Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8b860dc686bc790b1b13996cf70ae74ea5838777.roa
File:                     8b860dc686bc790b1b13996cf70ae74ea5838777.roa (raw, json)
Hash identifier:          Z0iqpM9e4YbtaaaB4m9puldOgc0Ox4ctGgr9Upwc7aE=
Subject key identifier:   1A:51:AB:5C:0A:58:A3:23:32:BA:D5:7D:36:B8:91:E1:64:C0:DF:56
Certificate issuer:       /CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
Certificate serial:       1FFAE9
Authority key identifier: 6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8b860dc686bc790b1b13996cf70ae74ea5838777.roa
Signing time:             Wed 01 Feb 2023 20:32:25 +0000
ROA not before:           Tue 31 Jan 2023 20:31:23 +0000
ROA not after:            Sat 01 Feb 2025 20:31:23 +0000
asID:                     262171
IP address blocks:        190.93.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2095849 (0x1ffae9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
        Validity
            Not Before: Jan 31 20:31:23 2023 GMT
            Not After : Feb  1 20:31:23 2025 GMT
        Subject: CN=8b860dc686bc790b1b13996cf70ae74ea5838777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4d:e4:ce:7d:67:f0:35:02:37:2f:eb:40:cc:
                    4d:74:c9:af:c4:36:3e:98:f9:bc:ad:d4:81:24:f7:
                    c5:63:c9:35:27:d6:2c:8c:46:46:98:d2:21:92:34:
                    7f:6f:62:44:05:a6:0a:62:35:4c:a2:92:8e:a9:bd:
                    a0:43:64:cf:ca:aa:45:82:30:db:2f:20:44:69:b8:
                    87:20:d3:00:da:ce:50:7d:d0:27:ef:d6:aa:7e:66:
                    30:2f:7b:67:3a:bb:99:cd:5e:0e:56:4c:6c:f6:83:
                    58:fd:89:68:b6:42:d6:87:cb:97:41:38:36:98:da:
                    0a:ab:bf:bd:2b:36:06:a7:25:3d:df:63:8e:e1:f8:
                    75:a9:84:6e:a9:75:ae:04:26:98:33:ca:08:59:9a:
                    83:8e:25:52:5e:1e:b8:c0:1d:04:ce:00:58:86:6c:
                    43:c1:f6:60:b2:a5:14:74:18:e3:d3:68:c8:8c:f2:
                    4f:3c:3d:83:79:d2:71:e0:a6:0f:4d:87:92:bc:0b:
                    eb:b9:20:46:0d:e0:2f:80:a2:6d:0a:fd:40:c9:63:
                    cc:09:8d:3f:18:5e:ff:6a:ff:d8:57:d6:b4:e4:5c:
                    77:e2:53:a1:5e:b6:a0:6c:f5:d0:0c:f3:af:32:9c:
                    68:66:a7:2c:20:bc:01:f1:4e:18:b8:a8:f1:4a:39:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:51:AB:5C:0A:58:A3:23:32:BA:D5:7D:36:B8:91:E1:64:C0:DF:56
            X509v3 Authority Key Identifier:
                keyid:6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8b860dc686bc790b1b13996cf70ae74ea5838777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:d0:1e:0c:78:22:94:b5:10:de:40:0e:90:1f:02:df:8f:ba:
         09:64:97:46:dc:f3:4d:d1:76:cc:c8:ea:cd:4d:8e:64:8f:42:
         ec:97:c0:b1:0a:de:02:71:99:2c:af:fe:96:04:b0:fe:1e:ec:
         39:f0:8d:cf:df:f3:6b:68:31:81:8e:b8:15:01:64:79:79:fe:
         76:2f:4f:9d:e0:1e:63:9f:35:49:35:0f:9a:07:f6:2e:75:e9:
         5b:91:a6:90:08:2a:5c:49:45:b7:b4:7b:fd:75:03:74:f4:cf:
         1a:9c:4b:04:17:a7:c0:ed:71:97:18:29:0b:1e:1d:cd:1b:bb:
         6b:a3:cf:59:a8:7e:17:1c:98:ae:4d:6d:79:f3:3f:43:59:7c:
         bc:9b:72:e7:c4:cb:e7:0f:49:2e:32:2c:6f:2e:a5:1c:70:39:
         2f:7a:53:90:6a:00:f3:46:17:3c:c7:8e:82:fd:05:ff:6f:ff:
         ce:33:02:f3:bf:a4:0f:bb:82:95:51:fb:5d:b6:a8:bc:ce:67:
         e5:88:cf:56:e7:f8:9c:52:db:73:5a:fd:73:11:fb:b3:58:f5:
         ff:e7:0d:4e:97:4b:72:9b:fd:7f:8b:71:fa:bf:a4:ab:43:cf:
         4a:71:83:25:cc:ae:88:84:15:93:c4:74:47:ed:8c:2c:e3:db:
         be:59:c7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org