Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/bcd73c3ad536db9523db8b1b6cc9bf5290ea5836.roa
File:                     bcd73c3ad536db9523db8b1b6cc9bf5290ea5836.roa (raw, json)
Hash identifier:          C0vkwkmZ5CMQxMnuNGcu8b8FzBbsNerxEfNcupo5jfE=
Subject key identifier:   6F:5B:9C:4F:17:B8:8C:76:BD:6F:5B:B4:06:6D:71:D8:DD:52:E7:B2
Certificate issuer:       /CN=c4935075ec435dbda09406df9fa324ff802f1d14
Certificate serial:       23D09A
Authority key identifier: 76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/bcd73c3ad536db9523db8b1b6cc9bf5290ea5836.roa
Signing time:             Mon 04 Sep 2023 22:10:03 +0000
ROA not before:           Sun 03 Sep 2023 22:10:03 +0000
ROA not after:            Thu 04 Sep 2025 22:10:03 +0000
asID:                     23243
IP address blocks:        190.14.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2347162 (0x23d09a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4935075ec435dbda09406df9fa324ff802f1d14
        Validity
            Not Before: Sep  3 22:10:03 2023 GMT
            Not After : Sep  4 22:10:03 2025 GMT
        Subject: CN=bcd73c3ad536db9523db8b1b6cc9bf5290ea5836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:45:e8:57:42:9d:4f:66:cd:40:c0:3e:75:1e:
                    48:43:f0:61:58:ae:5a:74:05:c9:22:23:a9:9a:8d:
                    77:24:7d:94:f9:aa:8c:3d:2e:fd:87:72:a3:a1:05:
                    fd:e4:59:bd:0b:c6:d7:f5:e6:63:6a:cf:f4:71:0d:
                    a5:f9:b9:07:c3:e9:fc:34:84:7a:b7:5e:a6:25:e0:
                    53:fb:ff:ea:b2:1f:20:ef:7a:a2:35:ee:7c:4f:62:
                    56:7f:1d:62:ed:63:16:7e:5c:bc:9e:4d:27:45:74:
                    77:4b:e4:da:db:23:a6:e2:18:12:d0:ec:af:fc:3b:
                    89:cc:a5:42:9f:8f:c7:41:02:df:25:6a:55:f7:6f:
                    77:47:ec:94:84:0a:d7:63:8c:7e:d3:05:f6:26:93:
                    b4:2f:1c:c5:d3:e2:f0:4d:7d:d7:90:41:82:28:67:
                    f9:17:d7:29:28:e7:08:5d:bf:94:a9:1d:08:c5:d2:
                    6c:7f:04:00:ba:ba:13:ba:a6:c6:7d:d8:b1:d9:33:
                    77:b9:78:03:d8:c1:fc:db:13:e6:16:a6:b5:e5:4a:
                    df:63:b2:a4:f3:bb:e1:24:bf:70:c7:aa:70:f5:60:
                    fe:c6:c2:c9:84:16:1f:60:66:bf:f8:88:64:82:46:
                    78:a8:62:9d:19:86:5b:a3:21:81:0a:c8:c7:5a:d1:
                    6c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5B:9C:4F:17:B8:8C:76:BD:6F:5B:B4:06:6D:71:D8:DD:52:E7:B2
            X509v3 Authority Key Identifier:
                keyid:76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/bcd73c3ad536db9523db8b1b6cc9bf5290ea5836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:2d:63:7b:11:94:6f:24:4b:4b:d8:12:c2:bb:46:8e:96:fb:
         96:0d:78:82:46:b7:11:fc:45:df:cf:57:59:2e:5d:a3:52:19:
         a2:68:41:eb:a2:80:79:d6:20:37:f7:37:c7:af:91:bb:b5:fe:
         02:80:b8:8a:9e:09:2b:4e:f0:98:6c:28:1e:eb:9d:89:80:ac:
         16:62:54:d6:87:a2:06:0d:1b:55:6f:7a:68:82:63:1e:a7:f5:
         7a:3d:68:af:12:b9:2d:78:78:8b:40:e6:c3:ce:56:74:fd:64:
         d0:ea:8d:b8:37:be:68:aa:f1:44:ff:ca:ea:49:64:0a:aa:3d:
         20:74:69:f1:9a:0a:25:be:ec:f0:0d:74:03:ce:d9:0e:f5:e6:
         c7:f3:2a:d2:d2:a7:f2:08:21:66:f1:ce:74:fa:81:5b:ca:ca:
         66:27:54:cc:d5:21:ae:7f:bc:ac:0c:b9:d8:15:df:b6:17:cc:
         12:7c:c5:c8:2d:a7:85:ef:fa:f5:6f:8d:e1:cb:a1:1a:32:c7:
         7d:01:d7:24:7e:ec:b6:14:2f:75:c3:24:cc:35:87:84:06:87:
         1b:6f:3f:2e:69:34:8a:a0:7c:b1:fe:29:70:4a:21:8b:ca:d5:
         c8:a7:1f:76:6c:58:b6:e8:35:c3:c8:4a:a8:5f:2f:0d:74:d7:
         73:ca:88:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org