Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/8b11d235c285b5a39fa4ccf57a623a984d22368a.roa
File:                     8b11d235c285b5a39fa4ccf57a623a984d22368a.roa (raw, json)
Hash identifier:          rGOxeHZyRHxeIUJhfQ7ye+IiCkMWyaE3LZVQxkNU8GA=
Subject key identifier:   35:4A:67:A4:E0:12:96:E9:93:50:7E:4F:5B:4C:51:42:18:47:31:DB
Certificate issuer:       /CN=1076b178dfcc599f8de3d8db587bc6a97166efe6
Certificate serial:       246FA6
Authority key identifier: 62:54:C0:88:69:DE:40:D1:4C:A6:E1:4A:A3:7F:49:06:2A:3B:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1076b178dfcc599f8de3d8db587bc6a97166efe6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/8b11d235c285b5a39fa4ccf57a623a984d22368a.roa
Signing time:             Thu 28 Sep 2023 17:11:43 +0000
ROA not before:           Wed 27 Sep 2023 17:11:43 +0000
ROA not after:            Sun 28 Sep 2025 17:11:43 +0000
asID:                     262187
IP address blocks:        190.211.80.0/21 maxlen: 24
                          190.211.88.0/22 maxlen: 24
                          131.100.180.0/22 maxlen: 24
                          2800:a30::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387878 (0x246fa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076b178dfcc599f8de3d8db587bc6a97166efe6
        Validity
            Not Before: Sep 27 17:11:43 2023 GMT
            Not After : Sep 28 17:11:43 2025 GMT
        Subject: CN=8b11d235c285b5a39fa4ccf57a623a984d22368a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a2:f7:dc:39:bb:77:1a:8c:de:e7:d3:b9:9b:
                    d5:00:05:8a:6c:c1:34:4f:9d:18:0b:d5:e5:b2:c4:
                    fa:0b:a8:34:78:5c:8c:02:89:a3:ec:4b:98:97:61:
                    cb:fc:13:49:16:cd:02:39:15:e9:07:ca:e6:d3:da:
                    4f:cf:1e:26:f2:a1:de:16:cd:00:60:47:0a:5d:22:
                    cd:2f:e9:a9:7c:86:f5:5f:29:40:a1:8e:4c:bb:ea:
                    f1:4d:4b:9c:d7:9a:96:a8:db:a9:44:88:ae:01:b0:
                    91:d0:00:a9:8c:5e:45:b9:e8:ae:dc:db:fc:a9:58:
                    72:9d:8e:76:6f:fc:99:c6:d3:dc:3f:29:38:06:24:
                    fe:24:14:a4:15:e4:c8:c6:86:d0:75:81:92:56:da:
                    fa:ec:12:15:27:d6:10:6e:16:5f:90:39:f6:72:7a:
                    da:df:2e:e7:b4:7c:8c:83:1c:da:59:a5:c5:26:9b:
                    5f:d7:0d:ed:8b:35:1d:ce:26:f4:2f:b7:ee:57:85:
                    94:60:5d:fd:52:5d:a0:1a:6c:9f:74:93:55:f7:5b:
                    7f:49:64:37:5c:69:1e:7c:fe:af:da:8a:90:34:c3:
                    54:b0:c9:94:e5:1d:76:1d:76:33:9a:08:e8:72:97:
                    d8:39:cd:b1:3d:0e:2e:4a:fe:c0:b5:9b:5d:34:8c:
                    54:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4A:67:A4:E0:12:96:E9:93:50:7E:4F:5B:4C:51:42:18:47:31:DB
            X509v3 Authority Key Identifier:
                keyid:62:54:C0:88:69:DE:40:D1:4C:A6:E1:4A:A3:7F:49:06:2A:3B:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1076b178dfcc599f8de3d8db587bc6a97166efe6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/8b11d235c285b5a39fa4ccf57a623a984d22368a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/1076b178dfcc599f8de3d8db587bc6a97166efe6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.180.0/22
                  190.211.80.0-190.211.91.255
                IPv6:
                  2800:a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:54:1e:81:c1:61:b6:05:bd:65:9f:06:ca:4c:1f:8f:3a:7b:
         1e:08:b6:f7:7e:ca:b5:23:1b:45:b8:15:51:2d:8a:78:3d:2f:
         1d:17:6d:ee:59:8f:be:f7:cd:f2:b5:4a:49:77:15:e6:05:19:
         62:2c:0d:0b:e2:c7:b2:de:80:d6:db:ff:1f:87:4a:cf:f0:c0:
         ec:51:de:3b:58:7b:05:5e:f0:e1:87:c1:3f:18:1e:99:3c:42:
         98:6c:ce:e5:77:e3:f2:87:b2:4c:94:00:ae:48:c8:38:82:c5:
         b6:f7:5e:56:af:1d:c2:61:70:04:4e:58:c8:2d:13:9e:25:c5:
         a1:20:8a:0c:49:83:aa:61:ef:6f:83:7c:88:55:c2:e8:da:e8:
         03:88:01:26:71:f0:6b:e4:17:a7:67:48:1c:26:a1:39:26:d5:
         f3:33:f6:3b:07:d3:f6:f9:95:2d:ab:08:e3:83:87:d6:1b:f6:
         02:43:ce:d7:61:02:65:05:fd:2d:b9:c7:dd:88:83:72:0f:19:
         02:71:02:29:4f:33:01:fe:71:a4:9b:2d:f3:7a:93:a0:d2:96:
         a1:d4:11:9f:3d:df:13:84:c6:0f:98:40:a6:6f:42:e1:a2:15:
         51:56:94:a7:7d:46:2d:b6:a1:23:66:6f:68:69:99:6c:f6:66:
         63:d5:8f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org