Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/ad97f98d844d21a8bc6037d714224c12314872b5.roa
File:                     ad97f98d844d21a8bc6037d714224c12314872b5.roa (raw, json)
Hash identifier:          YslwsyIVhpI4BQ2TveIDGHmbWDuZ8fx4G4HMxc1cqog=
Subject key identifier:   BA:85:03:03:9B:1F:48:16:11:D4:97:08:21:38:E5:87:2E:AA:60:75
Certificate issuer:       /CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
Certificate serial:       1FE708
Authority key identifier: 6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/ad97f98d844d21a8bc6037d714224c12314872b5.roa
Signing time:             Wed 01 Feb 2023 20:26:51 +0000
ROA not before:           Tue 31 Jan 2023 20:26:08 +0000
ROA not after:            Sat 01 Feb 2025 20:26:08 +0000
asID:                     262171
IP address blocks:        190.93.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090760 (0x1fe708)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
        Validity
            Not Before: Jan 31 20:26:08 2023 GMT
            Not After : Feb  1 20:26:08 2025 GMT
        Subject: CN=ad97f98d844d21a8bc6037d714224c12314872b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:ad:f2:58:a3:fc:a3:a8:9f:b7:81:69:2e:
                    9a:93:f0:cc:c0:92:bd:65:36:73:96:54:fe:24:d3:
                    24:ea:9f:c6:49:49:e0:cf:1f:3a:1b:34:9f:34:7b:
                    f1:12:de:b2:39:31:d3:f1:3a:fe:86:a2:15:3b:a6:
                    fe:aa:e7:1e:e1:4a:06:ca:85:29:1f:d5:86:0f:a2:
                    3a:0e:16:3d:55:1e:df:91:a2:89:c8:49:78:30:be:
                    6b:f0:f4:e6:5f:95:40:56:47:86:f3:e3:08:a6:88:
                    8e:b5:0f:d0:9c:c8:03:bf:fd:dd:6b:c3:05:c5:97:
                    dd:9f:86:d9:52:9a:04:d2:5b:f8:96:aa:63:4c:5d:
                    94:d7:4c:7a:96:95:1d:cc:ca:c5:11:6b:4e:51:50:
                    5b:c9:51:6f:ec:d8:04:8c:bd:b2:53:b7:25:04:6e:
                    a8:7b:fb:fb:ef:08:38:39:ec:6c:51:c7:0a:00:04:
                    da:91:f4:b5:cc:10:1a:e9:48:6b:d4:f8:2f:dd:69:
                    6a:4e:4b:6b:1d:2c:3e:62:73:b4:a7:ff:30:15:1f:
                    28:e2:8c:28:be:5f:bf:78:66:2b:67:5b:0b:72:61:
                    30:31:14:02:56:60:fd:ce:03:6e:29:9b:c8:58:d5:
                    73:d6:56:31:e2:d4:ed:5b:de:3b:8b:29:fb:dd:2c:
                    e1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:85:03:03:9B:1F:48:16:11:D4:97:08:21:38:E5:87:2E:AA:60:75
            X509v3 Authority Key Identifier:
                keyid:6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/ad97f98d844d21a8bc6037d714224c12314872b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:df:02:bb:81:a0:00:3f:a2:92:fe:af:29:6a:7c:d2:75:92:
         85:87:db:d6:bc:62:10:40:79:19:6c:c2:3e:75:13:ce:fe:03:
         61:01:4e:72:a2:8c:c0:09:52:e5:d7:f6:09:79:3a:cd:44:82:
         5b:c6:81:b4:a2:b3:1b:99:60:01:00:3c:c8:ac:98:56:2c:25:
         50:17:18:5e:61:01:d0:ca:2e:47:16:c1:51:ed:53:cb:69:ee:
         9a:a6:52:3f:e0:d0:23:e9:a2:69:2a:92:ff:dd:b4:95:12:15:
         1c:dd:99:2b:59:72:17:46:5f:5a:a2:d0:2f:ce:e4:d6:81:0a:
         51:d7:1a:e1:7d:9f:e4:25:cb:d2:f9:95:79:49:03:81:ab:36:
         f3:5e:1a:d1:d5:44:2d:27:86:ba:1f:08:7f:cc:3d:32:74:2c:
         9d:3c:55:3a:b4:68:aa:17:82:bc:19:7f:2f:dc:02:34:34:9b:
         45:13:8b:c7:b0:6a:e0:fd:5e:61:68:4a:1a:4b:37:a9:0e:6a:
         c4:ba:4d:dd:17:43:66:d3:42:18:05:8f:08:61:69:1e:d6:2b:
         a6:69:8c:d2:84:46:93:f2:85:fc:ba:3a:f2:19:5c:ae:5e:42:
         92:41:dc:3c:0f:65:5a:35:69:61:6d:86:e8:27:21:bd:7e:2b:
         7f:c6:f5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org