Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/60114eb61388649da8801156cc86711352d2e69a.roa
File:                     60114eb61388649da8801156cc86711352d2e69a.roa (raw, json)
Hash identifier:          lcQy7wUn3+zHUKYDtm5efsaAl8yRBt/TI3uhnwPrZtw=
Subject key identifier:   51:10:5C:59:06:9D:09:48:2D:CF:B8:C5:AD:1E:C9:78:AB:9A:AE:E2
Certificate issuer:       /CN=d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18
Certificate serial:       1251B0
Authority key identifier: 53:64:0D:CF:4A:3B:80:76:09:CE:5A:E2:1E:06:95:18:BD:14:C8:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/60114eb61388649da8801156cc86711352d2e69a.roa
Signing time:             Tue 21 Mar 2023 15:44:29 +0000
ROA not before:           Mon 20 Mar 2023 15:42:14 +0000
ROA not after:            Fri 21 Mar 2025 15:42:14 +0000
asID:                     262248
IP address blocks:        131.108.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1200560 (0x1251b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18
        Validity
            Not Before: Mar 20 15:42:14 2023 GMT
            Not After : Mar 21 15:42:14 2025 GMT
        Subject: CN=60114eb61388649da8801156cc86711352d2e69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8c:0d:56:f9:9f:b6:f0:94:3a:df:5e:d9:ba:
                    02:33:21:cd:0f:2a:68:b4:64:e0:b0:56:22:52:5b:
                    28:d8:28:9c:eb:f3:79:6c:9f:33:68:53:d4:f8:9e:
                    8d:9c:52:8e:fa:35:86:91:b0:8e:e2:d9:8b:20:49:
                    70:05:5a:8b:1f:49:e7:4c:6a:de:30:25:da:4d:ef:
                    fe:4a:f9:22:32:24:58:73:5b:77:d1:31:84:df:fa:
                    1d:d8:90:5b:2b:5b:3e:23:64:00:60:58:ae:3f:0f:
                    5e:3c:e8:91:86:4c:94:d5:9c:50:67:8e:29:2a:df:
                    4d:09:7e:33:ab:c8:60:1c:e1:df:d6:69:bc:94:64:
                    6b:51:97:43:c3:d9:e9:78:53:39:82:69:04:08:11:
                    e8:ce:75:52:1a:b4:51:af:1c:c6:c0:65:c2:00:1e:
                    24:5e:0b:1c:b6:92:58:c1:59:41:ec:54:6a:ce:49:
                    c1:96:2d:98:83:ed:b3:cf:78:0b:ad:cd:33:d8:a5:
                    62:ee:87:17:1d:b2:5f:8f:b2:0f:9e:8e:55:c0:ba:
                    24:11:9e:94:ad:c4:06:13:af:63:9a:1c:87:6a:c3:
                    63:1f:3b:f9:31:d5:61:b1:70:8f:e4:bc:63:ed:44:
                    73:07:d8:e6:cf:8e:70:fe:35:b0:b6:9d:e4:50:4f:
                    31:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:10:5C:59:06:9D:09:48:2D:CF:B8:C5:AD:1E:C9:78:AB:9A:AE:E2
            X509v3 Authority Key Identifier:
                keyid:53:64:0D:CF:4A:3B:80:76:09:CE:5A:E2:1E:06:95:18:BD:14:C8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/60114eb61388649da8801156cc86711352d2e69a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:35:65:84:56:81:66:67:14:4c:43:59:79:b1:ab:82:7f:e4:
         38:9c:ae:1e:34:2c:fe:f2:a8:57:0f:8b:3f:bb:05:48:eb:ef:
         a0:8f:41:ac:62:a9:2d:17:e6:0d:98:2b:6e:b1:68:61:22:a9:
         a1:7c:b5:ed:19:a5:62:20:8f:7b:2f:f3:d5:2e:2c:a1:8b:9e:
         cc:06:a1:e8:fc:5a:82:77:2c:26:56:8b:9c:53:b6:6d:54:1b:
         b3:3b:90:c9:b7:c6:c2:2e:29:25:06:cc:d7:9a:8b:00:e7:81:
         48:eb:d6:10:65:b4:7d:a6:78:2a:16:7c:17:f0:e3:70:2f:5b:
         9e:d7:53:c8:a8:64:a2:9c:df:37:14:63:13:c4:03:21:35:fe:
         b8:9c:9b:2f:d3:71:f2:1a:1a:80:c3:fb:b4:29:e0:3a:82:99:
         fb:da:13:80:18:61:b3:94:29:c4:03:b0:5e:f7:79:00:c6:1a:
         43:18:41:14:51:2a:18:41:48:b9:9b:39:c2:41:0a:46:ef:8e:
         54:5a:2f:4f:01:4e:1d:f9:26:c0:30:35:31:31:c5:ab:da:f7:
         66:11:cd:8b:91:df:0f:5a:2e:49:c6:78:d5:2b:31:b6:85:26:
         19:78:6d:c4:1e:77:9d:b9:11:39:66:96:b9:aa:9b:03:bf:45:
         05:50:65:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org