Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/36868505623b108e165c5eb95295db59a66a7475.roa
File:                     36868505623b108e165c5eb95295db59a66a7475.roa (raw, json)
Hash identifier:          4xkNUrVevxHspZ1RnFOizUWk8HDqIE9fzMGb+3KjO3g=
Subject key identifier:   A0:6C:03:C0:DD:A0:8C:44:E5:27:1C:69:2C:A7:99:13:E1:C3:D1:CD
Certificate issuer:       /CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
Certificate serial:       13701C
Authority key identifier: E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/36868505623b108e165c5eb95295db59a66a7475.roa
Signing time:             Mon 22 Nov 2021 21:16:01 +0000
ROA not before:           Thu 12 Aug 2021 03:00:00 +0000
ROA not after:            Sat 12 Aug 2023 03:00:00 +0000
asID:                     27742
IP address blocks:        190.111.30.0/23 maxlen: 24
                          200.35.183.0/24 maxlen: 24
                          200.35.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273884 (0x13701c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
        Validity
            Not Before: Aug 12 03:00:00 2021 GMT
            Not After : Aug 12 03:00:00 2023 GMT
        Subject: CN=36868505623b108e165c5eb95295db59a66a7475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:25:ef:27:15:23:06:41:3e:da:f2:56:42:78:
                    96:e6:7d:0e:12:8d:bd:7d:42:76:68:40:92:a4:32:
                    75:d5:64:e6:93:55:9a:bf:6a:50:a1:da:b5:31:eb:
                    16:9f:19:53:21:8b:b1:59:ef:da:e3:bf:17:15:d3:
                    12:8b:bc:24:08:75:0d:29:03:02:e4:22:40:b5:4c:
                    a1:da:a6:6a:85:bb:5b:7c:22:fb:c8:d4:89:fd:9b:
                    76:bb:a3:8f:ab:49:7e:c2:8d:c0:07:01:e2:e8:c7:
                    69:55:59:52:68:6f:67:bc:9e:6b:ba:89:fa:93:ed:
                    ed:a2:c6:8d:51:f7:26:4c:e2:95:40:3c:92:e8:f3:
                    3e:11:2b:00:82:61:07:89:ef:24:98:07:c8:6c:e4:
                    35:44:cc:75:9d:75:e2:5e:1b:1a:e4:2d:bb:bf:d2:
                    58:f0:ed:9e:e1:5b:23:24:23:6b:dd:a0:83:d2:20:
                    83:ce:d3:2c:3e:e3:7e:74:6d:f0:fd:6f:21:b4:05:
                    3e:a6:7a:bc:9e:45:77:40:b8:64:36:68:22:58:6c:
                    b8:de:76:e6:79:5b:3a:5d:30:51:9b:5b:e9:05:63:
                    2d:7e:d3:83:9b:ef:fb:ab:40:4e:53:92:66:c9:61:
                    03:ad:24:cf:83:64:f8:ef:ed:f0:12:3b:c8:fb:7a:
                    27:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6C:03:C0:DD:A0:8C:44:E5:27:1C:69:2C:A7:99:13:E1:C3:D1:CD
            X509v3 Authority Key Identifier:
                keyid:E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/36868505623b108e165c5eb95295db59a66a7475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9fa677563ca5bfe6068216c74122a5d7cb2db27a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.30.0/23
                  200.35.183.0/24
                  200.35.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:b2:e0:92:cd:e8:29:3a:cc:f8:69:de:12:9e:12:32:5f:4f:
         53:8c:79:58:aa:59:8a:52:85:f0:e9:fe:19:1f:90:61:0c:b5:
         f4:9f:06:f7:c6:28:36:bb:e9:e9:c1:c9:e2:6a:df:6c:be:12:
         3c:91:f3:59:0f:40:fe:af:1a:7c:37:cb:57:70:43:50:e0:1c:
         0b:dc:ce:67:26:ad:42:58:fd:90:32:54:27:a5:f4:db:1a:57:
         20:7f:04:36:fb:85:40:53:83:ec:35:db:0f:31:fe:83:98:b8:
         43:38:20:e1:29:c5:e4:9d:4a:37:60:4a:1c:1b:0d:10:61:5d:
         5d:e4:76:3d:73:05:20:2f:b8:60:b0:30:f3:c5:66:be:c3:76:
         9c:2f:9b:1c:87:3a:f5:c4:9e:1e:55:a1:ef:30:cd:6c:4b:cd:
         03:a9:76:20:5b:a2:b3:91:61:b7:49:d1:21:31:df:34:1f:ab:
         36:f5:01:5c:22:a2:d0:8c:16:da:42:05:77:9e:7e:35:aa:40:
         67:70:64:8a:98:74:f9:6c:37:af:f0:23:50:94:86:09:08:0c:
         09:a0:30:1c:bb:56:32:9e:fb:0c:45:dd:bc:5a:29:6b:16:51:
         38:0d:58:03:3b:bf:14:46:63:0e:c9:f5:06:af:1a:01:af:9b:
         4c:8f:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org