Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6ff89c3c83073a660a8007dde4ab9ca07deaeb8d.roa
File:                     6ff89c3c83073a660a8007dde4ab9ca07deaeb8d.roa (raw, json)
Hash identifier:          V6GUdn7E5hfoH7NWsPI/4F3+SINrg9aflbSWwieGoUI=
Subject key identifier:   FA:B9:0F:F9:77:3D:2B:31:AB:2B:98:28:3D:33:BB:89:1B:53:75:A4
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EB17C
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6ff89c3c83073a660a8007dde4ab9ca07deaeb8d.roa
Signing time:             Wed 24 Mar 2021 14:37:51 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962940 (0xeb17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=6ff89c3c83073a660a8007dde4ab9ca07deaeb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:51:f2:e4:00:3d:62:72:4b:dd:d0:84:7e:
                    67:46:bc:c0:30:10:0a:b7:83:d8:50:44:df:6a:7b:
                    50:71:ee:34:4e:98:24:ce:4a:6f:f3:f0:ff:15:c5:
                    aa:28:8a:cd:28:29:2e:69:9b:fb:9c:39:9f:69:96:
                    d6:47:7c:70:a3:48:5a:55:aa:e2:52:60:88:1f:4e:
                    be:da:d9:23:43:58:42:a2:be:02:52:26:08:35:ef:
                    77:83:71:34:e6:db:6a:65:ca:da:77:00:8c:2d:0b:
                    64:17:f3:81:83:8f:ef:1f:ef:53:78:48:e2:0b:36:
                    60:1f:8d:65:59:b0:77:22:cf:6a:91:7d:fb:70:46:
                    16:59:1c:4a:55:4c:bc:8c:9b:38:09:fd:30:00:a8:
                    85:86:b0:3d:97:26:c7:c4:cd:78:32:98:1f:14:0e:
                    f7:03:18:ea:6a:7d:b2:7b:3c:d9:95:cd:99:a1:f5:
                    14:97:d4:90:33:b2:af:63:c0:2f:89:24:e0:a3:18:
                    47:c0:1b:6f:99:b7:d7:ae:42:96:23:2f:72:64:3f:
                    02:e0:cc:e2:7e:70:a0:fe:50:c9:19:d3:65:28:db:
                    c1:69:e5:d6:5f:92:3e:e1:a6:e3:3b:b9:c8:80:51:
                    22:37:59:0a:95:df:6e:65:3c:cb:6b:cb:be:14:fa:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B9:0F:F9:77:3D:2B:31:AB:2B:98:28:3D:33:BB:89:1B:53:75:A4
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6ff89c3c83073a660a8007dde4ab9ca07deaeb8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:e7:49:98:40:6e:fa:4d:fd:1f:15:77:fd:01:3b:48:47:2b:
         34:87:76:8b:bd:d4:ff:80:f7:22:ca:55:56:a1:1b:63:02:a7:
         55:ef:bb:90:23:3c:f6:4d:9e:70:4e:05:75:fe:d5:00:80:50:
         37:cd:18:e8:c1:bd:b3:5b:ba:87:81:ea:16:38:b1:d2:2e:f8:
         8d:71:33:a4:8d:6d:0a:dd:1b:b7:7e:84:bc:4c:d7:25:d5:f2:
         62:89:1b:71:11:ec:f9:5d:b8:54:e3:15:72:d0:51:de:9a:91:
         bf:a4:a2:60:b9:44:8a:a6:47:63:fc:ab:3e:9e:22:09:81:70:
         f3:f5:c0:24:5a:40:e3:88:9d:0f:fa:7a:1c:d8:41:40:58:12:
         ff:47:72:7c:92:3a:e5:ce:d5:fb:63:9e:61:b2:b0:27:e7:e5:
         49:63:ce:96:1e:43:69:c2:76:dd:d8:62:6d:4b:57:19:0f:7c:
         50:d2:eb:10:cc:fa:3f:30:ab:f6:c7:56:41:99:ae:28:c6:d4:
         44:62:ce:57:95:0e:1f:75:c5:7b:50:f7:fb:b2:b4:fb:d9:ee:
         94:1d:2e:a9:3a:7a:22:a8:a3:1e:54:da:a0:47:60:3b:7e:ad:
         b0:24:d4:c6:69:11:34:cc:62:3c:34:62:4a:22:db:1e:a5:73:
         c0:50:d8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org