Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/1b03176fb86836bf9d6833833f8bef0c3b123e71.roa
File:                     1b03176fb86836bf9d6833833f8bef0c3b123e71.roa (raw, json)
Hash identifier:          EYJTeXORYC9vmVBhM6CaFAB9c+jW93XFpzY/UFJ9ve0=
Subject key identifier:   81:FA:FC:11:C1:37:E3:83:D7:3B:EA:64:F5:77:B7:5E:9C:65:CD:82
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       28146F
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/1b03176fb86836bf9d6833833f8bef0c3b123e71.roa
Signing time:             Thu 05 Oct 2023 19:14:26 +0000
ROA not before:           Wed 04 Oct 2023 19:14:26 +0000
ROA not after:            Sun 05 Oct 2025 19:14:26 +0000
asID:                     27837
IP address blocks:        190.90.134.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2626671 (0x28146f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Oct  4 19:14:26 2023 GMT
            Not After : Oct  5 19:14:26 2025 GMT
        Subject: CN=1b03176fb86836bf9d6833833f8bef0c3b123e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e3:a8:ad:20:e4:e5:2c:58:f5:8e:51:ff:cb:
                    10:5a:40:02:a1:8c:e2:44:bf:a3:1b:6b:26:57:ca:
                    bb:63:20:47:08:fe:5d:21:32:56:da:e5:ae:5d:88:
                    35:31:c2:50:09:c2:13:be:51:cc:af:dc:dc:f0:2a:
                    8d:b2:24:7a:f2:82:e7:af:f1:1d:05:00:63:09:b4:
                    d8:29:6d:79:00:00:6c:e1:3d:53:53:0a:09:43:f0:
                    b0:96:23:06:94:a2:7e:19:52:ad:1f:c7:6c:6b:39:
                    8b:7a:c2:44:33:fe:10:ef:62:e4:04:72:aa:57:1e:
                    f1:8a:d4:32:ae:0d:3c:43:dd:2a:6e:a8:b5:c5:65:
                    db:be:68:df:90:ce:4e:74:d9:f7:06:93:b8:60:29:
                    63:a8:c1:7b:90:d2:51:fc:39:dc:5c:31:b8:cc:86:
                    14:d9:63:4a:96:43:95:54:ce:4e:a4:57:06:ea:43:
                    7d:fe:c4:7c:54:df:ed:ec:c1:7b:27:c8:f3:08:8a:
                    fa:f8:35:ad:c8:fb:d3:11:7c:ca:bb:b5:89:2c:33:
                    09:22:e8:3a:3f:a4:9b:3b:91:8c:8e:ce:ec:81:57:
                    4e:73:13:8f:62:20:4b:50:03:60:d7:13:a5:0b:6c:
                    de:69:3b:85:ae:9f:b1:68:87:41:b2:5e:3e:56:97:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FA:FC:11:C1:37:E3:83:D7:3B:EA:64:F5:77:B7:5E:9C:65:CD:82
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/1b03176fb86836bf9d6833833f8bef0c3b123e71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:c8:16:20:ed:61:0d:63:fd:f4:71:b5:6d:30:fb:07:13:87:
         2e:e5:64:0e:00:f8:5e:c8:bb:83:d6:27:4b:ea:e1:c8:72:bb:
         35:46:85:46:e8:06:e3:d8:5a:24:8c:7c:48:ec:2a:af:d7:98:
         be:83:e2:ed:9e:60:ef:a0:e9:96:9d:b9:29:47:51:7e:22:f9:
         f9:b6:85:f4:e1:6d:4e:02:88:79:ce:20:3e:10:f9:59:c9:6f:
         6f:5b:cb:ec:be:2b:e2:d6:e1:75:ce:8f:11:b6:25:f5:64:13:
         ab:1d:9b:4c:fd:5a:46:6f:03:0b:ee:79:a9:3f:8b:05:82:91:
         da:dc:71:b1:34:b9:4e:f7:00:2e:13:4f:92:d7:4e:4c:a4:5f:
         db:2f:62:b3:ea:17:62:83:39:38:06:25:fe:4d:f2:58:40:e3:
         04:95:d2:a6:c6:bc:f7:5b:6e:97:f1:2c:75:0f:f9:bf:85:9c:
         25:eb:b4:91:93:aa:8c:10:ba:1d:f6:59:e9:cd:f3:c6:fe:cb:
         8f:b4:d3:f3:e7:74:8d:81:73:30:9d:02:44:d4:d3:f8:81:48:
         64:0a:ff:74:0c:8c:15:bc:0a:14:6d:02:3f:4a:97:c0:33:3e:
         b0:df:32:51:96:95:89:75:83:37:6c:73:d7:0c:7c:bc:a7:12:
         9d:75:23:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org