Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/fd1e8b8f1994e94c9b54dd762a9cb363b22f1c3e.roa
File:                     fd1e8b8f1994e94c9b54dd762a9cb363b22f1c3e.roa (raw, json)
Hash identifier:          4RlQqOwdCye+nt+mJS0f2UA7HBtejRssbm9GhNxfj94=
Subject key identifier:   E3:C6:EE:BF:D2:69:6C:77:5E:85:15:FD:45:B6:77:6F:03:2F:57:93
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1B210B
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/fd1e8b8f1994e94c9b54dd762a9cb363b22f1c3e.roa
Signing time:             Mon 05 Sep 2022 15:04:55 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     262589
IP address blocks:        190.90.208.0/23 maxlen: 24
                          179.1.92.0/22 maxlen: 24
                          179.1.96.0/24 maxlen: 24
                          190.90.148.0/24 maxlen: 24
                          190.90.207.0/24 maxlen: 24
                          190.90.235.0/24 maxlen: 24
                          190.90.13.0/24 maxlen: 24
                          190.90.83.0/24 maxlen: 24
                          190.90.245.0/24 maxlen: 24
                          179.1.77.0/24 maxlen: 24
                          179.1.66.0/24 maxlen: 24
                          179.1.67.0/24 maxlen: 24
                          179.1.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777931 (0x1b210b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=fd1e8b8f1994e94c9b54dd762a9cb363b22f1c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:19:9b:ae:b8:e0:a9:3b:21:37:8d:1b:dc:a4:
                    14:fe:ac:7c:a0:a4:15:e4:a2:78:cf:4d:61:4a:ab:
                    e8:1d:9b:da:0e:fe:2f:41:25:73:cc:72:a0:01:f7:
                    c1:ed:f9:6a:55:8b:cc:fb:73:c4:c1:d0:30:ef:a7:
                    8c:2e:03:9d:f4:39:e4:cd:b2:b5:b6:88:c1:9f:d7:
                    19:fd:d2:14:98:6f:42:f1:02:f6:a2:be:0a:d1:54:
                    44:be:54:0d:a5:d6:36:0e:3f:bc:62:f6:7d:0c:15:
                    ce:41:6b:08:e2:99:7f:71:24:21:c3:21:03:57:75:
                    7a:b9:bb:e7:3e:e1:65:0b:f8:99:ca:0f:f8:c9:34:
                    6c:58:5f:af:87:d0:16:f0:05:25:e4:79:7d:6e:d7:
                    87:b0:54:4e:e3:e1:b8:12:35:b8:1c:0d:6f:d7:85:
                    ce:b5:cc:ac:d4:83:bc:ca:98:41:83:01:a2:23:f3:
                    59:80:86:4b:9f:f3:8c:d2:4e:3c:a9:fc:3e:8e:d6:
                    5b:4e:eb:fa:cf:ac:03:a3:49:64:e5:94:30:b8:88:
                    4a:85:8e:b2:36:46:f0:92:06:bc:fd:39:66:5a:56:
                    f3:f3:1a:23:b4:96:cc:2b:16:7b:78:03:af:c2:20:
                    7a:72:f3:6d:94:bf:2e:4b:40:cc:19:46:52:d1:c2:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C6:EE:BF:D2:69:6C:77:5E:85:15:FD:45:B6:77:6F:03:2F:57:93
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/fd1e8b8f1994e94c9b54dd762a9cb363b22f1c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.66.0-179.1.68.255
                  179.1.77.0/24
                  179.1.92.0-179.1.96.255
                  190.90.13.0/24
                  190.90.83.0/24
                  190.90.148.0/24
                  190.90.207.0-190.90.209.255
                  190.90.235.0/24
                  190.90.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:dd:51:70:8a:46:98:96:88:d7:c0:e3:28:85:4c:96:f4:4a:
         69:0f:b1:c2:27:9b:4f:43:10:ac:7d:1d:6b:f3:3f:d4:56:04:
         52:c2:fe:90:05:f6:52:2c:4f:c7:c6:ae:2d:7b:af:69:93:5e:
         b4:8b:64:11:24:ac:54:ff:af:6b:bc:11:9b:1f:49:3a:5a:45:
         35:26:88:41:e6:e7:0f:2c:6b:69:de:13:34:a1:0a:9b:e0:90:
         e1:39:2f:14:74:9d:13:be:f5:18:8f:d3:b8:a7:ff:19:15:ab:
         25:83:d6:0a:6a:42:1f:10:fa:3c:d1:21:a4:a7:1d:c4:a3:88:
         fb:3c:99:c3:57:b7:5b:84:59:bd:87:f8:9d:b5:5b:4b:05:c3:
         43:e4:30:9f:fe:b2:23:b2:96:70:1a:0c:0d:c3:e4:21:d6:d2:
         5d:cb:47:6a:9e:3f:57:8a:94:68:e5:e5:4f:8e:cc:2a:30:00:
         09:1b:99:39:57:70:e6:03:31:3a:80:50:bb:dd:5d:cc:d3:db:
         31:86:87:70:c3:6a:6c:b4:c9:82:3b:88:1e:ce:b2:46:c5:bc:
         aa:ad:82:f6:4a:5f:86:e1:c5:c4:19:9c:8d:4e:3d:d2:1c:f7:
         6e:9e:59:52:4e:30:70:b7:ed:af:50:f5:ac:2f:c5:15:5c:e0:
         e0:ed:d0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org