Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/e233358ae13a9648615dd81451930281842f9ed5.roa
File:                     e233358ae13a9648615dd81451930281842f9ed5.roa (raw, json)
Hash identifier:          9azkiRZPNNnioB5riR3Pbm2QQAEPV97fv4uDLSKiPks=
Subject key identifier:   46:E7:E8:17:94:75:33:94:5B:AE:D6:E8:EA:30:97:F8:5C:18:A1:56
Certificate issuer:       /CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Certificate serial:       1FD2BB
Authority key identifier: D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/e233358ae13a9648615dd81451930281842f9ed5.roa
Signing time:             Wed 08 Mar 2023 07:58:59 +0000
ROA not before:           Mon 06 Mar 2023 07:52:36 +0000
ROA not after:            Sat 08 Mar 2025 07:52:36 +0000
asID:                     272843
IP address blocks:        190.185.180.0/22 maxlen: 24
                          190.185.232.0/22 maxlen: 24
                          190.185.150.0/23 maxlen: 24
                          190.185.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2085563 (0x1fd2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
        Validity
            Not Before: Mar  6 07:52:36 2023 GMT
            Not After : Mar  8 07:52:36 2025 GMT
        Subject: CN=e233358ae13a9648615dd81451930281842f9ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9e:83:85:67:fa:46:5e:e2:f6:4e:e8:41:10:
                    0b:7c:23:f3:11:70:60:be:87:95:2a:52:a3:e9:0f:
                    9f:13:36:67:59:5d:2b:5a:fd:65:59:9f:4a:6d:11:
                    0c:b1:0f:2f:bb:42:f6:76:90:83:10:2e:75:b4:81:
                    07:e3:ce:6c:a0:f0:e8:31:15:2f:c7:a0:da:44:78:
                    6b:86:d3:5c:7f:bf:f7:61:7e:04:97:06:8b:99:20:
                    dc:df:24:cb:a9:88:f1:1c:8b:b7:0f:5d:fc:20:33:
                    32:69:20:65:77:fa:66:c9:ee:f0:d6:43:5f:c3:27:
                    a7:08:13:af:cf:25:78:59:4d:70:ae:41:be:19:24:
                    88:d9:cb:6e:d1:ff:e1:6f:d1:5b:70:c7:56:df:fa:
                    47:5a:71:51:1b:58:55:00:92:08:45:a2:a4:53:48:
                    31:02:06:14:4c:3b:b3:6d:45:49:63:1a:02:08:af:
                    09:b6:78:a8:79:60:db:67:6d:0c:8e:c0:a1:8a:13:
                    a8:7b:64:40:27:a9:d4:d2:fb:3c:24:44:bd:d1:64:
                    a9:33:dc:50:8f:6b:9a:e0:53:1e:f4:6b:9d:ec:c3:
                    a7:5a:c4:3a:9b:4a:55:81:69:a9:74:ee:78:82:e8:
                    5a:ae:fb:03:6a:0c:b2:d1:35:74:1f:90:69:13:5a:
                    7b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E7:E8:17:94:75:33:94:5B:AE:D6:E8:EA:30:97:F8:5C:18:A1:56
            X509v3 Authority Key Identifier:
                keyid:D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/e233358ae13a9648615dd81451930281842f9ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/103a3ea12b7f2ac503f3b2a208930367c4230e34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.145.0/24
                  190.185.150.0/23
                  190.185.180.0/22
                  190.185.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:fb:ff:7a:d1:38:d4:10:93:d5:07:bb:c9:c7:f6:26:58:8c:
         08:9a:de:61:68:9c:16:3f:57:36:5b:c8:2a:5b:c2:59:3e:9c:
         0d:8a:63:46:6e:08:55:63:ba:1e:1e:4a:8f:1b:59:1b:02:2f:
         76:5d:74:c8:67:70:87:de:28:12:ad:dd:92:9f:a4:c6:cd:c4:
         6e:78:97:f8:69:c5:76:26:9a:dc:15:d5:3f:40:83:16:23:5c:
         a0:9e:b1:d2:b8:8b:2b:72:31:f9:48:62:ec:30:85:8c:05:23:
         43:ce:25:a4:99:c3:aa:85:92:76:55:eb:e1:ab:48:7b:ba:8e:
         4c:20:a3:f9:74:9a:2f:6a:13:a8:c8:26:47:fd:e7:64:f7:2e:
         68:22:1f:ad:5c:71:c2:ab:ec:3a:16:c5:e1:55:54:30:3f:9b:
         da:ae:27:7e:de:99:de:7a:1c:09:ee:54:e6:6b:b5:e2:5f:da:
         36:91:bc:ea:d3:ca:0d:67:d7:d3:b4:4f:c8:b2:8b:4d:34:dd:
         de:2e:bb:99:be:dc:c5:71:01:37:43:ea:93:ed:6a:d1:fe:cb:
         b4:32:df:72:4f:c5:77:1b:19:13:b4:0f:0e:a7:ba:9a:90:4f:
         c4:f0:e6:f1:1c:23:ef:c0:eb:bd:c4:92:08:9e:02:e6:6a:95:
         aa:89:b0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org