Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/7e13493bdccf829b63e0989dbfa011d02c17a4f1.roa
File:                     7e13493bdccf829b63e0989dbfa011d02c17a4f1.roa (raw, json)
Hash identifier:          erRQ+oZVhKfcJZzj5n0+B9B3IMci0JQ00Qb9yaYixNM=
Subject key identifier:   1F:D0:75:9D:5B:9C:72:FE:05:52:63:C8:1B:78:08:02:42:B5:AA:74
Certificate issuer:       /CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
Certificate serial:       1EE3A7
Authority key identifier: FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/7e13493bdccf829b63e0989dbfa011d02c17a4f1.roa
Signing time:             Fri 24 Mar 2023 08:30:28 +0000
ROA not before:           Thu 23 Mar 2023 08:30:28 +0000
ROA not after:            Sat 22 Mar 2025 08:30:28 +0000
asID:                     267848
IP address blocks:        190.97.168.0/23 maxlen: 23
                          190.97.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024359 (0x1ee3a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
        Validity
            Not Before: Mar 23 08:30:28 2023 GMT
            Not After : Mar 22 08:30:28 2025 GMT
        Subject: CN=7e13493bdccf829b63e0989dbfa011d02c17a4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:74:1a:3c:ae:fb:2b:02:73:66:4f:2b:09:6f:
                    53:79:73:58:db:c1:3f:d0:c8:33:81:1f:57:9c:73:
                    59:26:e9:d8:d4:71:51:0e:4d:3e:db:43:25:6e:d7:
                    01:a6:0a:52:67:07:d2:cf:5f:99:bd:75:b8:16:3e:
                    4f:06:7b:81:a9:3e:9d:d3:b7:c6:70:13:89:46:fb:
                    7d:26:29:67:b2:d5:d3:e4:a1:1d:12:98:55:7b:0e:
                    7d:a2:d9:f5:db:04:06:dd:8d:ff:72:e6:e8:c8:cc:
                    09:7b:ad:bd:5f:cc:92:f3:b2:98:f8:73:1a:5a:63:
                    d8:af:06:da:44:69:32:44:b8:8e:5b:ec:aa:3f:de:
                    50:63:2c:54:13:dd:af:da:6a:ca:a8:83:16:88:b3:
                    58:2a:c7:c5:71:25:8e:ad:7d:d3:95:4f:dd:2d:f4:
                    85:00:d7:53:56:73:ac:4d:02:0d:28:b2:83:9f:e1:
                    06:f3:ac:92:cb:50:82:9e:34:00:f1:8d:58:f1:94:
                    79:0e:19:b0:20:a4:0d:9c:dd:9b:8b:65:1b:8b:1e:
                    74:e5:2b:89:e3:c6:a5:b9:44:1b:96:1c:40:a2:f0:
                    e8:b5:30:b7:98:8a:10:50:bd:71:6f:17:9e:3c:a0:
                    65:ef:82:3c:62:82:5b:2a:95:de:21:9e:be:e1:6c:
                    98:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D0:75:9D:5B:9C:72:FE:05:52:63:C8:1B:78:08:02:42:B5:AA:74
            X509v3 Authority Key Identifier:
                keyid:FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/7e13493bdccf829b63e0989dbfa011d02c17a4f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:c2:f3:b6:6d:a5:db:bd:e8:14:88:c1:80:6c:f3:73:a7:cb:
         c8:61:f4:a1:b9:03:d3:60:dc:24:c1:13:70:2c:b8:99:db:2b:
         af:5b:8f:aa:b9:7d:b0:69:19:36:9e:59:48:8b:3f:67:81:b6:
         63:cb:2d:f2:35:4a:69:ad:fd:f2:d3:8c:7f:8c:62:33:28:52:
         79:6e:73:12:4a:f0:1d:97:0b:0f:12:c0:74:3b:64:4e:8f:60:
         ab:25:bb:2c:6a:d0:07:90:2d:dc:b4:ee:06:fd:6d:05:2f:b7:
         b1:ab:20:11:00:f4:28:34:27:c7:a6:5c:db:db:05:1e:ce:4f:
         16:ab:29:5b:23:87:0a:8b:8a:97:9c:9f:7b:67:0d:68:90:1e:
         1a:75:19:86:86:85:06:f3:c0:de:74:f3:68:d9:ce:72:5b:9d:
         45:37:f2:64:44:08:9e:af:8f:6f:f9:ef:ab:86:c6:16:b1:64:
         c9:99:72:63:62:bf:85:aa:bb:9d:69:4c:31:8d:ad:23:58:c1:
         b2:03:b8:6c:c0:ab:8a:66:8f:19:fe:77:42:55:17:b6:f7:48:
         ac:91:74:16:7b:56:26:4d:65:a2:5b:19:45:9a:ec:ca:d1:e5:
         55:00:13:cb:9c:2a:2b:d1:db:1d:a6:21:b3:7b:7d:7d:84:9b:
         f2:11:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org