Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/15fb041cbbdd79d7dbe120422d03ea3dddb41827.roa
File:                     15fb041cbbdd79d7dbe120422d03ea3dddb41827.roa (raw, json)
Hash identifier:          v2XTT2Vb3YnE4+HkDlZZOSiEVA37uHSSHbUjgIM4uXI=
Subject key identifier:   BC:7F:CC:1D:E3:88:0A:2D:4F:EB:0E:7C:7E:18:4F:0C:2D:2C:DC:64
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       248193
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/15fb041cbbdd79d7dbe120422d03ea3dddb41827.roa
Signing time:             Thu 20 Jul 2023 22:34:20 +0000
ROA not before:           Wed 19 Jul 2023 22:34:20 +0000
ROA not after:            Sun 20 Jul 2025 22:34:20 +0000
asID:                     27649
IP address blocks:        190.141.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392467 (0x248193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Jul 19 22:34:20 2023 GMT
            Not After : Jul 20 22:34:20 2025 GMT
        Subject: CN=15fb041cbbdd79d7dbe120422d03ea3dddb41827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:49:71:82:3a:39:af:4c:7a:44:d0:9c:18:
                    3f:99:db:ae:10:83:48:41:d9:8b:35:db:aa:1e:ef:
                    a7:b7:e6:c4:5e:c2:49:c1:12:e1:93:4b:e7:ee:e4:
                    2d:0d:27:5a:a2:dc:da:eb:65:7e:e7:92:6b:cc:a5:
                    db:66:04:f9:ae:52:89:e2:74:49:19:dc:cc:98:76:
                    b1:2d:a3:03:22:67:a5:c9:58:08:72:b4:c7:68:87:
                    46:82:8e:3a:84:9b:b3:e2:14:e0:2d:4d:6a:c5:28:
                    16:bc:f5:50:84:54:d8:ad:6b:bd:6d:db:33:34:57:
                    fe:42:7d:5f:7c:12:c0:a1:dd:2f:4d:6a:cf:d4:a3:
                    20:6b:38:aa:c1:e1:d2:e9:fc:f1:31:8b:8c:a1:65:
                    7d:ae:6b:13:18:9d:1a:a4:e2:71:d9:4a:d4:5c:5b:
                    22:a3:64:67:db:c7:2c:db:6e:34:d3:1e:37:7f:49:
                    2d:79:22:a4:41:e4:14:a6:83:9b:16:f6:a7:70:c2:
                    9b:99:48:a2:f4:d4:38:63:e6:8c:a6:8e:fc:b7:7b:
                    bc:6a:91:23:aa:15:69:a3:0f:b3:f8:5f:a0:a8:5c:
                    97:a0:ef:3a:df:c4:15:0f:2b:cf:91:70:a1:e3:4e:
                    51:f1:ea:a2:f7:fb:37:d1:cf:55:b7:6d:12:97:3f:
                    3b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7F:CC:1D:E3:88:0A:2D:4F:EB:0E:7C:7E:18:4F:0C:2D:2C:DC:64
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/15fb041cbbdd79d7dbe120422d03ea3dddb41827.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.141.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:26:f1:0a:8d:33:d2:41:66:e6:05:5f:41:e0:30:0b:a8:9d:
         7f:24:27:35:a6:8c:27:f9:eb:13:4e:e1:49:b0:3e:8f:00:79:
         99:43:6f:8f:e6:bd:2f:44:87:05:10:90:de:1d:fa:89:d9:23:
         68:f7:5b:79:02:c9:22:a0:d6:7c:7a:2f:29:30:dd:c3:99:c0:
         b0:8e:05:f9:03:44:70:72:00:28:88:02:32:f5:17:80:68:bf:
         07:2f:30:78:56:2b:43:19:17:76:36:d1:74:45:f1:09:63:8a:
         4f:50:90:aa:00:39:4d:31:0e:e7:0f:b0:b5:0c:cf:0b:2f:63:
         35:ea:97:1c:4a:15:75:7a:65:0f:fe:f3:8f:e5:d0:69:75:08:
         7d:6a:90:02:a4:8b:93:a5:50:d9:a8:d6:f2:0f:37:c9:cd:e1:
         83:74:78:ba:f1:20:b8:d9:3a:4f:72:db:48:aa:dd:bb:15:80:
         56:7f:63:fc:17:2b:f6:b2:10:60:f1:c3:ad:68:fd:6e:0f:28:
         59:91:ee:3a:79:db:dd:0c:39:d0:8a:dc:6a:97:03:03:2c:f0:
         0b:31:63:77:7e:01:51:d8:fc:82:da:ae:97:07:74:79:d6:7f:
         ee:bc:76:2c:63:70:49:68:34:ca:d5:68:5f:38:a6:4c:a8:35:
         c1:13:44:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org