1b429c72865e191f13438ce54026b95b47e06113
Certificate serial:       082C0B
Authority key identifier: 62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/76179540dfbe17749ddaaaa44a3bcbd76c79ff54.roa
Signing time:             Tue 05 Sep 2023 21:17:58 +0000
ROA not before:           Mon 04 Sep 2023 21:17:56 +0000
ROA not after:            Fri 05 Sep 2025 21:17:56 +0000
asID:                     28415
IP address blocks:        189.201.227.0/24 maxlen: 24
                          189.201.231.0/24 maxlen: 24
                          189.201.224.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535563 (0x82c0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b429c72865e191f13438ce54026b95b47e06113
        Validity
            Not Before: Sep  4 21:17:56 2023 GMT
            Not After : Sep  5 21:17:56 2025 GMT
        Subject: CN=76179540dfbe17749ddaaaa44a3bcbd76c79ff54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cd:e7:2a:63:a3:72:7b:e5:59:6b:e9:13:50:
                    d3:5f:58:36:ee:00:24:d9:f9:08:2b:0f:64:34:f7:
                    59:3f:98:27:56:79:e0:7b:63:22:c3:17:c9:f7:f7:
                    03:1b:76:94:ad:d5:91:15:07:d3:dd:58:65:11:41:
                    20:c6:f4:18:62:fd:83:9a:f5:65:a2:1e:58:a4:45:
                    b6:ff:0c:d9:a4:8e:25:a6:48:b0:4c:5f:b1:46:32:
                    d6:1b:c1:fb:32:14:2d:aa:66:8e:6e:79:81:a6:07:
                    9e:f2:10:d6:30:d6:d8:d2:c1:8c:0a:1d:50:03:34:
                    94:29:c7:a1:82:50:dc:51:d3:07:84:26:f4:1d:fa:
                    bd:b9:d4:50:ae:e7:e6:84:90:15:db:4e:90:4f:d9:
                    71:77:ad:ea:92:a3:47:46:3e:dd:b0:ac:b1:f9:6d:
                    36:c2:29:dd:7f:20:d1:0c:f7:00:cd:16:ff:b6:e2:
                    68:39:30:ad:ae:dc:b5:4c:a8:4d:d4:a8:26:11:f1:
                    3d:ad:a8:e1:83:1a:88:0a:87:e0:1b:0e:ae:22:aa:
                    e9:54:fe:07:db:56:4e:16:32:6b:02:37:b9:dd:5c:
                    27:9a:26:ba:af:41:00:c3:ca:f0:6c:61:99:b4:0a:
                    03:d6:8a:c3:27:39:9e:42:33:e3:9e:78:44:90:77:
                    2d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:35:3A:42:A9:58:81:AA:F2:70:8E:C5:52:59:2E:22:73:78:D3:D1
            X509v3 Authority Key Identifier:
                keyid:62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/76179540dfbe17749ddaaaa44a3bcbd76c79ff54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/1b429c72865e191f13438ce54026b95b47e06113.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.224.0/23
                  189.201.227.0/24
                  189.201.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:c2:9a:9d:db:4b:17:6f:62:4f:3c:35:e2:ec:87:ee:e1:3e:
         2f:a6:4b:83:76:12:89:86:5c:63:26:2d:1f:44:80:04:88:d0:
         6d:53:46:71:7d:f8:80:40:61:64:e4:48:71:3b:97:5f:37:b0:
         ea:a0:4c:e8:7c:18:93:ca:26:d3:9b:c4:f0:74:95:1f:6a:5d:
         ec:8b:14:f7:58:38:65:08:81:73:12:5f:0e:12:15:14:9b:74:
         fa:1d:06:16:01:d7:9d:42:0e:96:77:99:89:f5:c2:ac:3f:11:
         d9:4e:89:ec:ed:40:e5:bc:a2:65:52:f8:15:86:b7:27:57:0a:
         a4:0e:88:aa:57:81:c8:c2:82:8c:9c:99:20:7b:5e:8f:5b:ff:
         ac:a2:56:6b:2c:b2:e6:76:28:1d:fc:45:9a:33:87:55:8d:ac:
         05:f7:3a:d2:cf:26:ba:10:eb:0e:a9:1c:03:ef:09:d7:d3:f4:
         93:28:1a:f0:92:4a:80:a9:63:29:8f:52:98:c0:89:5d:f3:9b:
         9c:d3:82:91:a0:36:19:40:da:16:00:12:52:9f:7d:91:5f:53:
         2b:9b:c7:47:72:24:b2:c8:a7:ef:be:02:70:e6:46:a4:6e:03:
         be:53:bc:7c:39:18:1d:b4:1d:9d:88:2a:92:ea:97:03:8c:86:
         c9:7e:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org