Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/fff3d0c150af8fae9db3df12c429152810eb18c9.roa
File:                     fff3d0c150af8fae9db3df12c429152810eb18c9.roa (raw, json)
Hash identifier:          a9Ajf0kOfJTTgmq6yMqysKwcBfAJrQBfeMPTNKPVGXw=
Subject key identifier:   67:63:3A:42:E8:59:DC:13:B6:9B:B8:D3:AB:DA:6B:38:93:5A:C4:7D
Certificate issuer:       /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial:       1AB491
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/fff3d0c150af8fae9db3df12c429152810eb18c9.roa
Signing time:             Wed 07 Sep 2022 22:31:00 +0000
ROA not before:           Wed 07 Sep 2022 20:49:37 +0000
ROA not after:            Sat 07 Sep 2024 20:49:37 +0000
asID:                     262145
IP address blocks:        190.211.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1750161 (0x1ab491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
        Validity
            Not Before: Sep  7 20:49:37 2022 GMT
            Not After : Sep  7 20:49:37 2024 GMT
        Subject: CN=fff3d0c150af8fae9db3df12c429152810eb18c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:19:6c:87:c7:a7:07:8e:34:c7:d0:56:c5:
                    13:ec:b9:ee:e0:6f:76:06:97:95:98:e7:66:5b:f5:
                    0c:a5:e6:56:e7:c1:7e:d7:a5:d1:ef:bc:ef:e2:3b:
                    66:33:ac:09:bb:f7:4d:04:44:71:4a:42:16:50:11:
                    3c:24:84:b8:11:ee:7f:0e:1d:66:ee:c0:8d:0f:94:
                    3e:52:14:a8:0b:36:9e:a9:d2:f9:a4:69:52:e9:ab:
                    5a:2a:04:09:99:ef:da:c9:56:1d:34:d1:e7:0a:b4:
                    d2:5c:f1:ec:8a:c2:4c:d5:86:83:9b:52:0f:81:50:
                    e8:e6:4c:60:6d:01:0d:14:3d:3a:e6:af:ca:d4:52:
                    e0:32:58:70:b0:d7:f4:bc:ef:38:b6:d6:8a:5f:c9:
                    35:96:6a:be:aa:5d:0d:fc:d3:24:14:92:98:52:5a:
                    52:e2:db:c5:f4:42:1b:fe:64:84:3f:ca:06:41:e2:
                    71:ba:93:53:cf:0e:a7:4f:64:9e:40:4b:f8:db:9b:
                    40:19:a6:00:f0:07:b4:00:15:b5:e5:99:4e:d3:d1:
                    95:57:b1:3a:e7:67:eb:97:ea:b3:61:de:f8:75:b4:
                    f4:a6:cc:c8:1b:22:9a:bf:e9:66:ff:6e:70:07:8e:
                    55:e7:bf:da:1d:8c:ae:f0:37:40:e8:b0:91:a3:de:
                    d7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:63:3A:42:E8:59:DC:13:B6:9B:B8:D3:AB:DA:6B:38:93:5A:C4:7D
            X509v3 Authority Key Identifier:
                keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/fff3d0c150af8fae9db3df12c429152810eb18c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:85:b1:d2:7f:c2:a7:73:c3:07:6d:7e:d2:c4:15:fe:a9:79:
         55:92:2d:79:1f:10:05:c3:36:ad:a9:87:1e:26:6d:01:73:c4:
         c7:11:d9:e9:81:42:0b:6c:08:69:39:46:66:b6:02:43:85:b5:
         04:fd:e1:5b:3b:8f:02:ef:69:96:c9:b1:5e:fe:5f:cc:00:0b:
         91:4d:ce:43:89:68:08:85:ff:4e:42:77:77:7c:88:fe:e1:f2:
         31:c8:0d:fb:82:1b:ac:fb:f6:34:ea:0b:59:81:cb:96:74:2d:
         a0:cb:a3:e3:da:ec:f2:1c:65:85:31:45:89:fc:ce:70:43:a0:
         11:82:d7:4b:85:53:03:d7:2c:4e:fd:96:d2:19:ed:b6:d5:e5:
         2d:9d:24:e9:14:d1:4a:0b:2b:68:0c:a6:b4:3b:c4:f6:ab:db:
         e4:f1:aa:c9:25:ba:0a:47:90:c9:73:07:2b:04:6c:dc:99:64:
         98:fe:da:56:dd:5c:d8:51:f5:8f:9a:33:2f:64:7e:f3:c6:d2:
         9b:b7:61:45:08:6d:b1:ef:84:fe:e5:67:93:c8:89:d4:67:67:
         7b:d1:45:df:98:dd:10:aa:ff:9c:a7:be:98:ec:55:dd:96:e3:
         17:d1:61:90:ff:87:01:b2:2a:e9:a7:b0:94:ed:47:d5:38:ff:
         e1:b7:6e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org