Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/2060f70b53e0e0a3e9923477d35855ecad9d1486.roa
File:                     2060f70b53e0e0a3e9923477d35855ecad9d1486.roa (raw, json)
Hash identifier:          XwR8jfKc4+1c+BEpalx7sUCYWRTPKWDuOHmgEVs0Jyk=
Subject key identifier:   28:0C:35:EB:5C:B2:B9:17:8A:9D:1E:D4:29:4F:52:8E:B6:6B:15:CE
Certificate issuer:       /CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
Certificate serial:       23FE8A
Authority key identifier: 8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/2060f70b53e0e0a3e9923477d35855ecad9d1486.roa
Signing time:             Wed 18 Oct 2023 00:44:58 +0000
ROA not before:           Tue 17 Oct 2023 00:44:58 +0000
ROA not after:            Sat 18 Oct 2025 00:44:58 +0000
asID:                     52468
IP address blocks:        160.20.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2358922 (0x23fe8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb
        Validity
            Not Before: Oct 17 00:44:58 2023 GMT
            Not After : Oct 18 00:44:58 2025 GMT
        Subject: CN=2060f70b53e0e0a3e9923477d35855ecad9d1486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:16:e4:0a:46:e2:71:06:d3:ae:a1:01:3a:10:
                    19:53:5d:2a:a7:53:f5:73:63:b1:31:3d:2c:45:3a:
                    ba:c0:67:49:cb:87:b3:e5:a1:50:dd:c6:08:98:79:
                    64:0a:1f:81:c0:8d:d4:49:88:9d:1a:4e:ea:d4:4c:
                    4b:1f:22:18:6a:f7:29:cc:1f:f0:f8:4b:16:59:ed:
                    14:af:54:b9:31:b9:22:76:38:57:bc:17:2b:dd:9b:
                    37:e3:8e:05:e8:17:d9:52:ad:5a:d5:b2:dc:6d:f3:
                    f0:99:ab:e0:01:1b:83:75:8a:39:2e:61:e7:39:0b:
                    c7:b3:bb:08:ea:6b:18:0c:6c:d0:6d:6f:a5:81:52:
                    83:26:87:fa:dc:df:7e:a7:b1:50:1c:9a:a2:9e:cf:
                    70:8c:93:2e:d4:40:2f:1f:6c:8e:4c:df:ce:4f:cf:
                    1a:8a:0e:7b:c8:cf:a9:74:b4:93:e1:87:96:4b:ec:
                    a9:3c:c4:64:ac:39:f9:8a:2d:21:d1:3b:26:fd:ee:
                    7a:5e:4d:97:ea:03:66:30:7c:48:9f:48:ef:ea:59:
                    97:3f:50:5f:4c:1f:33:d0:b5:33:72:08:25:9f:1e:
                    df:25:45:28:f2:73:22:11:87:e9:2f:91:82:e7:e1:
                    8a:5d:c0:17:56:f8:96:53:39:30:26:c3:90:b0:99:
                    02:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0C:35:EB:5C:B2:B9:17:8A:9D:1E:D4:29:4F:52:8E:B6:6B:15:CE
            X509v3 Authority Key Identifier:
                keyid:8C:3F:2F:C5:60:AB:01:83:D8:2F:8E:F9:94:22:B9:E0:85:67:45:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/2060f70b53e0e0a3e9923477d35855ecad9d1486.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b1dd874-f29d-4b06-a232-dc9e5b6be4b7/7cd63482f6f7cda3fd0c4b2427ccc6cd70254adb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:b8:e5:ce:2d:47:18:b4:ba:6b:e9:ce:1d:04:ee:ca:98:fc:
         6c:de:f8:86:03:b7:5c:51:c1:be:a5:1c:54:e1:20:70:ed:96:
         37:19:b5:eb:d9:31:8a:f2:36:53:54:5c:20:ae:91:8d:b7:e0:
         6e:61:8e:b9:77:44:3f:05:dd:41:47:17:78:b9:8f:e4:18:5a:
         88:8e:0a:ed:77:9f:11:94:de:79:1f:aa:05:ba:d3:c3:ac:4e:
         2d:8d:18:cb:a0:ed:a3:5a:01:ea:01:93:df:a4:af:17:8e:a8:
         f5:2b:7f:00:36:51:af:c0:e2:21:e3:35:fc:e1:ef:0f:e9:3d:
         66:71:ea:b0:ee:9e:75:64:60:57:42:83:2f:30:22:c1:da:36:
         3f:24:58:c5:1c:1c:19:d8:82:90:90:46:d5:b0:d7:4a:76:a9:
         4b:66:29:99:90:97:e3:df:1a:f8:a0:a9:46:66:ec:83:36:31:
         87:b2:40:07:ca:1c:db:ae:cd:5c:29:1f:36:0f:d3:03:b8:55:
         64:68:61:63:4a:61:b6:13:7e:67:e1:d2:7a:01:03:c5:1d:8a:
         5f:ae:51:ee:5b:d7:f7:30:a2:b5:72:bd:0c:a6:ad:c9:b1:b8:
         44:f5:35:41:25:9c:1b:68:0d:15:df:97:d0:77:0c:a9:cf:15:
         c9:db:80:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org