Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/0bc31d90c7c3158717090766fffcd4f99f4f1d0a.roa
File:                     0bc31d90c7c3158717090766fffcd4f99f4f1d0a.roa (raw, json)
Hash identifier:          nJNYejhMye1ZSwFJ3kOxZL4yM0CwEw8erCUAEHHNypg=
Subject key identifier:   70:1B:60:4B:0E:38:60:4C:E5:86:0B:13:88:5E:63:A0:30:AA:52:B4
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       05A68D
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/0bc31d90c7c3158717090766fffcd4f99f4f1d0a.roa
Signing time:             Thu 12 Oct 2023 14:57:59 +0000
ROA not before:           Wed 11 Oct 2023 14:57:59 +0000
ROA not after:            Sun 12 Oct 2025 14:57:59 +0000
asID:                     15311
IP address blocks:        190.82.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370317 (0x5a68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Oct 11 14:57:59 2023 GMT
            Not After : Oct 12 14:57:59 2025 GMT
        Subject: CN=0bc31d90c7c3158717090766fffcd4f99f4f1d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d3:0b:46:da:2d:ed:07:4a:51:9d:df:1d:16:
                    1e:ff:f2:85:78:7b:5b:b5:d1:bc:7c:9f:52:2f:49:
                    d1:16:6b:cb:02:bd:61:40:fc:a8:41:20:f8:3c:96:
                    cb:64:b7:07:c1:2d:c1:78:fd:6c:80:b8:6f:50:0d:
                    43:ec:73:9f:d2:b0:92:e4:3f:e7:35:a2:84:01:07:
                    6b:9a:1e:ab:dc:53:6a:4c:44:02:e9:d4:8a:94:0d:
                    0e:37:57:d1:c8:85:7e:d2:8a:91:52:5e:df:63:19:
                    37:6b:50:d6:21:55:7d:fa:1b:96:51:ef:18:00:8a:
                    9f:6e:64:99:80:d9:52:46:2b:c7:c4:f0:8a:3f:05:
                    6f:2a:3b:d2:48:33:23:74:57:b5:11:6a:90:5f:b6:
                    94:10:16:95:b5:9b:05:3a:38:60:56:43:3f:66:a5:
                    ec:6a:ce:b7:23:01:8d:be:1a:6a:cb:a7:15:89:f4:
                    eb:ea:7d:62:e9:ea:58:6c:5c:23:43:be:30:42:6a:
                    5a:01:03:96:8a:cc:fb:a1:35:99:72:5f:00:94:52:
                    02:13:64:b5:14:ca:bb:81:87:c1:5a:9b:27:94:ab:
                    6f:79:c5:f2:b4:0f:eb:48:73:40:6f:5d:52:b0:bb:
                    d0:51:4c:86:13:8a:a7:f4:45:dc:09:f6:6b:30:0f:
                    6f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1B:60:4B:0E:38:60:4C:E5:86:0B:13:88:5E:63:A0:30:AA:52:B4
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/0bc31d90c7c3158717090766fffcd4f99f4f1d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.82.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ea:4e:2c:75:ca:52:61:d9:34:da:c0:bf:a7:b1:bf:26:47:df:
         73:76:ca:c9:b9:5e:bb:ed:97:3b:a7:0d:a8:ba:2e:29:f8:7d:
         ad:79:3a:f3:5b:be:42:f9:d7:75:50:b6:7a:94:d9:eb:0c:0d:
         6b:75:93:bc:10:f2:6b:fe:0e:d8:08:98:14:ab:24:e4:e4:48:
         e8:90:45:38:ac:fe:f5:3f:9b:80:c2:75:50:c6:7a:d3:2d:08:
         da:77:4c:50:b0:95:c0:4e:3e:c8:e2:22:c6:15:d8:5a:b8:16:
         f3:8b:92:65:fd:ba:b1:f4:1e:4d:5e:04:20:06:d5:73:d6:9f:
         d7:fb:52:71:e0:aa:41:fe:e5:ab:07:de:80:68:26:91:e4:ea:
         2b:2f:18:58:df:1f:37:68:b8:45:83:89:74:41:64:2f:22:4e:
         7a:86:71:cc:1c:c4:9a:06:0a:b6:91:97:dc:09:44:1a:24:de:
         fc:f2:b8:bb:a5:81:8a:15:02:35:f4:07:74:ed:ca:04:cb:b2:
         ed:63:57:98:2f:28:02:39:3d:50:eb:a0:d4:e5:12:8d:06:49:
         83:df:6a:7a:f0:d9:1f:f2:57:06:c0:e6:ce:69:de:10:a9:e6:
         3c:3d:b7:e3:0d:cc:9d:b3:b0:60:3c:74:4c:b1:c6:30:ef:75:
         60:9d:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org