Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c49a4617-06a7-4c83-a240-ed5a01c8e891/9cb94b8413bc876136786ec715ed737d09230b3d.roa
File:                     9cb94b8413bc876136786ec715ed737d09230b3d.roa (raw, json)
Hash identifier:          FRhFdppZ2i2rhYFgsQWyQVnxxDCZOfardBpe6Blzvws=
Subject key identifier:   BC:0D:A2:72:43:92:7B:2E:8F:62:7D:D0:93:F9:3C:67:AB:E4:84:76
Certificate issuer:       /CN=0a09add37433cdf8660c503b56a4d3204465670a
Certificate serial:       2156A2
Authority key identifier: B3:5E:6E:90:CA:36:FF:B8:9D:D2:34:71:ED:F0:C7:77:1D:21:D2:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a09add37433cdf8660c503b56a4d3204465670a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c49a4617-06a7-4c83-a240-ed5a01c8e891/9cb94b8413bc876136786ec715ed737d09230b3d.roa
Signing time:             Wed 28 Jun 2023 13:24:13 +0000
ROA not before:           Tue 27 Jun 2023 13:24:13 +0000
ROA not after:            Sat 28 Jun 2025 13:24:13 +0000
asID:                     262192
IP address blocks:        190.13.208.0/21 maxlen: 24
                          181.174.192.0/20 maxlen: 24
                          2803:a480::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2184866 (0x2156a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a09add37433cdf8660c503b56a4d3204465670a
        Validity
            Not Before: Jun 27 13:24:13 2023 GMT
            Not After : Jun 28 13:24:13 2025 GMT
        Subject: CN=9cb94b8413bc876136786ec715ed737d09230b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:1c:d2:88:74:18:d8:f7:bc:e9:c4:b8:1f:
                    1b:67:b1:9a:5e:80:da:2c:10:ff:e5:b0:2a:c6:ef:
                    f9:2f:b8:3d:bf:cd:2e:05:d1:b6:49:5b:55:52:54:
                    12:63:fd:a9:4a:ba:99:1e:d4:69:8f:a3:2c:d7:a8:
                    72:89:d1:6c:e1:bc:15:11:0d:65:26:8f:a4:a6:84:
                    d8:8c:d7:5f:08:29:87:17:ec:b2:d1:e3:19:4f:4d:
                    ae:2f:22:89:b1:55:cc:b4:8f:23:e9:e4:0f:df:ce:
                    da:92:0f:a7:93:ec:e7:d2:f8:02:0b:49:9b:d6:80:
                    6e:57:e6:ff:77:c8:3e:05:d7:f8:fd:4d:0b:57:39:
                    e2:01:ca:54:aa:63:d7:e2:f1:66:fe:8b:69:af:73:
                    82:52:8a:d0:a1:8d:8d:a1:9e:8d:c3:3c:36:63:74:
                    9c:01:dc:39:e2:16:bc:a0:8a:01:d6:b5:40:54:9d:
                    79:3c:c9:0b:e4:54:e0:0c:d4:17:74:f1:37:93:d5:
                    03:74:32:9f:7d:95:cf:f2:5f:8b:b2:5e:0e:66:66:
                    a9:83:a6:db:eb:14:67:db:8c:0e:a0:71:ab:a7:46:
                    25:b8:5f:55:22:02:cd:41:5d:76:48:56:2a:86:e1:
                    94:3d:4c:55:52:84:bd:88:fb:0b:df:3a:f7:d9:97:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0D:A2:72:43:92:7B:2E:8F:62:7D:D0:93:F9:3C:67:AB:E4:84:76
            X509v3 Authority Key Identifier:
                keyid:B3:5E:6E:90:CA:36:FF:B8:9D:D2:34:71:ED:F0:C7:77:1D:21:D2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a09add37433cdf8660c503b56a4d3204465670a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c49a4617-06a7-4c83-a240-ed5a01c8e891/9cb94b8413bc876136786ec715ed737d09230b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c49a4617-06a7-4c83-a240-ed5a01c8e891/0a09add37433cdf8660c503b56a4d3204465670a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.192.0/20
                  190.13.208.0/21
                IPv6:
                  2803:a480::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:13:41:93:ae:29:96:37:df:d9:b3:81:fd:a3:a6:60:a4:63:
         c5:ae:45:17:f6:ac:6e:ee:d1:d0:36:5d:94:a0:b5:e7:8f:a3:
         65:19:cf:72:8d:12:b2:21:08:9c:ac:55:51:c2:25:e0:d3:67:
         56:92:69:05:7b:e1:c8:29:b1:b0:0c:d9:42:50:6c:a0:2c:c6:
         0a:ba:d3:58:97:7f:55:8c:05:4d:c8:ae:83:3b:ef:df:6a:46:
         7c:bc:0d:dc:be:4b:15:ec:9a:15:00:78:f5:12:c1:08:94:0e:
         b3:9f:9e:d0:ec:c7:b0:ea:77:f8:45:ac:cb:9c:a7:e4:bc:5b:
         a6:3b:a9:46:63:f0:30:8a:71:2b:de:fc:b0:d6:af:36:e0:63:
         55:b3:60:10:5f:1c:4a:30:f5:a5:ad:5d:f7:f3:ce:d9:03:14:
         15:14:94:14:05:e4:67:1c:6a:14:9f:1e:16:3e:25:a3:8c:d7:
         c9:6a:40:3c:bc:5d:2c:01:9c:b9:7c:ce:90:82:1f:59:cd:6e:
         16:a5:65:d0:36:3e:da:19:ec:74:c4:19:c1:a9:fe:27:d0:f2:
         18:d0:b9:d4:b6:ca:c6:a9:59:8f:3d:af:b4:e2:2f:63:21:f4:
         b0:6a:a3:81:c2:a5:8b:19:37:4a:6e:80:8c:34:6d:3c:b9:4a:
         10:16:e2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org