Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/7ae3961e882c4d75069344825bed74f7e38678a5.roa
File:                     7ae3961e882c4d75069344825bed74f7e38678a5.roa (raw, json)
Hash identifier:          pIbJkMl95RXllWw7z4HMbRlbBuc/+lev88WAhQR7ApI=
Subject key identifier:   77:F4:DE:1F:B5:FB:68:18:86:E4:74:5B:3E:3D:59:A1:A0:03:6A:24
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A91E3
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/7ae3961e882c4d75069344825bed74f7e38678a5.roa
Signing time:             Wed 07 Sep 2022 22:25:03 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741283 (0x1a91e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=7ae3961e882c4d75069344825bed74f7e38678a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:19:ee:59:dd:2f:e6:26:76:b1:81:96:e0:76:
                    04:b1:86:62:d3:fd:e3:12:67:8b:72:68:b2:c8:c5:
                    93:1c:01:6b:4d:9c:32:3e:52:91:33:ce:b3:e2:f7:
                    73:8c:71:5f:8c:f2:74:4b:4b:9d:30:3a:b8:f3:ce:
                    be:45:7d:ed:fd:97:d5:37:7c:a3:fe:b2:21:eb:9b:
                    e5:b9:29:19:c4:df:43:e1:1d:11:00:d6:42:27:2a:
                    29:40:c3:b7:ad:fc:d6:cb:6f:f4:8a:f5:86:3c:a5:
                    cd:da:88:55:cf:eb:7e:ea:9c:32:76:f8:9b:0d:55:
                    a3:e1:4e:ba:ee:6b:2f:c8:96:fd:b9:66:3e:28:56:
                    fa:ef:47:2c:4f:58:f2:14:41:75:6b:f2:1b:f4:58:
                    d9:6a:45:4a:53:b5:1e:ec:a8:e9:5a:a3:03:43:41:
                    a8:59:64:67:76:6b:ef:a6:8b:c8:9e:91:e9:6f:b5:
                    5c:28:f1:ee:c9:3f:fb:ea:4c:ca:6e:b9:23:7d:5c:
                    8b:07:08:b0:79:d2:7e:cf:35:90:26:c2:c4:f3:5f:
                    4b:99:a7:3d:3b:df:79:c0:89:b6:1a:e0:85:5f:4e:
                    3e:fe:23:d8:c2:83:7b:f3:5a:d4:ed:a1:93:5d:b9:
                    df:c9:a9:60:a1:9b:40:bf:54:e3:a2:51:2f:d6:53:
                    e6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F4:DE:1F:B5:FB:68:18:86:E4:74:5B:3E:3D:59:A1:A0:03:6A:24
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/7ae3961e882c4d75069344825bed74f7e38678a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:2f:9e:b6:d2:e0:37:69:b6:06:69:3d:da:2f:d7:e1:70:6c:
         b1:73:2c:50:48:0b:97:61:94:52:47:b4:cd:b2:8b:a9:05:7a:
         43:32:61:2a:4b:bc:bc:2a:85:a2:ec:1b:7c:9c:1a:ee:7d:93:
         9a:df:31:55:d7:b0:3f:cc:39:ee:ea:c0:5f:4e:90:c5:1d:8d:
         70:28:05:75:64:cc:ce:1e:93:ec:d9:e9:fb:6d:1d:30:70:98:
         9e:96:b6:1e:09:0e:3a:6a:9b:91:c9:1a:b6:e9:e5:6b:e5:6e:
         33:a3:76:d0:22:6d:59:3b:0d:85:69:3c:e9:88:a8:f7:20:1a:
         cd:f3:09:a8:5d:a5:d7:78:50:f4:04:ca:ad:94:b4:0c:6b:2f:
         89:f6:73:25:96:d2:4b:b3:5b:fd:0c:93:8e:0f:d5:77:8e:91:
         98:25:8e:d4:6f:4e:bd:0e:80:ba:6e:47:28:5a:86:83:83:75:
         72:b8:9b:8e:bb:87:ee:9c:6d:0d:29:f8:c1:61:89:38:1f:8c:
         ef:ed:9c:65:1d:36:b0:94:ce:2a:63:fd:6d:eb:c2:a1:0a:12:
         d1:5e:ad:71:76:ec:3e:ed:91:d2:f3:b9:77:b0:b5:25:7c:25:
         00:31:87:07:73:60:1e:1d:ad:ad:50:36:31:1b:4b:01:ec:bf:
         bb:cb:4a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org