Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/3dbcaf94f3fef1aa299e4f8bb633564039c6a8ea.roa
File:                     3dbcaf94f3fef1aa299e4f8bb633564039c6a8ea.roa (raw, json)
Hash identifier:          FhI5ATilvngK8RR8NfWzhN/9Glb7EMiDJR32F0GtRNQ=
Subject key identifier:   1C:1A:06:13:B1:79:03:5E:BF:E0:42:25:20:8E:CD:32:17:0C:E8:F1
Certificate issuer:       /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial:       123689
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/3dbcaf94f3fef1aa299e4f8bb633564039c6a8ea.roa
Signing time:             Tue 22 Aug 2023 13:59:27 +0000
ROA not before:           Mon 21 Aug 2023 13:59:27 +0000
ROA not after:            Fri 22 Aug 2025 13:59:27 +0000
asID:                     27768
IP address blocks:        190.23.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193609 (0x123689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Validity
            Not Before: Aug 21 13:59:27 2023 GMT
            Not After : Aug 22 13:59:27 2025 GMT
        Subject: CN=3dbcaf94f3fef1aa299e4f8bb633564039c6a8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:78:c5:88:4d:1c:f4:4f:da:c7:bf:42:7a:
                    98:14:b8:2f:eb:57:35:86:c5:da:f5:0c:2f:06:ae:
                    1b:68:b6:b2:86:f0:27:48:ae:dd:f9:51:ec:c5:ee:
                    c2:d5:34:8d:a7:ee:57:9d:03:41:46:18:af:c8:fa:
                    51:12:1f:c9:cd:9d:5e:28:62:9e:c7:e5:ef:9c:bf:
                    91:23:27:92:cc:34:be:97:35:c1:10:18:93:d7:48:
                    32:49:fd:1c:7e:52:37:bc:04:14:b7:90:ba:28:b6:
                    5f:2e:90:e1:2b:71:a7:83:59:7b:dd:ab:0f:98:96:
                    3c:88:9b:fc:80:d9:bb:7a:1f:bc:6f:33:13:e8:bd:
                    51:75:46:76:37:53:56:50:f9:8c:ca:37:45:f9:d3:
                    bb:41:6d:ca:d1:94:56:0b:09:a1:4f:8f:05:b0:c0:
                    c5:88:cd:b4:9b:35:6a:6d:77:c6:bd:d6:04:5c:06:
                    8b:96:52:7c:d7:41:c3:88:c8:54:4a:d1:ab:4f:d2:
                    6f:71:8c:83:32:b0:48:73:59:3e:5a:50:f6:b6:c7:
                    79:d7:5b:ff:4b:75:02:b1:22:46:d3:20:c1:72:5d:
                    39:29:f0:09:2f:bc:8b:12:ef:04:af:ab:0d:30:73:
                    bf:a8:72:e0:06:93:ef:a0:2a:d6:35:8c:44:5e:74:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1A:06:13:B1:79:03:5E:BF:E0:42:25:20:8E:CD:32:17:0C:E8:F1
            X509v3 Authority Key Identifier:
                keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/3dbcaf94f3fef1aa299e4f8bb633564039c6a8ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.23.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:5a:e2:0c:94:7c:12:99:97:d4:8f:8e:31:df:1b:7f:aa:28:
         bd:34:88:5e:96:93:74:ec:d7:cf:a6:fa:4f:d5:3e:b9:c0:e1:
         c2:ec:40:42:81:af:56:53:e4:d1:8b:ee:3d:be:4d:f1:87:68:
         cd:fe:c4:50:ae:d1:62:ef:17:92:de:41:4d:ee:e6:35:79:5e:
         c0:26:19:7e:a2:5a:fa:5b:9c:ae:5f:90:5c:4a:fd:92:cf:fb:
         d8:db:43:2b:79:ee:da:c6:79:fe:a2:12:d2:c5:a2:8f:9a:eb:
         93:a2:7f:d8:a0:f7:88:53:cf:ec:64:a9:7a:b8:8e:78:84:a4:
         98:3a:83:6b:9f:5b:08:d5:8c:1b:bf:7a:23:12:1f:60:86:1b:
         0a:65:50:9f:c9:b3:c3:fb:9a:fc:82:79:55:27:c0:89:a7:ad:
         dd:07:8c:a1:79:ac:16:69:27:d5:66:ad:7f:7b:2e:36:47:91:
         fe:47:30:9f:d5:cf:80:6e:be:f0:83:4d:6d:92:ce:00:54:7e:
         e3:9c:cc:66:df:a1:54:a3:a2:75:20:b8:53:24:cf:ad:fd:2d:
         86:f7:fe:40:2e:a5:fe:18:90:d5:a5:8a:9b:88:bb:88:6a:db:
         d6:83:50:08:87:a4:0d:eb:12:bb:a2:b5:c6:03:8f:e7:c5:12:
         7f:5d:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org