Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/10c5aaa42869bfcafc1ae10548c80a3a971c3f1d.roa
File:                     10c5aaa42869bfcafc1ae10548c80a3a971c3f1d.roa (raw, json)
Hash identifier:          lj1QmfeKLlNvh22iGR6jJTLWpLC75zGI56+jR5bslSY=
Subject key identifier:   A8:06:68:66:71:C1:06:69:BA:85:36:6B:5F:7A:D1:9F:9B:07:8A:C1
Certificate issuer:       /CN=e6245b6703466ee65faded994e4250d58dcd651f
Certificate serial:       041A
Authority key identifier: 7B:F5:EB:DF:F4:09:D5:9E:D0:39:A6:33:9B:B1:44:C1:54:3E:BF:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6245b6703466ee65faded994e4250d58dcd651f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/10c5aaa42869bfcafc1ae10548c80a3a971c3f1d.roa
Signing time:             Thu 14 Oct 2021 16:28:20 +0000
ROA not before:           Thu 14 Oct 2021 03:00:00 +0000
ROA not after:            Sat 14 Oct 2023 03:00:00 +0000
asID:                     16921
IP address blocks:        179.61.64.0/20 maxlen: 24
                          200.81.112.0/21 maxlen: 24
                          200.108.120.0/21 maxlen: 24
                          2803:1c80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6245b6703466ee65faded994e4250d58dcd651f
        Validity
            Not Before: Oct 14 03:00:00 2021 GMT
            Not After : Oct 14 03:00:00 2023 GMT
        Subject: CN=10c5aaa42869bfcafc1ae10548c80a3a971c3f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:9f:95:93:a3:ed:b8:43:a7:25:a3:3f:04:
                    8d:af:b2:70:7e:e5:56:47:a2:32:87:e2:fa:f2:13:
                    dd:6f:b9:6c:24:e4:0e:cd:9d:5f:06:44:c7:56:1a:
                    6a:4f:22:1c:b7:72:cd:f8:2c:7d:18:11:54:72:60:
                    5c:8a:41:19:a3:ef:bc:76:2e:fc:29:62:2b:eb:36:
                    c7:56:9e:d6:80:60:af:88:94:81:3b:96:45:13:79:
                    9f:18:ff:9f:fa:08:aa:11:63:26:5a:a9:8f:d2:fe:
                    47:aa:84:70:eb:2f:d0:1e:1b:32:94:9a:04:7d:ed:
                    21:79:aa:52:38:dc:00:ed:8f:0d:21:51:dc:49:08:
                    de:cb:20:ff:be:4e:84:c2:70:e5:f3:fd:6c:13:23:
                    71:65:a0:10:a8:17:5f:0f:67:f6:6a:da:47:83:5f:
                    b7:90:59:7f:ba:e9:c2:92:69:27:a8:3b:52:6d:35:
                    df:09:fd:1b:2d:a3:f4:e8:bd:a6:08:8f:8f:1a:cb:
                    ba:cf:c7:3c:98:6b:5d:45:6b:90:45:30:73:e2:40:
                    c3:e7:74:7a:83:c9:32:7b:fe:85:fd:b7:0c:36:66:
                    f9:f1:25:4a:bb:1f:19:7b:88:4f:43:17:f7:51:a9:
                    97:9b:25:fd:e6:1b:92:6d:2f:b5:d1:fc:a9:7d:97:
                    a9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:06:68:66:71:C1:06:69:BA:85:36:6B:5F:7A:D1:9F:9B:07:8A:C1
            X509v3 Authority Key Identifier:
                keyid:7B:F5:EB:DF:F4:09:D5:9E:D0:39:A6:33:9B:B1:44:C1:54:3E:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6245b6703466ee65faded994e4250d58dcd651f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/10c5aaa42869bfcafc1ae10548c80a3a971c3f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0d170188-db10-4d98-a331-37a43cd3ffcf/e6245b6703466ee65faded994e4250d58dcd651f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.64.0/20
                  200.81.112.0/21
                  200.108.120.0/21
                IPv6:
                  2803:1c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:39:11:65:e5:5a:87:ab:20:3e:4f:23:c3:c3:4f:c9:4f:58:
         7b:7e:e6:49:60:5a:11:2d:25:0b:9c:2b:3e:62:c0:cf:fc:de:
         43:6e:fd:80:09:1c:d7:07:b1:a9:06:25:7e:d5:95:6a:ae:d8:
         76:81:d3:7b:36:6b:8a:73:b1:65:f5:d3:4b:09:8f:6f:86:2b:
         5d:b8:19:34:84:47:d2:1f:3d:2f:45:46:0e:19:df:8f:c0:8a:
         ff:3d:fe:ad:b6:fa:76:22:e7:be:b2:4d:f6:fa:d3:6e:40:32:
         5f:0d:ee:50:50:40:f0:19:7e:6c:af:c5:53:9e:e4:31:ec:31:
         ae:20:64:ce:36:3b:f4:4a:8d:a1:38:1d:fe:26:d4:85:66:6a:
         f3:66:1e:e8:48:d9:20:dc:46:62:fa:57:6d:be:4c:31:f8:68:
         b6:1c:9b:c6:93:29:ac:eb:b0:fe:2c:14:5b:4e:59:b9:69:7f:
         c1:e3:22:d0:51:55:c7:87:84:b7:92:1a:b7:86:03:66:fd:1c:
         9f:c1:53:fc:de:44:78:2b:6c:3c:b6:03:73:bf:e4:7d:bb:83:
         70:02:8d:56:1f:e5:31:21:51:a3:67:07:e2:d1:b7:cf:65:2b:
         8a:d5:b2:3f:07:6e:3c:75:b9:87:4f:a7:a5:f9:df:b1:d0:2f:
         19:1c:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org