Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/d155fdbc445d00b3369d996e53b72a69193ec381.roa
File:                     d155fdbc445d00b3369d996e53b72a69193ec381.roa (raw, json)
Hash identifier:          RwXcnAaZS4WTNt7ViVacfKnI4bw4nlbIUl3Y1b0zWcI=
Subject key identifier:   5F:ED:1C:9B:B0:B7:0D:15:DE:01:AC:84:55:38:DC:D5:AF:03:AB:84
Certificate issuer:       /CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
Certificate serial:       1FDA52
Authority key identifier: 6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/d155fdbc445d00b3369d996e53b72a69193ec381.roa
Signing time:             Wed 01 Feb 2023 17:24:58 +0000
ROA not before:           Tue 31 Jan 2023 17:23:58 +0000
ROA not after:            Sat 01 Feb 2025 17:23:58 +0000
asID:                     262171
IP address blocks:        190.93.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087506 (0x1fda52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
        Validity
            Not Before: Jan 31 17:23:58 2023 GMT
            Not After : Feb  1 17:23:58 2025 GMT
        Subject: CN=d155fdbc445d00b3369d996e53b72a69193ec381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:e7:10:3c:7d:3f:a1:b8:b5:66:58:86:71:
                    3b:05:4e:2d:1f:e9:7c:ef:db:64:b4:25:55:ac:c4:
                    ec:e1:3f:12:2f:ac:37:54:5e:ee:d9:bc:84:f0:e0:
                    da:ca:7f:3d:e4:de:53:d4:51:42:c4:0c:8c:f7:60:
                    9c:2b:8a:13:3f:ad:df:59:c5:dd:06:63:aa:4f:bc:
                    82:5f:80:0b:9e:f3:ab:7f:a7:36:d3:6f:78:ab:81:
                    70:0c:89:0e:2f:55:7a:a7:eb:df:08:52:50:e0:9c:
                    41:03:00:36:0e:ee:bd:bc:98:a9:42:a0:59:49:46:
                    52:13:14:0d:b5:e2:5c:2b:96:c8:7a:0e:25:f3:79:
                    cb:3e:e0:bf:73:88:40:2d:9d:a5:3f:a3:80:0c:81:
                    05:f6:ca:b6:3a:13:71:b1:48:f7:dc:b1:02:ea:7c:
                    a3:3b:b7:ab:f9:30:8f:d3:bd:f8:3c:4b:7c:0a:83:
                    ee:30:59:90:c7:d2:33:ae:31:91:6b:97:64:7b:1c:
                    f1:d8:f6:e6:63:a4:55:ce:94:c2:8d:40:18:ae:5d:
                    89:42:0f:88:3f:47:46:a5:d1:bd:19:28:fc:ed:eb:
                    e5:d9:e7:6c:40:7c:d8:7e:94:67:02:df:07:eb:2b:
                    fa:38:e0:e8:df:9b:ff:a7:d2:90:5c:e5:49:ac:18:
                    4e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:ED:1C:9B:B0:B7:0D:15:DE:01:AC:84:55:38:DC:D5:AF:03:AB:84
            X509v3 Authority Key Identifier:
                keyid:6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/d155fdbc445d00b3369d996e53b72a69193ec381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:01:8a:1b:73:e7:d5:f1:67:b7:e2:5e:f4:fe:80:21:8c:87:
         fd:b5:fe:ba:ff:41:7a:42:47:01:36:6d:43:1a:20:e1:d0:90:
         15:74:0a:16:57:7a:37:ec:c5:b8:39:e0:95:3e:20:17:ec:35:
         5e:69:43:e0:6a:33:59:c9:a6:ed:4a:39:53:ba:ed:8f:61:23:
         8c:d2:15:bf:c1:00:bf:1d:1e:05:67:0d:f0:43:1a:0b:60:99:
         16:0c:01:22:8b:98:ce:c6:3a:2f:92:ab:9a:91:8a:d5:93:0e:
         44:cf:e9:c7:3d:3a:55:29:16:27:7c:2f:d1:2a:bb:c1:5d:53:
         ba:68:9b:88:6a:8e:7f:96:ee:d7:32:35:c9:48:9f:28:f1:f0:
         62:e0:02:ed:05:b3:98:46:2b:b2:5d:ae:d3:7c:2c:c6:c1:d1:
         d5:da:2f:d1:60:16:18:97:54:05:4e:ed:0e:ff:07:7b:10:d1:
         ab:cb:99:bb:65:27:a2:3e:61:17:cd:13:59:d2:67:5a:96:a2:
         3d:28:87:93:30:b4:04:ee:18:c2:32:3f:b2:4b:9d:a4:7f:ec:
         d9:fd:e0:2c:2f:08:45:86:d4:2e:80:11:38:22:27:94:69:be:
         8e:83:69:44:b4:6f:2a:85:f1:fe:71:5d:47:5d:01:7a:f3:1f:
         5d:02:f2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org