Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/9622ccd4aea58629c6aa59ef20301f50e883bcef.roa
File:                     9622ccd4aea58629c6aa59ef20301f50e883bcef.roa (raw, json)
Hash identifier:          YaNCg+C+pIjOzKG6oFvpAcfoHzyEPG5PGsdKEWQ77KA=
Subject key identifier:   46:56:9D:70:37:90:E5:ED:B2:27:B4:87:EF:94:52:6B:44:5C:1F:65
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       04773E
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/9622ccd4aea58629c6aa59ef20301f50e883bcef.roa
Signing time:             Wed 24 Mar 2021 14:34:47 +0000
ROA not before:           Wed 24 Mar 2021 14:34:47 +0000
ROA not after:            Tue 24 Mar 2026 14:34:47 +0000
asID:                     270035
IP address blocks:        190.108.78.0/24 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292670 (0x4773e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Mar 24 14:34:47 2021 GMT
            Not After : Mar 24 14:34:47 2026 GMT
        Subject: CN=9622ccd4aea58629c6aa59ef20301f50e883bcef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7d:47:33:a6:bf:34:ad:b5:7a:1d:d3:04:20:
                    2a:99:84:00:94:3c:34:93:35:37:8b:e6:e2:f6:b3:
                    70:6a:20:b0:4b:5a:23:60:49:ee:e5:9b:e6:0e:b3:
                    0c:0e:32:60:4b:c5:6b:2b:58:da:1d:91:01:38:5e:
                    1a:e4:dd:b7:6b:d7:62:5d:da:8b:46:0d:76:c2:54:
                    5c:a0:61:72:db:75:b5:6c:56:52:e2:e7:12:a9:cf:
                    47:23:ba:e8:e5:a1:cd:4c:84:1c:31:03:ba:e5:1d:
                    57:2f:0c:55:3f:34:ec:85:e0:7d:60:00:3b:66:8b:
                    36:48:e8:f7:94:3c:61:34:dd:59:6d:46:00:de:c2:
                    8d:b7:82:92:56:a1:98:63:ff:34:ee:8d:bf:89:23:
                    38:3f:46:72:e9:68:25:02:6f:d8:ef:a9:77:01:80:
                    be:48:fd:f4:a7:fb:c7:d5:c6:ca:44:ba:41:eb:83:
                    16:8a:d2:55:0f:f7:eb:5a:b2:82:4e:de:1e:89:4c:
                    fa:be:f4:82:6c:55:c6:19:59:b7:12:c9:ee:c9:b6:
                    3a:da:a2:33:8b:b8:e6:1d:ec:f9:39:ae:55:5b:ed:
                    c4:54:03:17:57:ee:c3:46:e6:cf:93:8f:d6:12:18:
                    37:5b:70:6d:d0:1f:03:99:5a:33:88:8e:e0:c9:cf:
                    63:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:56:9D:70:37:90:E5:ED:B2:27:B4:87:EF:94:52:6B:44:5C:1F:65
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/9622ccd4aea58629c6aa59ef20301f50e883bcef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:f8:84:68:f7:b5:20:15:4e:cc:f6:28:ab:bb:1b:fb:24:3d:
         8f:fc:2d:af:1f:87:db:3d:3f:bb:fa:62:41:5f:ff:80:41:91:
         68:09:30:f1:18:5d:4c:67:a5:19:8f:c1:b5:e5:a8:19:50:73:
         bb:f9:0c:4d:58:f8:d0:04:1c:62:89:d6:6c:c8:3f:07:22:f5:
         0e:6f:32:8d:3a:c4:b6:a4:50:6d:a0:ab:fa:58:6f:72:86:20:
         21:4a:99:4c:f5:ca:85:25:9b:25:88:54:cc:73:3a:d8:f3:e9:
         f1:fa:a8:91:2b:1b:d6:13:ac:c2:19:23:b3:2a:52:a3:e3:c1:
         20:4f:20:e7:c1:c3:34:6e:73:0a:ff:d6:56:d3:e5:ce:2d:10:
         45:3b:4c:31:83:01:19:40:2a:17:ad:b2:61:68:6f:30:8d:63:
         49:6c:ab:8a:d2:95:47:d9:86:79:b3:98:e6:74:64:d2:b5:01:
         94:ce:d6:a4:1b:08:dd:d3:76:8c:1d:00:c7:93:a2:d2:10:58:
         5a:b4:d0:31:8f:aa:c6:82:34:1e:b3:56:cb:db:66:54:af:ad:
         f9:e2:ae:bf:b0:ec:4e:02:fe:18:60:9a:4d:5b:fc:8a:76:bc:
         0b:0a:1a:4b:6a:ae:08:5d:2e:5c:7a:65:dd:9c:b1:a9:bf:e5:
         08:f1:c3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:48 2024 by rpki-client on console-fra.rpki-client.org