Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/92061f1e0e688148fc829f09cc1b6dfaa32e5ebd.roa
File:                     92061f1e0e688148fc829f09cc1b6dfaa32e5ebd.roa (raw, json)
Hash identifier:          piwJVY4IabDNl6Xvub/5Ikqxv60QtbwvoYI/u+zrNJY=
Subject key identifier:   0D:1B:A2:D8:47:B2:61:92:6D:FE:31:F4:9D:95:CA:A8:69:67:BA:FC
Certificate issuer:       /CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
Certificate serial:       126355
Authority key identifier: E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/92061f1e0e688148fc829f09cc1b6dfaa32e5ebd.roa
Signing time:             Mon 11 Oct 2021 16:44:34 +0000
ROA not before:           Thu 12 Aug 2021 03:00:00 +0000
ROA not after:            Sat 12 Aug 2023 03:00:00 +0000
asID:                     26617
IP address blocks:        181.189.129.0/24 maxlen: 24
                          181.189.130.0/23 maxlen: 24
                          181.189.159.0/24 maxlen: 24
                          190.111.0.0/20 maxlen: 24
                          190.111.16.0/24 maxlen: 24
                          190.111.18.0/23 maxlen: 24
                          190.111.20.0/22 maxlen: 24
                          190.111.25.0/24 maxlen: 24
                          190.111.26.0/23 maxlen: 24
                          190.111.28.0/24 maxlen: 24
                          200.35.160.0/23 maxlen: 24
                          200.35.162.0/24 maxlen: 24
                          200.35.163.0/24 maxlen: 24
                          200.35.164.0/24 maxlen: 24
                          200.35.167.0/24 maxlen: 24
                          200.35.168.0/21 maxlen: 24
                          200.35.176.0/22 maxlen: 24
                          200.35.180.0/23 maxlen: 24
                          200.35.182.0/24 maxlen: 24
                          200.35.184.0/22 maxlen: 24
                          200.35.188.0/23 maxlen: 24
                          200.35.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1205077 (0x126355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa677563ca5bfe6068216c74122a5d7cb2db27a
        Validity
            Not Before: Aug 12 03:00:00 2021 GMT
            Not After : Aug 12 03:00:00 2023 GMT
        Subject: CN=92061f1e0e688148fc829f09cc1b6dfaa32e5ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:b4:5a:22:28:ce:a3:12:2f:f6:bd:aa:a5:
                    65:e5:d6:e1:d9:4a:04:d1:1f:9a:f0:1f:10:48:05:
                    d6:55:d2:0c:0b:fe:50:3a:d3:64:25:5f:71:15:99:
                    d2:e4:f7:19:22:39:ea:4f:c4:ee:b1:71:13:bc:7d:
                    15:69:cd:45:16:c1:58:f9:52:b8:4a:99:1d:20:7a:
                    0b:99:c5:ad:0d:ad:cf:a3:51:7d:10:4b:88:d8:a2:
                    cb:f9:e7:9f:7a:ed:94:6f:11:23:46:df:ef:d8:31:
                    31:80:4b:5f:5d:af:26:26:8b:04:b8:19:50:aa:62:
                    65:51:3c:ce:af:90:f8:27:eb:80:18:99:c7:19:9e:
                    95:9d:81:b8:af:a2:02:4c:cd:f2:e0:5b:bd:eb:7a:
                    b1:2b:3f:ca:f4:1b:d8:61:a3:fa:c2:0c:fb:5b:bf:
                    52:8a:c9:c2:db:3d:6d:76:56:0e:92:d6:d1:6c:27:
                    8d:c4:33:12:56:c3:91:79:1e:b7:f9:ee:50:a7:49:
                    3d:0d:bc:09:df:18:24:d4:6c:74:60:6a:fb:44:6e:
                    06:8a:cf:ab:8a:1c:fb:cb:64:f2:69:49:59:3a:f9:
                    73:63:91:77:e6:62:44:40:b7:4c:1e:63:d8:aa:ae:
                    30:c6:43:26:ed:b1:94:25:53:b9:2d:00:d5:82:5f:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1B:A2:D8:47:B2:61:92:6D:FE:31:F4:9D:95:CA:A8:69:67:BA:FC
            X509v3 Authority Key Identifier:
                keyid:E6:D0:FB:F5:F7:54:60:F0:31:D8:08:B8:92:07:1C:B8:BE:CA:A4:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fa677563ca5bfe6068216c74122a5d7cb2db27a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/92061f1e0e688148fc829f09cc1b6dfaa32e5ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/9fa677563ca5bfe6068216c74122a5d7cb2db27a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.129.0-181.189.131.255
                  181.189.159.0/24
                  190.111.0.0-190.111.16.255
                  190.111.18.0-190.111.23.255
                  190.111.25.0-190.111.28.255
                  200.35.160.0-200.35.164.255
                  200.35.167.0-200.35.182.255
                  200.35.184.0-200.35.190.255

    Signature Algorithm: sha256WithRSAEncryption
         62:f9:31:57:e7:91:b2:6c:17:39:fe:38:81:88:ff:d7:81:78:
         a6:a7:e9:78:83:ce:88:f8:b2:86:49:7c:cb:8f:c1:f6:d3:cf:
         12:f3:bb:ae:b8:d4:e7:83:91:26:7b:f9:ab:af:9f:95:d6:c9:
         60:e2:a7:bf:fb:86:43:8d:54:96:86:f6:bb:1f:fb:e5:be:f0:
         29:17:8d:a1:5e:68:6e:5d:1d:b2:a4:fd:8c:93:26:58:1f:2c:
         ae:52:23:c2:cc:99:61:c1:ca:08:55:e6:5c:fc:97:f0:43:9c:
         d1:54:f2:d1:bc:13:e0:75:98:bf:28:e1:2d:d0:ca:a4:8d:bb:
         83:24:c8:b8:dc:5f:c3:18:79:7c:d7:03:e7:20:49:5d:7d:05:
         ba:db:54:e4:a2:01:e2:07:68:fb:06:7c:52:93:32:94:aa:53:
         d4:22:b7:eb:97:9f:9d:0f:37:6b:79:38:ff:cd:71:07:87:79:
         50:0c:6c:ae:c4:c2:90:f1:d0:d2:2a:f8:f3:c9:a2:aa:5a:1b:
         15:e5:9c:01:7b:11:5b:ef:dd:a3:99:66:11:2a:77:4a:26:e4:
         a7:57:ae:eb:b1:de:9c:80:51:e3:22:83:a0:1e:dc:84:1f:c7:
         60:cb:cf:b6:a0:ee:07:b3:a0:28:26:a0:e5:0b:87:23:f0:d5:
         71:d4:0b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:38 2023 by rpki-client on console-fra.rpki-client.org