Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a370194-1d5c-460f-9b20-b1d88ead4e77/66a90438d6f050b81c84d6b9cee31baebf616244.roa
File:                     66a90438d6f050b81c84d6b9cee31baebf616244.roa (raw, json)
Hash identifier:          zznQKHXhZ/GyeoRKmBd+26mBkrW+qfvblkveCsOPiRg=
Subject key identifier:   8C:05:A4:30:7C:13:B9:4A:26:17:4A:33:C9:2F:3F:B2:11:A0:7F:57
Certificate issuer:       /CN=f84e0f4f21dac65238183b89155b8f48a9b0455c
Certificate serial:       1538F4
Authority key identifier: B0:93:38:83:3E:34:A6:C0:8C:5F:89:BD:BA:77:B2:5D:76:30:8E:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f84e0f4f21dac65238183b89155b8f48a9b0455c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0a370194-1d5c-460f-9b20-b1d88ead4e77/66a90438d6f050b81c84d6b9cee31baebf616244.roa
Signing time:             Mon 24 Jan 2022 16:05:42 +0000
ROA not before:           Mon 24 Jan 2022 03:00:00 +0000
ROA not after:            Wed 24 Jan 2024 03:00:00 +0000
asID:                     263243
IP address blocks:        190.107.80.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390836 (0x1538f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84e0f4f21dac65238183b89155b8f48a9b0455c
        Validity
            Not Before: Jan 24 03:00:00 2022 GMT
            Not After : Jan 24 03:00:00 2024 GMT
        Subject: CN=66a90438d6f050b81c84d6b9cee31baebf616244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:fa:b7:52:5e:ed:66:59:fa:97:42:6b:1a:
                    32:06:ca:0a:c4:73:23:37:a6:86:db:a7:f7:6b:7a:
                    26:48:af:9b:90:d3:50:41:7c:64:0c:f0:02:ff:26:
                    a2:55:aa:48:8a:61:5d:26:c5:8c:81:d5:a8:c1:ba:
                    18:bc:ba:22:86:f5:14:d1:47:34:23:4b:b0:dd:ca:
                    da:84:0b:01:de:7d:40:96:51:0a:bf:b3:9d:59:8c:
                    a4:3a:ee:d3:8d:0e:8b:b6:c3:1e:d2:64:a5:27:70:
                    74:ca:2e:49:d7:da:25:34:ed:93:51:4d:ee:f2:58:
                    d1:5f:0e:13:4e:3b:44:88:5a:a6:fb:cb:f6:81:23:
                    66:00:76:cd:5b:bf:85:cf:e5:1c:32:c1:a5:49:93:
                    af:97:0f:c7:d6:58:91:82:81:3a:dd:6c:ed:ca:96:
                    76:dc:4c:bc:a5:25:e1:e8:cf:03:82:7f:2f:ef:77:
                    01:28:e3:f7:40:23:f5:d4:4c:bf:83:e1:6c:90:9e:
                    3c:13:8c:bf:b1:ef:08:17:82:f6:fa:71:74:6e:a7:
                    83:f5:73:f2:85:44:73:d6:56:63:9a:f3:3b:ea:4c:
                    78:28:75:ff:17:1f:d9:ba:12:b0:56:95:10:cc:5c:
                    ba:86:4b:8c:a0:eb:d9:71:06:63:f8:ba:c2:3b:0e:
                    2e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:05:A4:30:7C:13:B9:4A:26:17:4A:33:C9:2F:3F:B2:11:A0:7F:57
            X509v3 Authority Key Identifier:
                keyid:B0:93:38:83:3E:34:A6:C0:8C:5F:89:BD:BA:77:B2:5D:76:30:8E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f84e0f4f21dac65238183b89155b8f48a9b0455c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a370194-1d5c-460f-9b20-b1d88ead4e77/66a90438d6f050b81c84d6b9cee31baebf616244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0a370194-1d5c-460f-9b20-b1d88ead4e77/f84e0f4f21dac65238183b89155b8f48a9b0455c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a0:06:54:35:fc:09:cc:b6:24:4c:f9:46:0d:25:f7:fc:41:ce:
         2b:9f:e6:6c:5c:bf:ef:38:58:5f:11:86:ae:d2:bb:d9:6d:81:
         bd:b0:ea:0f:8f:df:01:0b:8e:c4:60:d0:6a:f8:62:30:d3:37:
         56:a6:de:c0:8a:50:be:90:91:11:b2:7f:f2:59:ef:76:ee:cb:
         2f:4a:ee:fc:17:5d:12:32:37:95:5f:35:0e:71:9d:d8:fe:32:
         7a:ed:e8:fa:72:35:34:a6:2f:91:70:3a:1e:46:28:7e:68:4b:
         63:ac:8f:3c:72:58:97:5a:54:21:78:dc:21:bc:55:3f:85:28:
         82:67:ae:53:93:ce:a0:3c:20:f3:26:5f:51:83:af:45:74:b9:
         00:52:55:8c:53:b3:b0:71:d5:6f:1c:12:51:16:48:2f:ad:7d:
         80:f6:84:8a:d1:d0:54:e4:87:57:6d:62:ad:b3:23:8e:1b:aa:
         e7:f5:35:b0:f6:f7:da:78:3a:4a:6c:5c:7c:73:f6:d3:3d:31:
         ec:8f:3d:97:b3:23:d8:92:71:78:7d:79:ef:05:8b:a7:b3:74:
         d1:4e:c2:1a:c7:ef:f5:f2:47:50:21:9b:db:f6:18:49:5c:b6:
         02:34:73:84:a0:bb:88:89:74:be:83:29:48:0a:af:4e:94:a0:
         48:6f:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org