Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/767794b7ff889ee84682aa65c3605b91bd0127d8.roa
File:                     767794b7ff889ee84682aa65c3605b91bd0127d8.roa (raw, json)
Hash identifier:          gUMkR50f0efbdWiXHJSzEewVE8SWDAlNEe4swtzn4ng=
Subject key identifier:   BB:70:90:C2:57:97:A1:99:EE:0B:AF:DB:10:E9:63:E9:8B:07:41:63
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       0ECA2A
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/767794b7ff889ee84682aa65c3605b91bd0127d8.roa
Signing time:             Tue 11 May 2021 06:10:12 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     18678
IP address blocks:        190.90.10.0/24 maxlen: 24
                          190.90.101.0/24 maxlen: 24
                          190.90.13.0/24 maxlen: 24
                          190.90.14.0/24 maxlen: 24
                          190.90.15.0/24 maxlen: 24
                          190.90.151.0/24 maxlen: 24
                          190.90.152.0/24 maxlen: 24
                          190.90.16.0/24 maxlen: 24
                          190.90.192.0/24 maxlen: 24
                          190.90.193.0/24 maxlen: 24
                          190.90.202.0/24 maxlen: 24
                          190.90.204.0/24 maxlen: 24
                          190.90.210.0/24 maxlen: 24
                          190.90.221.0/24 maxlen: 24
                          190.90.222.0/24 maxlen: 24
                          190.90.223.0/24 maxlen: 24
                          190.90.242.0/24 maxlen: 24
                          190.90.38.0/24 maxlen: 24
                          190.90.68.0/24 maxlen: 24
                          190.90.7.0/24 maxlen: 24
                          190.90.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969258 (0xeca2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=767794b7ff889ee84682aa65c3605b91bd0127d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6c:ae:7b:9c:ec:20:6d:18:13:00:7d:5e:09:
                    0b:a4:3e:fc:be:18:c5:9c:51:31:51:d4:24:42:df:
                    23:ec:88:47:e3:25:85:bb:d4:f1:1c:62:82:a4:b6:
                    c1:0e:de:79:43:af:55:21:d0:be:9d:4d:eb:10:e4:
                    84:59:96:11:e4:be:cc:47:ae:e1:14:37:07:65:c8:
                    1d:a7:ad:8d:11:b8:62:3f:ad:08:a3:89:6f:e7:49:
                    eb:52:2e:60:f4:5c:e1:76:26:20:d6:2b:ff:42:ae:
                    8e:51:dd:08:dc:65:c8:cd:fe:8a:f7:d2:2e:a6:c2:
                    9d:92:d8:d7:7f:d7:ea:a9:84:53:1a:23:2a:25:ce:
                    5d:5a:c9:05:a0:ce:37:ae:90:f0:c6:d5:d9:af:e9:
                    3a:38:a4:b7:ea:8f:7a:54:9a:02:b5:55:7c:b8:73:
                    5f:9e:f2:76:fc:10:db:a8:4a:14:02:3b:17:59:c3:
                    7a:ee:58:53:11:79:0e:27:94:37:5b:00:24:73:1c:
                    6c:b4:28:7a:d2:4f:61:17:bd:db:1f:2c:aa:35:06:
                    09:19:89:10:27:12:23:a6:38:a2:ec:53:31:e5:b7:
                    9d:8b:f8:95:5c:a0:a6:6a:41:1c:6c:dd:8c:d3:90:
                    a6:47:7d:3b:cb:fe:82:b3:76:16:ff:7b:45:81:8c:
                    49:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:70:90:C2:57:97:A1:99:EE:0B:AF:DB:10:E9:63:E9:8B:07:41:63
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/767794b7ff889ee84682aa65c3605b91bd0127d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.7.0/24
                  190.90.10.0/24
                  190.90.13.0-190.90.16.255
                  190.90.38.0/24
                  190.90.68.0/24
                  190.90.79.0/24
                  190.90.101.0/24
                  190.90.151.0-190.90.152.255
                  190.90.192.0/23
                  190.90.202.0/24
                  190.90.204.0/24
                  190.90.210.0/24
                  190.90.221.0-190.90.223.255
                  190.90.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:5a:93:d3:02:99:b1:56:28:41:c7:c0:b7:1e:ee:f6:c4:
         b9:b8:d7:1c:61:0f:f3:8e:5b:b0:c8:bd:5f:60:e4:7e:6a:d2:
         4b:9f:b2:3b:65:32:e8:17:8f:48:7c:f0:f3:6c:9f:87:4c:c4:
         d6:af:09:f6:41:18:75:18:af:99:41:c1:ff:e7:87:0f:9e:f6:
         e3:57:f7:8f:f3:99:0c:f7:40:a8:18:a7:8c:be:8a:c2:62:ba:
         55:86:a7:88:78:69:b2:47:96:77:4e:68:6b:07:7b:85:13:be:
         70:52:e8:8f:78:e9:7e:3c:69:a6:19:d9:06:f3:69:26:e5:7a:
         56:5e:95:9b:e9:f7:3e:6c:b7:55:5f:04:8c:0d:61:c5:85:6b:
         fe:53:44:7b:42:23:32:5f:a1:19:80:73:97:9b:64:da:64:72:
         03:a1:4f:9d:fd:2f:69:78:9e:61:bc:27:1c:ad:d6:86:70:a5:
         df:4f:ab:40:f9:ac:24:8c:b3:7c:6b:8d:79:9b:44:10:05:c4:
         a8:13:8c:cb:7d:10:28:ba:55:17:3d:9d:64:b6:00:61:0b:a1:
         75:94:5d:77:bb:7e:fd:5c:bf:1e:80:96:59:ea:e7:84:ea:7d:
         6e:b2:5f:f0:ce:c3:da:64:4e:eb:57:9f:72:ae:40:24:fc:19:
         1e:a3:ed:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org