Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/6d9442eca42e2a9d57522f8517c4ca18b85d1014.roa
File:                     6d9442eca42e2a9d57522f8517c4ca18b85d1014.roa (raw, json)
Hash identifier:          LR8wO6UmIoY+FzqRm6rZbZkoomHSitQzRXD7Tul3Uw8=
Subject key identifier:   92:F0:14:20:A6:AD:AA:86:A2:6C:EC:5D:17:DB:CF:60:42:42:81:04
Certificate issuer:       /CN=1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1
Certificate serial:       050FD6
Authority key identifier: 88:56:92:F1:4F:3F:CD:E6:0E:28:08:F2:BE:0C:7F:9D:18:FB:F1:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/6d9442eca42e2a9d57522f8517c4ca18b85d1014.roa
Signing time:             Wed 24 Mar 2021 14:30:57 +0000
ROA not before:           Wed 24 Mar 2021 14:30:57 +0000
ROA not after:            Tue 24 Mar 2026 14:30:57 +0000
asID:                     270099
IP address blocks:        190.109.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331734 (0x50fd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1
        Validity
            Not Before: Mar 24 14:30:57 2021 GMT
            Not After : Mar 24 14:30:57 2026 GMT
        Subject: CN=6d9442eca42e2a9d57522f8517c4ca18b85d1014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:a2:34:6e:ad:0f:e0:52:cc:4b:b5:81:61:
                    cf:66:e4:ec:17:b1:0f:c9:b4:be:8d:d9:a9:9a:db:
                    83:86:bf:9d:5c:c0:e8:dd:e0:e0:84:2f:29:1a:37:
                    22:88:bf:da:66:ad:14:97:60:aa:36:96:7e:41:58:
                    e7:3a:4d:89:6e:05:e9:55:0a:79:37:67:70:91:e8:
                    ff:bc:10:97:28:27:10:fb:93:1b:1b:51:ba:9b:76:
                    e9:75:01:d8:94:70:b3:bb:0a:9d:67:f6:25:6d:6c:
                    93:e1:3e:34:ee:ad:ee:70:2a:22:70:92:45:8a:0d:
                    69:3a:40:35:df:f5:1d:fb:0f:8e:c0:3a:39:16:39:
                    f1:18:0a:cf:0e:9d:f0:39:b1:26:49:88:82:eb:9f:
                    32:b2:c4:e7:03:1e:07:5c:80:73:7c:11:37:ee:a2:
                    1a:5c:28:09:db:42:8d:28:f8:6e:06:cc:df:5a:d8:
                    e2:d1:d1:f3:3b:19:70:40:34:a9:6c:2d:7a:3c:ab:
                    15:1d:57:ee:9a:2c:b3:ad:a5:6f:b3:8d:a8:39:4e:
                    c0:af:0a:bb:35:05:e0:6c:4e:2e:3a:de:c8:6f:9d:
                    c8:f6:45:9f:00:19:f6:91:fc:92:16:5f:9e:84:37:
                    91:a6:43:ea:c6:83:60:d4:f6:d3:df:cf:dd:cb:95:
                    2b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F0:14:20:A6:AD:AA:86:A2:6C:EC:5D:17:DB:CF:60:42:42:81:04
            X509v3 Authority Key Identifier:
                keyid:88:56:92:F1:4F:3F:CD:E6:0E:28:08:F2:BE:0C:7F:9D:18:FB:F1:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/6d9442eca42e2a9d57522f8517c4ca18b85d1014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7b30a26c-170a-4411-9875-da236f87823a/1dcfc26b72e7283c7ee68a1f385f9b13b2d2aca1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:85:29:90:29:a4:4b:6a:13:0c:3d:92:56:93:a5:81:fa:2b:
         ec:c1:8b:5c:2c:e5:aa:b0:14:f6:18:37:1c:6e:61:96:68:21:
         9e:e9:1e:c3:1d:91:df:16:09:7b:af:c8:69:e2:c6:90:0f:26:
         f7:aa:aa:89:2b:48:1f:07:15:46:af:31:7e:a6:83:d9:84:ee:
         87:8f:a5:24:a6:6f:54:9c:68:5b:4e:59:c6:be:e1:06:75:b3:
         85:75:73:fd:95:d3:22:73:0a:15:16:bd:93:68:fd:ff:a5:cf:
         b5:93:c2:5d:88:8a:10:55:43:ba:ea:d2:59:b5:5d:af:d0:03:
         d3:6a:b3:80:a7:87:a6:77:d7:80:06:d0:d8:5c:a2:96:47:06:
         38:e0:b4:53:76:49:ac:2a:1d:96:d9:25:8c:01:bc:7e:a1:b3:
         69:de:e7:8c:a4:ab:a7:eb:f7:e4:71:89:d6:f9:36:2d:2f:fe:
         fb:78:be:32:ab:44:82:a7:6f:21:18:0c:92:82:8d:a7:ef:c4:
         1a:6f:b5:cd:d2:d7:83:c9:d9:92:e4:02:90:b9:ac:ff:32:81:
         85:9a:c0:8d:26:c6:95:4b:37:06:5e:eb:48:e2:55:3d:e0:6d:
         a4:ec:ff:98:be:62:37:0b:5a:73:a2:40:ac:6d:f6:4d:1b:a0:
         aa:2b:75:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:03 2024 by rpki-client on console-ams.rpki-client.org