Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/1d27d46543d6118bee1589f49ecbf64f8b89188d.roa
File:                     1d27d46543d6118bee1589f49ecbf64f8b89188d.roa (raw, json)
Hash identifier:          Kz5A1leziN23p9QJM8zHuqyaEj4nooeaoUqM/6Y8KNo=
Subject key identifier:   A9:29:C3:9E:0A:80:D3:92:2F:15:84:B8:A9:9B:44:0D:8B:B8:D3:EC
Certificate issuer:       /CN=6ff75e9cde86b5c490d171a8993267e23270787a
Certificate serial:       13B828
Authority key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/1d27d46543d6118bee1589f49ecbf64f8b89188d.roa
Signing time:             Wed 07 Jun 2023 15:50:32 +0000
ROA not before:           Tue 06 Jun 2023 15:50:32 +0000
ROA not after:            Sat 07 Jun 2025 15:50:32 +0000
asID:                     14593
IP address blocks:        149.19.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292328 (0x13b828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff75e9cde86b5c490d171a8993267e23270787a
        Validity
            Not Before: Jun  6 15:50:32 2023 GMT
            Not After : Jun  7 15:50:32 2025 GMT
        Subject: CN=1d27d46543d6118bee1589f49ecbf64f8b89188d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:30:5e:9a:f9:86:13:28:73:86:87:f7:3d:
                    80:b8:0f:75:1c:b1:91:8a:bd:ec:10:a0:c6:fe:bb:
                    29:f7:d7:50:19:c8:2d:c3:f2:ea:e7:cc:7e:dd:9e:
                    fa:14:5e:66:9a:53:93:0c:dd:7f:e8:f8:46:71:9b:
                    0a:44:0e:09:cb:5a:a9:1f:61:60:ea:47:0c:32:83:
                    6e:9a:38:50:cd:d9:57:c0:83:4f:91:19:63:45:c3:
                    89:8a:e9:d9:ea:7b:ec:75:13:e2:66:85:44:48:88:
                    09:96:fc:d3:ef:77:73:21:18:e8:4f:91:4f:cc:41:
                    16:cc:2e:7c:a3:50:51:aa:bf:ad:6b:df:75:50:97:
                    98:e4:77:ed:37:a8:8a:78:4f:c6:09:9d:80:9d:60:
                    2a:0a:3a:77:83:23:2c:35:d3:07:6f:d0:37:cf:59:
                    a4:f5:0e:27:9d:ba:8f:a1:47:e9:55:66:77:4b:7f:
                    e4:70:e2:1a:a3:0b:ee:a8:44:7a:20:82:5d:c8:ba:
                    28:01:b1:06:42:ac:04:e9:fa:a2:1a:7f:5d:0e:dc:
                    71:6b:43:25:2c:c1:8e:53:23:2b:69:30:37:c5:67:
                    94:6e:31:71:0a:b8:37:fc:ca:6f:7c:a6:0c:47:5f:
                    f9:7f:c6:0e:b5:de:75:f3:95:48:1c:53:67:c5:46:
                    62:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:29:C3:9E:0A:80:D3:92:2F:15:84:B8:A9:9B:44:0D:8B:B8:D3:EC
            X509v3 Authority Key Identifier:
                keyid:95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/1d27d46543d6118bee1589f49ecbf64f8b89188d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:10:07:ba:32:dd:1d:67:34:42:ec:99:67:59:d6:d4:52:a2:
         a9:94:80:1a:b9:ee:96:05:c1:20:8b:c0:11:e7:9c:2d:80:ad:
         8d:81:a7:27:3c:20:16:e1:7c:3f:c3:97:28:24:b2:0e:7d:89:
         85:6b:fb:18:80:74:a8:b9:73:a4:db:f9:a8:00:f1:83:dd:b0:
         d8:9e:af:11:04:d3:8d:f1:64:23:9b:70:77:5d:f5:27:ad:7e:
         7c:bf:b4:63:95:37:8a:75:41:d2:39:58:ae:29:45:24:bd:e7:
         09:e2:67:b7:9f:c1:86:29:40:37:22:83:0a:6d:39:ce:a0:48:
         8d:7d:9a:dd:85:8f:e4:3b:e1:47:85:bb:db:a3:a0:5a:21:99:
         71:4c:8a:33:e4:f4:2e:c4:f0:9f:03:7f:e1:17:69:34:e9:16:
         7c:21:51:54:fa:d7:17:78:62:d1:50:0c:37:e1:43:0e:31:49:
         95:d6:c2:29:76:fc:1c:5c:46:d6:25:cc:9d:8e:68:c9:a8:89:
         dd:94:6c:b9:31:42:14:40:cd:37:a9:02:70:42:c5:98:b4:5c:
         7c:2b:6a:5c:72:ea:44:59:44:7a:62:bf:06:ab:6a:60:3a:7a:
         20:a3:d0:88:f7:e6:dc:1d:65:15:ad:b4:10:5c:d3:23:da:9e:
         6a:ed:a0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org