Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/ea0aa56ac07f351da573f861776807945bf493e0.roa
File:                     ea0aa56ac07f351da573f861776807945bf493e0.roa (raw, json)
Hash identifier:          fGSES5jsUBWaBNgJdSKgZqxYTWoXGXwyIczER7I4umg=
Subject key identifier:   49:D5:8C:E5:33:DB:66:81:53:6E:C7:89:7E:A6:73:6C:7B:D2:36:DE
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EAFB7
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/ea0aa56ac07f351da573f861776807945bf493e0.roa
Signing time:             Wed 24 Mar 2021 14:37:48 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962487 (0xeafb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=ea0aa56ac07f351da573f861776807945bf493e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:d0:2d:b6:bc:73:4f:60:6d:fb:0b:d6:f1:
                    54:0d:51:12:2e:ba:f3:a6:f4:da:ee:f2:f3:d5:87:
                    01:c9:ed:5c:f2:47:bd:4c:bb:cb:2b:26:9d:3a:2c:
                    96:39:88:b5:c0:19:98:77:86:be:d2:0d:af:0c:60:
                    53:45:88:de:1d:0d:0c:fb:33:2b:12:ae:85:33:6d:
                    51:ea:97:3f:b8:91:07:80:a8:99:bb:15:c3:07:32:
                    c5:72:c3:4e:5c:60:6d:07:ec:d4:f8:09:41:b8:66:
                    1f:32:fb:77:40:4a:28:11:49:22:39:54:22:03:4f:
                    a2:aa:55:4a:eb:d9:6b:e5:b4:4e:e4:da:e4:55:75:
                    a4:52:00:9a:b9:cf:a1:3a:f9:a6:69:9b:b5:b1:2d:
                    c8:52:05:d0:b0:21:38:c3:75:ea:a6:23:af:64:38:
                    9b:c5:39:5d:cf:d2:58:2f:d8:ca:58:36:f9:6e:d8:
                    9e:c2:7c:7a:9d:08:9a:f8:f2:b4:23:02:65:23:4b:
                    bd:5d:40:2d:79:85:7f:23:ac:2f:4a:df:49:9b:13:
                    f4:39:09:04:46:d4:16:b4:f7:27:fe:e0:0e:fd:5a:
                    6f:5e:56:bc:41:17:80:82:37:ef:23:68:61:a9:28:
                    42:bd:b4:ab:21:a6:20:0b:dd:ea:e2:af:ef:ce:4c:
                    1b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D5:8C:E5:33:DB:66:81:53:6E:C7:89:7E:A6:73:6C:7B:D2:36:DE
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/ea0aa56ac07f351da573f861776807945bf493e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:bb:91:57:41:72:7b:14:5e:a9:70:2d:d6:11:71:b3:5d:e5:
         3e:1e:31:79:5d:6e:83:4f:cc:cd:14:bc:c9:5c:80:d8:33:4b:
         41:72:06:4e:54:8d:f1:38:8f:1d:12:ff:5a:94:46:db:60:55:
         4c:ef:54:d0:e1:f7:0c:0a:40:0a:ed:47:42:26:5e:da:c6:ff:
         41:3b:a5:52:f6:48:80:5e:ef:cb:7f:fd:0c:cf:f7:58:f6:35:
         7d:20:3c:a4:89:ad:c7:01:6f:29:df:10:cd:7c:1e:b7:4e:7d:
         83:e2:53:0a:a9:52:5b:61:ad:06:fe:6c:8e:44:6f:4e:36:ea:
         54:1e:19:ad:d1:bf:e1:ad:44:30:a1:d5:c6:e5:97:65:06:2f:
         de:26:47:c3:3a:06:ff:50:2f:f2:8c:c8:fc:84:19:87:5c:36:
         42:bb:2b:2c:2d:be:f2:94:78:a9:ff:26:77:03:6f:1e:64:76:
         58:63:c0:60:3f:27:2e:f0:12:e1:16:b0:29:00:af:8d:6b:8f:
         98:dc:e6:e7:21:0c:c5:8e:74:57:51:db:52:08:ec:6a:51:09:
         9e:d5:d8:76:1a:ab:51:dc:a4:32:e4:48:19:68:64:4f:00:ed:
         0a:91:ea:b6:8b:d5:12:40:80:84:7c:ed:64:ec:dc:18:70:4a:
         0e:7e:a4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org