Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/174d8e20-6eaf-4b11-a9f3-dc3626a9b736/cbe9dc606d86ecb28feb26add34cd0509a19577e.roa
File:                     cbe9dc606d86ecb28feb26add34cd0509a19577e.roa (raw, json)
Hash identifier:          utjBOtUEI5SPeKaBF9lxgB+pJyQe2Z+SyE+QfK0ErMs=
Subject key identifier:   65:7B:66:E9:6E:66:6C:2A:60:4D:82:EB:23:E6:C2:73:36:C8:0E:B9
Certificate issuer:       /CN=ede5db541032308f013d787d037b94dae9d93c0e
Certificate serial:       111789
Authority key identifier: CC:BF:E1:1E:30:B4:CD:09:64:00:FA:99:75:96:72:29:B0:B1:A4:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ede5db541032308f013d787d037b94dae9d93c0e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/174d8e20-6eaf-4b11-a9f3-dc3626a9b736/cbe9dc606d86ecb28feb26add34cd0509a19577e.roa
Signing time:             Thu 01 Jun 2023 15:11:31 +0000
ROA not before:           Wed 31 May 2023 15:11:30 +0000
ROA not after:            Sun 01 Jun 2025 15:11:30 +0000
asID:                     13474
IP address blocks:        161.190.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120137 (0x111789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5db541032308f013d787d037b94dae9d93c0e
        Validity
            Not Before: May 31 15:11:30 2023 GMT
            Not After : Jun  1 15:11:30 2025 GMT
        Subject: CN=cbe9dc606d86ecb28feb26add34cd0509a19577e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ad:52:47:b4:72:11:2d:a3:1f:41:f2:39:6c:
                    a2:c1:6e:d1:5c:6c:7e:30:3c:e5:b2:64:ea:f5:eb:
                    2c:a6:b2:30:9e:4f:38:3d:74:9c:bd:10:83:d6:c8:
                    62:8b:fd:1e:1f:bf:60:19:20:4b:48:41:b0:98:43:
                    74:83:31:53:a0:bf:40:37:81:4c:6c:8f:fe:a2:ea:
                    4a:a5:dc:a1:de:34:00:65:96:a8:0e:64:06:ab:b2:
                    20:fe:fa:4b:fc:5c:8e:b6:7c:72:10:66:73:c3:b1:
                    8c:82:dc:f3:e8:51:90:97:f3:7e:82:c3:22:9f:09:
                    e2:bd:56:75:2c:2e:76:c7:4f:ce:5e:a3:25:78:b4:
                    36:dc:03:a2:73:cf:e5:8a:88:e9:e5:14:64:85:b5:
                    ff:6f:a2:d0:a5:56:37:01:49:89:22:5e:a9:28:ad:
                    d4:70:0a:69:48:78:9a:b3:24:72:0b:2a:bf:a7:ff:
                    6f:e9:86:16:77:4e:28:a4:47:09:b4:18:1c:87:88:
                    7d:d1:ac:76:7f:8f:51:20:fd:56:34:20:69:29:7f:
                    a8:9c:9a:65:40:f2:e3:d2:76:52:e9:ce:d4:83:94:
                    82:ee:cb:4f:2d:39:54:4c:cf:d3:2e:be:63:d2:bc:
                    1f:74:4a:4f:e3:78:6e:12:8a:51:3a:4d:de:1b:86:
                    23:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7B:66:E9:6E:66:6C:2A:60:4D:82:EB:23:E6:C2:73:36:C8:0E:B9
            X509v3 Authority Key Identifier:
                keyid:CC:BF:E1:1E:30:B4:CD:09:64:00:FA:99:75:96:72:29:B0:B1:A4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ede5db541032308f013d787d037b94dae9d93c0e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/174d8e20-6eaf-4b11-a9f3-dc3626a9b736/cbe9dc606d86ecb28feb26add34cd0509a19577e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/174d8e20-6eaf-4b11-a9f3-dc3626a9b736/ede5db541032308f013d787d037b94dae9d93c0e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:1e:2f:5b:33:0c:11:81:66:f9:0d:82:09:3b:0e:5f:9e:ff:
         ab:b7:29:86:38:dd:fe:cb:08:13:63:30:b6:0c:0c:57:8a:05:
         33:fa:2f:22:7e:13:45:42:3c:21:6f:7f:28:e5:55:4e:62:84:
         dc:ae:38:40:4c:71:04:e1:4f:00:d8:ba:72:0f:cc:f8:b9:9e:
         bc:d1:7c:ba:32:7b:57:09:2e:da:f9:da:a2:45:ea:f6:46:36:
         ca:81:03:79:e1:78:37:7f:f8:ac:a8:41:7b:47:63:5b:78:e2:
         b4:ce:df:10:f5:55:ec:93:d6:9c:90:70:17:d0:62:0f:43:6e:
         ca:0b:2c:dd:5b:35:a8:fe:9e:ab:31:76:05:ee:ca:fb:01:b5:
         5a:7c:0c:1c:dc:a6:d1:33:23:c1:1d:69:f9:4c:4d:59:9d:cf:
         1a:cb:8c:92:c5:db:a5:83:86:10:e4:4c:fa:7a:67:1d:c6:64:
         e3:56:d9:55:1d:4d:95:91:e6:d0:80:d9:0b:fb:67:7c:5d:26:
         94:b3:aa:4a:1d:39:2f:e1:eb:91:d8:9e:65:67:6e:db:71:72:
         9a:f8:70:3f:1b:8f:06:f0:88:94:21:f9:36:96:fc:21:f9:42:
         a0:9e:b4:51:ab:c2:bd:f2:85:0b:ac:4b:96:91:e9:ad:93:43:
         e6:1d:8f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org