Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/45d539770eea002f89aeb1ee773ff762826cb8c8.roa
File:                     45d539770eea002f89aeb1ee773ff762826cb8c8.roa (raw, json)
Hash identifier:          8TG6m7L8b8uXI2z0296D19mN8Q6kDHFObDWeqMOhJwk=
Subject key identifier:   50:19:3B:E8:3B:A3:3E:EF:B1:77:59:56:D5:B3:AE:3E:BF:E2:2F:4A
Certificate issuer:       /CN=962886d2caf49497dff544bb6ba251bf1ffa6220
Certificate serial:       13B5E1
Authority key identifier: EA:C5:A1:9C:82:7E:D5:4A:C3:AB:89:73:AF:0B:1F:89:D3:FF:0D:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/962886d2caf49497dff544bb6ba251bf1ffa6220.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/45d539770eea002f89aeb1ee773ff762826cb8c8.roa
Signing time:             Tue 28 Jun 2022 13:19:48 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     264628
IP address blocks:        190.103.28.0/22 maxlen: 22
                          190.103.28.0/23 maxlen: 23
                          190.103.30.0/23 maxlen: 23
                          190.103.28.0/24 maxlen: 24
                          190.103.29.0/24 maxlen: 24
                          190.103.30.0/24 maxlen: 24
                          190.103.31.0/24 maxlen: 24
                          190.89.29.0/24 maxlen: 24
                          190.89.30.0/23 maxlen: 23
                          190.89.30.0/24 maxlen: 24
                          190.89.31.0/24 maxlen: 24
                          2803:c000::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1291745 (0x13b5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962886d2caf49497dff544bb6ba251bf1ffa6220
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=45d539770eea002f89aeb1ee773ff762826cb8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a6:ca:74:98:a8:a9:24:d6:3b:4a:09:83:2e:
                    2f:50:5b:60:3e:da:91:5e:58:38:e2:42:9c:94:fc:
                    91:de:85:08:a2:08:e9:d4:07:2e:8b:b0:98:c6:26:
                    c9:77:c8:bd:c6:45:3a:8f:2c:96:3d:10:58:1a:51:
                    41:2f:e6:4b:98:8e:3c:cc:bb:80:58:5c:97:2e:73:
                    82:68:bb:b6:6e:90:71:68:70:ea:b5:14:0f:6e:6e:
                    ef:b8:53:64:f6:af:ad:5b:69:06:22:03:28:83:73:
                    67:d4:c4:c7:30:c1:bd:94:0f:49:fd:00:89:d0:ce:
                    4a:59:ad:8c:08:2f:b3:08:68:f7:87:e9:4a:98:f2:
                    c4:83:64:02:1a:87:52:4f:71:43:9f:e7:ed:ef:45:
                    9b:29:39:2d:12:7f:fb:d2:7c:62:b2:45:a7:5d:14:
                    8a:0d:31:3e:e2:d0:5d:d5:b3:d4:e6:b5:8a:05:aa:
                    ee:e8:b4:b5:af:3c:db:a7:c7:d8:0d:51:94:1b:cb:
                    fa:36:03:9a:c9:6a:de:91:1f:0d:30:40:52:46:af:
                    f2:65:67:71:0d:0d:29:a3:7a:90:73:7a:16:86:90:
                    7c:d8:25:1c:a4:60:9f:1a:51:33:aa:30:7d:e3:00:
                    f3:32:34:89:57:d0:64:b6:0f:a4:7f:fc:a4:05:1e:
                    b3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:19:3B:E8:3B:A3:3E:EF:B1:77:59:56:D5:B3:AE:3E:BF:E2:2F:4A
            X509v3 Authority Key Identifier:
                keyid:EA:C5:A1:9C:82:7E:D5:4A:C3:AB:89:73:AF:0B:1F:89:D3:FF:0D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/962886d2caf49497dff544bb6ba251bf1ffa6220.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/45d539770eea002f89aeb1ee773ff762826cb8c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/de5dd9af-eb96-4459-bc15-4d5a3d4bf21a/962886d2caf49497dff544bb6ba251bf1ffa6220.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.29.0-190.89.31.255
                  190.103.28.0/22
                IPv6:
                  2803:c000::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:6c:18:9a:af:c5:5d:a1:4c:cd:2c:23:fd:61:06:bf:bc:3b:
         4f:da:56:8a:a7:35:ae:c7:43:6a:4a:0c:f0:0d:94:c3:7d:27:
         1f:50:74:57:c8:99:c1:f5:77:83:f8:88:a8:4f:56:85:59:05:
         39:c5:98:fb:72:6f:ec:4b:81:f6:34:2d:c4:bd:a6:51:8e:1a:
         4c:11:dd:bb:22:5a:cd:9d:96:76:23:c5:63:6f:22:3c:e5:dd:
         af:4f:5d:4f:97:b4:e8:be:8a:ac:3b:f2:88:9d:06:4c:ea:f3:
         a9:9b:13:4a:a6:8f:7f:b2:db:55:d7:b4:16:7a:bf:4f:79:51:
         92:af:d1:ff:9a:c8:41:a6:46:15:2e:9f:c9:fc:3b:bd:b8:77:
         5b:71:75:0f:0f:4d:0b:74:bb:71:4c:10:33:d3:f7:35:52:dd:
         4b:a4:ef:ce:1f:a2:4e:b7:d5:5e:f6:56:7d:76:51:d4:15:91:
         c7:8b:83:a3:3d:8f:20:99:e4:af:d2:cc:97:96:7e:29:a3:2b:
         91:0b:c7:92:14:85:4c:05:64:88:5f:58:e2:b2:5c:f5:2d:fe:
         42:80:88:d3:23:7c:27:3a:65:14:9b:aa:d0:3d:84:99:ee:f8:
         76:c3:05:68:fa:55:14:ce:bd:5c:8e:17:48:83:74:a8:90:2f:
         f9:5c:22:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org