Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/1d6c0d59e3a5f85e551eca11883398b304e57801.roa
File:                     1d6c0d59e3a5f85e551eca11883398b304e57801.roa (raw, json)
Hash identifier:          tlV6hHorsAslUk4b6s+0/CLmttcNedLHTk1LdwfFa9s=
Subject key identifier:   81:1A:38:78:E2:32:C2:3F:1D:CA:DF:EF:04:1E:74:C1:1B:D3:EB:24
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       22AF87
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/1d6c0d59e3a5f85e551eca11883398b304e57801.roa
Signing time:             Thu 22 Jun 2023 18:16:32 +0000
ROA not before:           Wed 21 Jun 2023 18:16:00 +0000
ROA not after:            Sun 22 Jun 2025 18:16:00 +0000
asID:                     262216
IP address blocks:        190.210.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2273159 (0x22af87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jun 21 18:16:00 2023 GMT
            Not After : Jun 22 18:16:00 2025 GMT
        Subject: CN=1d6c0d59e3a5f85e551eca11883398b304e57801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:3b:3f:d4:87:93:72:e6:93:3e:e9:6b:ca:
                    a6:d2:c4:dd:68:ce:52:ff:1f:17:09:73:92:06:8d:
                    c7:68:a3:52:67:a1:b0:96:d9:80:c8:20:4d:26:e5:
                    a1:71:fe:f4:2f:ec:37:eb:81:51:13:47:1f:1c:76:
                    fe:71:85:58:9e:63:9f:26:52:96:42:34:ec:90:ca:
                    f8:4d:39:4c:b8:36:60:c3:a3:e8:e5:ba:8a:da:f1:
                    ac:d3:f0:49:bb:86:29:8a:54:4b:eb:0c:fa:d1:cb:
                    0f:3f:01:f3:1f:2d:b0:06:94:e6:73:b2:81:4e:42:
                    eb:ab:f3:50:3b:04:01:47:42:70:4f:b0:8c:8b:d1:
                    d3:e1:2e:9e:34:17:11:fa:9f:92:b2:2a:2e:cf:ab:
                    bd:8b:09:4c:0c:c4:f1:44:eb:7f:67:87:7d:7c:f7:
                    77:c1:c5:00:8b:b8:c7:c8:6d:68:b4:4f:38:de:2b:
                    c3:97:63:1d:59:9d:9b:8b:e6:08:90:73:57:98:3f:
                    b5:d0:f7:ee:4b:82:81:27:ea:6c:0e:ff:e2:dc:64:
                    05:7f:51:91:cd:3f:c5:93:db:0d:54:1d:7c:6e:08:
                    65:bb:18:87:a6:d5:32:3e:b4:09:9e:47:cd:b1:0c:
                    9f:d9:8e:a0:f1:20:2f:a4:fc:4a:0e:a3:24:2d:e5:
                    d2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1A:38:78:E2:32:C2:3F:1D:CA:DF:EF:04:1E:74:C1:1B:D3:EB:24
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/1d6c0d59e3a5f85e551eca11883398b304e57801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:d5:1f:2a:99:be:5b:6b:61:bc:64:15:9a:94:71:8e:f5:49:
         01:2f:bc:b9:91:cf:cb:35:66:6d:8f:17:4f:22:54:95:a4:7e:
         bc:29:f4:5f:a3:74:ac:97:5d:b3:df:a2:90:c9:4b:87:88:7f:
         2f:aa:e2:a0:79:e8:de:ed:19:ec:a1:20:99:c0:f1:b1:de:2d:
         22:05:f6:7b:13:77:a9:c0:66:cc:ee:c5:1e:43:ee:33:86:0f:
         58:34:17:0a:9d:39:e6:75:78:0f:85:bd:4e:45:1c:f6:2d:2f:
         09:16:ae:5c:bf:fd:b7:19:6b:a6:a4:10:01:c2:dd:df:bf:b9:
         ca:4b:d3:a9:81:55:c5:64:b0:3e:e9:d6:bb:94:48:4d:7a:a1:
         3b:57:2d:05:43:a0:eb:84:15:96:7a:21:ee:54:0c:53:86:22:
         f1:61:03:1b:82:ba:a4:5c:18:d1:8d:f3:22:85:79:92:5e:1d:
         b8:69:fc:35:46:ef:d9:2d:f3:5c:e6:e7:d6:51:ca:51:3e:2a:
         b3:cc:48:54:a1:f1:22:9f:04:7f:c2:32:30:52:09:e7:f5:4e:
         f9:9a:11:d5:33:41:5e:15:af:99:3e:a4:65:6f:b9:a1:f7:23:
         a1:e7:2e:54:3a:50:2d:b8:d7:57:c0:a5:85:dd:d5:d7:6d:b8:
         07:60:11:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org