Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/d9ae3ac218058b927b0ff3cedd842267ee2068be.roa
File:                     d9ae3ac218058b927b0ff3cedd842267ee2068be.roa (raw, json)
Hash identifier:          ZLn9HYpCY7mVOoC4SBTu3sCjPfm5g+YejlfbHfX3xao=
Subject key identifier:   54:CC:41:47:2A:A7:58:7B:FB:64:7C:6B:92:D4:85:6D:88:24:BA:1B
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EB7D6
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/d9ae3ac218058b927b0ff3cedd842267ee2068be.roa
Signing time:             Wed 24 Mar 2021 14:37:53 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.173.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964566 (0xeb7d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=d9ae3ac218058b927b0ff3cedd842267ee2068be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:01:13:c9:b0:7d:ea:c3:f5:7d:65:e2:0b:49:
                    11:76:32:90:e2:fd:79:89:5f:3d:f2:1e:c2:2c:aa:
                    45:b2:0e:f8:8d:c4:56:36:4d:93:89:26:a1:96:69:
                    84:22:c5:43:52:c9:ba:e5:ac:44:db:f3:a9:ab:29:
                    97:14:02:96:d6:a6:63:db:43:e8:60:0b:1e:2a:6c:
                    36:1a:a0:69:fa:17:60:64:56:02:ba:86:47:1e:94:
                    1f:ec:10:97:cc:73:91:f9:62:df:69:50:77:f3:f6:
                    f2:e0:c9:c3:04:83:7f:7f:43:b6:41:75:f2:a9:6b:
                    dc:00:38:34:79:55:5d:4d:c2:3a:2f:cb:13:d6:15:
                    46:63:5d:7e:26:ac:3a:9a:51:bb:61:19:f1:c9:d3:
                    93:2f:bb:00:cd:36:9a:79:5c:93:2a:18:33:d9:27:
                    7a:49:e1:53:08:08:e6:5c:12:af:b5:28:89:2b:7b:
                    ed:8d:52:e9:b7:24:87:d8:8e:6a:a4:ae:c8:fd:20:
                    55:25:35:5e:24:b6:a6:f3:95:60:29:be:5a:b3:1c:
                    1d:47:c8:f9:aa:24:6d:4e:34:d7:bc:ff:bd:07:ac:
                    0d:03:7d:c7:c4:01:50:2f:95:63:5b:56:be:0a:e6:
                    59:ee:68:0d:7c:26:14:31:0d:e2:8c:bc:fd:5d:93:
                    1c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CC:41:47:2A:A7:58:7B:FB:64:7C:6B:92:D4:85:6D:88:24:BA:1B
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/d9ae3ac218058b927b0ff3cedd842267ee2068be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5e:ce:2b:92:3a:a6:88:51:bf:53:de:82:16:af:a7:fc:e9:
         e4:1f:a0:54:24:90:c0:79:3b:22:c4:e7:d3:42:32:de:2e:66:
         08:11:ec:98:7d:24:8d:97:22:02:aa:3c:cd:3b:5f:8c:26:5d:
         5a:20:ef:87:1b:da:e9:0c:ff:57:df:a0:fe:ff:08:17:bf:39:
         88:c5:70:88:7e:a1:27:d3:a9:b2:ff:a1:ab:14:a6:ed:93:a1:
         2d:85:f7:11:44:fb:1c:13:af:90:a0:1d:6a:39:03:d1:7c:6f:
         88:24:93:cd:94:26:03:f0:11:bb:92:b3:4a:25:0a:44:eb:ad:
         61:37:f0:c3:44:b9:56:c8:a5:f3:bc:44:a0:4d:11:bd:a3:3b:
         8a:1b:29:e8:d0:2c:75:03:38:ce:35:fa:f7:b2:39:62:88:90:
         47:ee:e2:45:e9:ad:2a:2b:25:cc:a9:7e:21:35:11:e3:eb:38:
         f3:b4:52:ae:1f:54:9c:17:98:c6:49:7d:74:78:c3:8d:85:4c:
         f9:1b:46:a3:e9:f6:9b:4f:3b:19:db:3b:f1:3d:48:27:04:d3:
         34:ef:b1:49:d8:86:9b:d4:5d:5a:34:a7:40:b5:f0:5c:8f:e8:
         29:f8:06:fc:70:7d:24:3e:25:8a:59:2b:02:62:c2:58:7c:22:
         f8:1d:5d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:25 2023 by rpki-client on console-ams.rpki-client.org