Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cadcc0fe-1cb7-429e-a237-d2506cdb966a/d4c1621beb71252aad2b37ca96ddb835b6a395b4.roa
File:                     d4c1621beb71252aad2b37ca96ddb835b6a395b4.roa (raw, json)
Hash identifier:          Tm7HpL/GJN0WlZGoZNU/gELq0FPbOtWQ+eqfTAEXa5Q=
Subject key identifier:   6C:DA:69:EB:8A:4C:29:25:19:22:D6:FB:66:4D:79:A7:4D:44:89:51
Certificate issuer:       /CN=0ee1417c821c1047cee571e478b81c5ba728dc74
Certificate serial:       26BFCE
Authority key identifier: 89:39:3A:27:3F:B1:D2:B2:F2:8F:D7:F9:1E:50:30:79:0A:E8:6A:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ee1417c821c1047cee571e478b81c5ba728dc74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cadcc0fe-1cb7-429e-a237-d2506cdb966a/d4c1621beb71252aad2b37ca96ddb835b6a395b4.roa
Signing time:             Tue 23 Jan 2024 07:02:03 +0000
ROA not before:           Tue 23 Jan 2024 07:02:03 +0000
ROA not after:            Fri 23 Jan 2026 07:02:03 +0000
asID:                     27845
IP address blocks:        190.97.64.0/22 maxlen: 22
                          190.97.192.0/22 maxlen: 24
                          190.97.196.0/22 maxlen: 22
                          190.97.206.0/23 maxlen: 23
                          190.97.200.0/22 maxlen: 24
                          190.97.204.0/23 maxlen: 24
                          190.97.208.0/20 maxlen: 20
                          190.6.164.0/23 maxlen: 23
                          190.6.160.0/22 maxlen: 24
                          190.6.168.0/23 maxlen: 23
                          190.6.166.0/23 maxlen: 24
                          190.6.170.0/23 maxlen: 24
                          190.6.172.0/22 maxlen: 24
                          190.6.176.0/20 maxlen: 20
                          190.97.68.0/23 maxlen: 23
                          190.97.70.0/23 maxlen: 24
                          190.97.72.0/21 maxlen: 21
                          190.97.80.0/22 maxlen: 24
                          190.97.84.0/24 maxlen: 24
                          190.97.88.0/23 maxlen: 24
                          190.97.90.0/24 maxlen: 24
                          190.97.92.0/24 maxlen: 24
                          190.97.94.0/23 maxlen: 24
                          2800:9f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2539470 (0x26bfce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee1417c821c1047cee571e478b81c5ba728dc74
        Validity
            Not Before: Jan 23 07:02:03 2024 GMT
            Not After : Jan 23 07:02:03 2026 GMT
        Subject: CN=d4c1621beb71252aad2b37ca96ddb835b6a395b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:2d:19:5d:47:9a:3d:d0:1c:41:e1:23:be:
                    9a:57:79:f3:96:8e:9d:3f:b1:d7:46:35:5b:90:e0:
                    41:fc:b6:fb:b3:ee:ee:ed:8c:8a:c1:c6:e5:7f:00:
                    f5:fe:c5:28:b1:00:69:77:6d:d6:91:16:a7:9e:75:
                    b3:6e:ff:6f:0b:2a:59:cb:44:c7:de:2f:54:9d:a3:
                    44:61:e4:07:b0:32:e9:e7:8b:1e:49:34:c0:25:d9:
                    15:10:03:b5:0c:25:be:48:09:a7:f8:3b:78:70:c0:
                    fa:d4:a1:de:72:53:a7:d8:bd:fc:5f:31:12:10:81:
                    26:8f:57:69:ba:88:ab:40:50:6b:26:76:fb:73:ec:
                    b1:90:43:e4:ce:e7:6d:95:0b:6a:c7:37:f0:10:81:
                    a5:89:5b:09:24:21:05:10:3a:85:d0:50:b1:bf:13:
                    58:82:d9:3d:60:39:4c:71:8e:fe:25:c7:c2:06:4f:
                    9a:83:8d:34:34:75:05:a4:70:0f:b1:19:91:29:7c:
                    02:e2:b6:02:0f:d4:bd:21:a3:f0:04:a1:98:1a:af:
                    e9:e1:31:fd:70:74:c1:25:f6:0c:db:3d:4d:76:7d:
                    73:5a:db:11:04:ae:f9:b1:55:8c:87:43:8c:fc:d3:
                    88:81:3f:0f:e4:0e:d1:f3:8b:44:fc:8b:7e:71:83:
                    e7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DA:69:EB:8A:4C:29:25:19:22:D6:FB:66:4D:79:A7:4D:44:89:51
            X509v3 Authority Key Identifier:
                keyid:89:39:3A:27:3F:B1:D2:B2:F2:8F:D7:F9:1E:50:30:79:0A:E8:6A:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ee1417c821c1047cee571e478b81c5ba728dc74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cadcc0fe-1cb7-429e-a237-d2506cdb966a/d4c1621beb71252aad2b37ca96ddb835b6a395b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cadcc0fe-1cb7-429e-a237-d2506cdb966a/0ee1417c821c1047cee571e478b81c5ba728dc74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.160.0/19
                  190.97.64.0-190.97.84.255
                  190.97.88.0-190.97.90.255
                  190.97.92.0/24
                  190.97.94.0/23
                  190.97.192.0/19
                IPv6:
                  2800:9f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:76:7b:25:93:2f:d6:57:fa:5f:c3:c0:c7:be:01:8b:b3:71:
         b1:97:d3:d1:07:e7:fd:84:37:52:ab:0c:2f:a5:86:f0:78:25:
         a5:f0:9d:a5:46:81:eb:63:7f:de:83:53:57:36:84:d9:66:83:
         b2:43:bc:f1:7d:b4:ba:58:82:a7:a0:24:df:ca:64:75:76:4b:
         70:c5:21:d8:a9:56:98:7b:43:06:4c:f6:88:e2:a0:68:c0:ff:
         56:d1:54:25:ff:ba:98:4f:95:89:9c:70:ed:58:59:90:b4:cb:
         21:8b:ce:f6:af:c8:63:06:c1:04:67:99:8a:ef:25:a8:83:d1:
         fb:82:05:df:3a:04:7b:ec:bf:fe:03:e5:b6:01:84:1c:ad:e0:
         d3:75:5f:2b:3d:4f:d8:53:8d:55:53:1e:7f:da:93:7a:af:21:
         85:d5:db:56:29:0b:87:4c:ee:6b:93:df:bc:63:a9:1d:91:c1:
         19:73:ae:25:0d:06:b6:02:94:b2:73:cf:58:bc:ec:a5:2b:a6:
         27:69:97:5f:87:c0:98:cc:ee:99:74:3a:3b:f6:28:81:12:86:
         2b:88:33:e2:9d:24:c3:c4:6f:dc:a0:24:84:1a:71:3b:7e:7b:
         6c:94:93:fa:2f:6d:eb:1e:1c:8c:e6:08:ec:92:17:4b:0c:fe:
         0d:03:70:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----