Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/8c1915a410959d30458fc2d83dddb44afc2e8aea.roa
File:                     8c1915a410959d30458fc2d83dddb44afc2e8aea.roa (raw, json)
Hash identifier:          AWep05gNB5GC2ymxdKDh9LxKZW8Ydt6a13HSwCNdm5o=
Subject key identifier:   25:4B:15:ED:75:DC:70:E6:62:52:E7:57:6C:E2:A0:95:6B:5D:8B:67
Certificate issuer:       /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial:       1FA54D
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/8c1915a410959d30458fc2d83dddb44afc2e8aea.roa
Signing time:             Wed 03 May 2023 14:51:21 +0000
ROA not before:           Tue 02 May 2023 14:51:21 +0000
ROA not after:            Sat 03 May 2025 14:51:21 +0000
asID:                     52392
IP address blocks:        190.99.120.0/24 maxlen: 24
                          190.99.121.0/24 maxlen: 24
                          190.99.122.0/24 maxlen: 24
                          190.99.123.0/24 maxlen: 24
                          190.99.124.0/24 maxlen: 24
                          190.99.125.0/24 maxlen: 24
                          190.99.126.0/24 maxlen: 24
                          190.99.127.0/24 maxlen: 24
                          2803:b100:9::/48 maxlen: 48
                          2803:b100:b::/48 maxlen: 48
                          2803:b100:a::/48 maxlen: 48
                          2803:b100:8::/48 maxlen: 48
                          2803:b100:1::/48 maxlen: 48
                          2803:b100::/48 maxlen: 48
                          2803:b100:3::/48 maxlen: 48
                          2803:b100:2::/48 maxlen: 48
                          2803:b100:6::/48 maxlen: 48
                          2803:b100:e::/48 maxlen: 48
                          2803:b100:7::/48 maxlen: 48
                          2803:b100:c::/48 maxlen: 48
                          2803:b100:f::/48 maxlen: 48
                          2803:b100:4::/48 maxlen: 48
                          2803:b100:d::/48 maxlen: 48
                          2803:b100:5::/48 maxlen: 48
                          2803:b100::/44 maxlen: 44
                          2803:b100:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073933 (0x1fa54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
        Validity
            Not Before: May  2 14:51:21 2023 GMT
            Not After : May  3 14:51:21 2025 GMT
        Subject: CN=8c1915a410959d30458fc2d83dddb44afc2e8aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:79:2d:ea:7f:1b:c2:67:d2:73:cf:29:fe:
                    58:35:8b:f2:0d:34:f0:77:fe:c2:83:d4:c6:8b:9d:
                    1b:be:9d:cf:9d:df:b9:9c:35:03:73:dd:db:39:f5:
                    01:4f:23:ed:8d:0d:8f:9a:c9:9a:0f:2b:bf:23:d5:
                    df:0f:67:ad:00:b0:b5:a5:15:c5:67:21:63:e7:bb:
                    28:d3:6e:f6:d7:04:c4:db:6a:8f:c1:04:be:43:fd:
                    5d:66:4d:03:ed:aa:11:48:4d:5e:36:83:55:80:04:
                    ac:d5:b7:b3:48:67:c5:6d:a8:ae:2d:fd:bf:12:21:
                    73:ab:cd:ed:4d:5f:57:53:ec:4d:1a:6b:61:64:28:
                    89:be:1a:44:d8:71:38:3f:75:7b:04:11:cd:ef:0e:
                    21:d3:5a:da:75:3f:68:39:66:22:3e:b0:fc:c9:a9:
                    28:a1:b8:96:23:39:85:b7:90:f5:26:4c:cc:ca:7e:
                    49:ea:90:ad:33:a2:d0:df:f4:9c:0f:e8:7a:fa:65:
                    4d:dd:a2:9f:5d:48:e5:05:2f:b5:39:fa:12:44:22:
                    5d:24:a2:fa:30:85:29:af:01:79:89:c4:0b:d1:27:
                    73:40:9a:6b:69:00:15:9b:95:33:d7:ba:30:97:53:
                    6c:8a:65:a2:b5:49:cc:a8:fd:aa:44:82:04:4e:fe:
                    80:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4B:15:ED:75:DC:70:E6:62:52:E7:57:6C:E2:A0:95:6B:5D:8B:67
            X509v3 Authority Key Identifier:
                keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/8c1915a410959d30458fc2d83dddb44afc2e8aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.120.0/21
                IPv6:
                  2803:b100::/43

    Signature Algorithm: sha256WithRSAEncryption
         0a:2f:d5:86:ea:42:b4:f5:2b:5c:89:31:b8:d6:19:84:d2:9c:
         64:e5:93:49:f2:f6:a7:ac:d8:01:b5:3b:15:47:cb:3c:d3:cf:
         d4:30:1f:de:35:52:38:1d:7a:29:dc:20:2b:2a:20:24:56:f0:
         f1:fe:d9:bd:f1:60:9b:5b:de:3d:c3:23:cf:d8:0a:b5:63:95:
         8e:11:a2:fe:87:71:21:eb:81:af:0a:88:ad:ae:83:d2:07:31:
         67:b0:31:e2:8f:ae:90:af:fa:ba:c8:8d:dc:f9:56:2a:7f:2a:
         91:06:53:46:ea:1c:df:fc:4e:66:98:62:f0:08:65:d1:ff:ba:
         6e:1b:52:c1:2d:d5:61:f8:27:b9:36:fc:d5:63:71:ed:15:33:
         d5:91:8f:ff:97:92:07:17:e5:b5:78:1b:9c:8f:c9:02:d1:52:
         80:83:2f:ab:d9:85:fa:ea:01:5a:bf:43:3a:dc:aa:a4:63:c2:
         72:33:2c:f6:2b:ac:7f:32:8e:03:61:3a:c6:92:cd:2b:7d:92:
         06:81:f5:7a:1a:7e:99:76:15:f6:37:47:cd:92:15:ff:4a:85:
         76:31:1d:b3:db:7a:06:b9:de:4d:51:78:e6:f2:d2:0e:0c:cb:
         a5:2f:e0:25:04:08:74:3d:70:17:53:b2:33:03:9c:f2:75:5f:
         f4:c6:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org