Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/3f5f073d00a77979eecdbd9c5288a48fa0f1de9a.roa
File:                     3f5f073d00a77979eecdbd9c5288a48fa0f1de9a.roa (raw, json)
Hash identifier:          N+aW6Mcs0oF9Ks4jtM4qBKeLGNskAsru/If4CQ3a0S8=
Subject key identifier:   F1:38:AD:D1:71:DC:0B:23:4D:85:60:DE:2F:6D:7E:45:E1:02:F8:DB
Certificate issuer:       /CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
Certificate serial:       1FC817
Authority key identifier: 6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/3f5f073d00a77979eecdbd9c5288a48fa0f1de9a.roa
Signing time:             Wed 01 Feb 2023 17:21:42 +0000
ROA not before:           Tue 31 Jan 2023 17:20:05 +0000
ROA not after:            Sat 01 Feb 2025 17:20:05 +0000
asID:                     262171
IP address blocks:        190.93.160.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2082839 (0x1fc817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
        Validity
            Not Before: Jan 31 17:20:05 2023 GMT
            Not After : Feb  1 17:20:05 2025 GMT
        Subject: CN=3f5f073d00a77979eecdbd9c5288a48fa0f1de9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:68:aa:96:8c:62:02:50:18:25:a7:a4:f2:f9:
                    9a:54:87:25:1e:0a:25:60:2f:42:bc:bf:02:40:59:
                    9c:df:6b:36:3f:b0:96:dc:4d:cd:64:3d:9d:86:ba:
                    7a:6f:10:cc:4b:36:5c:ce:9c:21:c4:90:53:ed:ee:
                    f0:e0:11:d1:81:75:80:38:de:40:33:69:6f:b8:53:
                    31:6d:bb:79:70:04:77:2f:cb:49:f7:20:8c:da:b2:
                    66:4f:ee:dc:c6:4b:80:7d:0f:b2:f9:e1:b5:09:47:
                    1f:40:5a:0a:4f:c8:4d:33:fc:86:24:fc:27:ea:ea:
                    b2:c9:39:32:cf:3b:5d:1b:42:0a:af:1d:cb:f1:3a:
                    79:4b:dc:00:a9:ca:26:18:f4:c7:15:05:bf:81:d7:
                    4f:3d:d6:c3:dd:bb:e9:7e:e0:21:6c:87:36:fe:7c:
                    1c:59:f5:dd:94:aa:ca:e0:f0:7f:91:77:e0:bb:a0:
                    ec:20:2e:8c:06:f4:05:70:b8:24:95:49:ff:83:66:
                    55:07:75:cb:d4:8e:88:18:1f:1b:68:be:2a:e2:b0:
                    9d:54:6b:5c:85:82:4a:69:81:3a:74:8e:8d:00:11:
                    47:d2:55:97:f6:28:d9:51:05:3e:c2:45:97:29:97:
                    66:c5:3b:f4:82:7e:e1:ec:a1:89:8d:b3:8d:de:5f:
                    d3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:38:AD:D1:71:DC:0B:23:4D:85:60:DE:2F:6D:7E:45:E1:02:F8:DB
            X509v3 Authority Key Identifier:
                keyid:6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/3f5f073d00a77979eecdbd9c5288a48fa0f1de9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:da:27:53:86:90:2d:bd:52:77:40:8a:9a:da:0c:33:97:bf:
         f5:0d:c2:ec:89:05:c9:df:d4:a8:b7:c4:71:d7:a5:42:38:29:
         bc:fd:d6:74:b8:15:dd:f5:a8:dd:57:66:37:a8:39:71:f5:d0:
         b0:29:9e:6c:a3:6f:9c:fd:13:64:7a:b2:12:64:f8:f9:38:40:
         96:e9:4a:0a:62:ac:c0:8d:61:3a:f7:96:fc:f0:98:1e:8b:54:
         2b:67:58:3d:77:c3:45:5c:cc:ca:c8:b1:2c:a9:8e:2a:2a:9b:
         e1:22:04:45:09:cd:08:f9:a4:a7:b6:f6:c5:60:de:e5:ba:11:
         7c:a1:2b:88:fe:a5:96:59:66:af:88:a3:ba:09:ab:a2:9b:ab:
         67:d6:44:f9:e7:22:90:f5:41:87:31:20:cd:24:82:e7:f4:ed:
         b0:1c:74:18:cd:fd:c5:aa:13:4a:ff:f4:b8:a3:ec:bf:d8:cd:
         06:af:3a:6f:73:cd:d2:9f:07:64:f6:4b:d0:cc:3c:ca:f4:ce:
         c3:da:2b:f7:68:87:40:cc:b8:37:bb:df:c0:56:af:19:6f:50:
         75:b7:b2:ba:49:c6:44:2f:c4:e7:3b:4d:8d:f6:d6:21:51:81:
         12:d9:d2:70:3b:40:0b:f3:4e:83:77:1f:e0:c3:75:1f:66:ae:
         1e:9a:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org