Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ee17edb8-70ea-4617-a145-4781b1cdd960/7a0e0445099570d790ddfea59cf92efae53286bf.roa
File:                     7a0e0445099570d790ddfea59cf92efae53286bf.roa (raw, json)
Hash identifier:          gEzcq+lE50mwZhG2zoiEyNXbPQLX5XCcKFDIkNs0EkM=
Subject key identifier:   0F:F5:54:EC:8F:99:CE:A4:E6:C4:3B:34:5C:4F:34:A7:91:C0:A3:15
Certificate issuer:       /CN=6ae7fb8e2cfd50ff05f417ed98f81b107912a55f
Certificate serial:       1B7724
Authority key identifier: 97:21:94:F2:C7:82:D8:97:6F:AD:23:F3:87:10:31:E4:CA:38:D7:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ae7fb8e2cfd50ff05f417ed98f81b107912a55f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ee17edb8-70ea-4617-a145-4781b1cdd960/7a0e0445099570d790ddfea59cf92efae53286bf.roa
Signing time:             Tue 18 Oct 2022 15:25:10 +0000
ROA not before:           Mon 17 Oct 2022 15:24:15 +0000
ROA not after:            Fri 18 Oct 2024 15:24:15 +0000
asID:                     264830
IP address blocks:        168.227.204.0/23 maxlen: 24
                          181.189.160.0/22 maxlen: 24
                          181.189.170.0/24 maxlen: 24
                          181.189.172.0/23 maxlen: 24
                          186.190.180.0/23 maxlen: 24
                          186.190.186.0/23 maxlen: 24
                          186.190.188.0/23 maxlen: 24
                          190.103.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799972 (0x1b7724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ae7fb8e2cfd50ff05f417ed98f81b107912a55f
        Validity
            Not Before: Oct 17 15:24:15 2022 GMT
            Not After : Oct 18 15:24:15 2024 GMT
        Subject: CN=7a0e0445099570d790ddfea59cf92efae53286bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:15:5d:6f:d4:5b:00:38:b2:22:da:46:ec:48:
                    e3:5c:d6:15:4f:8f:ef:fe:de:14:1d:df:ea:e6:00:
                    9e:52:c9:3a:57:2f:d6:8c:d4:a5:95:bb:04:a8:f4:
                    4d:2b:56:ea:09:0b:24:66:f6:e8:9d:0d:cc:08:89:
                    38:37:28:24:0f:85:99:1a:bb:38:e0:1a:f9:36:5a:
                    62:c4:bc:c6:e3:9a:18:33:4e:09:3e:b3:0f:20:16:
                    65:b0:ad:27:ff:74:ba:2d:8f:08:56:f1:76:75:50:
                    b7:03:81:e1:ea:93:1e:e5:14:3b:5a:70:6d:05:0c:
                    38:05:d4:cd:cd:1e:7c:8d:d1:b1:76:84:8a:25:ea:
                    c4:a2:ce:db:d0:6d:f1:97:fe:c1:32:01:39:b3:81:
                    c5:c3:18:0b:9f:e4:08:75:3b:b8:b2:dc:15:12:1e:
                    c2:5d:b8:30:45:c6:35:8f:90:62:67:95:69:bd:a7:
                    d4:e8:e0:6f:42:fe:e3:85:99:ac:d8:92:1c:9f:6d:
                    83:91:c8:01:d6:4e:12:73:c2:8e:a3:46:b3:7d:a9:
                    73:d6:23:14:3c:f4:b9:04:41:52:f7:0e:e4:79:fb:
                    3a:49:d9:c5:d0:2e:f9:02:c7:61:75:ef:9b:71:63:
                    a6:70:e1:36:4f:9f:af:cb:6a:2f:7b:34:c5:3f:ac:
                    e3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F5:54:EC:8F:99:CE:A4:E6:C4:3B:34:5C:4F:34:A7:91:C0:A3:15
            X509v3 Authority Key Identifier:
                keyid:97:21:94:F2:C7:82:D8:97:6F:AD:23:F3:87:10:31:E4:CA:38:D7:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ae7fb8e2cfd50ff05f417ed98f81b107912a55f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ee17edb8-70ea-4617-a145-4781b1cdd960/7a0e0445099570d790ddfea59cf92efae53286bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ee17edb8-70ea-4617-a145-4781b1cdd960/6ae7fb8e2cfd50ff05f417ed98f81b107912a55f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.204.0/23
                  181.189.160.0/22
                  181.189.170.0/24
                  181.189.172.0/23
                  186.190.180.0/23
                  186.190.186.0-186.190.189.255
                  190.103.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:8c:a8:d2:3b:8e:3c:2b:29:8a:e9:f4:92:0d:5c:11:c2:43:
         d7:c4:cd:49:8a:c9:05:87:7c:f6:89:84:35:c8:6d:a7:2f:27:
         40:25:13:a8:22:69:86:1c:85:92:c7:d8:f1:c3:bf:2e:2a:6c:
         79:0b:06:03:68:10:6e:4e:61:4b:71:46:25:19:90:32:18:2e:
         4d:90:22:f3:21:22:39:a6:bb:0e:87:d6:e2:45:9f:d1:37:9c:
         4d:9c:ba:04:7c:3d:4e:dc:9e:b6:76:b2:41:f4:f0:19:15:06:
         f2:64:6f:a6:96:48:d6:8c:9b:57:d3:0f:b5:a0:04:cb:9f:f1:
         a9:93:a2:1e:b0:97:f8:98:39:72:b4:d2:e8:98:4c:bd:6a:5a:
         3a:43:56:90:d5:41:4b:c6:01:3b:66:d3:84:f1:24:37:81:f8:
         41:38:09:10:a3:1a:bc:b2:e2:5e:6b:82:f2:a7:35:4c:6e:ab:
         14:20:ca:ac:f9:1a:af:2f:65:d0:b2:fc:40:fb:03:0c:48:b0:
         02:2f:68:2a:73:80:c1:44:e3:d3:0b:2c:ed:ef:ea:71:c8:dc:
         d1:b6:df:cf:ff:b3:9b:16:f0:b4:20:76:6e:d8:de:7a:55:2e:
         27:28:49:d8:0b:af:41:45:0e:13:13:10:cb:52:76:c6:6d:0e:
         cb:3a:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:51 2024 by rpki-client on console-ams.rpki-client.org