Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/13e109b777000109fba2c1e60655f2f24eb6306c.roa
File:                     13e109b777000109fba2c1e60655f2f24eb6306c.roa (raw, json)
Hash identifier:          m2OIVUqDlSVH3qhSA7TXaV+sz962nFLnxE7LUpPLoAc=
Subject key identifier:   90:6C:81:83:5F:E4:73:9F:EF:A2:5A:5F:BF:21:7F:60:1F:FE:AF:02
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A48BC
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/13e109b777000109fba2c1e60655f2f24eb6306c.roa
Signing time:             Wed 07 Sep 2022 20:46:39 +0000
ROA not before:           Wed 07 Sep 2022 20:43:34 +0000
ROA not after:            Sat 07 Sep 2024 20:43:34 +0000
asID:                     262145
IP address blocks:        190.211.117.0/24 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722556 (0x1a48bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:43:34 2022 GMT
            Not After : Sep  7 20:43:34 2024 GMT
        Subject: CN=13e109b777000109fba2c1e60655f2f24eb6306c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5e:11:12:72:38:be:0f:d9:e6:04:19:d8:8d:
                    60:e9:20:c5:b6:45:2b:98:b4:3b:de:cd:35:ae:1c:
                    30:ca:5a:3d:e6:4f:80:fc:3c:fb:e1:95:de:08:1b:
                    25:48:dd:21:07:b2:cf:92:2a:00:d9:bb:78:6f:dc:
                    7e:67:7e:bb:8f:aa:2d:56:1e:0b:46:ee:39:2f:21:
                    f0:c0:84:54:68:56:0b:24:6b:e1:ab:d8:7f:63:83:
                    6d:a0:0e:8c:31:46:87:82:66:55:a7:7f:96:c8:a9:
                    5f:47:a3:f7:85:d2:5f:1a:0b:4a:77:f9:88:2f:bb:
                    b5:d1:ff:cd:3d:fd:18:da:d6:2a:01:3e:14:44:43:
                    58:b3:25:91:66:18:c7:a3:ab:fe:65:96:e7:66:39:
                    11:7d:8c:1d:5d:88:30:dd:49:ce:79:e9:16:aa:78:
                    97:51:39:5c:9e:84:95:f3:bd:5f:ea:c7:a2:5a:85:
                    0d:42:ab:18:ed:21:79:e8:8a:60:a2:e7:40:a7:3a:
                    27:55:41:b0:f6:c7:fa:4e:70:3a:91:32:de:4b:8c:
                    49:86:26:5f:cd:82:68:fd:99:45:44:12:96:e0:45:
                    53:a8:1d:7b:2d:f7:69:8e:07:ae:78:b9:d2:d3:5b:
                    20:c4:03:13:62:e0:62:17:9a:16:1d:91:56:b5:90:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6C:81:83:5F:E4:73:9F:EF:A2:5A:5F:BF:21:7F:60:1F:FE:AF:02
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/13e109b777000109fba2c1e60655f2f24eb6306c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:db:8a:73:ab:1a:b1:39:b1:00:9d:bb:07:7d:bc:86:d1:67:
         45:ac:95:4f:58:99:d0:56:b3:68:38:4b:3e:09:41:50:5d:91:
         07:5d:eb:ff:b8:13:e5:bc:c8:97:fb:7d:65:88:15:8e:33:e0:
         32:9f:a6:ec:c4:20:20:68:fe:8d:c6:89:d2:8b:cd:7f:bd:6a:
         d2:99:5d:df:10:fc:99:70:8b:4b:c7:59:a6:a5:eb:58:b0:af:
         ed:0a:87:a7:da:23:f2:5c:70:b3:b0:65:bc:55:67:45:a8:ec:
         65:52:d8:7e:df:ee:a3:e8:80:5b:aa:7e:d2:2d:59:42:11:91:
         a6:e2:4d:2a:89:34:28:1b:b7:34:ac:d0:2d:95:1d:45:58:d2:
         ed:de:15:c7:23:05:88:ef:83:98:6e:52:1a:3c:b2:83:fc:71:
         df:bf:31:a3:8d:58:61:90:af:7b:a5:bf:f3:6c:5e:ce:5f:e4:
         f2:16:0e:f5:b7:ab:be:33:38:dc:c6:df:01:8e:46:20:83:2b:
         99:c0:26:ff:fb:8a:8f:05:d5:b2:96:15:9e:9a:be:c7:8f:ad:
         c5:fc:f1:4b:ef:26:19:7a:9d:d6:78:38:0e:fa:8a:e2:a5:bd:
         1f:62:b4:69:ca:0f:0d:19:ee:f1:b4:3f:31:70:ab:45:cf:46:
         26:75:fd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org