Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/0c2818470de9e213b754c7b7491ce37be4807aaf.roa
File:                     0c2818470de9e213b754c7b7491ce37be4807aaf.roa (raw, json)
Hash identifier:          hVElYOKrYmaFhM7pE+zrCVgG8GERzOD05iLGd2FpX60=
Subject key identifier:   A8:0C:58:EC:C7:6F:D6:40:2F:F6:F6:9D:DA:3F:3B:03:79:A0:54:20
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1C1831
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/0c2818470de9e213b754c7b7491ce37be4807aaf.roa
Signing time:             Wed 28 Sep 2022 13:51:46 +0000
ROA not before:           Wed 28 Sep 2022 13:50:20 +0000
ROA not after:            Sat 28 Sep 2024 13:50:20 +0000
asID:                     3816
IP address blocks:        190.13.96.0/20 maxlen: 20
                          190.13.96.0/22 maxlen: 22
                          190.13.105.0/24 maxlen: 24
                          190.13.106.0/24 maxlen: 24
                          190.13.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1841201 (0x1c1831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 28 13:50:20 2022 GMT
            Not After : Sep 28 13:50:20 2024 GMT
        Subject: CN=0c2818470de9e213b754c7b7491ce37be4807aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:ac:1c:ea:4f:97:d5:01:43:18:8d:02:f2:
                    f2:40:71:52:65:93:91:17:f7:15:ed:da:a3:fb:3c:
                    69:ee:52:8b:6b:f4:89:67:bd:fd:b7:78:25:a5:80:
                    1a:b6:41:20:42:3f:70:cf:90:97:91:ab:02:38:b2:
                    3d:ac:bb:d3:12:00:63:cd:f1:9d:ae:1b:b4:c5:e7:
                    d5:5e:3c:69:a4:11:3b:ca:f1:5f:1b:c8:08:8a:2c:
                    8f:6b:18:d1:0c:3c:de:db:63:bd:44:5d:2c:71:23:
                    a5:43:2b:ef:c2:e9:eb:75:de:7b:0f:29:2d:ed:49:
                    a4:e4:ae:c5:89:68:7b:23:8f:59:73:f9:51:21:14:
                    d0:bd:ec:a6:11:fb:da:03:72:42:12:01:1f:8a:30:
                    59:ad:a9:b7:bc:7f:b8:3a:e5:ac:d1:aa:15:3b:bd:
                    a4:33:0b:10:84:2e:c3:06:8f:87:06:9c:25:08:46:
                    cb:67:74:bb:a3:8b:4f:07:5e:24:09:60:8e:b3:6f:
                    99:b6:5b:5d:d6:0c:f6:69:3e:31:0b:c5:75:bd:35:
                    e7:02:e9:da:8c:cf:76:50:42:18:82:ca:b6:7a:a8:
                    fb:81:ed:fa:c2:c1:b1:07:11:82:09:1e:0c:97:f8:
                    88:9e:81:89:07:2f:18:20:83:45:9d:94:46:47:4a:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0C:58:EC:C7:6F:D6:40:2F:F6:F6:9D:DA:3F:3B:03:79:A0:54:20
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/0c2818470de9e213b754c7b7491ce37be4807aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:b5:9e:83:57:62:3c:83:89:0b:8d:5d:8f:fe:2f:a2:0f:
         48:38:bd:2d:42:e5:8b:d6:ac:f9:54:b0:89:7e:b8:99:0d:5e:
         72:02:bd:a9:37:d0:c6:37:9b:d4:9b:13:df:2b:32:e7:0a:4e:
         71:c7:82:fe:d0:11:13:0f:5d:1e:fd:8c:e5:89:85:f3:cb:d8:
         17:1e:f0:e0:9c:43:4e:56:9e:10:15:46:4f:08:31:62:a7:0d:
         69:f9:19:80:03:77:76:39:c0:7d:4f:bb:a5:6b:7a:49:79:1c:
         e6:fc:4c:03:6e:01:13:47:c2:e2:28:05:d0:3a:df:c0:14:24:
         ae:eb:09:20:33:46:a8:c5:b7:28:18:9c:78:ac:b1:13:ad:da:
         4f:06:1b:4f:c3:7a:f8:82:75:ac:8e:f2:b1:04:ee:ae:74:ed:
         24:31:6a:b4:15:10:46:6f:53:4a:cc:94:28:fb:8b:ac:53:4b:
         7e:a0:09:ca:b8:ff:64:aa:4e:2d:d1:35:b2:a3:4d:0b:09:01:
         fc:49:1e:68:91:c9:d7:ed:d4:79:b4:67:69:e6:6a:d9:b4:00:
         9c:e6:77:aa:89:e8:30:3a:16:c0:58:98:08:54:cd:aa:b5:1e:
         ff:bd:af:57:45:0d:dc:ed:88:02:97:92:24:ca:64:68:9f:e8:
         2d:41:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org