Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/a74fe069f3e1c1782d7880b293eed76d8ead4958.roa
File:                     a74fe069f3e1c1782d7880b293eed76d8ead4958.roa (raw, json)
Hash identifier:          vD4T9hF9sL3km7eMe0u57neP/E5oLcpeCA+htUfi/xo=
Subject key identifier:   15:AE:4E:0F:08:84:23:89:3D:AB:B4:3E:89:E6:E5:5C:74:3E:A0:6F
Certificate issuer:       /CN=62a782cb41463cc649a6c52c762bea430cdc06b2
Certificate serial:       094800
Authority key identifier: B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a782cb41463cc649a6c52c762bea430cdc06b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/a74fe069f3e1c1782d7880b293eed76d8ead4958.roa
Signing time:             Wed 24 Mar 2021 14:45:03 +0000
ROA not before:           Wed 24 Mar 2021 14:45:03 +0000
ROA not after:            Tue 24 Mar 2026 14:45:03 +0000
asID:                     27742
IP address blocks:        190.143.246.0/23 maxlen: 24
                          190.143.250.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608256 (0x94800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a782cb41463cc649a6c52c762bea430cdc06b2
        Validity
            Not Before: Mar 24 14:45:03 2021 GMT
            Not After : Mar 24 14:45:03 2026 GMT
        Subject: CN=a74fe069f3e1c1782d7880b293eed76d8ead4958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:fe:7f:5c:f2:67:be:0a:ee:0d:04:ce:70:
                    d7:81:bc:84:56:8c:a9:70:93:9e:33:39:00:f4:0e:
                    27:71:7d:28:af:71:04:73:53:b6:fd:01:22:22:8b:
                    6c:88:63:ad:4d:b3:e8:71:08:a2:d4:79:16:58:d5:
                    9a:41:a6:b2:88:81:b2:94:49:19:84:9c:47:68:15:
                    5d:d3:89:75:26:7f:ab:4b:d8:9c:bb:10:f8:80:2b:
                    2b:22:d5:18:1c:fe:35:27:d7:74:ca:23:72:d3:81:
                    9f:7a:36:9e:23:24:81:91:b7:33:22:a4:59:13:50:
                    6a:b8:79:c8:24:ba:a7:a9:5b:77:eb:8b:bc:df:ea:
                    e3:bd:58:4d:5b:46:49:a7:ac:ea:d2:53:c3:e3:3b:
                    7a:7b:59:13:60:f8:66:1b:ea:70:d0:29:74:73:39:
                    9b:18:79:af:b7:83:eb:cd:85:0f:c9:80:86:bd:04:
                    6f:85:31:69:eb:54:ee:0f:2c:ff:28:67:46:80:0a:
                    f3:05:19:03:8a:d0:63:cd:4d:2a:3a:a8:79:19:6f:
                    8c:91:d6:b3:39:f5:25:b7:2a:47:15:6f:99:89:08:
                    ca:3a:30:d6:13:3a:33:2b:1e:c6:51:14:cf:25:b4:
                    92:75:d9:22:73:f1:ee:c2:5f:b6:73:7a:35:45:22:
                    3b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AE:4E:0F:08:84:23:89:3D:AB:B4:3E:89:E6:E5:5C:74:3E:A0:6F
            X509v3 Authority Key Identifier:
                keyid:B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a782cb41463cc649a6c52c762bea430cdc06b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/a74fe069f3e1c1782d7880b293eed76d8ead4958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/62a782cb41463cc649a6c52c762bea430cdc06b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.246.0/23
                  190.143.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:3b:81:4b:7f:45:f6:9f:62:9c:43:bb:62:69:a3:a6:4a:d6:
         68:a3:06:8e:18:9b:cc:79:07:15:aa:06:d1:4f:b6:53:9b:ac:
         fe:cb:a4:93:16:cc:ce:92:ca:12:25:84:76:96:71:59:32:61:
         1b:12:cf:9c:8b:f8:45:59:0d:eb:99:e5:ab:e3:55:d7:eb:78:
         e4:ec:74:0c:22:a1:5d:25:3b:ba:23:06:27:70:44:86:5d:2e:
         42:61:a3:d5:26:03:54:d3:1d:fb:a8:bf:94:82:70:e8:81:26:
         0a:4d:b8:6f:b6:15:b1:3e:63:09:13:01:9b:83:6c:5e:ee:1d:
         f0:ce:44:53:77:4c:d8:36:90:5e:c2:a8:a0:90:e8:de:23:e8:
         ec:d5:58:3a:5d:29:56:d0:a1:02:69:47:9f:ff:b3:68:73:91:
         f2:cd:f8:d9:43:de:26:af:b3:fc:d4:28:2e:e2:31:bd:53:41:
         d1:9f:bf:f9:9c:a3:77:ee:6c:af:eb:f6:2d:06:ab:aa:1c:36:
         fa:cb:a4:b2:3f:f9:8d:56:97:68:21:ed:7a:3a:28:e9:15:de:
         ab:da:13:96:41:e2:90:8a:e0:d5:d3:ee:9e:3b:54:f9:f2:d4:
         b7:85:fa:07:09:e2:e6:95:3e:c4:3a:f6:18:4e:bc:bf:06:1c:
         3a:17:3c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org