Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/a58d01b998bf847c41032fe4ea27f0098fa94926.roa
File:                     a58d01b998bf847c41032fe4ea27f0098fa94926.roa (raw, json)
Hash identifier:          g84wuiuMfBQZjMktG2veda1oCIxboZu107llc+FZMoU=
Subject key identifier:   AB:1A:89:09:33:EA:1C:3F:13:6D:52:88:A4:F1:A9:59:59:86:1E:A4
Certificate issuer:       /CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Certificate serial:       2276EF
Authority key identifier: D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/a58d01b998bf847c41032fe4ea27f0098fa94926.roa
Signing time:             Sat 03 Jun 2023 19:19:25 +0000
ROA not before:           Fri 02 Jun 2023 19:19:22 +0000
ROA not after:            Tue 03 Jun 2025 19:19:22 +0000
asID:                     27983
IP address blocks:        190.185.128.0/17 maxlen: 24
                          190.103.224.0/19 maxlen: 24
                          179.62.0.0/16 maxlen: 24
                          190.182.128.0/17 maxlen: 24
                          2800:850::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258671 (0x2276ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
        Validity
            Not Before: Jun  2 19:19:22 2023 GMT
            Not After : Jun  3 19:19:22 2025 GMT
        Subject: CN=a58d01b998bf847c41032fe4ea27f0098fa94926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fc:87:77:f9:80:2c:53:0a:56:a1:9d:45:4d:
                    bb:07:93:74:14:25:33:00:cb:0e:0e:39:8c:62:87:
                    ae:ed:1b:80:68:61:e0:e6:d0:04:cf:2e:c5:2e:37:
                    29:8f:e2:02:9e:06:86:06:e7:39:35:01:32:a5:ab:
                    16:2b:17:a6:0d:3e:ed:d3:5c:0f:78:fd:76:ec:f8:
                    38:b4:62:0f:f8:83:8a:3a:30:f9:b9:bb:c9:e1:33:
                    71:9a:67:9d:06:a1:c0:d2:eb:7a:0a:11:68:01:c7:
                    1a:ad:d4:83:31:b5:e1:9a:33:97:5d:ed:0b:e5:ba:
                    1a:77:1d:7b:1b:02:1d:08:37:9d:37:d2:88:74:5c:
                    02:49:25:9c:aa:cf:26:76:64:03:67:2b:fd:6a:0a:
                    ff:25:81:b7:9d:a3:99:ff:fb:27:52:db:e2:52:13:
                    18:08:d2:88:d2:60:fd:d7:e2:d6:07:d7:15:4a:2d:
                    4a:cd:f3:e0:9b:3f:ae:a0:dd:57:79:67:76:9a:a0:
                    cb:54:0c:2c:a4:ac:e6:8a:90:d0:85:4b:cc:8e:14:
                    af:15:bc:85:f6:6c:97:3d:1a:87:a1:b4:73:0b:2d:
                    c7:7a:dd:77:4d:db:0f:aa:92:9e:73:7b:09:28:06:
                    fc:f1:5e:f4:c5:4f:3d:07:e7:c7:77:cf:c5:47:5c:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1A:89:09:33:EA:1C:3F:13:6D:52:88:A4:F1:A9:59:59:86:1E:A4
            X509v3 Authority Key Identifier:
                keyid:D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/a58d01b998bf847c41032fe4ea27f0098fa94926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/103a3ea12b7f2ac503f3b2a208930367c4230e34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.0.0/16
                  190.103.224.0/19
                  190.182.128.0/17
                  190.185.128.0/17
                IPv6:
                  2800:850::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:07:38:e5:1b:50:45:28:01:f9:49:3d:35:b6:57:36:0e:53:
         e7:6c:95:15:c8:6f:57:86:1b:b8:d0:3a:18:9d:38:62:d8:12:
         e1:4c:b0:68:2a:19:a3:71:e7:90:18:29:17:22:9c:5b:41:d0:
         88:87:d8:a8:6a:11:7d:8a:48:ed:77:48:b5:9a:9e:42:28:a2:
         0c:eb:95:97:36:f4:4f:38:27:3d:8e:a6:56:63:ab:46:6b:59:
         39:88:1a:05:41:8f:1e:2e:31:d1:b7:c6:83:22:7b:97:98:61:
         03:5a:b0:92:c0:8e:0d:c9:d1:de:47:54:f9:fb:06:06:f6:c5:
         49:ca:d2:cd:43:04:79:98:9f:b4:1e:13:4b:f0:46:fd:54:a8:
         71:ef:3d:d7:53:58:22:6a:77:0e:94:db:18:ad:c5:b6:bb:55:
         25:69:12:72:43:a2:cf:bc:05:c3:5c:6a:6a:07:b7:56:67:c5:
         a3:ed:f0:c1:94:59:53:0c:49:df:a8:da:72:d1:34:1d:f6:c1:
         14:23:dd:22:dd:85:35:4d:61:91:1f:df:c7:8d:bd:6a:33:6d:
         2a:ad:52:68:b7:8c:97:0a:d6:c4:c8:ed:ef:3b:3c:72:64:3f:
         8a:a0:b4:97:53:a0:a7:e3:78:9c:b2:c5:f8:2d:ca:37:9d:88:
         35:d5:e2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org