Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/f44def2bf5291fc31265373d666360e6eafb510b.roa
File:                     f44def2bf5291fc31265373d666360e6eafb510b.roa (raw, json)
Hash identifier:          3oEurjZauRVw6b5LSjvG/jbx/7fLP7vvg28F7p7a1nU=
Subject key identifier:   53:6C:89:FB:CB:35:B0:14:76:92:B1:7A:0A:CD:64:10:B0:49:C6:D7
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EBBE3
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/f44def2bf5291fc31265373d666360e6eafb510b.roa
Signing time:             Wed 24 Mar 2021 14:37:56 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965603 (0xebbe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=f44def2bf5291fc31265373d666360e6eafb510b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:46:66:f3:a8:61:71:5e:04:27:0a:51:84:
                    f0:e6:23:ad:40:0d:65:d0:85:6e:b2:07:ca:07:d0:
                    49:fc:2e:7b:5e:dc:4c:4c:a6:f9:f3:e1:43:8c:af:
                    2d:c5:aa:d0:85:26:f0:cd:7f:23:51:00:6c:08:be:
                    f1:cd:3e:c3:f4:a8:fe:09:a0:5a:6d:4c:80:0b:12:
                    50:a2:f8:c3:13:3c:1f:97:da:b8:a3:ef:ea:10:cc:
                    1e:a9:3e:56:b0:0f:e7:8d:1f:7a:21:6f:27:76:e4:
                    e9:5c:c2:83:04:7e:b0:b9:2a:09:a8:0f:a1:f2:f1:
                    cc:34:13:aa:85:7a:80:81:e1:30:a1:86:e0:0d:81:
                    6f:9d:a5:3f:e6:5a:d2:be:75:0f:1e:0e:cf:9d:4e:
                    dd:f8:22:e9:f1:88:a2:ba:07:5f:3f:8e:a4:eb:b0:
                    35:1f:90:71:81:8c:62:02:ea:80:ba:bf:1c:07:b6:
                    55:55:52:d4:b9:f9:b6:b6:bf:3c:b6:c1:46:bc:d8:
                    d1:37:f0:75:00:c4:a6:89:64:f8:1b:fd:1e:ae:df:
                    63:c0:15:fd:6a:d3:ac:72:20:02:bb:45:7f:68:44:
                    e7:b4:98:25:b9:24:f9:b4:72:52:b3:84:9a:c5:28:
                    70:84:ac:02:39:2d:90:c5:af:f9:46:d0:36:da:e0:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6C:89:FB:CB:35:B0:14:76:92:B1:7A:0A:CD:64:10:B0:49:C6:D7
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/f44def2bf5291fc31265373d666360e6eafb510b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:ad:40:d8:6e:ad:2e:e2:04:a4:f8:8a:64:3a:94:1f:3a:d7:
         49:39:7a:ba:22:67:a3:b4:b5:ae:8b:0a:45:ed:8d:21:9a:71:
         a7:65:94:42:b8:97:1d:2b:b0:4c:3b:6d:9c:10:33:b2:9a:e0:
         0b:ef:f8:5c:67:35:b1:96:c6:37:15:eb:92:14:d3:fd:a6:42:
         e9:2a:d5:9c:41:34:2c:12:a7:ca:09:61:76:7f:cb:a2:c2:b0:
         b4:b4:4d:70:9c:ac:14:07:4b:a6:97:bc:28:b5:28:0a:de:0b:
         f8:3e:72:85:b9:4a:5f:89:e6:09:40:7f:f4:d5:06:0d:d8:7e:
         86:48:ec:25:a4:1b:5f:26:c9:05:c7:25:c8:e7:28:da:e6:61:
         e7:b4:b2:64:08:30:e6:ab:06:90:b8:69:0b:82:1f:3c:cb:b4:
         dd:fc:03:6f:e3:ba:bb:3a:bb:d5:8e:ff:ed:20:91:23:63:e5:
         6e:9e:ba:42:c3:8d:b2:a7:64:c8:d1:f2:21:09:8e:f3:e6:03:
         b1:27:35:65:42:17:a7:6e:71:b0:fb:fd:82:a7:2e:e6:d2:76:
         e3:1c:07:3f:ea:3d:bc:67:90:d5:7a:77:49:c4:ed:db:94:08:
         87:a0:d0:a8:2a:77:fb:6b:f2:07:95:5e:b4:07:a9:5f:4a:e5:
         36:b5:a7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:10 2023 by rpki-client on console-fra.rpki-client.org