Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/3e3af12cea7483a5eaf68b3eafdfd7f788aa6c32.roa
File:                     3e3af12cea7483a5eaf68b3eafdfd7f788aa6c32.roa (raw, json)
Hash identifier:          eyk0GPhup3nExopNzcijePcZdP/LuMOT42ZfbAPig9s=
Subject key identifier:   54:B6:BF:32:DD:CD:B9:A1:B3:E5:7B:42:4F:90:16:E8:C2:C6:33:88
Certificate issuer:       /CN=0c4557be1a84f05a56a15cb22513acd961fb70fa
Certificate serial:       20A933
Authority key identifier: 6A:F8:BD:09:59:77:BC:67:70:C2:C2:34:20:F9:8A:39:EC:B6:12:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c4557be1a84f05a56a15cb22513acd961fb70fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/3e3af12cea7483a5eaf68b3eafdfd7f788aa6c32.roa
Signing time:             Wed 22 Nov 2023 07:30:00 +0000
ROA not before:           Wed 22 Nov 2023 07:30:00 +0000
ROA not after:            Fri 21 Nov 2025 07:30:00 +0000
asID:                     269936
IP address blocks:        190.83.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140467 (0x20a933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4557be1a84f05a56a15cb22513acd961fb70fa
        Validity
            Not Before: Nov 22 07:30:00 2023 GMT
            Not After : Nov 21 07:30:00 2025 GMT
        Subject: CN=3e3af12cea7483a5eaf68b3eafdfd7f788aa6c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:37:4d:06:24:f5:ff:72:4a:47:ad:5a:71:
                    42:e5:9e:03:69:a8:3d:48:75:b6:68:9e:ff:37:be:
                    d8:a8:96:20:9a:7b:c3:a9:41:94:bf:81:0a:42:2a:
                    63:dd:30:04:28:41:18:51:03:99:d6:fd:9a:e7:dc:
                    c9:0a:15:42:e1:65:4a:83:c1:61:c6:ed:57:b2:f9:
                    9b:45:5b:27:39:f6:94:75:4c:72:e5:03:1f:da:01:
                    ae:14:94:b4:24:9b:00:4c:06:ec:7b:f1:37:5d:81:
                    60:d3:39:d2:44:b8:3e:12:db:20:76:83:f1:ff:43:
                    2d:9e:a3:75:03:05:be:43:ec:8b:3a:2f:19:62:00:
                    36:a0:89:ed:68:8f:5d:f1:5d:d5:a1:3a:92:3b:cf:
                    a3:d4:2f:5e:43:2a:9d:16:7c:68:10:d6:3b:5d:b1:
                    5b:37:d7:d6:a5:fd:6a:20:8e:02:11:76:02:4e:4a:
                    6d:a2:c1:38:29:f9:dc:02:86:5f:8f:31:fe:5e:07:
                    03:48:8c:bb:c2:91:b7:34:53:71:81:34:51:cf:7c:
                    8e:3e:af:46:69:07:d1:dc:9d:02:d2:86:a5:14:47:
                    02:20:b8:cd:de:23:c2:0e:b5:48:0b:d6:e6:31:42:
                    3d:aa:33:0a:58:29:fb:90:9c:db:0a:48:25:ca:c2:
                    4a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B6:BF:32:DD:CD:B9:A1:B3:E5:7B:42:4F:90:16:E8:C2:C6:33:88
            X509v3 Authority Key Identifier:
                keyid:6A:F8:BD:09:59:77:BC:67:70:C2:C2:34:20:F9:8A:39:EC:B6:12:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c4557be1a84f05a56a15cb22513acd961fb70fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/3e3af12cea7483a5eaf68b3eafdfd7f788aa6c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/0c4557be1a84f05a56a15cb22513acd961fb70fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:bb:11:98:1d:ea:27:fc:e3:8b:af:05:25:0f:3e:57:1b:82:
         a9:44:0b:02:12:fd:dc:17:d4:ce:4a:e0:08:d5:3a:64:79:81:
         51:1a:8f:c4:af:b5:28:7a:6e:41:12:63:48:8d:a2:e3:9a:22:
         80:3a:f4:db:02:d4:06:b2:ab:97:29:a3:1f:f6:0e:4b:f4:22:
         d7:9b:f9:b6:d7:40:41:df:6b:87:e5:df:34:35:6c:da:ed:2d:
         c9:68:82:e1:e2:65:77:52:e3:25:c3:f7:a1:8a:4d:78:78:33:
         c4:e8:42:d6:cb:d0:ed:8b:8f:5f:4a:dd:bb:4c:bb:f7:0a:c2:
         22:8a:a4:88:8f:95:ec:04:15:9c:71:0b:d6:39:d6:43:03:3c:
         e2:a6:b4:27:0c:08:05:9c:bc:37:61:41:9b:44:7a:bc:64:0c:
         ca:1c:70:a0:76:e0:2a:7b:b4:d9:e2:34:94:24:69:3e:38:64:
         1a:8c:a4:3b:c1:07:26:7b:01:03:15:9e:de:fe:ad:8b:c4:2a:
         08:b7:ae:0d:cb:7d:56:46:26:9f:1f:ab:be:92:47:72:54:17:
         43:dd:18:3a:6c:9a:76:e5:e6:de:d0:c3:50:9e:08:f5:ca:f0:
         95:46:9b:3c:6c:65:77:67:24:1f:44:f2:cb:17:c0:e6:4a:ae:
         e3:b5:f5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org