Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a377cf4205756361fb1ece3048d769411ac70aa9.roa
File:                     a377cf4205756361fb1ece3048d769411ac70aa9.roa (raw, json)
Hash identifier:          +AwsXf3kT5u/8xRLZJhZh/ywy66vZtMozmdFsrlC9TM=
Subject key identifier:   AE:54:52:36:88:74:A3:68:61:C2:31:49:90:43:E5:5C:90:CF:73:31
Certificate issuer:       /CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
Certificate serial:       1992D3
Authority key identifier: D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a377cf4205756361fb1ece3048d769411ac70aa9.roa
Signing time:             Thu 15 Sep 2022 20:52:58 +0000
ROA not before:           Thu 15 Sep 2022 20:52:24 +0000
ROA not after:            Sun 15 Sep 2024 20:52:24 +0000
asID:                     3790
IP address blocks:        190.171.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675987 (0x1992d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e
        Validity
            Not Before: Sep 15 20:52:24 2022 GMT
            Not After : Sep 15 20:52:24 2024 GMT
        Subject: CN=a377cf4205756361fb1ece3048d769411ac70aa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:76:86:e1:c3:fd:a2:98:8f:f0:ca:d3:01:2a:
                    4b:9b:e9:92:1e:8f:01:ee:02:55:f3:81:0e:ed:23:
                    14:1d:79:16:46:79:a4:42:77:98:71:3c:20:9e:53:
                    7d:2e:89:60:e5:71:be:92:90:c6:d2:1c:f0:8d:99:
                    5d:bb:80:6a:d4:6d:d6:d1:c4:75:a3:be:31:3c:00:
                    6f:3f:08:3c:67:2c:d6:67:ca:4c:e8:4f:74:23:25:
                    a1:04:33:ba:f8:ee:21:5c:90:ac:c2:31:58:97:55:
                    64:49:e5:13:57:cf:0a:e2:c4:37:e3:c2:a2:f6:44:
                    64:9f:72:25:e9:f7:5d:9e:3e:09:47:87:cf:78:52:
                    eb:bf:57:12:cb:90:50:5a:6d:45:29:7a:1d:b1:bf:
                    55:18:15:20:e3:96:91:51:f5:6d:4d:7e:44:ee:fa:
                    d6:de:02:b9:3f:d3:8d:06:61:7d:7e:03:37:ae:26:
                    47:bb:4d:40:a5:6e:04:dd:95:0b:a2:35:73:d5:01:
                    a3:98:d8:0c:4c:d3:75:a2:22:51:bf:9e:e8:c2:83:
                    f4:3e:56:09:37:7d:cf:b7:f7:53:87:d3:51:63:35:
                    d1:6e:51:56:8a:cf:cb:7a:eb:cc:39:7f:ee:57:34:
                    dc:f5:c9:1d:f7:b2:d5:27:43:d0:70:c7:37:86:30:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:54:52:36:88:74:A3:68:61:C2:31:49:90:43:E5:5C:90:CF:73:31
            X509v3 Authority Key Identifier:
                keyid:D8:0B:41:95:3D:80:14:E8:18:A3:CC:23:C1:4C:4F:94:D1:A8:C1:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/a377cf4205756361fb1ece3048d769411ac70aa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a7862e8-d2db-48ea-b809-d4b970d1d892/6c3f3cbf971b31d4a0fb48a063ed86f0b594ac3e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:38:b1:da:9b:63:56:e7:b4:36:4b:08:73:7b:6b:a2:4d:da:
         1d:ba:7f:d5:d9:e3:fa:de:8b:6c:c0:17:de:00:9b:3b:1b:95:
         e9:f3:09:40:35:fd:f4:0c:f4:09:b2:62:f1:33:68:8c:95:0f:
         5e:95:dd:0d:7f:f8:ab:be:75:84:d0:d2:20:38:63:a8:16:7b:
         82:d4:07:54:26:48:2d:13:a5:2c:df:e7:00:92:a5:1d:d8:59:
         60:6c:b2:03:94:ab:c6:a4:61:29:82:09:5a:f2:05:8c:8d:4c:
         bf:89:49:3f:9d:ff:9a:7a:98:86:50:64:8a:7c:38:a7:fd:59:
         9d:4b:ab:b6:aa:2d:91:b2:b6:c8:4c:f2:4e:c9:da:f1:e7:d9:
         d6:49:f5:bf:7b:64:17:79:09:3c:8e:0c:1b:20:a4:39:12:35:
         62:2d:31:d1:da:05:ec:cd:ca:fa:5d:26:ed:2d:d5:a3:48:ac:
         62:b7:c7:5f:fe:20:97:6a:c7:e3:cc:42:0a:52:bc:ac:40:3f:
         6b:50:e1:f5:28:bc:ea:55:40:73:ed:54:1a:85:8b:1d:04:25:
         88:41:8c:48:7f:bb:57:12:65:75:a8:8e:e2:28:4b:19:4d:b2:
         b0:a4:91:f3:90:02:9a:8e:9d:aa:cc:bb:0e:46:11:0d:4b:9b:
         1d:22:e0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org