Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/95c051985e45f590233397787b249ee9bb0b498b.roa
File:                     95c051985e45f590233397787b249ee9bb0b498b.roa (raw, json)
Hash identifier:          Hg8U9Zt3LKRLOqj4wu/NqVr3VXJCcQLnz53ERJ1oI/M=
Subject key identifier:   E4:C9:A7:6E:26:F3:37:69:AA:B2:0C:FB:A7:E7:E2:6D:57:F2:24:99
Certificate issuer:       /CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Certificate serial:       25C2AE
Authority key identifier: 82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/95c051985e45f590233397787b249ee9bb0b498b.roa
Signing time:             Mon 18 Sep 2023 11:36:33 +0000
ROA not before:           Sun 17 Sep 2023 11:36:31 +0000
ROA not after:            Mon 18 Sep 2028 11:36:31 +0000
asID:                     262182
IP address blocks:        190.98.168.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2474670 (0x25c2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
        Validity
            Not Before: Sep 17 11:36:31 2023 GMT
            Not After : Sep 18 11:36:31 2028 GMT
        Subject: CN=95c051985e45f590233397787b249ee9bb0b498b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:9d:f7:b1:78:21:bf:4d:2e:20:d0:20:31:
                    1f:4a:94:2d:96:af:6f:8b:6f:a2:0a:61:1f:f6:16:
                    16:26:43:f0:32:7e:75:ad:ea:a7:44:a2:b3:2a:d4:
                    aa:26:2c:64:85:38:fb:be:f9:8f:89:7b:f6:2d:6c:
                    1d:be:99:09:ec:fe:cb:05:93:d0:72:f5:5a:cc:4b:
                    b9:52:f8:32:39:ac:57:00:46:14:93:cd:97:b6:2f:
                    92:76:55:d0:5f:78:21:52:ce:4d:28:75:20:65:f1:
                    f1:4c:7d:c8:1d:61:a5:04:33:dc:4c:73:90:78:d6:
                    a1:a8:77:80:6c:8d:19:ec:cc:da:2e:15:7b:9e:85:
                    b6:ff:5c:61:e2:6f:17:e1:a7:81:eb:08:7b:dd:15:
                    37:5a:fb:15:2f:04:9e:8a:dd:44:7e:12:d3:e7:3d:
                    e4:9e:1c:8a:85:91:66:b5:a0:2f:11:60:5d:07:12:
                    6c:1d:21:88:f2:3c:77:d6:82:4b:10:0c:96:e9:7c:
                    bd:f3:31:43:63:93:17:4a:a9:3c:ae:64:aa:72:09:
                    1a:71:66:e0:98:66:73:86:68:dd:e7:bc:f7:2c:4e:
                    4f:e7:16:05:64:cb:33:c1:44:29:e9:e8:ed:19:d3:
                    96:cd:04:c9:08:06:82:fe:b7:6b:6e:13:e5:bb:29:
                    2c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C9:A7:6E:26:F3:37:69:AA:B2:0C:FB:A7:E7:E2:6D:57:F2:24:99
            X509v3 Authority Key Identifier:
                keyid:82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/95c051985e45f590233397787b249ee9bb0b498b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:46:c2:ba:dd:8d:a9:f0:f7:7f:0d:d7:34:13:3c:98:b4:ce:
         b6:bd:6e:3c:b6:cd:fd:72:12:66:58:45:30:6d:ba:04:97:38:
         3a:3c:fc:f2:71:85:50:51:9e:d2:d8:fe:74:ec:0d:47:1f:48:
         bf:3e:40:cb:46:58:cb:47:00:51:85:84:d8:a0:72:3c:e6:4b:
         09:0e:a8:0f:04:96:99:56:f3:a5:f9:2f:86:31:68:3d:1c:34:
         ea:f6:66:e3:7e:a1:7a:a0:10:36:d3:5d:b2:8a:26:cf:92:04:
         a3:cc:29:33:49:75:77:fd:7e:eb:75:25:9c:59:a1:30:b8:7f:
         fe:24:5f:c3:c8:e6:1e:3a:c0:3a:32:82:aa:a4:c7:bd:8b:a0:
         59:55:9c:30:83:62:5c:a6:84:41:71:a0:e6:09:31:43:f1:d0:
         f2:25:85:e7:ab:88:ae:0c:bb:98:4e:7a:eb:e5:5a:d3:67:f3:
         11:1d:84:f1:45:88:35:88:67:b2:5a:cc:c4:1b:61:8b:01:b4:
         4e:3d:7c:7a:f5:3b:8a:bf:69:f4:7b:ef:e1:55:f4:59:2f:43:
         60:a1:f8:d6:53:8b:ee:3b:23:6d:b7:47:91:60:5a:dd:28:a2:
         5b:a4:17:32:22:b6:f3:cc:aa:53:94:24:16:bd:ba:ef:54:df:
         6b:9c:c1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org