Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/4cdf47360730e472ec0f73b8c29ec32711de1eb1.roa
File:                     4cdf47360730e472ec0f73b8c29ec32711de1eb1.roa (raw, json)
Hash identifier:          DgxeHiWKVlGc0y6aoHryNHt4HFImuSmMtL17dUkIsIw=
Subject key identifier:   65:1A:94:5B:56:E1:BE:3C:C2:8B:58:FF:B9:23:B9:7A:D3:FA:A3:01
Certificate issuer:       /CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
Certificate serial:       1FEACB
Authority key identifier: 6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/4cdf47360730e472ec0f73b8c29ec32711de1eb1.roa
Signing time:             Wed 01 Feb 2023 20:28:22 +0000
ROA not before:           Tue 31 Jan 2023 20:27:35 +0000
ROA not after:            Sat 01 Feb 2025 20:27:35 +0000
asID:                     262171
IP address blocks:        190.93.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091723 (0x1feacb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
        Validity
            Not Before: Jan 31 20:27:35 2023 GMT
            Not After : Feb  1 20:27:35 2025 GMT
        Subject: CN=4cdf47360730e472ec0f73b8c29ec32711de1eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:f7:0c:0b:76:db:a8:a7:dd:80:3b:79:d1:
                    10:2e:4f:8d:b5:ce:62:d6:9a:bb:1c:45:d7:7b:4d:
                    ad:41:cc:c6:0a:96:2d:f9:0c:66:0a:ae:90:a3:9e:
                    a5:a9:40:b0:e7:5d:58:ab:f1:64:56:96:c2:c2:d5:
                    ee:01:30:0d:7e:de:2f:ce:ee:bc:0b:9c:62:64:8e:
                    b8:93:e8:94:52:5d:11:1d:1c:9e:14:da:bb:8c:a2:
                    9b:f1:6e:f8:f8:a7:6e:e2:4f:8b:d8:96:f3:22:6d:
                    68:e8:7e:2b:6e:d5:5e:2d:ef:aa:6c:e8:50:bc:e3:
                    d0:14:8a:9f:48:4d:a5:7a:12:78:30:37:d3:38:19:
                    61:73:e0:85:e2:10:64:c4:8f:2f:ca:02:b4:07:e5:
                    9e:8c:85:55:17:98:9e:ad:53:a2:e5:61:41:be:b0:
                    e8:46:7e:29:ae:5a:77:c6:a5:fc:ae:5d:1a:b0:10:
                    51:d3:13:ec:2e:88:4c:2b:df:d9:21:35:48:be:63:
                    68:92:68:ee:6f:61:89:3c:b5:01:7c:e7:f1:40:3d:
                    06:25:3f:a1:61:b7:de:71:61:83:75:5a:6f:6d:d4:
                    55:d4:55:22:ea:42:f6:fc:4a:44:92:5e:de:2f:d4:
                    f6:68:6f:c6:18:f2:a6:c5:e9:fa:fd:7f:5b:09:02:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1A:94:5B:56:E1:BE:3C:C2:8B:58:FF:B9:23:B9:7A:D3:FA:A3:01
            X509v3 Authority Key Identifier:
                keyid:6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/4cdf47360730e472ec0f73b8c29ec32711de1eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:58:7b:33:4a:cd:5c:d1:92:e0:e6:eb:01:c9:75:2a:c6:89:
         87:98:a3:79:98:d5:27:14:c5:8b:d4:b9:81:e5:6f:aa:58:5a:
         d4:c7:17:b2:ed:c0:f0:f1:9c:09:8d:a7:ca:58:55:65:08:7b:
         e5:d2:e7:cb:a7:a8:2c:20:cb:24:f2:86:4c:48:5e:b0:8e:f6:
         ee:0c:81:6c:cc:1d:74:c4:99:fd:73:30:8e:a5:05:c8:07:46:
         10:4d:d0:e2:4f:ba:df:fd:61:8a:a4:5c:be:51:e2:b6:8e:b8:
         37:42:05:d7:d8:4a:4a:ac:85:64:36:fc:a6:8a:83:c8:06:20:
         33:e9:da:d3:d1:d0:70:df:99:2d:f7:eb:eb:df:17:09:75:f2:
         a1:c0:ba:5b:64:f5:6b:2b:20:3a:b1:e9:6d:76:73:79:a7:05:
         48:74:e8:bc:e0:54:04:73:2a:45:28:6e:0e:83:42:78:3b:42:
         94:32:a9:dd:f8:e7:b2:b6:9d:a2:35:73:89:88:20:3b:8b:46:
         0b:f2:66:7d:6b:2c:52:c8:87:bc:8d:7d:6b:34:1f:cb:97:3c:
         7e:73:42:84:62:9a:f4:a9:12:c7:9a:b9:62:23:75:97:1f:b0:
         52:47:0b:91:28:c2:79:5b:0b:31:8e:a6:90:79:8f:bc:b0:c6:
         14:e7:93:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org