Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/1161e611ebf003b4d34d3b22d6da59013a871ee5.roa
File:                     1161e611ebf003b4d34d3b22d6da59013a871ee5.roa (raw, json)
Hash identifier:          H14nhweop4fHJCICaPdb2Guc1K5VvrqN58HJtMGqZlQ=
Subject key identifier:   E7:74:A0:70:86:32:43:35:8A:B8:AB:98:E9:45:1A:94:C0:BF:C7:16
Certificate issuer:       /CN=09a203b64348f1b177ff9d7141f0356733b30843
Certificate serial:       248F11
Authority key identifier: C8:23:D6:7D:AD:B0:7E:45:58:BD:2F:96:39:0F:1D:91:87:F9:B9:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a203b64348f1b177ff9d7141f0356733b30843.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/1161e611ebf003b4d34d3b22d6da59013a871ee5.roa
Signing time:             Wed 25 Oct 2023 19:18:56 +0000
ROA not before:           Wed 25 Oct 2023 19:18:56 +0000
ROA not after:            Sat 25 Oct 2025 19:18:56 +0000
asID:                     27979
IP address blocks:        190.93.224.0/20 maxlen: 20
                          200.73.208.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2395921 (0x248f11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a203b64348f1b177ff9d7141f0356733b30843
        Validity
            Not Before: Oct 25 19:18:56 2023 GMT
            Not After : Oct 25 19:18:56 2025 GMT
        Subject: CN=1161e611ebf003b4d34d3b22d6da59013a871ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fd:68:92:45:41:39:ae:cd:0c:fd:97:44:96:
                    5e:ef:5d:69:e3:57:3a:3e:5c:ab:9c:5f:65:21:ce:
                    7c:ef:bf:39:9a:03:64:fd:a6:44:de:80:5c:6a:24:
                    44:89:85:11:95:2a:bf:c0:91:8e:a4:77:34:3c:01:
                    16:91:00:ce:6f:6f:8e:9e:b6:34:02:10:e2:24:a0:
                    f4:0b:6f:71:09:4b:e6:61:38:0d:7c:00:9e:23:f8:
                    27:02:24:85:59:ab:49:8c:8a:d0:7b:4e:10:68:63:
                    29:e8:36:2b:93:75:c3:17:9a:50:95:2d:5e:71:50:
                    99:d8:3f:67:21:ca:2d:43:dd:98:8c:0c:ee:6e:b1:
                    bc:31:da:bf:fa:12:98:93:42:cd:7f:c7:0f:fa:f4:
                    39:aa:25:ed:d5:84:f7:b3:81:8a:cd:17:f6:31:0d:
                    2d:51:d1:3c:0a:bb:de:61:f0:c8:9f:98:9d:24:2d:
                    9c:14:26:56:5b:ec:bb:04:d3:f8:56:c1:5e:13:dc:
                    45:f1:0b:6c:84:dd:52:6c:10:25:c1:9c:ba:9e:36:
                    4c:3b:95:98:6c:f7:7a:6e:de:30:d3:1d:23:71:ff:
                    ae:e1:69:a0:03:3c:74:51:15:73:1a:86:aa:94:a0:
                    ac:54:e3:29:35:b2:79:fb:f9:87:6d:58:19:99:cf:
                    80:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:74:A0:70:86:32:43:35:8A:B8:AB:98:E9:45:1A:94:C0:BF:C7:16
            X509v3 Authority Key Identifier:
                keyid:C8:23:D6:7D:AD:B0:7E:45:58:BD:2F:96:39:0F:1D:91:87:F9:B9:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a203b64348f1b177ff9d7141f0356733b30843.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/1161e611ebf003b4d34d3b22d6da59013a871ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b06901a4-b33d-4a88-b0e4-9ab69be88387/09a203b64348f1b177ff9d7141f0356733b30843.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.224.0/20
                  200.73.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:01:bb:f3:bb:52:fe:1f:e4:45:1a:a0:28:ee:31:53:3c:0a:
         3f:a7:82:d0:6d:c4:1b:2a:be:f4:d9:71:ce:64:31:de:5e:17:
         ac:b1:55:19:12:4c:eb:29:f9:82:47:33:c3:3f:db:c6:6c:b8:
         d6:3c:8a:46:7c:0a:6d:7b:b2:a7:4f:0b:3e:c9:05:54:4c:a2:
         41:cd:2f:8a:d8:45:b7:2c:60:52:ca:fb:83:62:81:84:d2:83:
         87:54:86:b9:c7:28:22:b3:77:dd:5e:bc:5a:b9:ab:b5:8a:0c:
         3c:7d:95:5f:a2:1a:8d:41:3f:7e:67:48:20:d0:63:06:38:ec:
         39:30:04:d8:0c:34:ab:eb:a4:73:68:1a:27:9a:b9:e0:b5:eb:
         63:b6:13:cf:47:fe:27:a1:b8:ee:06:f6:28:80:6d:5f:b7:8f:
         c2:e3:bd:be:61:7a:ba:84:e7:20:3c:b6:0e:dd:30:0b:7c:20:
         93:d8:ec:8a:75:d7:4a:17:b9:0a:21:05:93:a3:76:ea:76:94:
         b4:e8:eb:80:65:4e:53:09:b3:c0:17:26:7f:b4:94:7f:45:49:
         4f:b0:56:20:68:2f:2b:bd:27:03:63:c8:1f:49:d5:57:cf:96:
         a0:e1:e4:21:c9:98:40:b1:37:d6:5a:f2:8c:7c:f4:ee:3d:8f:
         12:be:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org