Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/929e29b7e827a024ffc5696c26c083dba5c16d7f.roa
File:                     929e29b7e827a024ffc5696c26c083dba5c16d7f.roa (raw, json)
Hash identifier:          yN3j3QYqhB1C9gUdIx9Gx9fG5Sci/BZCvhRU2QO67bE=
Subject key identifier:   6D:A2:6F:79:FE:89:C9:97:F4:CB:C3:2A:3D:E4:1E:28:AE:D0:42:68
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E1845
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/929e29b7e827a024ffc5696c26c083dba5c16d7f.roa
Signing time:             Wed 24 Mar 2021 14:31:36 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     264638
IP address blocks:        190.2.17.0/24 maxlen: 24
                          190.210.206.0/24 maxlen: 24
                          200.68.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923717 (0xe1845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=929e29b7e827a024ffc5696c26c083dba5c16d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7f:46:2b:c4:a9:d1:68:26:64:81:0f:48:d2:
                    e6:12:fc:ca:34:ff:16:0a:59:3c:4a:4d:a8:5f:15:
                    27:80:52:3f:0a:fd:6a:de:c3:4f:d5:1e:eb:33:ba:
                    e2:4c:e4:e4:5b:82:35:da:48:f3:34:f1:9d:a4:bf:
                    e9:41:2c:b6:a8:bc:ca:bc:38:c5:cf:66:3d:21:31:
                    45:f2:80:c5:0b:22:b5:b2:a6:40:46:81:1e:76:da:
                    4a:b0:a2:0e:4b:1e:dd:6c:f9:fd:f3:9f:83:2f:75:
                    09:14:da:b5:4c:5e:9f:93:5f:33:bc:ff:b3:ce:13:
                    c9:36:73:90:af:6a:31:37:8a:3d:d9:b1:b4:20:b6:
                    c3:72:be:d2:b7:69:45:c8:01:72:a2:7e:e3:e3:1a:
                    d7:c8:55:d4:71:df:65:f2:4c:fb:3c:39:dc:fb:2a:
                    e5:d4:7f:08:50:3f:85:1e:c2:1d:86:f4:ca:c8:57:
                    8b:d8:61:68:21:0e:bb:c1:48:c9:3a:36:d0:53:2c:
                    3d:be:a8:6c:fb:8f:71:36:2c:eb:16:0f:8e:10:53:
                    25:91:c0:41:4e:e1:dd:18:67:f0:64:95:5a:e8:db:
                    e7:18:58:76:b7:ce:f1:9f:8f:d7:2c:fd:1b:9d:c8:
                    84:0b:27:47:a2:f6:72:ec:3d:c9:09:79:86:bb:01:
                    4d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A2:6F:79:FE:89:C9:97:F4:CB:C3:2A:3D:E4:1E:28:AE:D0:42:68
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/929e29b7e827a024ffc5696c26c083dba5c16d7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.17.0/24
                  190.210.206.0/24
                  200.68.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d5:7e:3c:13:5d:68:84:25:7a:54:3c:44:1e:99:9c:b1:80:
         33:b2:55:0b:5c:f7:7e:7e:03:76:22:76:3b:ed:73:3e:16:0f:
         10:11:76:8b:8d:9c:ad:31:1d:88:a0:62:08:27:65:e8:74:75:
         0b:b1:fa:70:96:3d:16:a3:4f:25:6e:42:fe:c1:47:81:83:b0:
         6a:3c:dd:ac:8d:b6:d0:99:d1:de:a1:50:2a:61:a7:63:51:10:
         cf:ba:8c:d9:e4:8c:12:4e:62:94:83:cf:28:35:d6:2f:89:0e:
         24:69:3c:45:df:bf:87:1e:dc:22:e1:90:bf:19:fc:3a:1d:c3:
         a9:92:24:76:94:00:ad:1a:a6:83:ae:2e:66:d7:4b:c9:a6:90:
         ae:7b:0f:c5:31:c6:ca:eb:ee:bf:60:88:39:eb:05:66:22:6f:
         2a:d8:62:46:d9:c6:3f:70:cf:4c:91:2c:86:48:14:18:2e:05:
         bf:0d:3c:68:74:98:29:5b:13:99:f6:73:20:14:0e:0b:6d:3d:
         ef:8e:65:5f:5d:5d:fd:f5:55:37:07:0c:56:9b:b0:61:c8:0c:
         c3:55:07:71:57:66:ad:4b:3e:aa:23:b6:a9:aa:29:28:b5:94:
         0a:15:e6:ae:46:3a:d2:f0:6f:5f:5d:f7:21:47:36:af:62:4a:
         22:13:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org