Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/83261f014f85cc6f3e1c31b5f0af620673ca7d75.roa
File:                     83261f014f85cc6f3e1c31b5f0af620673ca7d75.roa (raw, json)
Hash identifier:          UziVfcuelEbPjvUkRO/SE4bCTqgFAfmCl/7k3CGD4bg=
Subject key identifier:   24:76:A0:C6:AE:FC:63:58:7E:3E:AF:84:A6:0C:E9:8B:88:CB:83:47
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       1F94B3
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/83261f014f85cc6f3e1c31b5f0af620673ca7d75.roa
Signing time:             Tue 31 Jan 2023 16:01:20 +0000
ROA not before:           Mon 30 Jan 2023 16:00:24 +0000
ROA not after:            Fri 31 Jan 2025 16:00:24 +0000
asID:                     262171
IP address blocks:        190.93.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2069683 (0x1f94b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jan 30 16:00:24 2023 GMT
            Not After : Jan 31 16:00:24 2025 GMT
        Subject: CN=83261f014f85cc6f3e1c31b5f0af620673ca7d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:9c:ce:c4:19:c4:5a:22:04:6a:59:c7:ad:
                    09:f1:52:85:9b:29:fe:2f:71:8a:56:3d:55:00:3c:
                    55:ba:bd:70:cc:b2:9e:cd:24:51:50:df:80:e7:f3:
                    73:a8:74:ed:e4:2c:ee:72:0b:95:49:dc:17:fd:fd:
                    23:d4:9e:82:c8:8c:2d:67:11:2f:6d:11:09:5d:01:
                    c4:22:45:ad:58:4b:43:73:5c:b2:b0:cb:cd:44:cb:
                    85:dd:5f:f2:1a:58:7b:b8:b3:80:e7:12:f9:47:49:
                    2b:3f:c6:1a:fa:f0:0a:58:f1:7a:a7:76:02:3b:b5:
                    c8:b0:b8:25:87:f4:11:e8:24:ae:f5:1a:73:3f:90:
                    15:ce:9c:29:39:b2:b9:2b:44:ce:ae:25:5b:ef:d4:
                    ed:bc:8b:17:e9:8f:57:48:1a:c5:8e:ad:57:13:44:
                    85:3f:a5:49:8d:f9:17:79:f6:5a:d9:2a:e3:5d:a7:
                    2e:1f:65:a2:e1:24:81:1d:4e:c9:be:fb:cc:40:c4:
                    27:3a:a8:87:6d:6d:40:89:06:69:bc:be:dd:08:39:
                    60:7e:87:d4:93:eb:fe:37:ae:52:bb:17:da:64:46:
                    55:0e:d2:b4:a6:de:3c:08:9b:c5:88:09:d8:db:02:
                    12:11:1f:8f:ed:cc:76:8b:82:33:53:8b:e4:83:ae:
                    a7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:76:A0:C6:AE:FC:63:58:7E:3E:AF:84:A6:0C:E9:8B:88:CB:83:47
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/83261f014f85cc6f3e1c31b5f0af620673ca7d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:b8:d3:7f:9c:10:3e:48:db:c8:be:cb:12:a0:9d:14:e7:36:
         5f:c2:aa:60:cd:f0:b6:9e:f8:a1:4a:dd:b3:ee:50:2b:18:f6:
         6f:46:c9:7f:8d:44:fb:91:64:e9:93:5a:b7:f0:1d:08:48:b0:
         e0:e8:43:d0:bb:79:9f:84:37:52:48:ab:61:27:c9:de:38:fd:
         d4:e3:fe:5c:6e:5a:9f:db:18:47:0e:ca:5a:e2:fc:a7:33:62:
         e7:8e:8b:93:92:f2:53:ae:8d:7f:29:9f:98:8a:b4:8e:0c:cf:
         77:7b:7a:c1:7c:0f:c2:7d:cb:5b:6c:27:82:3c:0e:fb:a1:a5:
         9a:a7:c6:14:7c:a3:b2:bd:11:fa:10:88:f9:45:68:6f:36:85:
         4b:14:36:7a:67:d5:f1:09:ac:be:ae:5a:b7:3d:60:ae:22:fe:
         df:d1:09:c6:0c:d7:87:7f:cc:d6:2a:9a:5b:27:5b:5a:31:ce:
         c3:74:45:2f:18:39:68:8a:02:76:3b:6a:33:0b:48:71:9a:07:
         a8:7e:80:6e:82:2e:b5:16:e5:4a:46:e1:1d:dd:4c:76:a4:ef:
         c1:50:83:ff:9d:61:22:0a:a6:4c:9f:1e:08:90:3e:de:c0:5c:
         ed:d9:54:e5:4b:a0:94:5c:d0:d7:07:00:22:17:a5:d5:b1:7c:
         ea:d9:14:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org