Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/30b358658c7ae3dcf353d2e7f6984b1c39e078ee.roa
File:                     30b358658c7ae3dcf353d2e7f6984b1c39e078ee.roa (raw, json)
Hash identifier:          +astoYSkiPYImLhoMYUIkibAPEFP3NbjIL1dbmirgfg=
Subject key identifier:   F8:32:01:CD:39:0A:CA:F7:9F:56:F0:8F:31:76:0B:2E:33:B4:F5:DD
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       19859C
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/30b358658c7ae3dcf353d2e7f6984b1c39e078ee.roa
Signing time:             Wed 08 Jun 2022 05:52:25 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Tue 31 Dec 2030 03:00:00 +0000
asID:                     28110
IP address blocks:        190.93.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672604 (0x19859c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Dec 31 03:00:00 2030 GMT
        Subject: CN=30b358658c7ae3dcf353d2e7f6984b1c39e078ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7a:a3:4a:dc:76:f4:8c:80:1c:cb:93:8d:7f:
                    74:e1:9c:e6:cd:0e:d2:15:78:c4:fb:aa:dd:fd:dd:
                    bf:d6:43:d6:67:d9:91:63:d2:86:41:0b:67:29:45:
                    85:f1:f3:6a:3a:1c:8d:3f:19:50:c6:4d:42:65:d3:
                    36:7a:f3:ba:cf:d3:f7:e8:d8:36:1e:9a:3e:f7:d3:
                    14:c2:de:4e:db:a6:3a:84:53:da:33:88:e5:3a:3b:
                    68:67:7b:a6:6c:69:25:3b:0d:e4:7e:37:12:a7:1d:
                    38:95:fe:3c:3b:9d:2b:63:fb:53:4e:eb:fa:26:ef:
                    20:cb:38:3c:9b:00:59:92:86:fb:fd:f7:4e:0e:61:
                    13:35:c6:1a:3d:06:b6:06:1d:38:4b:56:d8:ae:d6:
                    6b:93:b8:ea:cd:60:15:35:91:b4:61:db:46:a6:64:
                    ce:be:f7:30:22:08:96:48:19:90:7e:45:e3:ed:35:
                    70:98:1e:3c:2c:97:ab:3c:0d:27:0a:4a:7e:7d:5b:
                    f9:74:da:5a:44:b3:22:17:7a:09:d0:04:5f:eb:4f:
                    92:f9:3c:3f:11:b8:1d:1a:1e:82:ae:14:f9:40:07:
                    a8:84:4a:32:d8:23:e4:9c:ed:6d:9a:75:75:12:92:
                    bf:b9:31:ea:ba:92:f3:90:4f:93:05:dc:f0:5f:2b:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:32:01:CD:39:0A:CA:F7:9F:56:F0:8F:31:76:0B:2E:33:B4:F5:DD
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/30b358658c7ae3dcf353d2e7f6984b1c39e078ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:90:94:3c:96:9b:08:7e:fe:e6:6d:18:db:51:05:07:bf:94:
         f3:c6:20:4c:83:b8:b9:8c:17:14:0e:df:2d:05:94:21:36:04:
         b5:33:57:38:08:40:2c:4e:94:34:81:2e:d0:0c:b1:d3:2b:87:
         bb:9b:ba:c8:af:31:13:92:30:13:02:ee:31:14:69:ea:fe:4e:
         0d:66:03:eb:00:2d:3c:97:1d:e1:12:c8:27:ef:7a:aa:1e:80:
         b3:96:29:5f:fd:d9:fa:7b:97:81:61:52:52:ec:6b:19:f1:97:
         16:65:2e:12:d4:be:13:ea:33:43:1c:26:de:dd:75:07:0f:22:
         90:dd:f9:28:1a:4d:31:8e:67:a1:ed:7c:ef:b2:0d:3c:ee:12:
         d9:3a:5b:a0:e6:83:13:ec:ff:01:bc:f3:12:78:cf:62:29:57:
         9d:65:5b:2b:36:0a:e8:d2:ca:e5:17:0c:ae:25:39:f3:ed:21:
         dd:d3:47:d7:78:dd:65:cc:43:cc:f6:48:3b:a5:62:a5:b6:09:
         96:26:8c:1c:6e:23:9e:4e:4d:74:30:e3:47:e0:6a:ab:71:6f:
         77:e7:f4:94:21:43:2d:fa:be:73:43:e2:34:34:52:61:92:c0:
         4d:9a:3c:fc:dc:5a:48:2d:70:a3:03:e1:6c:9d:d4:65:2b:f8:
         94:01:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org