Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/7f0b549bac50380655550ad9d36464dcec7742b9.roa
File:                     7f0b549bac50380655550ad9d36464dcec7742b9.roa (raw, json)
Hash identifier:          cLMcMTfSuQt3xETXYELDTRpgGIx0cgW6/V3jjCYn4Vo=
Subject key identifier:   23:BC:2A:2A:81:DA:4C:25:F7:52:F3:11:29:42:A7:E8:39:31:D9:1B
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       027B00
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/7f0b549bac50380655550ad9d36464dcec7742b9.roa
Signing time:             Tue 11 Jul 2023 17:42:09 +0000
ROA not before:           Mon 10 Jul 2023 17:42:09 +0000
ROA not after:            Fri 11 Jul 2025 17:42:09 +0000
asID:                     16629
IP address blocks:        190.82.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162560 (0x27b00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 10 17:42:09 2023 GMT
            Not After : Jul 11 17:42:09 2025 GMT
        Subject: CN=7f0b549bac50380655550ad9d36464dcec7742b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:5e:14:fc:1f:7b:1e:aa:75:c8:70:1b:cb:
                    05:03:e1:09:21:88:36:7a:4b:e8:9d:06:05:3b:fd:
                    ac:45:63:4a:34:8d:ab:72:68:17:5f:06:80:91:a5:
                    6c:6f:d2:60:74:5e:67:9f:e0:ea:9a:31:d1:1e:e3:
                    2b:bc:b7:8b:29:54:3d:98:aa:33:dc:fe:fa:84:7f:
                    86:1c:49:a1:13:78:b5:2f:dd:83:9e:e2:28:84:43:
                    fd:bd:3a:b0:2c:0e:9b:e4:46:02:30:b2:27:cf:a9:
                    c1:dd:6c:70:99:fe:4d:86:86:cf:20:3d:b8:9c:b9:
                    ef:ab:ba:fc:51:f0:f6:f2:9e:1b:a5:07:a0:1c:43:
                    57:dd:5d:1f:03:81:75:90:78:82:da:31:59:3e:c8:
                    f0:73:0c:e0:30:53:33:d4:a7:d5:05:74:33:11:11:
                    b9:5c:bd:1f:1b:a1:16:0d:c8:1c:0b:0f:28:8c:31:
                    29:ec:6b:6e:68:a7:0f:fd:b7:c0:e5:55:40:ba:26:
                    70:d1:95:c1:ba:45:00:65:f8:c1:2a:67:03:62:69:
                    62:ef:2c:86:4e:90:a7:1e:da:e9:e0:d4:fd:ab:68:
                    ff:85:dd:8c:45:0c:23:1a:58:f8:65:72:2a:d0:fa:
                    c4:ad:79:17:4d:f6:d2:83:cb:3f:0b:c3:86:29:b6:
                    e3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BC:2A:2A:81:DA:4C:25:F7:52:F3:11:29:42:A7:E8:39:31:D9:1B
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/7f0b549bac50380655550ad9d36464dcec7742b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.82.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         20:42:8d:31:bb:87:b4:a0:f1:09:d4:6b:b7:78:b5:ae:5c:85:
         8c:b8:da:0a:0f:2d:bd:9b:a6:51:cd:f1:a0:f5:ba:54:a7:d5:
         d1:11:e2:97:e9:6d:64:90:45:7c:82:4c:39:b6:f5:92:04:36:
         c5:d4:0b:75:bd:2a:ed:7c:f3:67:4c:a2:fb:07:ef:bf:63:17:
         31:a0:6d:fd:d7:0c:37:c0:a5:2f:c5:24:b1:fd:54:aa:87:7c:
         79:69:35:85:23:d5:4a:f4:2a:d2:f7:8f:82:ca:fb:bb:13:78:
         20:fe:64:af:e9:a5:11:7f:36:0d:a9:df:24:10:24:83:b3:f4:
         17:71:ed:30:5e:01:97:83:ab:6c:34:fe:2a:96:da:45:84:da:
         f7:84:4a:79:4d:75:f0:78:49:d2:18:6e:18:df:77:af:f3:6a:
         69:c3:bd:34:57:6f:b8:50:68:98:e6:1b:e0:59:de:ba:dc:54:
         c3:25:8e:00:8c:2e:54:4b:d5:cb:64:fb:e0:3b:44:62:fe:02:
         32:4f:c5:71:cd:47:b2:2b:59:bc:d4:52:78:c6:1c:da:aa:ca:
         47:2f:c8:14:59:0c:40:e6:2c:96:aa:14:a8:39:5a:8d:6e:73:
         56:28:89:25:49:cc:e2:f9:3a:d7:b5:7d:7a:f9:9c:42:4a:85:
         7c:66:79:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org