Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/fe79ff348dcf51914c432e84c16d6f626b128866.roa
File:                     fe79ff348dcf51914c432e84c16d6f626b128866.roa (raw, json)
Hash identifier:          WcDjdNZXSWG622EdlNw6rcfsvwRbpZw6USjwPA9avDM=
Subject key identifier:   FE:D0:52:F4:A3:C8:F0:87:66:66:0B:EB:D7:2A:BB:90:10:66:8A:1E
Certificate issuer:       /CN=f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e
Certificate serial:       297E91
Authority key identifier: 87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/fe79ff348dcf51914c432e84c16d6f626b128866.roa
Signing time:             Tue 26 Mar 2024 19:27:54 +0000
ROA not before:           Tue 26 Mar 2024 19:27:49 +0000
ROA not after:            Thu 26 Mar 2026 19:27:49 +0000
asID:                     265705
IP address blocks:        190.1.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2719377 (0x297e91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e
        Validity
            Not Before: Mar 26 19:27:49 2024 GMT
            Not After : Mar 26 19:27:49 2026 GMT
        Subject: CN=fe79ff348dcf51914c432e84c16d6f626b128866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:8e:f1:d4:2d:fc:d9:08:03:b9:a6:90:bd:
                    06:81:ca:73:89:d0:3d:c3:8a:ed:26:d7:80:b7:e0:
                    aa:3f:38:c4:7c:f5:eb:23:90:61:14:53:de:0d:29:
                    2a:4a:9c:ad:77:b9:fb:55:8e:ed:38:1b:57:ba:8b:
                    9d:75:36:b9:22:89:5f:c7:26:98:6e:4f:f6:3f:31:
                    1f:0b:34:df:38:9e:58:da:a2:a8:3f:fb:18:73:59:
                    52:7b:c1:42:72:c7:6b:2b:30:8c:ae:70:e0:ec:52:
                    e3:1c:2f:8e:dc:e0:6e:29:23:db:c1:0d:80:da:c8:
                    b1:64:3b:cd:73:63:22:6b:da:ba:60:27:cb:db:6e:
                    d9:72:01:fc:10:d2:b0:ca:4a:ea:ba:4b:f5:bc:d5:
                    32:62:d1:5f:07:f6:1f:f5:cd:4e:c4:e6:cc:06:07:
                    b5:29:cd:a2:0e:d4:2e:87:ad:5e:67:a6:82:56:7a:
                    67:db:d7:d2:b2:5c:42:ac:aa:72:50:30:f3:01:6b:
                    17:db:8d:d4:21:fc:5d:85:e1:c4:73:da:14:f2:f0:
                    fc:dd:85:8f:4d:2a:29:bd:bf:20:ee:0e:d4:32:b0:
                    41:35:89:fd:93:cc:e6:c5:aa:19:ff:ca:3f:d3:46:
                    7e:c1:47:ff:3a:6a:0f:fb:f4:58:2c:ce:62:8e:c8:
                    3f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D0:52:F4:A3:C8:F0:87:66:66:0B:EB:D7:2A:BB:90:10:66:8A:1E
            X509v3 Authority Key Identifier:
                keyid:87:F8:D4:35:76:20:56:6B:10:27:8C:92:DC:36:C0:19:51:36:F4:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/fe79ff348dcf51914c432e84c16d6f626b128866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7caa4b1-1c6d-48ab-9405-96b5c18284c5/f0b0fcc180bba84bf5319f1223a5e1cfe1b1a47e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.1.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         00:d0:9b:c3:e5:e4:ae:f8:7b:be:6c:72:11:f3:08:6b:b4:a3:
         0f:dc:29:be:10:e5:28:88:41:e5:46:7c:6a:4b:9d:32:1d:ab:
         0e:4a:c1:dd:e6:3c:ec:f8:9e:91:76:56:22:97:16:db:44:5d:
         14:5e:eb:66:1a:0d:68:7b:b3:e2:88:eb:7d:40:ff:8a:41:e2:
         17:a6:b9:3a:19:fc:6e:5d:81:90:71:ac:15:b9:07:cc:27:a6:
         1a:28:63:f5:26:6c:7a:8e:58:55:99:ba:f3:6d:3e:e8:ec:df:
         ff:dc:e3:1c:95:15:25:7f:7c:e1:ea:d7:cc:e1:35:f5:fb:66:
         c3:a5:7e:13:6d:3d:07:3f:d8:2c:b2:8a:13:81:66:c9:7e:09:
         98:5c:6d:fd:92:64:2c:7c:06:a0:9d:74:63:b0:30:42:4d:ee:
         ee:8f:2e:1f:48:ca:c0:d9:4a:a2:79:a5:3c:7f:d2:4e:5b:ea:
         9c:0f:08:53:0d:93:ab:1e:b8:58:9e:57:cd:fa:9d:f0:bd:43:
         d2:af:44:da:c2:00:de:01:d4:e3:ba:ca:57:1a:99:40:d2:17:
         da:26:a5:7d:9b:a9:6a:60:81:78:88:01:6f:71:2f:59:7a:af:
         e0:15:70:82:ff:fd:ad:df:94:de:a1:bc:07:23:e2:a1:52:5d:
         ea:ed:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org