Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/11963bf9e40be0e3d3fbde0a675d72572f3b851a.roa
File:                     11963bf9e40be0e3d3fbde0a675d72572f3b851a.roa (raw, json)
Hash identifier:          1jAjIONweDAz2rHHjgTedbIu2iUxcixess8G4Zeapc8=
Subject key identifier:   6D:F3:F0:ED:99:4D:0A:EF:29:0D:16:25:25:44:A5:AC:39:F4:7A:CA
Certificate issuer:       /CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
Certificate serial:       242EC4
Authority key identifier: ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/11963bf9e40be0e3d3fbde0a675d72572f3b851a.roa
Signing time:             Thu 30 Nov 2023 17:29:00 +0000
ROA not before:           Thu 30 Nov 2023 17:29:00 +0000
ROA not after:            Sun 30 Nov 2025 17:29:00 +0000
asID:                     272030
IP address blocks:        190.112.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371268 (0x242ec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
        Validity
            Not Before: Nov 30 17:29:00 2023 GMT
            Not After : Nov 30 17:29:00 2025 GMT
        Subject: CN=11963bf9e40be0e3d3fbde0a675d72572f3b851a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:48:23:0a:df:f7:cb:2c:40:e0:31:f9:33:dc:
                    58:ac:35:1b:96:9a:fa:9e:9b:f1:54:94:99:7d:16:
                    48:72:ad:75:e4:e1:f5:13:d2:9e:32:63:a5:15:9c:
                    81:4a:22:92:1f:10:52:e5:1a:89:c6:09:36:e7:e9:
                    08:a8:f3:00:a6:4c:ff:7c:fd:a2:5a:42:b5:e9:f9:
                    5b:d9:d3:fd:37:71:3d:cd:15:f7:66:85:fc:4b:3c:
                    0f:0a:f0:95:01:ff:2b:5a:a7:4e:3e:19:4d:ea:52:
                    c6:4a:5e:4b:49:69:22:51:5d:b8:d4:ed:0d:ac:d8:
                    87:fe:d7:85:1f:1d:8f:1b:d3:40:50:51:97:3a:38:
                    ad:cd:07:fe:3c:db:e7:6d:11:e6:a9:da:6e:16:85:
                    7b:10:61:4e:a4:c4:8c:76:b7:27:2e:e4:ac:6b:a5:
                    6e:66:60:5f:ff:42:a0:6e:58:3a:ee:ad:cd:34:68:
                    8d:78:47:fb:e0:9c:86:de:74:80:fc:9d:ff:b9:a3:
                    59:0f:6d:93:6a:20:8b:72:4f:bd:67:0c:3d:f1:dd:
                    66:36:8c:96:c5:03:1a:2a:48:3c:94:28:ba:f0:71:
                    79:a5:e4:16:41:ea:ef:a4:80:cd:28:3f:d2:9c:a6:
                    eb:8c:5a:1d:47:24:6e:af:bf:06:07:56:28:e0:7e:
                    cd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F3:F0:ED:99:4D:0A:EF:29:0D:16:25:25:44:A5:AC:39:F4:7A:CA
            X509v3 Authority Key Identifier:
                keyid:ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/11963bf9e40be0e3d3fbde0a675d72572f3b851a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:87:c0:53:1f:0a:f8:7b:70:89:b5:93:b3:00:09:30:6e:3b:
         08:f8:d3:2c:e7:9a:2b:74:64:5d:f1:0e:9a:8f:81:28:a4:f1:
         ac:74:b2:0e:e9:e7:c8:cd:d8:aa:28:c5:62:ac:e5:7b:93:b2:
         c8:2a:4d:a3:54:b6:ec:ef:f4:23:86:ee:00:23:ae:34:dd:ff:
         6f:92:b4:4b:a8:5e:4b:92:e7:ec:04:93:d2:77:63:dd:7e:87:
         ff:32:40:ae:e4:2f:0c:cf:1b:0f:f4:aa:63:a7:a4:28:f9:46:
         18:3b:fa:0c:10:c6:22:dd:25:85:f1:91:8a:b7:87:e8:a2:27:
         bb:12:49:d6:e9:31:a3:82:56:d6:ba:89:77:59:af:d6:61:a6:
         d8:24:40:3e:cf:e9:43:16:10:7b:dc:c4:b7:e8:a8:1e:f3:cb:
         49:c3:b8:dc:2c:fd:86:08:56:26:76:ee:57:53:11:5d:0a:64:
         df:d4:4e:bf:c6:b7:99:f8:2c:de:e4:04:2e:74:57:4c:d9:7c:
         94:12:14:bd:9f:07:3e:20:3d:7b:2d:90:45:77:09:c6:d9:56:
         59:83:4c:bf:15:02:14:ee:94:6b:37:ef:a8:c7:58:b0:72:d4:
         41:f1:c7:e4:11:5b:f4:52:c9:ba:af:b4:35:b4:bb:21:04:77:
         30:51:fa:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org