Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/ab161cadfde344c8fc5d80446af3aa3884945e31.roa
File:                     ab161cadfde344c8fc5d80446af3aa3884945e31.roa (raw, json)
Hash identifier:          nxrQwWd3QQ87fKhvi2oK2AUEe16YeUUIZnTcrnJCFfc=
Subject key identifier:   B2:3A:F7:C6:3C:E3:62:A2:76:5D:C7:C0:86:DB:A8:C4:35:2D:F2:B8
Certificate issuer:       /CN=120d3f1dd0412637d6cfe87a0a26d34c0665388a
Certificate serial:       21D0A6
Authority key identifier: B7:61:B5:F2:74:4F:DB:FF:C7:B9:E6:F9:E6:02:F4:76:CD:77:30:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/120d3f1dd0412637d6cfe87a0a26d34c0665388a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/ab161cadfde344c8fc5d80446af3aa3884945e31.roa
Signing time:             Fri 18 Aug 2023 18:44:47 +0000
ROA not before:           Thu 17 Aug 2023 18:44:47 +0000
ROA not after:            Mon 18 Aug 2025 18:44:47 +0000
asID:                     52232
IP address blocks:        190.114.160.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2216102 (0x21d0a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120d3f1dd0412637d6cfe87a0a26d34c0665388a
        Validity
            Not Before: Aug 17 18:44:47 2023 GMT
            Not After : Aug 18 18:44:47 2025 GMT
        Subject: CN=ab161cadfde344c8fc5d80446af3aa3884945e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:b6:4e:a1:15:4e:ad:d0:de:56:7e:f7:08:
                    e0:0e:83:70:13:5b:f5:f9:38:f8:e7:1f:b2:be:1e:
                    db:1e:de:d3:81:93:cb:db:46:ba:12:46:8e:9a:2c:
                    64:ff:00:eb:6d:02:b9:e1:cb:55:79:d5:60:86:ed:
                    32:34:ad:8e:e2:a3:c7:ee:2b:25:02:ed:e3:9b:c5:
                    9f:95:75:b9:6d:fb:75:cd:d0:be:1b:bf:d3:42:22:
                    e4:ad:c3:67:1f:29:67:2e:48:0b:ad:0f:e9:54:88:
                    1a:6b:61:e9:a5:57:8a:d9:dc:16:6c:8e:bc:a9:13:
                    a5:42:2a:64:1e:5a:79:6c:5e:a9:7e:4c:9b:04:6a:
                    8c:fa:e9:37:ba:d2:de:91:ee:36:b5:98:e8:1c:75:
                    30:05:7c:41:d2:f5:c6:81:6d:b3:3b:ad:6f:3c:dc:
                    b4:eb:10:07:fa:21:4a:66:bd:94:e2:ea:14:f5:0e:
                    10:6f:ea:f3:8d:10:61:cc:43:8f:35:a8:af:12:b4:
                    d2:b0:f8:dd:88:e2:bf:22:87:f8:a9:a8:97:a3:b5:
                    8e:3b:01:5f:4f:82:da:ff:43:5f:61:08:0a:a0:dd:
                    9a:c6:03:20:e1:da:f8:14:56:12:b6:81:6f:be:20:
                    4b:94:30:32:b5:af:86:b7:38:89:f5:fe:12:dd:96:
                    12:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3A:F7:C6:3C:E3:62:A2:76:5D:C7:C0:86:DB:A8:C4:35:2D:F2:B8
            X509v3 Authority Key Identifier:
                keyid:B7:61:B5:F2:74:4F:DB:FF:C7:B9:E6:F9:E6:02:F4:76:CD:77:30:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/120d3f1dd0412637d6cfe87a0a26d34c0665388a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/ab161cadfde344c8fc5d80446af3aa3884945e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c030b508-677b-48e1-b2cf-6dbe0ea9b26f/120d3f1dd0412637d6cfe87a0a26d34c0665388a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:d3:5e:76:33:e3:40:bf:65:46:9d:0f:f4:f7:b1:ea:2c:6a:
         6b:cb:46:37:68:9a:4f:e7:6b:6b:08:53:df:69:f1:9d:23:f6:
         e9:f4:20:6e:71:cd:e2:2b:6d:4c:bf:7b:2d:e8:c9:f5:f1:74:
         e6:db:25:84:7f:ea:dc:cd:f8:a5:1a:f3:8e:2e:ce:55:b4:4d:
         84:c9:6a:ac:ee:71:87:06:7e:5c:ed:77:ae:86:fa:0f:e8:f6:
         46:9c:c5:4c:48:4b:30:50:63:d4:3e:75:3a:b4:e7:d5:36:ca:
         a2:6c:f9:35:16:bf:26:32:90:a2:00:4d:40:7f:47:49:f3:61:
         d4:c5:4d:b1:2f:87:2c:0e:71:5d:b8:da:a2:a9:0e:39:c2:9a:
         5a:94:5d:3e:2b:7b:4e:3e:21:4e:7b:33:fc:b6:d5:d0:b3:29:
         58:e8:83:55:38:5f:e5:82:b3:4a:cc:c5:3d:91:4a:c8:71:68:
         46:b8:54:bc:e0:63:32:09:7f:88:ac:62:98:53:91:af:73:ae:
         6d:b4:a7:55:93:6d:91:82:ff:45:3e:77:d7:b8:d2:f9:c1:94:
         a6:02:e6:22:0a:eb:55:59:aa:04:db:42:ea:8f:51:88:aa:0a:
         03:cb:7f:8a:38:6d:b9:7e:c9:f8:70:c5:98:dc:7d:56:06:4d:
         b9:47:3c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org