Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/d5e0403e53e90322e3e9e92d893106e4355db5f2.roa
File:                     d5e0403e53e90322e3e9e92d893106e4355db5f2.roa (raw, json)
Hash identifier:          zmmon3K+zZ9jWxyNuwfccb1b8bdgXi86i6cEAAsDhCg=
Subject key identifier:   13:4B:61:7F:87:96:81:0F:9F:93:22:F8:2F:81:6B:03:D8:3A:F6:21
Certificate issuer:       /CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Certificate serial:       2291AB
Authority key identifier: D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/d5e0403e53e90322e3e9e92d893106e4355db5f2.roa
Signing time:             Sat 03 Jun 2023 19:19:35 +0000
ROA not before:           Fri 02 Jun 2023 19:19:22 +0000
ROA not after:            Tue 03 Jun 2025 19:19:22 +0000
asID:                     265683
IP address blocks:        190.103.237.0/24 maxlen: 24
                          190.182.176.0/23 maxlen: 24
                          190.182.190.0/24 maxlen: 24
                          190.185.194.0/23 maxlen: 23
                          190.185.196.0/23 maxlen: 24
                          190.185.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265515 (0x2291ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
        Validity
            Not Before: Jun  2 19:19:22 2023 GMT
            Not After : Jun  3 19:19:22 2025 GMT
        Subject: CN=d5e0403e53e90322e3e9e92d893106e4355db5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:c3:6f:33:e7:5d:bc:72:97:4b:06:8b:89:
                    f1:0d:99:c7:9e:24:8f:84:c1:41:8c:bd:46:30:4d:
                    d3:df:b0:15:6d:47:24:28:1b:9d:08:3e:f5:16:89:
                    5f:36:b5:36:a2:cd:31:2f:a7:e0:83:b4:29:73:ce:
                    cb:0a:df:3d:a0:6b:5d:88:91:e0:8b:20:31:b6:11:
                    d5:3a:01:c5:29:df:97:a9:d2:0a:df:6c:b3:ba:f5:
                    6e:67:7e:0a:26:23:d8:62:6f:d2:be:ec:3c:6e:77:
                    20:eb:67:5f:80:80:db:ab:bb:55:58:87:45:f9:8c:
                    41:03:c2:c5:75:e6:bd:95:07:fc:75:6b:ae:55:5a:
                    59:46:4d:e4:ae:3d:d5:74:0a:89:8f:eb:dd:ec:c6:
                    94:b1:8d:d6:4d:f2:9f:f7:5d:07:b9:40:8f:ed:c7:
                    63:a2:a3:e3:1a:78:aa:3a:b4:03:f5:0d:11:67:50:
                    00:d2:dc:01:43:c7:97:a9:2c:06:b9:4a:66:b7:1e:
                    9e:28:aa:84:00:1b:06:18:b3:bc:6f:67:79:df:b7:
                    f7:94:2f:b5:74:4d:41:57:47:17:a8:9c:b8:56:e5:
                    ae:08:bd:70:0d:57:ce:6a:dc:f0:42:26:14:0d:5a:
                    c1:c0:0f:e8:d5:0c:fc:0d:d1:a5:08:03:0a:bb:aa:
                    73:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4B:61:7F:87:96:81:0F:9F:93:22:F8:2F:81:6B:03:D8:3A:F6:21
            X509v3 Authority Key Identifier:
                keyid:D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/d5e0403e53e90322e3e9e92d893106e4355db5f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/103a3ea12b7f2ac503f3b2a208930367c4230e34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.237.0/24
                  190.182.176.0/23
                  190.182.190.0/24
                  190.185.194.0-190.185.198.255

    Signature Algorithm: sha256WithRSAEncryption
         83:68:47:52:e7:2f:d3:06:e3:39:7e:e6:50:bc:74:17:a4:75:
         34:46:83:d6:29:f7:cd:35:e9:90:e0:48:2f:3a:a9:b0:62:c4:
         fc:00:bd:75:fa:0d:96:42:80:b3:b0:57:ea:f9:cf:d1:23:05:
         18:33:a5:25:b4:1a:1a:4f:31:a6:50:85:a7:61:b6:a5:5f:4d:
         eb:a0:b1:db:bd:97:43:a6:5c:45:b4:f3:d3:eb:29:fe:14:a6:
         99:95:51:94:1e:e9:2c:76:53:1c:e3:e7:88:13:d3:f3:bc:ea:
         b0:59:30:04:1a:0e:4b:8e:96:69:3c:9b:89:d3:75:fb:46:1e:
         e8:3e:d4:86:18:74:7b:dc:19:d6:be:4a:8f:9a:73:51:59:6f:
         d3:37:9e:dc:c3:8c:11:a8:77:5f:7d:11:3c:a7:3c:8b:03:dc:
         31:48:37:40:61:98:69:63:a4:f4:bb:7e:72:37:86:71:b7:f1:
         0e:56:ac:5a:2b:bc:26:d2:c9:c3:1b:f3:1f:c8:0b:8a:b1:b2:
         04:1b:52:8c:92:e5:08:95:6d:9c:20:3e:c7:fb:2a:61:19:c7:
         de:74:e9:d3:ef:39:c1:50:07:d3:bf:6a:b1:2a:ba:b6:b1:ef:
         1c:dc:61:4f:ea:29:e4:6b:d8:69:0c:13:bb:d4:71:b7:7f:9b:
         9c:3b:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org