Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/5848aa081173a65cf384246b6c62530744ad685c.roa
File:                     5848aa081173a65cf384246b6c62530744ad685c.roa (raw, json)
Hash identifier:          TzL6VrhqcCgA+7ges/94yaBS5JOeGzJHzfxyRKcE8O0=
Subject key identifier:   A2:18:03:11:A8:5B:F1:BC:BD:A8:D2:CB:B3:A9:C4:1E:14:EE:10:15
Certificate issuer:       /CN=8977e71e589f7dff93910384f64766de5bd105bb
Certificate serial:       049D45
Authority key identifier: 1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/5848aa081173a65cf384246b6c62530744ad685c.roa
Signing time:             Sun 05 Sep 2021 17:05:12 +0000
ROA not before:           Sun 05 Sep 2021 03:00:00 +0000
ROA not after:            Tue 05 Sep 2023 03:00:00 +0000
asID:                     262929
IP address blocks:        191.102.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302405 (0x49d45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8977e71e589f7dff93910384f64766de5bd105bb
        Validity
            Not Before: Sep  5 03:00:00 2021 GMT
            Not After : Sep  5 03:00:00 2023 GMT
        Subject: CN=5848aa081173a65cf384246b6c62530744ad685c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:25:20:99:c5:91:56:42:b1:80:63:97:08:05:
                    7c:36:ba:0c:96:b7:0d:cd:42:42:ef:93:86:1f:f0:
                    4e:0d:c7:0a:ae:22:29:c6:17:86:2c:33:09:8c:35:
                    e2:6c:44:e7:28:a7:8c:19:2d:21:7d:1c:2c:97:42:
                    54:89:4d:dd:94:26:9e:50:c4:75:e6:f6:1f:5f:3f:
                    1d:8d:05:c9:3d:df:b5:e5:72:c9:ca:77:31:a1:94:
                    2d:2c:cd:24:8c:46:5b:33:f9:73:42:cf:0c:63:1f:
                    db:ef:0c:be:51:f6:78:20:10:cf:60:5f:8a:24:22:
                    e6:f9:8a:ec:14:e1:ef:64:87:27:d6:f6:71:d8:47:
                    df:5a:65:c3:11:e7:7c:35:42:a9:a2:54:4d:51:14:
                    f1:05:f2:45:ed:72:08:be:e8:af:a0:4f:25:07:1c:
                    a1:8a:f5:38:fb:cf:a1:a4:aa:5b:14:ca:9b:35:06:
                    11:a3:bd:eb:e1:57:bf:ab:a2:48:a6:b5:a0:ee:ec:
                    10:90:bd:fb:95:32:71:d4:45:e7:2e:ef:66:a9:a9:
                    cb:b9:c3:50:16:5d:5b:84:8a:67:a1:c6:16:68:8a:
                    df:ad:30:03:c0:43:60:9a:85:64:9e:a6:37:94:8b:
                    03:94:1d:ce:4a:67:e5:8b:90:3a:ec:cf:b1:9c:5c:
                    dd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:18:03:11:A8:5B:F1:BC:BD:A8:D2:CB:B3:A9:C4:1E:14:EE:10:15
            X509v3 Authority Key Identifier:
                keyid:1B:49:28:C6:49:A2:49:A6:BE:47:24:CB:54:AD:8F:5F:4A:F7:B3:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8977e71e589f7dff93910384f64766de5bd105bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/5848aa081173a65cf384246b6c62530744ad685c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ec1bd58-9166-47f7-9aad-24e43f9e2838/8977e71e589f7dff93910384f64766de5bd105bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:ac:a4:f9:47:cd:9e:36:95:24:aa:b1:90:fe:1e:17:d2:05:
         6e:53:3e:ea:a2:6a:9e:7e:63:a6:21:cf:bd:0c:c7:a6:0e:a1:
         2b:45:8d:3e:f0:7d:15:08:bc:ec:15:77:4a:e2:7e:07:97:26:
         96:b2:67:83:6f:27:4b:08:75:13:7c:a5:78:23:4a:ed:55:7d:
         a3:31:ff:f6:06:38:5c:b4:66:51:5e:bc:63:f9:85:38:af:da:
         92:e1:63:50:35:7d:da:3a:d4:ad:4b:c6:a6:37:18:25:62:47:
         81:f1:ee:c1:15:9d:ba:e6:2b:58:20:aa:a3:82:7d:2e:25:81:
         87:a7:18:c9:d0:53:fb:0b:14:fe:f7:7a:16:17:1f:74:00:59:
         4e:1a:79:40:79:b4:6d:5c:e9:a8:d8:c7:9f:fd:7c:da:2a:7e:
         6a:73:c1:35:fd:53:04:b4:ca:87:0b:0a:00:6c:c4:a0:36:66:
         38:d4:d9:95:6a:bc:6d:2c:f1:d3:81:6d:c0:bb:90:1f:1b:d6:
         c4:56:9d:3a:a2:42:d3:8b:45:cb:8e:8a:e0:e5:a6:70:a1:23:
         29:75:75:3f:c0:0e:ef:78:d9:12:df:55:1e:93:5a:a9:4d:e8:
         d7:14:bd:58:52:d4:11:32:21:1d:6d:b3:d4:5c:33:b0:cb:3d:
         02:1c:7e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org