Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/e9582554631a8134ce3e394b2c905a52d752fa0e.roa
File:                     e9582554631a8134ce3e394b2c905a52d752fa0e.roa (raw, json)
Hash identifier:          tdbqR4pbK5rI+ArmAQE6MAYsf95e4nAz9E5lyBBR+VY=
Subject key identifier:   EB:0A:DB:22:AF:BC:16:02:E3:56:21:FB:24:B8:AB:D8:6B:6E:53:7F
Certificate issuer:       /CN=4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa
Certificate serial:       1BCF91
Authority key identifier: 16:32:85:BE:91:49:B4:FA:01:47:42:4E:C1:3D:94:27:89:1E:13:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/e9582554631a8134ce3e394b2c905a52d752fa0e.roa
Signing time:             Thu 01 Dec 2022 01:29:25 +0000
ROA not before:           Wed 30 Nov 2022 01:27:38 +0000
ROA not after:            Sun 01 Dec 2024 01:27:38 +0000
asID:                     27668
IP address blocks:        190.94.128.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1822609 (0x1bcf91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa
        Validity
            Not Before: Nov 30 01:27:38 2022 GMT
            Not After : Dec  1 01:27:38 2024 GMT
        Subject: CN=e9582554631a8134ce3e394b2c905a52d752fa0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:c7:8c:81:ef:6a:64:ab:09:20:4f:dd:97:be:
                    19:3b:e6:ca:b0:fd:1e:01:f4:bd:ef:43:72:86:2b:
                    4a:05:f4:6f:1c:41:b3:b5:c4:49:0f:8b:36:05:5e:
                    36:1e:69:36:6b:e5:ce:98:d4:0c:df:d3:7b:88:11:
                    20:0a:56:ac:9b:38:08:a3:f8:bb:97:03:3b:99:90:
                    02:b9:52:30:52:1c:3a:3e:68:01:91:bf:d9:5d:20:
                    d2:38:58:8e:a3:73:72:f4:63:03:dd:7d:04:50:80:
                    ee:c6:9b:8b:0f:6a:4f:24:ea:96:d8:20:d7:48:24:
                    32:bd:68:04:5a:e5:8b:ea:92:cf:c6:8e:c5:12:ca:
                    ad:e7:c5:af:f0:68:09:de:cd:bd:75:37:b8:bb:00:
                    63:c9:27:bb:84:63:58:84:5d:e8:db:07:61:ab:2a:
                    73:b2:a4:2b:ee:bc:ac:67:18:3a:8c:7e:2c:ad:b3:
                    81:6a:a5:10:7c:ef:7a:1e:9e:48:25:bd:7c:25:47:
                    c8:ca:26:c1:c8:1b:3d:48:f9:25:12:9a:89:25:22:
                    df:e0:0f:2f:85:f1:b0:18:fd:14:8e:ee:af:a7:16:
                    ed:db:46:e9:6e:5f:de:91:a8:da:01:08:3b:21:22:
                    2d:da:b5:3e:c2:6c:35:78:a7:03:ee:45:6c:e8:33:
                    32:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0A:DB:22:AF:BC:16:02:E3:56:21:FB:24:B8:AB:D8:6B:6E:53:7F
            X509v3 Authority Key Identifier:
                keyid:16:32:85:BE:91:49:B4:FA:01:47:42:4E:C1:3D:94:27:89:1E:13:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/e9582554631a8134ce3e394b2c905a52d752fa0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d83f4a7f-0710-4f5b-8343-416280d84a0a/4a28d2145c63fe2a4ec69a7b2ee952102f10a4fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:d7:b6:0a:fd:58:5a:db:1c:93:4a:48:5f:64:dc:85:f7:ca:
         85:71:28:1a:14:ce:e3:c0:ba:a9:10:3d:ef:8f:32:2f:1c:e5:
         f4:cd:10:41:9c:40:24:43:7b:21:92:e1:0a:eb:0d:43:d2:40:
         21:0d:46:b1:20:75:7a:0b:59:f7:db:bc:e9:1b:d7:00:8f:95:
         0e:ef:94:96:e7:cb:7e:5e:76:fb:56:16:42:bf:de:ab:44:d2:
         f6:db:9c:44:eb:48:4e:51:bd:9b:51:c6:5c:03:b8:9a:8a:0f:
         1f:df:70:84:a6:c2:d5:08:da:75:47:97:fc:64:97:cb:3b:38:
         3e:b1:0e:50:a4:08:2f:a9:43:9e:e5:0f:54:87:63:d4:80:f3:
         b1:10:4c:31:ad:5f:6c:e3:3e:42:3f:05:62:d3:49:4a:b9:6b:
         21:c4:8b:80:c9:2c:df:c1:21:1f:cb:7b:3f:e6:98:cd:07:91:
         fb:14:70:72:da:48:f2:d7:7e:dd:53:8a:79:dc:03:7f:51:09:
         32:a8:d9:00:77:6b:26:51:30:d5:50:b2:23:e1:0d:78:42:dc:
         84:44:d9:43:25:69:59:0b:fb:46:1e:96:83:ca:4e:77:33:59:
         53:db:7f:f3:4e:c7:a7:80:85:2b:37:4c:04:9c:0e:b4:82:7d:
         33:05:d5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org