Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/6839c80737429f8f9a15bf6054e68fb16d30f5db.roa
File:                     6839c80737429f8f9a15bf6054e68fb16d30f5db.roa (raw, json)
Hash identifier:          OTVatsEjRhxOrmuAvtBvFXdWgILNjPNSlYhAZ7iArU8=
Subject key identifier:   70:60:27:D0:0A:C0:CC:86:00:F7:3B:6E:79:FC:51:61:8E:BC:87:6A
Certificate issuer:       /CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
Certificate serial:       231C09
Authority key identifier: C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/6839c80737429f8f9a15bf6054e68fb16d30f5db.roa
Signing time:             Wed 02 Aug 2023 18:09:51 +0000
ROA not before:           Tue 01 Aug 2023 18:09:50 +0000
ROA not after:            Sat 02 Aug 2025 18:09:50 +0000
asID:                     262220
IP address blocks:        190.7.112.0/20 maxlen: 24
                          167.250.120.0/22 maxlen: 24
                          181.225.80.0/24 maxlen: 24
                          179.51.113.0/24 maxlen: 24
                          179.51.117.0/24 maxlen: 29
                          179.51.121.0/24 maxlen: 24
                          191.102.0.0/20 maxlen: 24
                          2803:6700:3000::/40 maxlen: 48
                          2800:b40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2300937 (0x231c09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
        Validity
            Not Before: Aug  1 18:09:50 2023 GMT
            Not After : Aug  2 18:09:50 2025 GMT
        Subject: CN=6839c80737429f8f9a15bf6054e68fb16d30f5db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:dd:08:f0:bf:3d:c1:d7:78:41:2b:2a:d6:
                    9c:7c:16:bf:56:81:fe:dc:c3:c6:84:8c:ca:d7:bf:
                    7d:4e:e7:c1:52:c9:b2:14:f7:e4:ea:e9:15:be:90:
                    21:eb:7d:8a:df:5b:62:65:e5:cc:31:f7:30:15:c9:
                    bb:2c:24:90:f4:11:49:e6:e2:6f:95:3c:41:3b:65:
                    d2:88:47:d1:ca:43:2d:90:0a:58:68:c8:a1:cc:c1:
                    95:33:26:3d:27:79:a9:1d:38:7d:1f:61:55:38:8a:
                    16:26:54:3e:87:3f:fa:0b:ad:c8:32:54:a8:64:27:
                    d7:c5:c5:0b:96:05:42:ac:7b:20:f1:b7:a2:52:69:
                    6b:e2:72:0d:8c:5d:a4:74:1d:38:c8:2b:7f:37:2e:
                    49:3f:77:25:13:c2:34:aa:fe:f9:89:34:14:1e:b9:
                    10:04:63:f7:b6:07:3c:04:fe:8f:ca:84:99:18:31:
                    66:9b:be:4f:ac:fe:1e:dc:13:7d:c7:10:b5:a4:f6:
                    a5:e7:1b:51:98:2c:1c:68:3b:93:4a:99:3a:53:b0:
                    27:01:f9:04:1a:6c:22:07:c6:0d:f6:50:e9:9c:d6:
                    d0:04:c1:1b:c1:f4:89:18:cc:a1:a7:72:13:64:42:
                    43:5d:66:4c:eb:cd:af:ed:de:ea:5e:7e:8e:5c:1f:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:60:27:D0:0A:C0:CC:86:00:F7:3B:6E:79:FC:51:61:8E:BC:87:6A
            X509v3 Authority Key Identifier:
                keyid:C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/6839c80737429f8f9a15bf6054e68fb16d30f5db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.120.0/22
                  179.51.113.0/24
                  179.51.117.0/24
                  179.51.121.0/24
                  181.225.80.0/24
                  190.7.112.0/20
                  191.102.0.0/20
                IPv6:
                  2800:b40::/32
                  2803:6700:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:2d:23:20:fb:fc:72:dc:6b:4b:dc:39:a4:5e:00:0f:b0:a8:
         be:72:d6:1f:37:a7:c3:02:cb:6a:e9:5c:ec:0b:af:b5:34:c6:
         2a:5b:39:60:8e:77:a0:8a:ce:5b:cd:33:a0:59:ac:a8:33:f7:
         f5:65:3b:3c:c3:5c:53:2d:e7:4f:04:6f:17:1f:e6:82:3b:91:
         f1:35:18:ae:e7:38:04:f4:44:01:75:ed:fd:76:1e:d7:17:56:
         f9:66:63:21:a6:f3:e3:c3:c9:76:21:d6:fa:d1:35:ce:da:1a:
         c2:35:ad:6e:df:67:91:fa:57:8c:4e:aa:a9:df:c6:69:2d:ba:
         57:40:78:20:73:40:58:7f:61:e1:a3:86:6e:63:47:1d:63:f0:
         a8:5a:fb:58:62:1b:6b:e9:9d:32:21:af:10:2c:3f:b9:34:50:
         18:e2:55:25:f4:42:94:84:e9:80:bb:bf:12:f2:ec:43:d0:d2:
         4e:fd:b0:50:af:b3:b6:41:38:1c:a8:e7:c1:c3:22:74:19:33:
         f6:06:da:77:28:da:24:9a:ca:38:e2:be:c3:66:7b:45:fe:97:
         6b:cf:1c:58:16:36:5c:22:70:5b:3f:ac:95:5d:ca:ca:93:4c:
         a0:37:e8:63:ee:1b:7b:74:65:8f:42:61:bd:6d:f8:41:10:a8:
         7d:e8:8a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org