Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/27778ffa76cb66e12943b195d040d58a4ce64429.roa
File:                     27778ffa76cb66e12943b195d040d58a4ce64429.roa (raw, json)
Hash identifier:          2alm5HWyzPxr6mTPtVeSHz2po6uisCQ9t/y/PWFMnjg=
Subject key identifier:   91:ED:A3:A2:CA:15:CF:0E:2F:84:8B:A9:67:E9:B2:DF:96:FF:39:CD
Certificate issuer:       /CN=44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca
Certificate serial:       242A48
Authority key identifier: D9:E2:2D:FB:2E:DB:03:3D:7E:61:3B:B3:22:76:2A:C6:40:ED:53:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/27778ffa76cb66e12943b195d040d58a4ce64429.roa
Signing time:             Tue 06 Jun 2023 15:27:50 +0000
ROA not before:           Mon 05 Jun 2023 15:27:50 +0000
ROA not after:            Fri 06 Jun 2025 15:27:50 +0000
asID:                     266665
IP address blocks:        190.171.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2370120 (0x242a48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca
        Validity
            Not Before: Jun  5 15:27:50 2023 GMT
            Not After : Jun  6 15:27:50 2025 GMT
        Subject: CN=27778ffa76cb66e12943b195d040d58a4ce64429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:50:8d:0c:4b:76:e6:fb:1a:b6:b3:52:ea:
                    e6:46:99:84:1b:4f:b1:34:b7:3b:bd:c6:85:54:ac:
                    6d:96:b5:ae:91:fc:4d:87:80:1a:91:90:ed:49:af:
                    b5:4c:32:ab:61:19:e1:d0:24:2b:0b:82:f4:4b:b9:
                    67:09:f1:92:55:76:0b:c6:19:fa:72:c9:82:7e:19:
                    06:d3:72:b7:71:90:2c:e5:d1:9c:9e:5e:de:30:cd:
                    33:16:7b:99:fc:07:c3:07:36:65:04:7a:12:1b:44:
                    8f:b6:ff:27:f1:50:e3:65:51:dd:c5:0a:49:b5:76:
                    d5:c9:6f:d8:3b:09:da:a1:4d:f5:02:cb:cd:11:83:
                    f6:26:64:19:e9:30:e2:ad:b2:a7:e8:97:30:11:33:
                    59:5e:49:17:6b:de:21:33:aa:ad:08:b8:1a:e9:6c:
                    82:a6:e2:b2:20:ad:f4:9e:4f:ca:bb:a8:1d:2f:cd:
                    aa:f2:ab:d1:ab:41:40:27:e9:14:34:53:86:9b:5b:
                    bf:e9:fc:77:a8:f7:df:6c:83:82:24:a5:c4:01:26:
                    7b:52:b4:03:47:ae:d5:39:91:40:cd:6c:3c:46:b2:
                    ac:f7:f0:9b:3a:82:7c:77:51:a4:76:d0:91:bc:52:
                    13:18:bc:63:9c:35:7c:91:c0:7d:b5:3d:22:26:05:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:ED:A3:A2:CA:15:CF:0E:2F:84:8B:A9:67:E9:B2:DF:96:FF:39:CD
            X509v3 Authority Key Identifier:
                keyid:D9:E2:2D:FB:2E:DB:03:3D:7E:61:3B:B3:22:76:2A:C6:40:ED:53:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/27778ffa76cb66e12943b195d040d58a4ce64429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/44c2caf4f7cfddcc44bc95bcacbf2d7813f606ca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:ea:53:08:48:54:0c:fb:15:7d:7a:cc:0a:61:56:64:2f:
         78:3a:f4:b6:47:33:ce:9d:dd:23:10:22:f1:4d:d3:c0:f2:62:
         09:67:1c:3a:6b:a6:33:24:84:84:f8:38:7c:e0:97:e6:7f:b8:
         30:40:37:87:99:f9:c2:fc:6f:85:b1:4f:1d:79:95:2e:2f:7d:
         fe:19:18:96:e8:b2:bb:97:3f:77:d2:ef:dd:db:9d:de:71:17:
         24:6f:47:f9:db:91:67:35:2d:ba:b1:3b:03:ae:af:ce:6f:14:
         fe:58:16:85:d9:d1:c5:57:4c:32:f6:ac:b2:94:b7:91:45:c9:
         96:35:d8:cb:c8:17:1d:bb:ed:f9:52:2b:81:44:74:f4:21:3b:
         b7:52:d2:a7:05:32:5b:6d:47:3e:af:80:e9:2e:bf:14:52:dd:
         56:b9:e7:be:b3:85:03:2d:f3:3c:36:c4:96:a7:6d:cd:47:68:
         4b:cb:1c:4f:b0:5c:3a:bb:cc:8b:f2:17:16:e9:49:00:09:19:
         80:e3:aa:a9:ed:dc:be:3e:30:d4:62:5d:07:08:3b:dc:c7:af:
         de:46:e5:f2:c4:19:a9:80:57:d6:78:0f:da:4d:9b:48:df:93:
         9a:09:59:dc:24:4c:c5:9a:35:14:49:28:c7:b6:25:fd:ec:99:
         e6:ee:3e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org