Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/301e2b5cda89375ff601810cf57744fda186f4af.roa
File:                     301e2b5cda89375ff601810cf57744fda186f4af.roa (raw, json)
Hash identifier:          Aa3VWJ37Kh79vF4NU8mv/o2kO+xV/0fOFln9oREZe3U=
Subject key identifier:   E2:C9:A3:63:48:EC:CB:99:7A:43:66:5C:27:7B:95:20:F4:81:67:F4
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       2583F9
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/301e2b5cda89375ff601810cf57744fda186f4af.roa
Signing time:             Wed 28 Jun 2023 22:29:52 +0000
ROA not before:           Tue 27 Jun 2023 22:29:52 +0000
ROA not after:            Sat 28 Jun 2025 22:29:52 +0000
asID:                     264646
IP address blocks:        190.90.224.0/24 maxlen: 24
                          190.90.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2458617 (0x2583f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Jun 27 22:29:52 2023 GMT
            Not After : Jun 28 22:29:52 2025 GMT
        Subject: CN=301e2b5cda89375ff601810cf57744fda186f4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:90:38:b6:49:c8:73:fb:9e:cb:c7:7a:3b:07:
                    0b:a0:8a:26:8c:d6:4e:16:c0:8f:96:15:51:2a:0f:
                    5b:58:58:4c:00:34:22:5d:07:9c:d9:c6:b7:11:e8:
                    a9:c0:ee:e3:f5:8a:ec:9f:84:d6:86:34:18:1c:92:
                    60:62:ae:f2:a7:c3:8e:c6:c8:0d:0d:89:32:10:a5:
                    dc:04:dd:aa:4e:c3:8e:54:1c:34:e3:f9:26:8d:52:
                    5f:30:48:08:60:c8:57:2c:92:98:89:d5:21:13:7a:
                    27:73:1b:1c:26:55:bd:73:67:f0:6e:c2:74:52:32:
                    b2:34:3f:2b:ba:b8:9c:be:99:55:72:ec:ff:2c:40:
                    d9:f0:20:29:f0:09:f8:fd:d2:dd:b8:a6:81:ce:ac:
                    35:25:1b:ea:c5:7d:86:d3:29:39:ac:d0:79:30:ed:
                    7d:f9:3d:02:04:33:27:2c:8c:07:19:1c:ab:4d:c3:
                    ff:ff:23:ec:b6:61:5b:c5:b2:d9:5f:f0:81:60:6f:
                    17:82:12:d3:ce:82:97:9c:b2:ff:8c:d1:0e:5c:cb:
                    f2:fa:56:f9:87:47:38:0f:75:d8:6b:22:da:af:31:
                    2a:a3:65:70:9b:e4:74:41:6f:7e:81:ae:e2:36:a3:
                    3d:eb:8a:60:f8:36:df:68:5b:81:62:48:29:1d:85:
                    0a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C9:A3:63:48:EC:CB:99:7A:43:66:5C:27:7B:95:20:F4:81:67:F4
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/301e2b5cda89375ff601810cf57744fda186f4af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.138.0/24
                  190.90.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:66:81:45:3c:3f:ee:51:a4:32:be:7e:cb:cf:80:9f:d8:
         5f:3d:6f:10:93:ab:a3:61:da:7b:91:0d:b5:fc:3d:0e:87:7c:
         8e:83:19:85:51:33:5c:55:82:f3:d6:8a:c8:9c:7b:b5:7f:ca:
         67:3e:ca:46:17:66:dd:4a:d4:ed:ea:e2:60:90:7f:47:54:71:
         83:99:96:bd:55:27:b1:4f:9b:7d:5f:65:a3:90:0e:0e:c5:71:
         97:28:0f:d1:d4:fb:c5:de:b3:59:c5:cc:98:48:5d:f1:6b:9b:
         50:0c:18:1e:18:e4:94:d2:7d:07:fa:43:a2:2e:be:58:10:ad:
         af:1b:1f:67:e9:74:6e:e0:67:ed:f9:33:89:e2:cf:05:77:f2:
         66:87:ae:6e:8f:96:cb:f3:d0:4b:08:49:05:8e:66:af:77:c3:
         49:62:dd:ad:ca:43:b9:42:7d:25:3a:ea:1f:37:9b:f0:da:5e:
         d4:02:69:01:d8:cd:36:68:63:2d:63:57:ea:a2:f7:30:a5:b6:
         3c:12:74:99:35:40:70:7b:0c:ab:38:e0:4f:c0:c9:0e:09:d4:
         07:cc:ef:63:17:bf:56:25:26:62:33:aa:2e:50:52:e0:c2:c0:
         bc:75:3a:0d:bb:b4:11:3a:7f:3f:8c:55:fd:12:35:61:b7:08:
         72:6a:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org