Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/86fae73b3c57a6dbd45e86431fbd4edaae0d68c0.roa
File:                     86fae73b3c57a6dbd45e86431fbd4edaae0d68c0.roa (raw, json)
Hash identifier:          +orRCoD/lwpR/BWtxKvIavFCEg56xXsN8Dz3Squ4y3M=
Subject key identifier:   DF:17:26:57:71:E0:C2:8F:54:72:9A:B4:3E:1A:C7:3C:E2:2B:8C:08
Certificate issuer:       /CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
Certificate serial:       1FE24E
Authority key identifier: 6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/86fae73b3c57a6dbd45e86431fbd4edaae0d68c0.roa
Signing time:             Wed 01 Feb 2023 20:26:06 +0000
ROA not before:           Tue 31 Jan 2023 20:25:18 +0000
ROA not after:            Sat 01 Feb 2025 20:25:18 +0000
asID:                     262171
IP address blocks:        190.93.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2089550 (0x1fe24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
        Validity
            Not Before: Jan 31 20:25:18 2023 GMT
            Not After : Feb  1 20:25:18 2025 GMT
        Subject: CN=86fae73b3c57a6dbd45e86431fbd4edaae0d68c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a6:b0:60:2b:f1:3a:f2:ce:b5:73:85:9b:34:
                    43:e8:ac:31:7b:51:47:b8:42:93:75:0c:4d:ba:65:
                    24:27:c5:09:dc:db:67:f0:08:42:24:ae:52:2a:4c:
                    9f:6f:d8:1a:3c:de:d6:fb:28:07:62:b3:c7:4b:9e:
                    69:04:7d:a1:b8:43:07:69:b1:1b:5d:41:50:65:26:
                    b6:bd:92:e3:9c:48:2a:39:8e:3b:88:57:50:a0:64:
                    fa:a2:db:c2:77:ff:fa:12:72:19:f0:cd:04:4e:f3:
                    e2:84:c0:1a:7a:1e:82:93:ac:37:35:1d:93:27:aa:
                    bb:8a:f7:f4:94:b0:5a:df:62:46:10:1f:df:58:96:
                    68:08:c3:f9:5d:69:34:d7:bd:53:f8:d8:ba:3b:28:
                    4f:8e:d0:b2:b4:f5:57:bd:b5:b0:31:0e:42:b0:e7:
                    77:91:15:76:c2:ac:ca:be:43:b7:4b:d1:05:8a:e9:
                    f0:4c:bb:74:c9:31:9c:73:9e:d1:17:83:33:c2:e9:
                    ea:d9:84:a3:c5:a7:9f:09:6a:56:30:df:a5:3b:b8:
                    3f:09:8d:93:14:de:f0:42:a9:b3:c1:c6:d2:f1:ef:
                    9c:7d:11:07:8d:18:f0:39:83:e0:a5:a3:0a:f8:1f:
                    1d:97:d4:d6:4e:20:d0:b7:ea:44:76:8f:ae:6b:ab:
                    ab:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:17:26:57:71:E0:C2:8F:54:72:9A:B4:3E:1A:C7:3C:E2:2B:8C:08
            X509v3 Authority Key Identifier:
                keyid:6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/86fae73b3c57a6dbd45e86431fbd4edaae0d68c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:c8:2d:f5:c6:a5:55:e9:d9:38:f8:75:ee:25:35:0e:b4:64:
         31:fd:e0:c8:2b:a5:a5:66:40:99:4d:82:c0:e8:8e:3e:c7:92:
         fb:67:3b:00:eb:fe:b1:ca:d9:59:f4:68:66:71:e8:ba:15:28:
         2e:c9:86:6d:3a:b4:34:bc:9f:0f:af:f2:c8:64:57:80:57:60:
         8c:c3:71:fb:ce:19:60:a3:f7:ce:65:1f:1e:d8:23:38:4a:ae:
         bc:a9:55:f4:a5:ae:4d:ec:62:3f:94:11:8b:5a:63:e8:19:2a:
         0b:4a:5e:a2:59:4d:81:91:eb:6a:e1:df:b9:3a:df:fe:1d:ff:
         71:39:9a:fd:90:65:36:00:d6:e3:ac:86:0f:21:ac:3e:7f:d3:
         e8:c6:6e:30:f1:e0:94:88:26:c8:2f:52:28:a7:2d:f8:8a:32:
         f3:5c:b3:7c:ef:a7:86:d5:36:b7:5d:2b:25:c9:57:ef:25:c2:
         05:c8:e1:f5:fb:ae:ca:1e:96:52:85:8a:08:ca:36:70:c6:94:
         70:61:15:47:c0:c9:87:4f:77:86:69:37:25:36:4f:a2:a2:9b:
         11:02:29:2a:d0:33:d2:1b:1b:05:30:4a:ef:8a:40:75:35:28:
         e3:20:1a:83:e0:e0:62:96:37:d2:e3:fd:bc:51:ac:0a:b7:f8:
         33:53:4e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org