Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/6f673b594239d706509220e35d07663cdf10125f.roa
File:                     6f673b594239d706509220e35d07663cdf10125f.roa (raw, json)
Hash identifier:          dfN6pAIyZYGpRRN9IWq7V8Y0RZGrddwmfrYXDkQmoic=
Subject key identifier:   E6:59:E6:AA:91:6E:CB:A2:73:E5:5B:35:19:58:63:2E:8A:19:12:96
Certificate issuer:       /CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
Certificate serial:       1E43B6
Authority key identifier: E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/6f673b594239d706509220e35d07663cdf10125f.roa
Signing time:             Thu 09 Feb 2023 04:37:17 +0000
ROA not before:           Wed 11 Aug 2021 03:00:00 +0000
ROA not after:            Sat 12 Aug 2023 03:00:00 +0000
asID:                     26617
IP address blocks:        181.189.129.0/24 maxlen: 24
                          181.189.130.0/23 maxlen: 24
                          181.189.159.0/24 maxlen: 24
                          190.14.0.0/24 maxlen: 24
                          190.14.1.0/24 maxlen: 24
                          190.111.0.0/20 maxlen: 24
                          190.111.16.0/24 maxlen: 24
                          190.111.18.0/23 maxlen: 24
                          190.111.20.0/22 maxlen: 24
                          190.111.25.0/24 maxlen: 24
                          190.111.26.0/23 maxlen: 24
                          190.111.28.0/24 maxlen: 24
                          200.35.160.0/23 maxlen: 24
                          200.35.162.0/24 maxlen: 24
                          200.35.163.0/24 maxlen: 24
                          200.35.164.0/24 maxlen: 24
                          200.35.167.0/24 maxlen: 24
                          200.35.168.0/21 maxlen: 24
                          200.35.176.0/22 maxlen: 24
                          200.35.180.0/23 maxlen: 24
                          200.35.182.0/24 maxlen: 24
                          200.35.184.0/22 maxlen: 24
                          200.35.188.0/23 maxlen: 24
                          200.35.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1983414 (0x1e43b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
        Validity
            Not Before: Aug 11 03:00:00 2021 GMT
            Not After : Aug 12 03:00:00 2023 GMT
        Subject: CN=6f673b594239d706509220e35d07663cdf10125f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:47:43:b5:e0:77:50:59:10:d7:0a:27:00:
                    af:0e:6f:2b:d8:7b:ff:3f:f1:ef:37:35:a9:75:57:
                    17:34:d3:ed:27:c8:1b:2f:ff:4a:4b:d1:05:58:78:
                    2c:87:c2:98:54:6f:40:a2:33:92:63:e4:22:40:62:
                    e4:dd:5b:99:c3:a3:0d:3a:13:61:a4:f4:92:ce:21:
                    2f:d0:c5:7d:d7:54:0d:95:2b:26:ea:14:4a:f2:fb:
                    96:98:2c:21:39:f2:ee:65:9e:ac:5b:cb:ad:88:14:
                    4b:07:1e:7d:b6:c8:18:fd:28:6b:04:e1:01:e7:4d:
                    51:d1:cc:05:70:86:94:27:07:28:7f:20:89:22:67:
                    b5:b3:2b:2a:b0:87:8a:ec:05:21:bc:44:86:84:f0:
                    47:f4:cc:aa:2a:ab:51:10:35:d2:71:99:3c:5d:76:
                    8a:02:a0:5f:13:e3:67:88:c6:bd:07:f9:e1:06:1f:
                    4a:48:5f:c1:ce:6f:3f:8b:f1:aa:b5:01:57:80:b6:
                    06:09:79:40:3b:7c:53:4f:9b:de:d6:00:d0:d2:46:
                    c3:39:46:99:54:dd:cc:91:43:d5:3e:a3:93:91:11:
                    d2:51:4f:24:aa:25:a2:a4:c4:84:34:aa:de:2f:0f:
                    11:6b:4c:4c:6e:7f:04:fe:0f:5a:92:27:a8:fd:c3:
                    ff:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:59:E6:AA:91:6E:CB:A2:73:E5:5B:35:19:58:63:2E:8A:19:12:96
            X509v3 Authority Key Identifier:
                keyid:E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/6f673b594239d706509220e35d07663cdf10125f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9fa677563ca5bfe6068216c74122a5d7cb2db27a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.129.0-181.189.131.255
                  181.189.159.0/24
                  190.14.0.0/23
                  190.111.0.0-190.111.16.255
                  190.111.18.0-190.111.23.255
                  190.111.25.0-190.111.28.255
                  200.35.160.0-200.35.164.255
                  200.35.167.0-200.35.182.255
                  200.35.184.0-200.35.190.255

    Signature Algorithm: sha256WithRSAEncryption
         a2:b0:6b:1f:1c:8b:79:9e:28:e3:37:ed:35:41:90:e2:61:d0:
         8c:fa:e4:f6:df:6f:4e:95:4e:d5:35:64:b0:10:4b:86:5d:3c:
         12:82:da:01:40:e9:ad:4a:d7:0a:02:ea:3d:4c:69:27:ef:8a:
         2e:50:ba:06:87:84:cf:bb:30:a8:b0:4c:12:93:19:ff:cf:24:
         a1:e6:0c:67:9f:bd:3e:9e:24:fe:ad:7f:64:e7:6b:ca:7f:c2:
         05:10:db:e1:e4:f2:9b:e8:4d:e6:4f:5d:42:4d:7f:f4:37:07:
         ce:5f:e6:57:55:13:9f:b8:98:d9:2c:60:79:9a:9b:08:47:02:
         a8:8e:4a:05:e0:2b:76:22:4d:af:98:bb:6a:22:ce:8b:46:7c:
         13:d1:a5:dc:bc:e7:20:6d:68:53:fb:72:9e:ec:d2:39:e2:ea:
         68:59:3c:b7:e3:58:17:bf:6c:71:b6:72:df:71:c0:da:c5:b2:
         f2:a6:8a:8a:31:e8:6e:30:df:65:31:0e:f6:97:9a:0d:9a:0b:
         4c:c3:8f:64:94:f6:d6:c2:e2:bd:e3:88:41:a2:f4:a4:d7:b3:
         a2:36:ad:da:19:2d:3d:5e:c9:55:69:6e:ca:c9:27:70:c4:fe:
         43:6f:43:78:d1:dd:f7:ca:33:d5:ca:51:4d:b5:05:ae:1c:38:
         3e:43:50:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org