Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/6ff466b98e86bdb744384a1a29feb889d159f6bd.roa
File:                     6ff466b98e86bdb744384a1a29feb889d159f6bd.roa (raw, json)
Hash identifier:          gyjAKsSaezjLzYk+bJwdxcc6yLsXzSpvTtKGwCgkhPI=
Subject key identifier:   E1:C3:0E:EA:F8:F7:E4:4F:9F:FB:76:A9:50:82:E4:E4:38:65:18:03
Certificate issuer:       /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial:       2395EA
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/6ff466b98e86bdb744384a1a29feb889d159f6bd.roa
Signing time:             Thu 24 Aug 2023 21:05:12 +0000
ROA not before:           Wed 23 Aug 2023 21:05:12 +0000
ROA not after:            Sun 24 Aug 2025 21:05:12 +0000
asID:                     23520
IP address blocks:        190.242.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2332138 (0x2395ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
        Validity
            Not Before: Aug 23 21:05:12 2023 GMT
            Not After : Aug 24 21:05:12 2025 GMT
        Subject: CN=6ff466b98e86bdb744384a1a29feb889d159f6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:6d:d2:83:44:1f:58:5f:32:28:94:57:fb:
                    bb:54:83:0d:61:4f:a3:97:67:ee:51:e4:4c:27:12:
                    e0:c4:23:07:a4:2b:20:8d:2e:4b:17:80:73:3c:71:
                    49:14:47:2c:35:87:00:5c:d2:9d:94:1b:bf:bb:e1:
                    73:09:19:d2:98:61:f4:4f:a8:61:3a:72:b0:f7:7f:
                    cc:87:ef:3f:7b:25:e5:67:11:92:a9:0f:73:f2:f0:
                    27:22:b8:24:25:44:b2:62:91:36:39:55:76:c6:4d:
                    84:a0:3b:53:32:1f:b3:1a:90:99:5f:28:a4:35:3a:
                    ca:f8:3c:95:67:c3:1c:45:b3:75:49:e6:05:5e:63:
                    b4:7c:50:41:b1:00:11:a2:9c:cd:64:00:f3:86:d5:
                    31:15:64:c8:98:bc:0b:1c:6a:4a:9c:21:9e:67:0d:
                    17:99:14:96:60:de:df:23:94:04:db:a2:13:a0:7a:
                    e0:cf:31:10:72:4d:39:95:cc:ef:8d:7a:8e:21:3a:
                    07:b7:38:78:2e:52:cd:0e:b9:df:dc:40:27:fc:c0:
                    76:db:a5:86:66:a2:65:f5:ae:9b:ef:56:a2:70:06:
                    c2:9a:07:98:e7:06:14:b1:bb:19:f0:08:32:e2:b3:
                    dc:95:8a:6d:33:27:b4:12:ed:03:7a:e4:49:91:4b:
                    f3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C3:0E:EA:F8:F7:E4:4F:9F:FB:76:A9:50:82:E4:E4:38:65:18:03
            X509v3 Authority Key Identifier:
                keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/6ff466b98e86bdb744384a1a29feb889d159f6bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.242.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:43:b8:1e:0d:9d:66:a6:47:69:80:52:1e:a1:60:cc:c4:e4:
         0e:2c:d9:dc:77:b3:4e:50:7b:1e:25:bc:13:2a:3e:30:e7:42:
         f3:71:99:73:f1:14:19:d8:91:2e:e1:e7:2e:06:20:88:62:78:
         64:0c:32:95:0b:59:a3:ba:f4:af:cd:53:c7:6e:b9:04:a9:e0:
         0a:a5:07:e9:33:6f:b4:14:73:4a:3d:0b:c3:85:54:3a:40:09:
         36:12:ba:65:44:6d:5d:2a:ab:54:0b:c3:ff:46:67:d6:5a:45:
         1a:fd:24:ec:02:df:21:64:6b:2f:99:9d:8e:9d:25:eb:36:91:
         95:a5:b7:97:b7:48:97:ec:0a:5d:07:80:54:1e:41:b9:c3:27:
         5a:0f:fd:f7:e5:23:7d:fa:d7:04:29:d6:3e:80:34:9b:6c:d7:
         0c:65:50:ac:90:49:92:cf:78:a9:ae:96:58:c1:87:3e:08:ec:
         d4:55:26:3c:31:9f:46:29:06:44:f0:5f:e6:63:59:38:78:df:
         96:89:67:ba:ba:e5:c5:82:ee:95:b0:1f:98:b5:d2:13:ee:66:
         0e:2f:ab:96:65:76:6e:e9:49:58:c9:ea:0e:ec:f0:bb:d6:7b:
         ae:33:bd:a6:79:b6:eb:db:88:5d:c0:9c:93:b1:ce:4a:0f:57:
         4b:aa:18:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:07:04 2024 by rpki-client on console-fra.rpki-client.org