Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/faaeaa3d986da109a29ba40364c7c578c3cdb9d0.roa
File:                     faaeaa3d986da109a29ba40364c7c578c3cdb9d0.roa (raw, json)
Hash identifier:          iEyySl6KZgtiyAJ51BlEyWK9qg9Yi+CDkhCuP+9nvKY=
Subject key identifier:   EF:BB:16:97:C1:9D:09:B9:2E:42:7A:59:D8:88:43:03:74:80:24:40
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       0277DC
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/faaeaa3d986da109a29ba40364c7c578c3cdb9d0.roa
Signing time:             Tue 11 Jul 2023 17:41:58 +0000
ROA not before:           Mon 10 Jul 2023 17:41:57 +0000
ROA not after:            Fri 11 Jul 2025 17:41:57 +0000
asID:                     7418
IP address blocks:        190.82.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161756 (0x277dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 10 17:41:57 2023 GMT
            Not After : Jul 11 17:41:57 2025 GMT
        Subject: CN=faaeaa3d986da109a29ba40364c7c578c3cdb9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:df:98:1b:49:e2:da:c4:f9:bf:ad:f3:b7:
                    29:c8:6a:f0:14:b5:2b:ef:80:13:07:1f:ba:96:31:
                    2d:64:c9:40:a0:8c:52:2e:29:b8:f9:72:51:4f:05:
                    a0:4f:e8:b0:5a:1d:be:3e:eb:db:eb:a1:b4:92:a0:
                    00:73:c1:9e:f8:5c:1c:3a:58:fc:e2:6d:c3:0f:52:
                    d9:db:10:10:d3:1f:e3:78:91:70:ea:15:d2:13:ef:
                    3d:31:79:d7:60:d5:e2:32:86:9d:92:ad:44:08:2e:
                    5a:22:78:47:d7:60:07:56:77:2d:a6:a2:18:88:2c:
                    a7:ac:47:f3:5c:f8:41:65:1a:f0:10:ca:da:83:7f:
                    d0:d8:f1:db:6d:0a:83:dd:22:f0:b9:74:ef:64:f1:
                    f5:9b:fc:5b:fc:04:cb:52:c6:10:d6:a0:b5:9b:6c:
                    2d:68:be:cf:64:26:74:18:02:a8:55:78:e9:1e:56:
                    db:73:b7:f8:b3:ce:72:56:94:69:fd:67:b8:b1:b7:
                    b9:61:d0:6e:23:1d:95:15:9e:bf:09:67:27:2b:cd:
                    00:21:74:df:4d:dd:01:74:14:c9:d3:8d:25:f7:b5:
                    be:1e:4f:ee:af:31:42:c9:1f:84:cc:f9:c7:1e:30:
                    a7:eb:6a:cc:42:45:cd:d5:d4:ca:4f:8a:d6:3d:d6:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BB:16:97:C1:9D:09:B9:2E:42:7A:59:D8:88:43:03:74:80:24:40
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/faaeaa3d986da109a29ba40364c7c578c3cdb9d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.82.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7e:fc:87:42:7c:0a:ee:76:d9:2e:b6:95:a6:48:77:07:e6:e1:
         96:30:a9:3f:ac:41:96:41:91:b5:0d:7c:03:99:25:35:e0:bf:
         15:6c:b4:03:05:52:a8:f3:95:d2:9a:27:e6:e7:42:f1:04:c4:
         d9:17:19:63:a9:9a:93:a1:0a:1c:fd:12:bc:78:95:ca:a3:49:
         bc:e1:e7:76:7f:57:07:f0:a2:e8:49:f1:4f:e2:d6:23:5e:64:
         44:79:7a:3d:2b:dd:37:06:e4:18:90:6c:79:35:c3:03:7c:84:
         cc:61:bd:1d:4d:a8:79:82:0c:82:0b:66:fc:2c:20:c4:0e:00:
         8a:da:45:f5:55:c7:63:57:37:df:a5:e1:83:ad:93:a2:18:39:
         e9:15:b3:0e:52:4e:e9:e7:24:82:4b:15:58:49:5d:64:8a:77:
         28:a3:db:a1:c0:9a:bf:f8:d7:92:b7:0a:9c:da:49:bf:5a:80:
         bc:8d:77:7b:53:55:4d:32:14:d5:b1:86:65:b3:db:32:62:b0:
         31:0f:18:6e:9c:9e:b3:f6:64:6e:63:d1:2f:1a:9c:3c:8c:dd:
         7d:68:e6:2a:50:b0:15:52:22:27:7b:6b:ba:b4:db:08:93:91:
         a2:f5:3a:a4:0c:02:1b:0a:01:ba:ec:c4:8f:ee:f3:c1:16:7d:
         ae:2f:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org