Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/2c61f7859e89b81ea78f00c2d658a72806bbb484.roa
File:                     2c61f7859e89b81ea78f00c2d658a72806bbb484.roa (raw, json)
Hash identifier:          3Wl/zFVzcD6XQVRtM8IbB6CptPQ1jD0G2cnYkdAw7G8=
Subject key identifier:   F4:EA:DF:A2:A4:A4:38:57:10:88:BE:EF:B1:37:F1:58:47:E5:61:49
Certificate issuer:       /CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
Certificate serial:       243487
Authority key identifier: ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/2c61f7859e89b81ea78f00c2d658a72806bbb484.roa
Signing time:             Thu 30 Nov 2023 17:29:02 +0000
ROA not before:           Thu 30 Nov 2023 17:29:00 +0000
ROA not after:            Sun 30 Nov 2025 17:29:00 +0000
asID:                     272975
IP address blocks:        190.104.44.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2372743 (0x243487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68
        Validity
            Not Before: Nov 30 17:29:00 2023 GMT
            Not After : Nov 30 17:29:00 2025 GMT
        Subject: CN=2c61f7859e89b81ea78f00c2d658a72806bbb484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a6:4c:b2:30:f3:bc:02:d1:c3:04:a0:8d:92:
                    6c:83:75:c2:85:19:53:e6:fe:08:9d:e4:82:e0:3f:
                    28:a3:0b:3a:d5:2b:b7:b3:db:8e:08:f7:cf:7b:bb:
                    41:f5:59:e0:35:66:a0:a0:6c:c2:58:8b:fb:b6:d6:
                    9f:e9:ef:26:42:15:e9:6f:8e:b5:3c:4b:cc:d6:76:
                    a7:0d:08:d3:54:64:2f:25:6e:b7:91:1a:70:34:4a:
                    43:ec:d9:a1:66:3f:91:4b:39:21:06:c7:3e:a7:cc:
                    bd:db:73:9b:71:bf:e3:47:f3:71:78:48:08:2b:67:
                    1a:ca:f1:97:67:42:0e:33:a9:ea:0e:a9:63:24:09:
                    e8:4b:61:e3:c2:99:de:d6:37:bd:f3:b6:23:61:ff:
                    14:97:cf:81:86:d8:5b:bb:40:31:d1:c1:06:cd:5e:
                    ed:8c:ac:d4:fc:82:61:4d:6f:7a:8b:e3:cb:7d:50:
                    8d:93:4d:82:49:f3:cb:5a:3f:24:68:1e:8d:6b:05:
                    48:e7:5d:ec:cd:12:14:75:59:12:60:c2:8e:78:32:
                    bd:cc:28:eb:d2:3a:eb:2b:96:84:3c:e3:81:45:bb:
                    6c:30:0d:d4:00:55:42:03:e5:cd:27:de:4e:f9:7a:
                    29:27:69:5c:e8:4f:23:14:b6:b5:7b:2a:d5:de:a7:
                    6b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EA:DF:A2:A4:A4:38:57:10:88:BE:EF:B1:37:F1:58:47:E5:61:49
            X509v3 Authority Key Identifier:
                keyid:ED:02:2D:A3:92:B5:EE:F7:C9:C7:F2:EF:98:41:7E:B5:5F:36:D6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/2c61f7859e89b81ea78f00c2d658a72806bbb484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a1f0b889-4a72-4856-9a1f-785f55938c03/7fa96ad46884f920bc8f3b8f9c2fbb660ffd9b68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:57:e5:23:af:32:18:ea:3e:79:7d:5e:d6:d3:2b:b7:86:f4:
         7b:7b:b0:01:48:c9:62:2f:7a:6a:dc:02:b9:23:b7:d5:f1:43:
         fa:f0:32:66:04:bf:21:24:8e:c8:6f:05:6f:94:29:10:17:ce:
         07:01:4c:6b:a6:d5:82:73:ee:a1:3d:05:8a:12:b4:98:6e:11:
         d7:50:fb:cd:32:98:99:88:eb:ff:5a:23:b6:3e:f9:62:0d:ac:
         a7:33:b4:82:e3:f6:c0:10:2d:54:5a:e1:21:38:78:5f:c1:ab:
         c4:a8:e1:04:1c:fc:8f:ae:66:53:39:a4:a1:ae:2c:e6:ce:2b:
         16:dc:23:e6:c1:cc:46:37:7e:5e:30:8e:3d:99:3d:94:40:ab:
         f5:d6:36:56:32:05:d0:5f:32:a4:af:54:84:67:fc:e3:a4:6e:
         18:e7:f9:de:13:5b:b1:a2:fe:be:2f:70:36:96:17:4e:c6:ec:
         b7:cc:f7:3c:7a:cc:0a:a9:06:55:b9:7d:9b:f9:9e:ed:7f:89:
         78:0a:f4:c5:b2:f7:2b:11:a4:90:64:70:a3:3b:50:89:cc:a3:
         a6:97:48:50:e7:dc:91:a3:c3:dd:a3:fe:68:16:d8:8e:f0:fa:
         eb:09:f2:16:b8:57:ed:b9:9a:3e:e5:e7:c4:8c:27:13:2f:f7:
         26:8f:ca:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org