Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/ccbf3ed47246139f5a9c422cd163841f332c6e45.roa
File:                     ccbf3ed47246139f5a9c422cd163841f332c6e45.roa (raw, json)
Hash identifier:          DrZkF96Dl7sU+PJdq1TuaLcqfC6N/elRt8I+jcLpWdc=
Subject key identifier:   6A:9D:DA:CE:A1:24:3E:0C:46:F0:7B:BF:48:7D:57:18:9B:1A:20:72
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       199038
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/ccbf3ed47246139f5a9c422cd163841f332c6e45.roa
Signing time:             Thu 09 Jun 2022 01:12:25 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Sat 08 Jun 2024 03:00:00 +0000
asID:                     262171
IP address blocks:        190.93.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675320 (0x199038)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Jun  8 03:00:00 2024 GMT
        Subject: CN=ccbf3ed47246139f5a9c422cd163841f332c6e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:13:ed:18:0b:f7:c7:6c:be:11:6d:1f:63:
                    9d:86:a0:1b:d0:79:e1:79:a6:77:fe:08:1a:d0:42:
                    92:e4:6e:61:93:c8:10:9a:be:77:32:c3:6e:ba:13:
                    a2:9a:57:48:bd:56:79:b7:68:04:0c:72:e3:bb:ea:
                    50:71:62:c8:61:92:9b:81:31:17:39:23:cc:1d:f3:
                    e6:d4:76:11:50:c7:ac:d7:f7:7c:d3:8e:2a:6b:1b:
                    0a:26:26:e7:8c:dc:41:1c:5a:3e:a1:9e:5d:72:0e:
                    67:0c:11:94:d0:cd:b4:f7:5d:f2:8e:35:c6:75:f5:
                    b2:71:91:e7:cc:29:e5:2a:f2:19:94:98:53:00:1c:
                    f5:24:56:56:3b:75:3e:1c:be:ef:19:e3:e1:4b:cb:
                    2b:97:0b:d0:6a:21:90:4c:5b:9c:e8:06:4f:8a:b9:
                    55:80:e5:66:12:89:db:75:53:e6:2c:26:68:65:6a:
                    0c:ed:f5:04:10:53:39:fd:7a:40:a3:ab:02:2e:3e:
                    44:c7:b0:5f:61:42:ad:03:10:bd:20:60:e1:3f:0b:
                    f3:0f:96:ed:f3:5c:1a:dc:75:d9:08:81:8d:11:b5:
                    d4:ad:4f:c7:2e:d0:f8:c7:60:db:61:ea:6c:de:22:
                    fe:14:98:21:2d:33:90:65:f0:f3:a0:06:6e:dc:b5:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9D:DA:CE:A1:24:3E:0C:46:F0:7B:BF:48:7D:57:18:9B:1A:20:72
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/ccbf3ed47246139f5a9c422cd163841f332c6e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:f6:a8:42:19:05:f1:7c:98:aa:fa:58:67:26:21:ef:67:73:
         e5:f5:fb:cb:ab:ba:a0:80:d5:c8:e0:da:69:39:e4:38:d4:9d:
         80:f1:b4:d4:a2:14:bd:80:76:5a:ab:bc:45:f6:27:17:83:21:
         dc:51:2b:f4:11:44:ce:4d:be:7a:7a:97:bd:0d:a2:38:69:ec:
         10:2c:e1:6f:f7:d3:6e:76:ba:f5:c4:8d:23:60:a3:3a:e1:bd:
         e9:e9:34:34:b1:61:b8:40:bc:83:e6:49:69:0a:6f:b1:92:65:
         c2:64:8f:68:73:55:16:5a:13:6b:dc:0e:a5:3b:cc:86:b1:72:
         25:46:23:09:5c:93:65:25:7e:3f:dd:23:72:3a:92:ce:29:ba:
         93:ee:25:2a:35:fb:67:34:3f:dd:24:c9:04:11:61:e6:6a:b6:
         1e:74:82:87:2b:47:3c:6b:47:58:55:ff:d8:4d:d1:f7:51:90:
         d9:02:ff:19:2c:2c:1d:75:bb:fc:59:50:89:19:ee:f1:eb:b3:
         82:44:bb:43:99:01:47:76:bf:9f:d2:ec:47:cb:90:54:9a:37:
         e9:ea:38:8f:7c:15:aa:3e:c1:bf:3d:a2:f9:3b:ce:53:14:41:
         56:16:b3:ea:8a:5e:86:18:b7:24:28:49:01:63:c5:f0:6d:b0:
         d0:63:26:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org