Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/a8d8d335356c931a9483ed0c2dec597471f917e3.roa
File:                     a8d8d335356c931a9483ed0c2dec597471f917e3.roa (raw, json)
Hash identifier:          771feJYeFL2TXmrcDJ9pXaOjSiaAFtDWtfw4LW9PP5Q=
Subject key identifier:   43:8D:CD:46:97:F2:54:59:CB:C7:6B:FB:C2:FD:A0:1F:EC:14:3A:E5
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       22BA3E
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/a8d8d335356c931a9483ed0c2dec597471f917e3.roa
Signing time:             Thu 22 Jun 2023 18:16:36 +0000
ROA not before:           Wed 21 Jun 2023 18:16:00 +0000
ROA not after:            Sun 22 Jun 2025 18:16:00 +0000
asID:                     262264
IP address blocks:        190.210.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275902 (0x22ba3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jun 21 18:16:00 2023 GMT
            Not After : Jun 22 18:16:00 2025 GMT
        Subject: CN=a8d8d335356c931a9483ed0c2dec597471f917e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5b:b1:98:53:6d:ad:c1:9a:16:4d:9b:99:c8:
                    58:89:9b:c4:fc:75:f0:71:3a:9f:08:9e:16:3d:dd:
                    86:5b:82:cd:9d:0a:da:64:79:43:b0:35:c2:16:60:
                    3d:4e:3c:cc:be:51:d8:80:69:d1:da:12:cc:4a:d4:
                    1d:99:f1:a9:13:50:c5:16:61:d4:9a:02:84:9c:b7:
                    44:7e:d9:41:45:2e:59:a9:6b:df:57:04:2a:a4:1d:
                    a8:ee:16:a5:94:a9:1a:b4:e1:75:f6:7d:31:4b:5a:
                    0e:05:86:b6:5a:3c:3b:d1:fb:a3:10:37:af:6d:f2:
                    be:5d:63:4b:e9:30:41:80:12:77:ef:bb:f7:9b:4a:
                    94:22:e4:2e:04:b7:b0:a2:f3:df:15:78:82:93:e5:
                    b6:69:db:ca:3a:87:90:4c:86:50:b3:74:11:e3:5c:
                    0f:e6:85:5f:4e:a2:d6:af:9c:86:ac:ec:e9:cb:ef:
                    d1:94:14:eb:c6:ca:ef:47:dd:86:55:80:9f:42:dc:
                    a7:66:02:73:dd:3d:84:45:a3:15:7c:d9:d6:24:30:
                    16:73:81:d3:a7:7c:cc:1a:3e:fd:2a:fc:1f:e9:37:
                    9d:55:e1:24:82:22:d3:b8:9c:76:5f:eb:cb:ed:fe:
                    66:0b:19:e1:4f:6a:be:c9:c4:35:86:67:2f:4d:5e:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8D:CD:46:97:F2:54:59:CB:C7:6B:FB:C2:FD:A0:1F:EC:14:3A:E5
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/a8d8d335356c931a9483ed0c2dec597471f917e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:83:16:e0:7d:de:da:d4:c6:2e:a8:af:af:8d:1c:9e:45:e5:
         9f:ef:02:8c:a5:55:00:44:f2:80:05:58:07:2e:e8:94:fd:21:
         a5:67:2d:4d:ec:d8:d2:a9:70:83:e9:03:71:b1:a8:43:ee:f4:
         40:48:fd:bc:ba:f6:7b:5b:42:54:04:a2:f1:96:26:18:7b:f6:
         fd:0e:c0:83:7d:59:c3:4c:a9:01:df:29:a4:e5:7d:75:8f:c3:
         ce:88:fd:75:90:92:37:1f:6c:a2:a5:fe:a4:23:f4:84:ed:ab:
         d2:e7:62:39:e1:a1:87:d4:16:31:77:bd:aa:1c:42:a1:bd:b2:
         18:95:60:44:2c:4c:98:fc:d9:a1:a8:4a:dc:92:56:43:e9:02:
         e6:47:e4:b2:32:e1:be:de:83:c6:ba:8d:36:c7:8e:4d:30:ca:
         86:ad:5c:13:01:f7:04:2a:0b:a7:54:fb:77:c1:51:cc:a7:bd:
         29:ac:ec:64:34:e2:75:c3:e7:8d:c1:12:72:69:ce:99:ae:e1:
         1e:0d:7d:64:8b:ff:e0:29:16:81:ed:3f:64:75:cc:8e:f2:96:
         ac:8f:15:dc:ee:f4:6a:74:9b:cc:75:05:c6:8b:c4:96:9c:fb:
         81:0d:b7:ea:60:98:b5:6e:a8:ff:f3:b0:21:ad:a9:6c:dc:9b:
         ea:40:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org