Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/ed0e4ada24c05582eea60fb45f2cb21c5a225717.roa
File:                     ed0e4ada24c05582eea60fb45f2cb21c5a225717.roa (raw, json)
Hash identifier:          fZph1KLP1wchmuFVEyhCcery/p+cE13O9w//ZFRaon8=
Subject key identifier:   2A:00:1E:27:84:10:58:EE:65:73:84:47:EA:52:69:54:0B:06:77:C3
Certificate issuer:       /CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
Certificate serial:       1FE00E
Authority key identifier: 6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/ed0e4ada24c05582eea60fb45f2cb21c5a225717.roa
Signing time:             Wed 01 Feb 2023 17:25:48 +0000
ROA not before:           Tue 31 Jan 2023 17:25:00 +0000
ROA not after:            Sat 01 Feb 2025 17:25:00 +0000
asID:                     262171
IP address blocks:        190.93.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2088974 (0x1fe00e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6700d78d2e18243ea736c1288c50a9461ced8b3c
        Validity
            Not Before: Jan 31 17:25:00 2023 GMT
            Not After : Feb  1 17:25:00 2025 GMT
        Subject: CN=ed0e4ada24c05582eea60fb45f2cb21c5a225717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:f4:d2:0c:c3:8c:05:78:aa:79:d7:a2:f1:
                    62:4e:f7:a3:39:08:af:54:f5:14:d5:26:38:f2:bc:
                    cc:d4:f1:3e:07:d0:46:83:c9:85:59:47:40:e9:69:
                    87:7b:5e:5c:86:a0:b5:28:ed:4e:23:db:7b:e3:16:
                    b3:4c:3b:66:3a:f5:eb:ad:e5:1f:87:40:ee:70:b3:
                    58:06:af:56:19:50:e8:cd:e7:15:b1:4a:65:56:8e:
                    51:53:99:dd:7c:30:39:05:41:07:cf:3b:ab:c4:5a:
                    80:1d:be:e2:7e:4b:6f:6f:39:d5:a9:af:2f:c8:7b:
                    24:50:3e:4d:c2:23:f3:7a:b6:e3:ab:d4:1d:db:1e:
                    23:c7:62:68:34:7c:df:c1:b7:bf:78:4c:5f:ae:28:
                    40:d2:96:10:27:4d:ad:3c:fd:66:ab:e8:37:60:35:
                    40:13:ca:c7:0d:c2:9c:d0:eb:c5:94:82:35:2d:b5:
                    f5:b6:ee:a3:a0:cf:15:6a:85:d0:7d:51:b9:b7:ae:
                    b1:2d:e8:93:f7:8a:5f:a8:c1:da:c9:43:9d:34:20:
                    ba:56:a1:00:0f:44:cf:17:38:c2:81:c5:ae:fd:e7:
                    0b:b3:7e:ce:6f:8a:d8:18:ea:67:97:42:be:24:14:
                    6e:86:b3:b1:27:ed:cb:db:9c:74:29:20:2a:85:48:
                    8e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:00:1E:27:84:10:58:EE:65:73:84:47:EA:52:69:54:0B:06:77:C3
            X509v3 Authority Key Identifier:
                keyid:6D:16:7E:D1:DD:2E:65:DE:1D:97:BA:EC:8C:20:55:AD:DC:17:37:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6700d78d2e18243ea736c1288c50a9461ced8b3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/ed0e4ada24c05582eea60fb45f2cb21c5a225717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/6700d78d2e18243ea736c1288c50a9461ced8b3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:d4:56:cd:5c:66:85:5e:7f:bd:3a:e1:0b:37:e2:88:6a:4d:
         03:54:19:28:4e:45:13:c0:eb:63:3d:9b:92:de:e6:85:b0:26:
         8a:61:56:0d:80:b8:43:49:cd:7b:46:b8:5d:50:39:f9:83:36:
         13:9a:bb:5f:a9:de:f1:d3:f2:4c:c9:8f:f9:f7:94:8c:33:fc:
         cc:19:39:b3:99:f9:e7:70:0d:8b:3a:3e:1c:b2:1c:92:a0:e5:
         19:94:9f:61:b8:56:b4:b1:90:f3:44:ec:e6:f4:f8:28:2e:87:
         e0:76:c3:0a:43:4d:62:2f:f9:7f:e6:86:38:d6:73:21:2c:f2:
         76:ed:3f:cd:f4:75:cc:70:09:71:40:fc:9c:0f:78:28:cf:87:
         67:6e:b6:08:20:16:33:0b:79:df:8a:b9:05:d9:da:b4:f7:2b:
         43:fc:cc:9e:86:88:07:db:49:9e:f7:7b:10:48:6a:ee:d6:cb:
         21:04:f4:bb:b0:c3:ee:90:71:0a:b7:6c:c5:43:85:b6:23:ba:
         6d:7c:88:40:04:1e:70:c9:55:38:6f:b1:cb:42:c6:c5:1b:30:
         2a:8f:ca:c4:9f:ac:2b:4a:1e:83:05:b5:f2:e2:07:e5:40:00:
         66:1f:10:df:da:ab:29:e4:a9:59:1e:84:c5:8a:b0:0c:fb:c7:
         57:a4:9b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org