Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/487ee7804155c762a234c030cadeee409994b926.roa
File:                     487ee7804155c762a234c030cadeee409994b926.roa (raw, json)
Hash identifier:          vQ+u/3zgtRkfd/iQMRfv1IR96NoVMP3iNlEGR/OIIXE=
Subject key identifier:   E5:37:E3:40:E3:4E:F6:06:A3:39:DF:85:3A:63:4B:CC:89:9E:DD:D7
Certificate issuer:       /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial:       282BBD
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/487ee7804155c762a234c030cadeee409994b926.roa
Signing time:             Fri 23 Feb 2024 19:44:16 +0000
ROA not before:           Fri 23 Feb 2024 19:44:16 +0000
ROA not after:            Mon 23 Feb 2026 19:44:16 +0000
asID:                     265855
IP address blocks:        190.107.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2632637 (0x282bbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
        Validity
            Not Before: Feb 23 19:44:16 2024 GMT
            Not After : Feb 23 19:44:16 2026 GMT
        Subject: CN=487ee7804155c762a234c030cadeee409994b926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:61:df:55:22:fa:c9:7e:62:c7:be:0c:ee:0e:
                    12:98:36:61:cd:a9:df:8b:ca:48:6f:9c:ee:20:97:
                    7d:9d:86:4f:c5:03:7c:9b:bc:bf:c3:67:e5:44:d9:
                    00:b8:77:e6:49:45:7d:f9:63:6b:34:a1:1b:68:d7:
                    dd:30:64:e9:5f:ee:d5:99:da:bc:b1:41:bb:41:ce:
                    9b:2a:b5:40:55:d3:e5:20:d1:e4:73:cf:6e:29:1a:
                    72:b6:69:d3:ac:72:e8:aa:3b:2e:0d:a4:94:21:e0:
                    4a:b5:de:d6:c2:b0:7e:e0:fd:87:60:72:2d:cd:9c:
                    47:36:cb:60:84:3c:71:a3:a2:2a:4c:17:86:96:6f:
                    90:91:3a:28:7c:37:e7:69:2f:63:a9:33:3c:82:4f:
                    7a:d2:b8:c4:25:a6:79:d1:25:d0:fd:65:70:d8:8e:
                    05:38:ed:91:cf:3d:c4:a0:c0:bd:c4:6d:f4:14:6c:
                    5e:c7:c9:c9:65:7b:27:0f:b5:3e:a9:31:54:51:f9:
                    70:61:6b:1d:9c:83:b3:3b:19:82:20:5d:59:8e:ee:
                    3a:dc:4f:29:73:17:fc:bf:9f:21:3b:76:52:9a:0e:
                    7a:88:05:19:eb:91:13:01:b7:0e:84:e5:5c:39:64:
                    e0:87:ed:a4:0e:d5:e4:54:ae:fc:5e:e2:9e:a8:62:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:37:E3:40:E3:4E:F6:06:A3:39:DF:85:3A:63:4B:CC:89:9E:DD:D7
            X509v3 Authority Key Identifier:
                keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/487ee7804155c762a234c030cadeee409994b926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:82:23:49:23:3b:13:10:76:c3:39:ec:e2:0b:82:e7:60:22:
         cf:ff:76:18:ea:d2:7f:8b:40:e5:5a:29:7c:ad:6a:55:03:90:
         34:35:a1:38:a1:dc:ab:b5:84:8f:32:14:6f:29:62:76:c8:eb:
         fe:e9:56:92:f0:c7:56:58:7d:f7:97:e7:de:9a:5c:48:6b:8d:
         2f:2b:2c:61:56:40:9c:1d:46:ab:3c:f2:0b:7d:f9:66:db:54:
         ca:66:2b:1f:a1:b0:76:2a:37:13:8a:2b:d4:ef:ae:fa:78:f7:
         da:88:42:17:69:3d:5d:3b:02:a3:7d:77:a4:58:70:b9:e5:74:
         e4:18:40:e9:ef:dc:2c:91:3f:70:51:92:1e:15:25:c4:c4:59:
         98:ec:44:d0:4c:28:f6:1e:b0:1f:f4:17:7a:5d:53:db:af:e7:
         fd:64:00:02:83:f7:08:3a:1e:4d:25:32:08:e8:ca:d5:7f:9e:
         88:79:91:92:9a:e6:97:1a:f0:14:2b:35:22:ad:9f:44:68:24:
         2d:7f:bf:62:21:48:8d:91:bb:a0:5e:52:d5:35:06:c4:6d:46:
         90:f5:1c:af:f0:65:5b:1d:a3:88:74:99:98:1b:5b:c9:45:16:
         b2:cb:07:b6:5c:e4:31:2c:12:99:d3:cb:58:76:ae:94:09:1a:
         14:6b:dd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org