Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/3df51cea12e3f82edf9f35e3af3a8e63cf06a3d0.roa
File:                     3df51cea12e3f82edf9f35e3af3a8e63cf06a3d0.roa (raw, json)
Hash identifier:          w5oMNVASdw/OYCh9TJESHY5BotC67C5t5h9/AvxOmZk=
Subject key identifier:   87:02:EE:8C:18:C5:C6:AF:D3:32:B1:D7:8A:65:43:73:C8:58:30:94
Certificate issuer:       /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Certificate serial:       229F46
Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/3df51cea12e3f82edf9f35e3af3a8e63cf06a3d0.roa
Signing time:             Thu 10 Aug 2023 20:52:31 +0000
ROA not before:           Wed 09 Aug 2023 20:52:30 +0000
ROA not after:            Sun 10 Aug 2025 20:52:30 +0000
asID:                     273019
IP address blocks:        190.12.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268998 (0x229f46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
        Validity
            Not Before: Aug  9 20:52:30 2023 GMT
            Not After : Aug 10 20:52:30 2025 GMT
        Subject: CN=3df51cea12e3f82edf9f35e3af3a8e63cf06a3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b4:e1:a9:ab:55:b1:62:eb:5d:06:2c:e7:eb:
                    91:87:00:a3:d6:8d:5f:31:a1:bd:e9:27:b8:0a:5d:
                    c2:48:91:71:06:6f:a6:7a:86:f3:cf:52:7a:65:38:
                    6b:95:df:d0:f3:bc:7e:12:27:1e:f8:2c:42:84:01:
                    8a:72:67:15:b6:56:62:bc:f4:4f:d4:a5:f5:b4:2e:
                    c7:14:3d:12:a9:62:4f:7b:29:12:0f:45:6b:fa:3c:
                    00:0e:e1:fd:ae:6c:06:78:ff:b1:bd:88:f2:8b:55:
                    51:7b:c7:4b:31:a7:5a:a5:4b:ee:9f:9c:2d:aa:df:
                    ad:f5:23:41:95:33:d2:1f:72:b5:b2:a0:d4:21:9b:
                    97:98:82:6f:13:4f:89:d3:4f:7d:7c:dc:50:3a:72:
                    6f:cb:c4:0e:77:01:04:de:05:a5:90:23:e1:f4:a1:
                    f1:56:53:89:99:b5:bc:5e:47:b1:67:97:98:b5:3f:
                    ff:5a:6e:dc:dd:7b:53:ba:97:3c:8e:fa:e2:7e:c7:
                    8d:2b:07:74:0c:7b:34:5f:a5:6a:68:83:9b:fe:c0:
                    56:3d:7c:e7:0c:9c:f8:01:df:90:09:4f:c3:17:9e:
                    22:0c:87:72:65:bc:73:1b:6d:4e:63:90:81:a0:37:
                    78:ee:1a:e5:07:f2:bc:f9:9f:a7:a2:8a:fa:92:fd:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:02:EE:8C:18:C5:C6:AF:D3:32:B1:D7:8A:65:43:73:C8:58:30:94
            X509v3 Authority Key Identifier:
                keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/3df51cea12e3f82edf9f35e3af3a8e63cf06a3d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:5e:0a:a3:70:b9:c7:34:58:6e:63:fe:6e:c1:e7:a6:fd:0d:
         a6:ae:a0:5a:94:e6:df:5c:00:67:11:04:ae:8f:b5:d0:a3:ef:
         8c:cb:33:01:e5:9b:13:45:a0:d3:f3:39:6f:e3:6e:9f:a5:e7:
         c4:f7:06:37:3c:a9:8d:b3:dd:54:98:9a:61:eb:04:1b:c3:9d:
         32:7e:52:8a:ee:83:75:7b:84:62:ce:c0:ec:b7:a7:f9:b2:50:
         1d:82:d4:8d:13:38:bf:30:24:ff:f5:7d:b8:53:b4:f1:2d:98:
         07:f8:80:df:69:3b:43:3a:8e:b1:ab:63:87:6e:51:bf:5f:98:
         5d:02:bd:9a:3d:96:5e:2e:10:9e:64:f6:e5:e2:8c:88:52:63:
         2e:f3:5d:fc:18:d4:c6:ae:16:a4:a2:61:10:f1:54:fd:bd:01:
         4f:2e:fc:d2:73:ff:20:66:d3:9c:43:6e:ed:1e:88:db:19:c2:
         bc:1e:b1:81:3d:e4:0f:bf:24:71:3b:56:ff:e8:8b:32:42:35:
         70:40:a6:a9:c5:07:c4:ae:10:4a:22:ba:60:b8:fe:a9:f9:04:
         1f:7d:4d:9d:4c:b8:b1:93:0e:bf:33:de:43:1f:c9:58:86:d6:
         b4:08:38:42:2c:9c:1c:d8:6e:73:16:ea:71:ee:2e:2a:8e:b1:
         85:9c:a7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org