Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/6cb8438b2c05f308c70dde0c1f74706ddae57456.roa
File:                     6cb8438b2c05f308c70dde0c1f74706ddae57456.roa (raw, json)
Hash identifier:          WjSN1LhtUO5/oV/NZJXjYVwXFHUGT8ofW1lltQGv/g8=
Subject key identifier:   8A:3B:5A:0D:A8:55:5F:1B:EC:56:26:76:8C:02:DE:9A:2F:55:C5:5A
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       170DB0
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/6cb8438b2c05f308c70dde0c1f74706ddae57456.roa
Signing time:             Thu 01 Sep 2022 16:02:47 +0000
ROA not before:           Thu 01 Sep 2022 16:02:10 +0000
ROA not after:            Sun 01 Sep 2024 16:02:10 +0000
asID:                     18734
IP address blocks:        189.202.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1510832 (0x170db0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Sep  1 16:02:10 2022 GMT
            Not After : Sep  1 16:02:10 2024 GMT
        Subject: CN=6cb8438b2c05f308c70dde0c1f74706ddae57456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:8f:da:86:66:83:e9:3c:3b:57:59:24:aa:
                    98:f5:86:c7:ec:16:dd:2b:54:60:e2:ba:ab:c5:c0:
                    22:b1:b7:4e:5c:0a:e4:4d:bf:db:a1:89:90:de:2d:
                    b9:81:9c:16:f5:05:7c:b9:c4:bf:52:62:1f:44:3b:
                    2a:e4:22:86:c4:20:e5:c1:98:8b:df:21:3a:86:00:
                    09:77:0c:2e:22:ed:38:64:74:a9:f5:4a:47:6a:65:
                    f2:bc:96:d9:a1:df:7b:e1:ee:e2:06:a9:1f:c0:02:
                    38:56:76:b4:50:51:dd:be:52:2d:0c:6a:3c:a1:a1:
                    eb:d4:a8:21:02:9c:f3:86:79:ed:d1:db:8c:d2:1d:
                    1a:84:10:43:5e:33:69:8b:27:85:b9:a6:95:49:31:
                    0e:46:5a:58:8e:a2:19:b5:79:04:af:10:79:ad:b1:
                    fb:4b:9c:92:90:bf:88:72:ae:de:cb:29:cb:01:26:
                    48:82:bc:75:30:7e:af:39:64:af:1b:de:30:b8:09:
                    8f:b5:13:51:80:86:2e:03:01:99:c9:b2:f9:b7:08:
                    51:41:47:c4:73:a5:d6:67:0c:95:40:1a:4b:33:fa:
                    8d:12:1e:33:6e:bf:c9:af:8c:4c:a8:e5:6f:13:e3:
                    b8:3e:f4:a4:ab:9b:7a:9a:d1:b2:4c:28:93:7a:86:
                    d7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3B:5A:0D:A8:55:5F:1B:EC:56:26:76:8C:02:DE:9A:2F:55:C5:5A
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/6cb8438b2c05f308c70dde0c1f74706ddae57456.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.202.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:8c:d7:56:b8:35:c3:01:3d:9e:6b:ff:fd:a0:3a:8d:97:2b:
         9c:a2:b5:f2:3f:0b:fa:33:67:1a:ab:30:d5:d5:b2:39:19:72:
         80:25:aa:fb:2a:b4:7b:2f:fc:44:6b:10:59:96:9e:04:97:8e:
         7d:81:cb:3c:f6:5d:6e:6a:b5:75:57:1c:e4:9d:e9:d6:ef:4f:
         0a:4c:78:01:af:62:50:76:df:12:1c:9c:af:60:ac:46:6c:f8:
         40:11:da:e6:54:43:74:73:59:d5:e6:a8:d3:56:4d:30:45:96:
         89:22:53:fe:ec:1a:c1:e1:aa:cf:77:da:d4:b8:57:d0:32:01:
         e6:dd:f3:45:23:f0:c0:f1:04:f7:7d:8a:a0:50:85:25:d3:10:
         bc:79:84:ab:dd:0d:ed:0c:25:5e:84:03:48:c7:9c:a9:42:d9:
         e1:eb:5d:5a:17:0b:4a:5e:40:73:d1:9c:65:76:d4:e8:05:e9:
         94:6d:1a:84:4b:dd:dd:bb:79:ca:a5:a9:fc:3d:16:91:8d:49:
         1d:e7:db:96:52:0c:77:9b:4b:eb:2c:fe:03:d9:5f:7a:de:26:
         57:6b:7d:0f:82:df:f4:92:6a:85:1c:45:14:43:cd:3c:3b:d8:
         d6:04:9a:7e:b7:8e:14:df:40:57:2b:16:c9:8d:14:e3:f0:59:
         af:a8:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org