Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/8d7d3406fd66c0c255b69ade9b41c2b269a54c4a.roa
File:                     8d7d3406fd66c0c255b69ade9b41c2b269a54c4a.roa (raw, json)
Hash identifier:          oSY1vj/CCoJh5VfmviJlX3b3yzxMAYj2EXnEzqchLoM=
Subject key identifier:   F9:14:1C:CC:38:7D:50:23:1D:64:93:2E:49:F8:4E:DA:C3:D9:E7:B3
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       20AE1E
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/8d7d3406fd66c0c255b69ade9b41c2b269a54c4a.roa
Signing time:             Wed 22 Feb 2023 19:51:29 +0000
ROA not before:           Sat 24 Dec 2022 16:26:20 +0000
ROA not after:            Sat 28 Dec 2024 16:26:20 +0000
asID:                     28006
IP address blocks:        190.214.5.0/24 maxlen: 24
                          190.214.253.0/24 maxlen: 24
                          181.113.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2141726 (0x20ae1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Dec 24 16:26:20 2022 GMT
            Not After : Dec 28 16:26:20 2024 GMT
        Subject: CN=8d7d3406fd66c0c255b69ade9b41c2b269a54c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2b:87:1b:4e:0b:29:c7:ad:d5:85:63:f3:20:
                    41:7d:08:d2:a6:74:86:10:f2:f2:94:68:e6:7b:4e:
                    c7:37:a6:57:34:c4:ca:1e:f8:1e:39:09:cb:11:ce:
                    2d:49:65:00:85:ab:e1:c0:98:ff:c5:e7:8c:01:6d:
                    fa:3c:dd:a1:29:7c:6d:fe:5a:20:c2:16:85:ee:e1:
                    8a:73:ab:0d:5c:9d:69:f5:14:a3:27:ed:1b:63:87:
                    51:25:d8:f6:b4:b6:e4:1e:0a:ba:da:07:aa:44:00:
                    0b:4b:84:5e:7c:fa:61:6a:ac:af:da:f9:39:0f:cf:
                    e2:fe:7c:aa:b7:ad:1b:82:12:1d:ea:ad:d8:9c:d9:
                    c2:7b:f2:7e:61:c4:e2:a9:a3:d7:44:5a:93:f5:26:
                    ff:8c:43:46:a6:34:ba:60:5f:13:f5:0e:aa:bd:d2:
                    f2:50:c5:00:1b:be:72:6d:f7:dc:b5:bb:eb:9b:9f:
                    15:01:4c:9a:30:75:a9:01:39:7e:93:9e:3e:be:50:
                    91:39:c6:16:ca:39:94:ba:3c:3e:41:d7:84:0f:f2:
                    c0:98:e3:20:46:3f:de:ba:a5:bd:02:88:8b:87:99:
                    4e:93:8b:6a:20:1b:7a:49:f2:a5:c8:70:eb:f1:52:
                    59:a9:67:b9:1a:12:27:d1:d0:ec:7a:c3:d5:a2:37:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:14:1C:CC:38:7D:50:23:1D:64:93:2E:49:F8:4E:DA:C3:D9:E7:B3
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/8d7d3406fd66c0c255b69ade9b41c2b269a54c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.113.192.0/24
                  190.214.5.0/24
                  190.214.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:f1:3b:ce:ce:94:7c:12:06:ae:98:ca:54:db:c9:9d:b4:d9:
         76:0f:c1:e5:b5:4a:23:bb:01:67:0b:56:f7:d0:62:dd:dc:58:
         15:6b:e3:87:de:87:18:96:2b:46:1d:de:31:e6:81:ee:99:7e:
         2a:1d:cb:b9:8b:e9:6c:a4:71:12:8e:44:07:c4:83:b0:92:ac:
         98:ee:0a:e3:dd:1f:9a:28:70:e6:80:b5:cb:10:7c:c5:1c:7d:
         fc:e9:c0:2f:f4:00:4a:33:b9:c2:36:79:f3:e5:69:63:1f:da:
         19:c7:ea:68:dd:76:b2:d1:16:13:55:90:ff:41:f0:6a:46:30:
         84:6e:e8:38:d1:fa:2b:ed:df:eb:e6:74:ad:70:a2:16:61:ce:
         33:9e:31:59:a9:b7:a8:bf:4c:b6:87:3c:75:c0:29:ba:40:7f:
         c9:4b:2c:b6:8c:ed:ff:e7:82:17:13:24:32:07:6a:fa:98:8f:
         75:a1:54:69:aa:5b:04:ee:ba:4e:2b:69:1e:f9:26:42:51:4b:
         26:e1:1e:9c:ad:b0:22:a5:a2:03:4d:aa:ab:e0:66:8d:5d:35:
         1e:9c:97:6b:ba:83:9f:fa:01:66:7e:c0:19:95:4c:cb:bf:b1:
         43:ba:66:34:fa:44:f9:b9:da:b9:50:64:d3:92:a5:42:6c:70:
         a6:f8:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org