Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/f35dc89b8483383222385713baa9d78fe62e1c52.roa
File:                     f35dc89b8483383222385713baa9d78fe62e1c52.roa (raw, json)
Hash identifier:          fn324fchPQsjIuA1nLdQ97eK7pohPqMvZIoLLirSgAs=
Subject key identifier:   34:C3:D6:E6:2F:D0:A2:70:8B:C5:62:92:EB:DD:03:87:5A:EA:A5:78
Certificate issuer:       /CN=202cb3488506efb49dfb0ab983c08668843b1d3a
Certificate serial:       106C2D
Authority key identifier: D1:45:15:26:81:4D:06:B0:71:88:78:11:6F:48:36:7C:D7:1A:8D:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/202cb3488506efb49dfb0ab983c08668843b1d3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/f35dc89b8483383222385713baa9d78fe62e1c52.roa
Signing time:             Tue 22 Feb 2022 18:00:19 +0000
ROA not before:           Tue 22 Feb 2022 18:00:19 +0000
ROA not after:            Mon 22 Feb 2027 18:00:19 +0000
asID:                     269975
IP address blocks:        190.89.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076269 (0x106c2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202cb3488506efb49dfb0ab983c08668843b1d3a
        Validity
            Not Before: Feb 22 18:00:19 2022 GMT
            Not After : Feb 22 18:00:19 2027 GMT
        Subject: CN=f35dc89b8483383222385713baa9d78fe62e1c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:11:0c:dc:ed:44:8d:24:ba:99:d5:d4:10:8e:
                    ed:4f:05:60:0f:ab:ac:78:15:b0:dd:a2:14:b1:ee:
                    9d:13:b9:49:a9:d2:33:32:4d:c0:11:5e:71:de:0f:
                    be:2e:b1:da:86:d9:cd:f6:f6:e4:08:01:fd:8a:e0:
                    92:34:91:7f:c5:2e:88:ce:dd:ed:7a:47:ce:82:a4:
                    38:fc:77:a5:a6:64:c4:87:5a:59:f9:9d:fc:a5:44:
                    0a:d1:bc:6a:c3:72:08:69:7e:3b:4e:79:fa:4e:2f:
                    17:c7:0a:9d:2c:de:f6:9a:a8:70:c6:35:2f:57:ea:
                    79:61:4a:35:01:54:64:84:63:f2:8f:83:69:9d:44:
                    a1:50:7c:58:8d:18:d2:24:71:b1:85:c1:75:a4:cb:
                    28:5d:db:0c:43:0b:ed:0b:b4:a6:8d:56:64:26:a4:
                    31:12:22:6a:20:31:dc:08:a2:a0:3c:a3:b1:2e:e5:
                    85:a7:7a:92:a3:10:4d:a2:ba:55:95:bd:5e:a8:96:
                    80:9a:e7:6e:4e:01:6c:a3:2c:b7:c9:4e:7c:2d:25:
                    1d:09:94:76:02:de:25:55:d8:0e:22:ea:b5:69:83:
                    67:88:2f:b6:fa:ad:7e:64:7e:94:cf:41:63:96:ed:
                    62:d8:c1:3e:ac:42:2e:38:66:4d:3b:e4:d3:e9:15:
                    f6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C3:D6:E6:2F:D0:A2:70:8B:C5:62:92:EB:DD:03:87:5A:EA:A5:78
            X509v3 Authority Key Identifier:
                keyid:D1:45:15:26:81:4D:06:B0:71:88:78:11:6F:48:36:7C:D7:1A:8D:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/202cb3488506efb49dfb0ab983c08668843b1d3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/f35dc89b8483383222385713baa9d78fe62e1c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa495912-7e00-49f8-8e3e-7e3f99235479/202cb3488506efb49dfb0ab983c08668843b1d3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:10:9d:ba:c7:64:1e:51:47:7e:28:b0:32:a4:4d:7a:26:12:
         7a:c9:24:97:0f:52:62:49:2c:b3:94:c4:6b:42:a7:c4:05:ee:
         fb:a7:7e:50:e8:66:0c:0d:f1:48:31:cc:9d:51:5c:5a:b7:ea:
         49:63:ed:4f:a5:b0:64:7e:8e:1b:7e:05:b6:c6:30:9f:a5:fe:
         f3:b2:d7:f7:e8:2d:9f:d7:93:4e:06:80:7d:cf:50:56:ab:0d:
         d3:27:9e:d2:4a:01:2e:74:de:ab:8a:12:39:92:96:12:8f:e9:
         6a:c2:ea:69:42:51:b4:44:fa:00:7e:95:ff:05:c4:a0:c8:00:
         f1:f1:1b:25:d5:1e:bd:d8:5d:f2:7a:66:7e:a3:06:d1:48:b8:
         24:d8:b2:a7:44:12:c5:d1:27:88:43:64:94:f3:62:04:23:d3:
         1f:01:ad:e7:68:90:24:5f:cb:31:63:3e:2f:1a:88:b2:ed:aa:
         03:2c:83:f1:0e:ac:b1:d0:90:9e:4d:04:6c:2e:3e:51:f1:c1:
         fc:4d:d1:21:aa:bb:c0:b4:92:0b:e5:b4:15:22:12:91:5d:3a:
         f5:af:57:76:0b:44:39:b7:58:56:46:cd:22:e3:b7:09:a0:bf:
         29:ff:49:59:f3:8b:4e:7d:27:9d:5a:03:d8:2c:01:b7:47:e5:
         07:17:75:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org