Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4db983dd-bc09-46d5-89b9-e217ecbcfdd1/6cc274389107221ed5672ec32c8d7eed7f893096.roa
File:                     6cc274389107221ed5672ec32c8d7eed7f893096.roa (raw, json)
Hash identifier:          C4YzwFaqfgoO5jq1hrYaFGGME7q/Lmr3i5wjmsYWYnY=
Subject key identifier:   67:B3:73:10:C0:5F:ED:5F:61:4F:2B:E8:DD:5A:0B:C3:34:10:25:34
Certificate issuer:       /CN=44d1fb45b2ba74749f3b3780a0a39138e86370e1
Certificate serial:       1FD038
Authority key identifier: C8:A1:58:9A:F5:F4:0C:D2:32:13:33:72:36:B0:DF:84:AE:F8:2E:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44d1fb45b2ba74749f3b3780a0a39138e86370e1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4db983dd-bc09-46d5-89b9-e217ecbcfdd1/6cc274389107221ed5672ec32c8d7eed7f893096.roa
Signing time:             Fri 24 Mar 2023 08:30:12 +0000
ROA not before:           Thu 23 Mar 2023 08:30:12 +0000
ROA not after:            Sat 22 Mar 2025 08:30:12 +0000
asID:                     264744
IP address blocks:        168.194.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084920 (0x1fd038)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d1fb45b2ba74749f3b3780a0a39138e86370e1
        Validity
            Not Before: Mar 23 08:30:12 2023 GMT
            Not After : Mar 22 08:30:12 2025 GMT
        Subject: CN=6cc274389107221ed5672ec32c8d7eed7f893096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:d2:8e:9d:23:ea:99:19:8c:fe:1b:e0:f4:
                    f4:eb:4a:0e:f9:c0:37:bd:03:c9:5b:0c:71:29:11:
                    df:ea:f3:76:95:f8:5b:68:62:a5:0e:2b:01:e5:1c:
                    22:56:22:74:c9:89:e9:a4:61:a8:ba:08:84:da:f2:
                    7d:54:f0:70:37:5a:a1:be:9a:4c:62:a2:11:39:41:
                    32:63:1f:98:9e:4f:f7:3f:fd:34:57:f9:82:c3:d6:
                    91:67:fa:fa:55:c2:4b:a9:53:da:69:74:d1:4d:22:
                    41:0a:ff:0a:79:15:02:07:14:82:11:97:e0:9d:5d:
                    9a:06:f9:cb:0c:f3:e9:6e:ee:26:04:5d:fc:cd:25:
                    04:ef:e1:e0:1d:31:34:e4:66:f4:79:27:87:2f:cf:
                    f4:a7:a1:d0:6d:27:fe:27:0f:83:3d:58:44:5f:68:
                    79:03:33:f2:2a:e6:75:a2:dc:c3:00:c5:51:93:e8:
                    8c:ad:20:ad:32:19:dc:08:b9:70:b8:13:9f:a9:5a:
                    7b:ee:16:4e:ef:fa:73:7d:b8:ec:bb:1d:5c:b1:69:
                    eb:ad:0a:33:54:77:93:47:4a:34:2e:54:b1:9f:02:
                    c7:3f:94:52:8a:dd:d8:d8:ad:cf:91:b4:93:e9:12:
                    c1:50:56:49:b3:4a:8b:47:c3:0f:1f:7c:4d:90:af:
                    88:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:73:10:C0:5F:ED:5F:61:4F:2B:E8:DD:5A:0B:C3:34:10:25:34
            X509v3 Authority Key Identifier:
                keyid:C8:A1:58:9A:F5:F4:0C:D2:32:13:33:72:36:B0:DF:84:AE:F8:2E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44d1fb45b2ba74749f3b3780a0a39138e86370e1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4db983dd-bc09-46d5-89b9-e217ecbcfdd1/6cc274389107221ed5672ec32c8d7eed7f893096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4db983dd-bc09-46d5-89b9-e217ecbcfdd1/44d1fb45b2ba74749f3b3780a0a39138e86370e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:29:f4:32:b8:8b:6f:0c:c4:ee:f3:70:39:b0:09:b1:a0:90:
         43:fe:2c:bb:65:3d:55:d1:51:f6:a8:0a:ed:1b:06:76:c3:59:
         9a:5c:10:69:a8:ae:bf:ce:e8:89:ad:09:13:a0:43:86:0d:df:
         ef:8f:90:f3:ec:db:ca:4b:83:03:76:52:4c:db:b2:08:87:f8:
         7d:8a:85:ca:9f:53:93:88:05:65:ad:69:19:2d:9a:bb:2f:96:
         9a:18:d1:db:8c:54:30:d8:a0:84:ca:8c:8d:23:b2:eb:b1:6a:
         a5:b9:42:f9:6a:65:a1:4b:5a:bb:a7:c7:68:eb:53:0e:98:b6:
         b3:a1:d8:6b:8a:c9:d9:86:dd:4a:18:26:fd:f8:02:72:1d:a1:
         cd:4e:0f:80:a3:42:a0:7d:d6:27:7b:07:db:88:ba:48:38:7c:
         ea:a4:a4:26:42:04:39:01:83:2e:74:1d:89:63:42:cf:66:77:
         47:2b:a1:da:f2:c5:3a:5a:13:7c:56:8f:12:9a:a7:77:2a:3b:
         c4:93:e3:75:13:d3:d9:53:0f:8e:9f:51:2c:20:6b:08:e9:14:
         53:49:49:95:cc:ab:4c:91:94:80:f2:96:21:7d:2c:25:22:d9:
         f0:f0:42:a0:eb:f1:a0:de:3b:06:a9:b4:48:6c:08:8f:20:ee:
         62:06:6f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org