Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/6bbf5e47e170dd71f57fb4dee83d18f92f76f0e8.roa
File:                     6bbf5e47e170dd71f57fb4dee83d18f92f76f0e8.roa (raw, json)
Hash identifier:          PobGvBatR/S0ed2nG0axalQBMkW/B0KUyVohKHcyLSY=
Subject key identifier:   19:AE:CB:78:0E:B6:EA:AC:43:54:79:C4:BF:36:69:54:CA:E1:F9:8B
Certificate issuer:       /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial:       10E083
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/6bbf5e47e170dd71f57fb4dee83d18f92f76f0e8.roa
Signing time:             Thu 12 Aug 2021 21:13:33 +0000
ROA not before:           Thu 12 Aug 2021 03:00:00 +0000
ROA not after:            Sat 12 Aug 2023 03:00:00 +0000
asID:                     23243
IP address blocks:        181.174.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1106051 (0x10e083)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
        Validity
            Not Before: Aug 12 03:00:00 2021 GMT
            Not After : Aug 12 03:00:00 2023 GMT
        Subject: CN=6bbf5e47e170dd71f57fb4dee83d18f92f76f0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8f:b3:70:2f:5a:2d:76:cd:78:78:df:4b:ea:
                    5d:ee:c2:1a:63:56:5b:e4:14:a6:88:89:0b:a8:d3:
                    30:9d:2d:17:5c:72:48:e3:70:7e:01:5a:40:33:ed:
                    91:f8:11:14:d6:59:5f:31:09:42:47:80:a9:f8:ca:
                    a1:77:ba:33:29:e6:37:e8:9a:20:a7:b6:bb:34:e1:
                    73:9c:53:c3:03:79:1f:62:f9:63:db:b6:ad:0c:61:
                    0d:98:e3:05:16:99:00:5b:e1:9b:64:83:a8:95:6f:
                    cf:60:9d:f8:44:bd:49:ad:4a:29:85:0c:73:d9:e4:
                    a7:34:bb:c0:93:53:bb:52:41:d1:90:2c:7c:31:cb:
                    08:92:b1:9a:a4:7e:05:b1:a0:ff:cb:2a:32:40:6e:
                    ec:77:56:00:44:c7:3e:11:8d:f5:c1:f8:4a:8d:fe:
                    1e:5d:7b:0d:2e:2a:04:8e:c5:1f:8f:a0:fd:8e:2d:
                    49:ed:0b:38:b3:5e:9c:0f:d0:c6:97:52:91:e6:41:
                    f9:c2:b6:72:39:d3:44:b7:a0:32:d5:0d:b6:c5:9b:
                    87:73:7e:e0:ba:e8:a9:34:99:20:69:e7:50:39:cd:
                    cb:b7:41:d4:0d:3d:d4:bf:7e:70:11:30:6e:e0:bb:
                    b2:c5:cc:66:3b:46:f8:3c:60:80:96:c8:41:5f:60:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AE:CB:78:0E:B6:EA:AC:43:54:79:C4:BF:36:69:54:CA:E1:F9:8B
            X509v3 Authority Key Identifier:
                keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/6bbf5e47e170dd71f57fb4dee83d18f92f76f0e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:10:18:d4:f7:13:4e:a0:27:01:ef:98:09:53:4e:dc:1b:75:
         bf:0c:43:dc:42:e7:e2:d6:5c:e1:35:ac:1f:eb:ee:e8:b6:8a:
         a7:50:a8:b4:87:96:3d:c0:1a:51:4e:1e:a5:d7:1c:d9:30:8c:
         6f:b6:9d:fe:dd:27:08:9d:aa:d7:b0:ba:1a:25:53:62:f0:50:
         cc:59:b1:ff:5c:2c:7c:81:7f:fb:12:41:8b:b6:9a:7a:a9:f9:
         1b:7e:97:9b:2e:84:a8:d6:80:5b:f7:35:fd:ef:95:a7:40:31:
         58:b8:08:b8:38:5d:5c:6b:53:6c:e6:f0:fa:dc:74:f6:64:6a:
         3a:bc:96:42:16:92:c4:ae:48:cb:95:48:71:3e:c1:22:03:17:
         f7:8a:9d:35:00:1b:9b:25:c4:43:26:8e:9a:61:d7:4a:7a:14:
         be:40:76:10:1a:d1:90:be:e3:57:f7:f7:36:95:7f:ea:5b:85:
         10:7c:48:55:f2:4d:a0:92:bc:29:35:d0:a0:ed:33:db:ac:e7:
         bb:7f:10:8d:d5:48:34:fe:5c:42:b4:f0:f9:66:17:5c:2d:f6:
         20:ea:df:72:28:25:90:32:7f:b8:92:ea:78:1f:c6:df:aa:fc:
         fc:db:da:1b:45:8b:b7:e7:ca:f3:cf:69:68:ab:45:ae:98:c9:
         d0:65:a7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org