Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/2a310b4ebec6703267b5901769e826a4d28963bb.roa
File:                     2a310b4ebec6703267b5901769e826a4d28963bb.roa (raw, json)
Hash identifier:          //e3/v47buovjZdUqbNuywdc1GGRXXDIsCLMfZNNZAo=
Subject key identifier:   38:38:83:34:16:BF:61:87:5E:6A:05:CB:42:7A:F8:D2:7C:A9:9A:18
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EBDFA
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/2a310b4ebec6703267b5901769e826a4d28963bb.roa
Signing time:             Wed 24 Mar 2021 14:37:57 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966138 (0xebdfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=2a310b4ebec6703267b5901769e826a4d28963bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d2:24:ed:8f:46:ac:50:93:47:bb:67:39:e2:
                    dd:f8:77:33:35:8b:05:97:2e:cc:01:f9:83:ae:16:
                    04:e5:3e:8a:e9:34:6a:61:e7:f6:2d:dc:ad:23:2c:
                    1b:f4:ac:2f:64:ba:a5:fd:c8:62:5f:38:ee:bb:3b:
                    23:52:24:0f:26:b1:a2:8e:bd:27:ad:9e:17:b3:ee:
                    75:c7:55:7b:f9:3e:bd:f1:41:77:4e:2a:49:87:ac:
                    31:32:3d:90:36:a9:b4:2c:82:bb:ac:0d:ec:e7:f4:
                    93:fd:00:98:de:cb:67:15:86:d6:f6:d9:3a:b5:46:
                    49:cb:27:58:44:2e:72:ec:c6:23:84:fb:5e:bc:70:
                    09:37:c1:44:f4:88:f0:9c:11:92:c7:68:f3:47:c1:
                    62:31:86:1f:58:d2:33:8a:eb:8b:e2:f0:a5:2c:4d:
                    aa:99:22:19:da:c2:77:6f:1f:4f:5a:f5:76:2b:47:
                    60:e0:9e:64:ef:b8:01:f1:02:31:fe:2c:08:81:50:
                    a7:d7:70:a5:d5:01:33:b9:b2:6e:62:6d:0c:e4:fb:
                    61:c0:0d:c3:dd:4c:53:bf:cf:3b:4a:41:76:ce:81:
                    22:22:52:20:b4:d4:c5:7d:92:02:c6:27:85:ba:42:
                    bd:07:1b:ea:6c:97:46:d1:76:58:4b:67:e3:8e:bb:
                    22:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:38:83:34:16:BF:61:87:5E:6A:05:CB:42:7A:F8:D2:7C:A9:9A:18
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/2a310b4ebec6703267b5901769e826a4d28963bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:cd:5d:7e:d4:22:55:bb:e8:f8:84:fc:1d:ae:5b:04:59:67:
         6f:d8:df:fe:7c:31:a7:0c:66:df:88:0a:22:23:06:09:af:3c:
         39:e2:aa:ed:4f:8f:69:37:f9:fd:69:43:fd:f3:0c:70:de:ba:
         e8:98:e9:b9:94:29:1d:b0:64:09:c5:45:8e:7e:07:ec:b3:ba:
         c2:8a:16:70:72:7f:80:3c:9c:85:bb:84:4f:11:b0:a3:3a:37:
         5b:a5:ca:2f:f5:93:ea:57:bd:12:da:da:2b:cb:56:60:98:ae:
         c3:6b:16:05:88:f7:e1:5b:74:de:e7:09:ae:49:08:40:45:88:
         c4:db:3b:e6:e6:37:79:48:43:57:45:d4:a8:b1:1b:76:e0:9c:
         4f:1b:d7:00:ab:72:03:e7:4e:96:08:f5:e9:48:50:9c:de:3d:
         54:ed:e3:1c:4e:8b:82:6d:6c:a7:c8:2c:f1:58:f5:6d:c7:9a:
         d1:c4:66:ab:12:ac:2f:7e:a1:eb:fb:7c:92:ed:67:b0:f1:79:
         e5:8d:38:75:8d:f3:89:aa:bb:d4:d5:09:d2:de:2f:f5:9f:3f:
         2a:59:c1:da:9c:26:59:3d:6e:ff:a7:1a:59:61:b3:c5:09:01:
         c4:d2:cc:da:7f:7d:94:20:7f:89:ab:bb:1c:7c:5e:98:14:78:
         14:9f:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org