Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/efe9fbd0ce75107c433563bf57dc61b8f0e6e6ec.roa
File:                     efe9fbd0ce75107c433563bf57dc61b8f0e6e6ec.roa (raw, json)
Hash identifier:          LJPvcspBdBWpy0X2k/BG1Nnp3M0w6radp+HBMyihj3Q=
Subject key identifier:   46:2B:7D:7D:66:DC:36:81:6F:F2:D6:E4:BA:42:7A:C2:14:3C:61:EA
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       22024E
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/efe9fbd0ce75107c433563bf57dc61b8f0e6e6ec.roa
Signing time:             Wed 22 Feb 2023 11:16:43 +0000
ROA not before:           Sat 06 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     18678
IP address blocks:        190.90.82.0/24 maxlen: 24
                          190.90.93.0/24 maxlen: 24
                          190.90.94.0/24 maxlen: 24
                          190.90.115.0/24 maxlen: 24
                          190.90.116.0/24 maxlen: 24
                          190.90.121.0/24 maxlen: 24
                          190.90.130.0/24 maxlen: 24
                          190.90.151.0/24 maxlen: 24
                          190.90.152.0/24 maxlen: 24
                          190.90.190.0/24 maxlen: 24
                          190.90.193.0/24 maxlen: 24
                          190.90.212.0/24 maxlen: 24
                          190.90.213.0/24 maxlen: 24
                          190.90.215.0/24 maxlen: 24
                          190.90.216.0/21 maxlen: 24
                          190.90.234.0/24 maxlen: 24
                          190.90.243.0/24 maxlen: 24
                          190.90.249.0/24 maxlen: 24
                          179.1.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2228814 (0x22024e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar  6 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=efe9fbd0ce75107c433563bf57dc61b8f0e6e6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e9:2f:cb:86:cd:43:e7:32:9a:27:45:4a:41:
                    6a:f6:c1:b4:9b:f2:c0:f3:bd:9f:17:b8:2d:b9:31:
                    fe:99:af:3c:37:ee:71:0c:48:09:c3:8d:28:59:2c:
                    e2:d8:0f:2a:67:03:14:f3:0c:a3:1e:56:af:19:c3:
                    30:27:d9:c1:ff:c0:30:5c:c3:05:18:83:a1:ac:be:
                    1d:7a:4a:7a:88:31:0c:8e:80:25:51:e9:7f:d3:a5:
                    0f:53:7e:31:47:2b:e0:6f:df:1c:20:5f:6a:db:4a:
                    36:83:a5:20:88:94:3c:8a:be:60:f4:fe:a2:29:d3:
                    f0:fa:d0:4f:80:f3:bc:d1:37:ca:36:d6:c7:8d:30:
                    08:43:4a:23:58:4e:4b:8a:db:30:72:76:e4:75:43:
                    c3:fd:93:d8:20:ea:ab:a6:58:68:f8:af:09:0b:fa:
                    71:a9:78:55:0b:a7:76:f5:5c:ad:0f:ee:e7:e0:a2:
                    be:05:4a:ce:cb:eb:96:2d:03:70:5c:e5:92:d8:e8:
                    1f:07:6d:61:2d:e4:23:68:20:f0:b0:b2:be:f4:23:
                    db:25:64:01:2a:e6:47:53:9d:a9:2e:6b:39:f8:5f:
                    f8:97:3a:8d:ec:e0:11:e9:f9:02:d6:cf:19:e3:fc:
                    3c:45:f9:78:3b:0b:7f:1e:14:5c:97:dc:da:50:29:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2B:7D:7D:66:DC:36:81:6F:F2:D6:E4:BA:42:7A:C2:14:3C:61:EA
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/efe9fbd0ce75107c433563bf57dc61b8f0e6e6ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.72.0/24
                  190.90.82.0/24
                  190.90.93.0-190.90.94.255
                  190.90.115.0-190.90.116.255
                  190.90.121.0/24
                  190.90.130.0/24
                  190.90.151.0-190.90.152.255
                  190.90.190.0/24
                  190.90.193.0/24
                  190.90.212.0/23
                  190.90.215.0-190.90.223.255
                  190.90.234.0/24
                  190.90.243.0/24
                  190.90.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:5c:cf:be:9d:ad:95:ae:36:2b:d8:d3:86:37:cd:cc:1c:0a:
         2a:e6:2f:c6:27:1a:fc:83:7a:62:ba:9b:6f:44:e2:a4:ce:b2:
         38:ab:91:94:52:82:b2:f2:09:c2:fb:67:5b:1e:b7:e2:44:e9:
         48:c1:3f:5e:26:31:d4:c7:61:23:b4:37:a3:46:8d:d5:d8:c7:
         d1:7e:fe:7c:f7:a4:56:dc:e5:f0:a3:97:e7:42:56:6f:0d:70:
         5a:07:94:87:b9:0d:88:49:32:94:06:6a:6f:2e:98:f4:32:76:
         55:a1:aa:90:c0:d0:e0:1e:7f:d5:8a:35:2d:7a:72:9e:16:4e:
         2a:ad:d6:cb:0a:b6:59:f9:ba:5b:c9:e7:72:9b:5c:c9:17:1e:
         8e:2c:5a:5d:db:5b:25:c1:c1:11:8b:17:0f:18:ad:7f:44:84:
         2c:db:13:f8:13:61:94:57:8c:a5:f6:0d:06:71:5d:9b:8c:7e:
         ab:f0:b6:2b:18:62:49:f1:14:d5:70:b5:63:30:09:6d:03:97:
         d4:4c:ab:88:9c:2e:0f:79:52:ca:fb:21:5e:a8:5c:b1:dc:69:
         5d:a1:a2:63:18:d3:94:eb:21:cc:4e:67:a6:9f:57:ec:90:81:
         9b:a9:fd:71:a7:44:03:8d:b7:76:d6:bf:d0:07:4d:07:a0:05:
         bf:67:ff:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org