Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/eb8c044ae5a61ae3659f56b23afd959cf786c296.roa
File:                     eb8c044ae5a61ae3659f56b23afd959cf786c296.roa (raw, json)
Hash identifier:          B4oMdao+9QtjJoCllSGh01Ex7cQbU5jF1nYibxiu76E=
Subject key identifier:   48:5D:DD:13:BD:0C:51:F3:91:27:31:8A:7F:13:DB:A3:AC:80:03:E1
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1A6EFB
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/eb8c044ae5a61ae3659f56b23afd959cf786c296.roa
Signing time:             Wed 07 Sep 2022 22:20:37 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732347 (0x1a6efb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=eb8c044ae5a61ae3659f56b23afd959cf786c296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:a5:15:f8:e9:e1:ba:2f:cd:e5:3b:ad:62:
                    36:ef:94:f4:ba:c8:9b:b6:b3:31:1a:0f:85:20:be:
                    93:b7:5b:f3:fa:fe:d2:86:c1:1d:6a:39:2e:61:e1:
                    cf:b3:bf:41:1b:11:57:e4:e1:fa:fc:8b:f0:07:22:
                    57:85:ae:85:72:96:f5:19:19:ef:58:ee:f1:3c:a3:
                    b6:e6:7a:a8:bf:b9:60:a3:6a:89:65:bd:f2:96:18:
                    f4:8c:61:8d:28:16:22:44:34:d0:84:c5:d5:bb:a7:
                    75:32:78:d2:15:5d:e8:d1:8d:c6:c9:cb:c1:e5:d3:
                    1d:d8:9f:3d:18:ee:b5:bf:3e:f2:7d:b7:bb:f9:52:
                    61:ce:bb:b3:55:c1:31:81:53:cd:d5:99:99:91:16:
                    99:21:db:a3:dd:1e:02:42:be:f9:6a:b9:29:28:50:
                    65:50:7c:f7:f8:e3:cd:ab:60:01:5c:31:49:10:ef:
                    89:0b:99:46:c4:d8:51:3a:96:5d:c5:8b:b8:0c:66:
                    44:b6:fd:74:74:34:bf:2a:71:6d:85:31:eb:5e:88:
                    ca:33:13:3b:e9:13:67:a6:48:4f:6e:32:be:c7:a3:
                    bb:d8:8a:66:4d:e1:28:f4:d8:38:8a:a9:e8:41:7c:
                    c6:dc:ff:2c:9e:74:11:f7:f1:0c:e8:c0:c1:92:0a:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5D:DD:13:BD:0C:51:F3:91:27:31:8A:7F:13:DB:A3:AC:80:03:E1
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/eb8c044ae5a61ae3659f56b23afd959cf786c296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:be:fe:c1:5b:4c:4f:b6:6d:dd:20:db:26:26:cb:15:52:d2:
         83:d1:58:eb:e4:07:de:19:6b:09:41:85:ae:88:f1:82:ef:93:
         2d:39:41:17:fb:67:33:2d:26:66:29:0c:54:9b:d9:f8:c9:21:
         2d:26:6f:46:c0:05:0c:32:a9:4e:94:a0:47:87:18:a5:82:26:
         3c:83:d3:49:d1:e6:08:5a:66:a6:bf:22:1e:00:53:61:75:95:
         de:e7:8f:95:fb:cf:13:a2:71:6c:e1:16:38:b8:9a:3a:d4:e5:
         cd:f3:be:69:9c:42:c8:0f:f2:41:31:ee:64:09:97:ef:d6:be:
         68:57:7f:20:0c:74:cf:71:4f:b8:8b:89:05:25:fa:5e:fb:46:
         29:c3:f3:b5:e8:b4:b8:06:33:36:f3:39:45:7c:2f:e8:7e:25:
         fe:b8:5b:fd:57:7b:ec:d3:66:ed:d4:ec:72:8e:dc:4d:4d:6d:
         ef:47:67:1a:f7:7e:63:1c:bf:4b:8a:f1:8c:fd:72:8d:a7:a5:
         89:85:ea:68:8f:77:37:f7:50:d5:81:df:dc:b8:47:15:38:cf:
         da:33:88:de:9b:46:82:46:bc:da:18:80:13:f7:3f:db:c7:b7:
         4c:56:61:9c:73:bb:38:ce:52:81:87:6e:98:21:90:67:b2:c4:
         cd:48:e1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org