Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10a66029-9837-460d-b4c0-76df2d5a1730/986f89ebc3ee09b0a1071bfbe2d617f47edf7060.roa
File:                     986f89ebc3ee09b0a1071bfbe2d617f47edf7060.roa (raw, json)
Hash identifier:          LaSpez4/P3iJgts25PcrXmnhUx1ecZP6Di4504SRYM4=
Subject key identifier:   E0:F2:FD:8E:56:34:5B:5D:E6:8A:2C:2C:F4:B9:4E:74:BC:92:0D:DF
Certificate issuer:       /CN=919b8ddca443dca5af7dde710225040d3f9e4ebb
Certificate serial:       264D1B
Authority key identifier: CB:68:9E:CC:9E:81:F1:02:85:6E:91:05:D9:6F:7F:4C:51:64:01:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/919b8ddca443dca5af7dde710225040d3f9e4ebb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10a66029-9837-460d-b4c0-76df2d5a1730/986f89ebc3ee09b0a1071bfbe2d617f47edf7060.roa
Signing time:             Wed 29 Nov 2023 18:28:32 +0000
ROA not before:           Wed 29 Nov 2023 18:28:28 +0000
ROA not after:            Sat 29 Nov 2025 18:28:28 +0000
asID:                     28007
IP address blocks:        190.113.80.0/24 maxlen: 24
                          190.113.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2510107 (0x264d1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919b8ddca443dca5af7dde710225040d3f9e4ebb
        Validity
            Not Before: Nov 29 18:28:28 2023 GMT
            Not After : Nov 29 18:28:28 2025 GMT
        Subject: CN=986f89ebc3ee09b0a1071bfbe2d617f47edf7060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:54:7c:11:38:54:9c:75:de:0c:d4:d7:fa:48:
                    92:65:b0:59:56:05:70:8f:ac:c3:14:79:0b:eb:23:
                    20:a1:09:ad:63:7b:2e:d2:62:7e:ee:cd:cb:3c:68:
                    f5:03:5a:74:68:79:84:29:86:0e:33:77:56:48:ed:
                    2a:03:51:9c:59:ab:1a:1a:51:f1:21:da:57:53:6f:
                    92:71:63:ea:74:57:b0:12:fd:aa:2d:94:f8:62:2d:
                    36:2b:68:09:34:00:34:1a:80:ce:5f:fa:a2:a6:3f:
                    00:cb:5c:5f:90:01:10:82:f7:2a:f4:41:cc:99:a2:
                    d6:2f:57:5b:b0:b5:ff:2c:82:de:8a:ad:14:58:98:
                    24:e2:56:79:d6:9a:74:52:4c:43:e0:24:0b:01:b1:
                    35:22:51:88:2a:e2:13:9d:d9:0a:2d:d5:b8:56:aa:
                    e0:b3:97:a1:3b:96:af:cc:9c:4c:7a:1e:33:33:ce:
                    70:fa:78:14:1f:ed:04:7b:cc:eb:1d:49:6b:1f:f8:
                    5f:3f:22:ad:78:ba:e6:1b:57:18:b1:f0:a6:25:19:
                    5e:b0:1b:41:01:66:32:4f:a1:73:20:22:96:8c:ed:
                    7c:6c:45:26:24:f5:2c:23:63:f9:b5:a6:b8:3e:cb:
                    db:60:96:e5:7a:d8:54:25:a9:0d:15:ad:14:78:0a:
                    8c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F2:FD:8E:56:34:5B:5D:E6:8A:2C:2C:F4:B9:4E:74:BC:92:0D:DF
            X509v3 Authority Key Identifier:
                keyid:CB:68:9E:CC:9E:81:F1:02:85:6E:91:05:D9:6F:7F:4C:51:64:01:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/919b8ddca443dca5af7dde710225040d3f9e4ebb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10a66029-9837-460d-b4c0-76df2d5a1730/986f89ebc3ee09b0a1071bfbe2d617f47edf7060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10a66029-9837-460d-b4c0-76df2d5a1730/919b8ddca443dca5af7dde710225040d3f9e4ebb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.80.0/24
                  190.113.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:b5:61:51:9d:7e:d7:de:04:2b:99:cc:77:88:44:4d:3a:27:
         19:9f:d4:6a:32:c2:ed:6c:95:60:05:4b:f8:dd:a1:ea:b4:b4:
         f3:e9:ce:08:54:31:50:d3:7b:31:3f:b3:af:8e:d7:2e:30:c1:
         a3:e6:71:25:2d:b6:6a:55:e7:08:84:4b:f8:b4:01:43:c8:e1:
         71:e2:be:0e:e0:5e:a2:90:b6:7e:1b:26:55:a6:02:89:f5:e2:
         05:0e:51:5d:c0:93:6e:1a:98:e7:b6:26:80:3b:6d:c4:f3:5f:
         e5:a0:94:87:a3:b5:82:14:e6:63:41:86:f7:b9:5b:43:65:60:
         d9:65:3c:a6:d5:78:47:f1:c9:0c:58:c4:34:10:6f:7d:4b:78:
         0e:cc:32:aa:6f:27:30:42:cd:c1:09:a0:40:00:6b:b9:60:61:
         92:50:c2:0f:c2:db:93:78:ec:08:71:0c:14:27:f8:98:dc:37:
         c9:6e:00:f6:96:b0:01:c4:6c:3b:ce:bf:73:87:f7:2d:5d:2f:
         17:8a:ec:c1:84:64:5b:b3:ff:eb:91:df:7b:42:c4:93:ff:70:
         a8:a2:6d:8b:5a:db:3c:1f:35:14:74:42:fb:c6:6a:ce:38:e5:
         90:11:cd:ac:c9:dd:bd:5e:97:0e:33:d6:38:cb:6c:41:d2:c1:
         8a:51:8e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:48:52 2025 by rpki-client