Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/b4661c8e84d6986187f831e0c0e3700d7fe279bf.roa
File:                     b4661c8e84d6986187f831e0c0e3700d7fe279bf.roa (raw, json)
Hash identifier:          orLj3tfSavh5CKdI90yBtcqBacL/lotfUHDMJs2rA/g=
Subject key identifier:   7F:D7:FD:1A:24:A3:07:94:B4:5E:8A:12:0A:F6:7C:29:52:78:7F:54
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A66C1
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/b4661c8e84d6986187f831e0c0e3700d7fe279bf.roa
Signing time:             Wed 07 Sep 2022 22:19:41 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730241 (0x1a66c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=b4661c8e84d6986187f831e0c0e3700d7fe279bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b2:8b:fa:bc:de:c5:87:25:1f:15:ee:d7:30:
                    19:53:bc:40:68:76:76:00:7c:d5:00:c9:a7:2e:89:
                    9f:ee:ca:59:32:e3:5a:f1:8e:26:01:f7:98:15:e0:
                    59:49:75:c1:2c:b2:f7:53:b9:3a:ba:ec:c1:db:ac:
                    f1:22:f1:9a:a2:f5:6a:66:e2:97:ea:44:a3:f2:78:
                    76:bc:3e:e2:0d:68:bb:86:30:c8:db:88:84:3e:14:
                    e2:ff:41:b0:4a:fa:71:32:82:27:ce:ba:f4:8d:14:
                    21:0d:c2:9a:6a:20:cc:10:3d:1b:c7:ff:74:e0:e2:
                    4c:b3:f2:7c:eb:ce:f8:72:40:2e:81:54:0c:76:88:
                    aa:16:b8:db:46:16:4e:07:68:83:32:13:f6:cb:e2:
                    8a:94:39:9f:a5:73:58:e6:15:82:e0:ab:0d:a4:d2:
                    be:55:e4:f4:dd:80:68:b5:e2:c1:7b:92:58:bb:74:
                    6c:e5:33:bd:ca:58:52:67:e6:7b:42:80:d4:92:f0:
                    ca:79:aa:5f:aa:76:b7:e8:eb:ad:b8:ca:11:09:e1:
                    2b:4f:6e:af:6b:ba:a9:96:2a:2d:13:e2:45:3f:2d:
                    35:ec:e2:5f:bb:d4:76:89:48:e3:c9:ab:77:bd:de:
                    8b:3e:be:51:5a:61:57:e4:50:64:43:70:f9:2e:3e:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D7:FD:1A:24:A3:07:94:B4:5E:8A:12:0A:F6:7C:29:52:78:7F:54
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/b4661c8e84d6986187f831e0c0e3700d7fe279bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:33:82:0e:69:b8:62:b1:10:c2:58:42:4a:81:fa:d5:6b:47:
         57:c9:3a:cc:fe:28:63:b4:8c:27:66:a1:a7:ac:d9:5e:d6:09:
         03:f2:0f:31:92:25:ef:88:c7:48:b2:9f:62:c4:ee:3c:e4:2f:
         af:45:c8:d0:cd:0f:7c:b0:b7:bc:b4:3e:a0:2e:5a:62:ce:bf:
         c2:e0:20:48:bd:e1:d7:f4:ab:96:26:7b:3f:87:f7:29:1d:af:
         d1:10:cb:06:e1:fe:52:4b:a1:16:31:8e:16:38:c6:cc:96:26:
         5b:04:3b:2f:e4:18:98:1f:73:b7:f5:9a:f7:c7:ff:66:16:c3:
         f8:5a:f8:a6:f1:fc:87:f9:5b:aa:e5:ba:c2:40:29:ed:75:c1:
         ea:5c:f3:7e:df:e3:ac:7d:f8:34:cf:8f:15:3f:64:75:45:3c:
         81:b9:01:95:d7:64:f7:d6:95:5e:81:d6:71:86:4e:da:22:bb:
         5a:b2:74:a7:2e:7e:76:92:a1:39:d0:4d:e2:7d:02:de:26:bb:
         4f:db:15:de:3d:22:20:c2:c9:5c:32:71:fb:2f:d1:e8:ff:0c:
         10:a9:46:93:9f:5f:4c:75:45:24:eb:65:27:69:ea:9e:55:7f:
         14:ee:ba:fe:66:11:c3:46:06:11:ed:60:da:4e:85:57:2d:ea:
         fa:d9:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org