Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/64fcc698d91ccde7bce5b80f01688506d449577d.roa
File:                     64fcc698d91ccde7bce5b80f01688506d449577d.roa (raw, json)
Hash identifier:          E8rjzQE258Yl3Av3w88CWPoSbAmASdMF4JDmz/Y/XR0=
Subject key identifier:   30:2A:78:68:BB:02:4A:C5:FE:85:2A:B5:F1:41:5B:20:5B:04:60:AE
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       25B1A5
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/64fcc698d91ccde7bce5b80f01688506d449577d.roa
Signing time:             Wed 28 Jun 2023 22:39:18 +0000
ROA not before:           Tue 27 Jun 2023 22:39:18 +0000
ROA not after:            Sat 28 Jun 2025 22:39:18 +0000
asID:                     26619
IP address blocks:        190.90.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2470309 (0x25b1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Jun 27 22:39:18 2023 GMT
            Not After : Jun 28 22:39:18 2025 GMT
        Subject: CN=64fcc698d91ccde7bce5b80f01688506d449577d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f1:e4:d6:1f:bf:0f:f5:51:72:86:f3:58:a9:
                    48:97:d6:ed:5f:6b:fd:4b:ef:d9:ec:f9:52:1f:44:
                    d8:2b:08:c7:84:90:ec:0b:61:97:2f:f4:fd:8f:08:
                    f3:97:cf:99:c0:f3:e2:45:cb:2e:33:78:fd:9e:8e:
                    a3:94:10:db:59:a5:57:f6:2b:87:07:33:e8:bc:0c:
                    15:13:41:69:a0:54:b0:a7:70:e5:e4:15:9e:65:72:
                    d0:8c:c0:95:c2:9d:05:fc:45:9a:04:04:d7:7a:94:
                    64:58:21:4c:06:86:4f:3b:53:d9:5e:e1:37:ee:07:
                    e2:8a:3e:1e:64:90:7d:ce:2c:4a:c5:5c:ca:b2:0e:
                    eb:a2:4b:80:71:2b:27:e8:02:f5:5e:c1:82:2f:78:
                    c7:b0:19:df:17:97:01:a5:4b:e6:e6:21:ba:73:4c:
                    bc:42:40:ff:b7:b8:5e:ed:a6:94:3b:17:ea:75:32:
                    dc:be:90:0f:85:11:45:0a:fd:ef:75:13:f4:96:31:
                    a7:97:3d:85:40:93:57:98:e5:53:80:e3:24:7c:b8:
                    7d:f2:9d:ee:fa:52:d6:52:03:70:dd:c4:67:93:aa:
                    33:01:10:7c:b1:b7:17:a4:b5:b8:2c:02:c1:b0:a7:
                    4c:11:29:cc:12:19:cb:96:72:0b:7f:e0:a3:4d:37:
                    15:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2A:78:68:BB:02:4A:C5:FE:85:2A:B5:F1:41:5B:20:5B:04:60:AE
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/64fcc698d91ccde7bce5b80f01688506d449577d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:cd:5f:c0:08:40:33:13:aa:d2:89:65:c9:5d:a9:b8:66:10:
         1c:58:2a:7d:13:7d:7c:e3:7d:f4:7d:aa:a5:69:f9:71:7f:96:
         c9:42:f1:cb:2f:a8:de:0e:40:55:de:1d:97:e1:6a:2d:c6:c5:
         06:7b:80:f7:30:84:15:6f:56:53:67:05:f4:3b:0e:58:01:3b:
         bb:66:de:01:31:8d:06:26:ef:dc:85:98:0a:91:a7:06:3d:2f:
         9d:2a:9c:a4:17:c8:3d:06:5c:2e:5d:86:5d:b4:4f:34:8e:37:
         32:ae:37:26:f2:76:5b:cd:9b:c3:be:f5:79:02:02:b7:a9:0a:
         7e:5c:b4:76:41:59:48:b6:bd:7f:d8:2a:22:39:3a:fe:cd:d2:
         58:c1:48:cd:59:5d:52:41:60:28:3b:1e:d6:35:5d:fd:ba:d1:
         9a:6d:bd:aa:d1:7f:62:d8:f2:4e:cc:d6:ee:63:56:20:66:74:
         6c:73:a4:67:3d:df:b6:46:59:dd:0a:8f:6c:35:c1:fc:f7:85:
         8f:05:f1:c2:4f:df:45:a4:19:91:db:19:83:b2:82:20:b2:65:
         04:6a:c5:69:8b:49:ff:4d:d2:a4:b1:8c:73:3a:42:5f:e2:70:
         fc:4f:71:49:64:eb:a5:0f:b1:6a:2f:16:b4:c2:f3:bf:ff:f0:
         7c:51:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org