Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/083fad1c40393c831eafe403d1b571aee8466855.roa
File:                     083fad1c40393c831eafe403d1b571aee8466855.roa (raw, json)
Hash identifier:          T/CXOZn4bcysNxfj5vDiA7MQw5qfwbc7sWmDT5mVpW4=
Subject key identifier:   20:C5:8F:8D:25:20:C2:57:8F:AA:47:83:F3:AD:AA:61:7B:05:BD:68
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EA2A5
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/083fad1c40393c831eafe403d1b571aee8466855.roa
Signing time:             Wed 24 Mar 2021 14:37:43 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959141 (0xea2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=083fad1c40393c831eafe403d1b571aee8466855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:d7:50:62:b6:24:a3:6c:2f:e5:7d:ca:87:
                    7d:66:f4:a1:67:06:ee:77:70:18:12:78:c7:fe:93:
                    25:44:16:ec:b6:bc:21:68:cc:87:fd:bb:54:fe:3c:
                    98:31:1d:db:74:59:c4:9d:f4:6e:1d:bf:d4:e7:bb:
                    d9:9a:bd:4e:c1:8c:7c:9b:92:55:77:86:b9:96:bc:
                    d2:0e:c6:59:da:a2:79:e7:77:d0:02:70:2d:5a:11:
                    e8:93:59:68:d3:61:90:98:46:9b:b1:73:93:b0:0e:
                    8f:45:bb:59:b8:35:ff:7b:88:5a:64:d3:bd:1a:bf:
                    ad:7f:44:39:8c:8e:5a:a1:4d:f9:86:b0:d9:c7:bd:
                    01:b7:79:f0:6b:6b:fe:45:be:9e:2c:c3:fd:2b:71:
                    9e:de:41:6f:23:0f:c6:74:75:92:56:67:06:02:03:
                    d4:6e:d6:59:02:24:45:94:b8:89:9b:24:e9:52:f3:
                    ad:41:9f:94:42:f9:8d:9e:1a:27:65:ab:98:dd:05:
                    c6:53:b2:36:19:8d:6d:57:3d:29:f9:1b:45:db:40:
                    ab:dc:e6:7d:e6:7b:64:11:83:49:22:9b:b1:59:34:
                    46:58:d4:42:8c:90:91:90:17:55:6a:82:ab:9c:06:
                    6e:2f:a8:cb:c4:65:84:0d:a9:0b:9f:57:ea:9b:1b:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C5:8F:8D:25:20:C2:57:8F:AA:47:83:F3:AD:AA:61:7B:05:BD:68
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/083fad1c40393c831eafe403d1b571aee8466855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:7f:5f:87:a4:7f:cb:92:c0:9e:94:4b:7f:72:0c:89:3e:65:
         46:60:ff:0d:ae:41:5f:00:62:98:3a:ab:79:fa:93:5b:30:7f:
         db:9a:7e:18:56:c4:99:0f:60:4f:f1:24:84:24:13:1f:65:91:
         b2:18:7e:03:cd:da:38:c6:26:59:5d:91:7a:74:27:07:db:da:
         bf:94:33:27:92:08:d9:e8:b9:fd:2b:75:00:8c:c0:f7:b9:78:
         ad:57:40:c5:fb:b1:ec:ab:58:6e:4c:0a:16:95:48:73:8a:19:
         f6:b5:47:1e:20:75:86:a0:2a:d9:1a:d5:7b:a0:82:d9:b9:31:
         50:a3:e5:cb:a9:0a:c6:6e:74:7f:92:fb:68:35:6a:65:e4:f6:
         87:75:22:1d:ac:e5:b6:22:8e:65:0e:6b:3b:87:97:35:af:02:
         eb:b1:7e:6b:3f:1b:73:44:a0:b9:9e:d8:9c:2a:02:05:ce:86:
         cf:35:84:a4:5d:9a:65:5b:42:d8:f7:c0:8b:29:2d:ca:ba:83:
         2a:77:c3:17:be:b0:6a:71:87:51:40:d6:8c:3b:bd:68:b9:23:
         4c:06:0e:da:a4:bb:2e:ab:c2:88:b6:7a:37:bd:0f:9d:07:6e:
         af:6c:10:fc:9f:ca:03:e4:d2:d9:da:d7:3d:e1:18:b3:8a:53:
         12:50:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:09 2023 by rpki-client on console-fra.rpki-client.org