Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/cc6d2046fca44129bf0e2d964ce5048199bd42d3.roa
File:                     cc6d2046fca44129bf0e2d964ce5048199bd42d3.roa (raw, json)
Hash identifier:          6mri5G58t1O3SjSrM5sIfL/DTDqzD4IOpav+JVzorws=
Subject key identifier:   C5:86:C4:AD:73:44:9F:1A:4C:D2:9A:AB:33:44:DC:CE:59:B8:EF:AB
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A982E
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/cc6d2046fca44129bf0e2d964ce5048199bd42d3.roa
Signing time:             Wed 07 Sep 2022 22:25:33 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1742894 (0x1a982e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=cc6d2046fca44129bf0e2d964ce5048199bd42d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:c7:7f:7b:6f:74:b6:58:49:41:53:14:1f:
                    ef:32:c0:41:e0:c8:05:17:d0:4f:fe:f5:0a:e3:b3:
                    0b:9d:82:10:b7:bb:8c:04:0a:67:41:2c:77:0f:8d:
                    c0:34:2e:01:07:6d:74:f1:08:ac:47:a3:73:5a:2d:
                    99:57:8f:48:c0:40:c5:2f:7a:f3:52:d7:52:1f:ea:
                    37:fd:55:73:c3:65:68:21:b7:d8:74:60:a0:7f:01:
                    02:77:c5:1c:ea:5b:0e:e9:13:54:de:8a:5f:43:0f:
                    b7:60:a8:47:04:9a:c2:e6:5a:c4:e8:74:7e:72:2a:
                    6e:37:af:43:fe:45:4c:50:d1:c7:3a:28:65:b0:b2:
                    d0:25:2c:6c:66:f3:95:71:86:7a:ca:5b:fc:97:b1:
                    8f:e9:5c:97:72:c2:35:c3:d0:c2:41:96:80:44:d9:
                    14:b2:1c:f6:71:fd:5b:bb:b5:11:92:74:35:62:ba:
                    7b:bf:8b:51:f3:a9:fb:e9:8a:75:c2:86:7f:f7:c5:
                    62:13:e3:17:b9:0c:3d:9b:76:6a:d7:ac:fd:c6:65:
                    90:23:83:40:79:0c:2c:f8:11:03:f4:ef:af:5d:ea:
                    41:a0:c2:ff:ba:a0:3d:70:a6:26:a5:86:c4:a6:a5:
                    35:73:b4:66:eb:40:66:e1:d3:77:df:4e:f0:46:9d:
                    f2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:86:C4:AD:73:44:9F:1A:4C:D2:9A:AB:33:44:DC:CE:59:B8:EF:AB
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/cc6d2046fca44129bf0e2d964ce5048199bd42d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:b2:14:d8:ee:ab:93:65:cd:49:ad:c0:86:6e:d4:fa:40:db:
         3d:3e:ab:99:46:86:a0:20:83:ec:40:83:2f:25:85:6c:77:db:
         fa:1c:38:f1:04:0f:88:f3:e4:e6:1b:a5:99:ed:1e:77:57:aa:
         79:e0:d8:1b:b1:78:d3:a0:8e:bf:26:96:42:43:27:45:c2:c6:
         8d:b4:e8:1a:1f:85:5c:0c:ce:08:0c:c4:4f:08:a9:81:0d:98:
         56:b8:b7:65:30:6a:24:f7:76:43:bf:e3:01:85:44:39:a9:a7:
         13:ac:d1:f5:32:21:56:4e:24:60:3d:25:13:63:21:de:56:e9:
         ce:18:40:b8:1e:e5:f7:b3:0e:84:5d:68:1a:01:3b:5a:de:00:
         28:ec:3b:f0:97:4a:88:4c:af:8d:4c:1d:0e:1c:4b:95:07:5d:
         a0:82:c0:4c:f3:e1:eb:8b:1f:59:b3:f1:7b:c4:5c:76:58:f1:
         0b:d9:85:bc:13:43:ea:ed:d2:77:7f:99:88:be:1a:6d:72:28:
         74:17:fa:ae:d4:e1:07:f7:dc:97:7c:63:8f:41:9c:0d:42:f6:
         d3:12:ac:cc:6f:31:fc:e0:32:ab:71:c0:4f:cc:cd:09:cb:99:
         b9:29:66:40:1a:28:5f:7a:66:4d:8e:7c:80:11:89:48:b9:94:
         c1:e2:a7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org