Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/3abcdc433bb3e9aaa7c9cdeb30f9295dad497114.roa
File:                     3abcdc433bb3e9aaa7c9cdeb30f9295dad497114.roa (raw, json)
Hash identifier:          yxUZXNdF+x0Sqwyf4LGFOYUJQ3MvRQX+dddfM/I7TiM=
Subject key identifier:   98:FD:61:34:A8:BA:49:99:25:59:95:EA:CD:6C:F3:61:1D:72:99:18
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EBAC4
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/3abcdc433bb3e9aaa7c9cdeb30f9295dad497114.roa
Signing time:             Wed 24 Mar 2021 14:37:55 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965316 (0xebac4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=3abcdc433bb3e9aaa7c9cdeb30f9295dad497114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:40:54:1c:5e:86:e3:a7:d7:f0:ab:4a:e1:
                    de:b1:75:f9:e7:35:76:e1:41:ed:26:7c:78:4c:8b:
                    d7:b3:27:c6:42:3f:f2:63:27:8d:87:3f:f9:96:93:
                    83:25:c0:57:3d:6c:af:e5:98:5d:63:b6:c3:de:21:
                    bf:82:94:14:90:10:e2:f4:0c:e9:f5:b8:cc:e5:5c:
                    c3:50:f8:02:2c:7e:7b:2d:a6:84:23:0a:77:85:64:
                    f7:d8:93:f4:f2:d6:65:80:80:c7:70:6d:14:84:f9:
                    b7:c8:30:a8:0a:a5:3b:72:b1:42:d4:9c:16:98:bc:
                    94:65:c0:d1:b2:a6:4d:4c:ce:6f:a2:1b:6f:bf:73:
                    c6:c5:ef:09:ea:e1:59:ad:d0:62:eb:7a:11:6f:51:
                    41:aa:43:fc:09:a8:b6:85:bb:ea:08:98:dd:a9:c0:
                    e3:60:a0:6c:e0:d5:3e:13:35:1c:86:96:da:a9:1e:
                    db:08:83:02:d3:5e:25:b1:ba:4a:c0:d6:d6:29:dc:
                    fb:fb:d1:9c:83:b6:88:63:51:f1:f5:7f:6e:fe:89:
                    d6:d7:6a:4d:06:40:69:1e:da:b8:9a:a7:85:e9:33:
                    b0:40:cd:b0:a7:05:86:c6:d2:56:53:69:19:03:e6:
                    3c:0f:9f:b2:e4:29:b7:f9:b0:4d:a9:6b:b4:2b:c7:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FD:61:34:A8:BA:49:99:25:59:95:EA:CD:6C:F3:61:1D:72:99:18
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/3abcdc433bb3e9aaa7c9cdeb30f9295dad497114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:9c:7a:23:e3:de:ed:b2:f5:e6:29:8b:56:f6:79:a1:83:f3:
         d2:48:11:b8:23:54:16:6e:36:2f:e8:1f:f1:b6:f3:db:62:e0:
         0f:47:65:da:25:e5:c9:33:4a:7f:42:00:35:a3:f5:28:9d:35:
         de:fd:b9:97:fd:39:d3:d6:2a:5f:1a:3d:f3:40:93:f6:c1:1d:
         23:ae:e4:ff:27:00:a7:38:e6:fb:03:69:d3:93:d0:bc:b4:28:
         51:6e:95:18:1e:43:b1:c7:4d:0b:b8:ae:9d:e8:ab:d5:9a:ce:
         e1:ea:3b:a5:b7:36:a7:80:31:1b:d0:e1:5f:7a:71:a3:02:79:
         c8:bf:07:d7:6a:83:4e:64:41:57:7e:1f:b3:e2:10:28:33:37:
         a2:fe:dc:49:46:2a:1c:d2:89:cb:f8:77:fb:65:c1:5e:b6:3b:
         45:d6:fa:0c:21:3a:38:d4:17:61:20:ba:cf:d9:ba:4c:8e:da:
         e4:6e:8e:49:8f:f0:8e:bc:bf:6e:b4:82:ed:0d:73:6e:54:4f:
         c7:a1:62:76:c7:ca:8a:3e:22:66:a6:bf:d0:a8:5a:d1:39:93:
         d0:3b:6e:bc:d7:fb:79:f4:dd:fd:46:93:bc:e6:1f:a3:d3:00:
         b2:fe:9f:6c:ad:84:42:73:fa:5c:4a:21:c4:de:67:07:d2:ab:
         2c:ed:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org