Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/1a9c3299826d2ef30ed8604928416b8c808d54aa.roa
File:                     1a9c3299826d2ef30ed8604928416b8c808d54aa.roa (raw, json)
Hash identifier:          kfVJ+0tgSlkVLC70v02sWieJfCMA41ba4lfxPmTWJJI=
Subject key identifier:   E1:74:47:7A:30:A3:4F:A4:E9:C7:DB:2F:92:14:FA:8F:27:15:BF:C7
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E58A7
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/1a9c3299826d2ef30ed8604928416b8c808d54aa.roa
Signing time:             Wed 24 Mar 2021 14:45:12 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     18809
IP address blocks:        190.5.232.0/24 maxlen: 24
                          190.5.249.0/24 maxlen: 24
                          190.122.165.0/24 maxlen: 24
                          200.46.142.0/24 maxlen: 24
                          200.46.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940199 (0xe58a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=1a9c3299826d2ef30ed8604928416b8c808d54aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d8:82:02:fa:8c:5d:55:b9:de:5d:e8:94:30:
                    5e:c2:99:2a:8b:93:66:e1:9f:a5:5a:4d:9b:d8:a0:
                    10:2f:09:ef:91:d8:fe:d0:31:96:48:19:a1:1c:5f:
                    64:ee:9a:52:d1:0f:a5:41:88:d6:b8:30:39:6c:24:
                    ad:20:5c:b6:18:7e:3d:d9:3a:b9:17:f7:94:9c:38:
                    36:20:d8:00:a7:c3:02:32:0e:28:cf:69:fc:9d:3b:
                    87:ac:0d:d4:df:e4:91:ca:61:bd:42:0d:51:57:9d:
                    00:f5:09:2c:7a:67:89:63:d5:b6:f9:1e:3f:62:8e:
                    04:c6:bc:af:44:2e:00:b3:59:1f:ff:64:10:d9:ae:
                    02:3b:0f:bd:c1:b1:a9:2f:af:ad:13:c1:51:bf:3d:
                    ea:79:90:c1:6d:85:78:00:26:1e:95:a5:92:c5:4f:
                    f3:96:c3:e9:3f:d5:52:e9:3b:47:80:af:61:54:a3:
                    66:f8:09:59:de:05:5a:4e:e2:a5:b4:af:68:10:4e:
                    45:ad:e2:57:ba:9b:e1:dd:25:c1:40:a9:d2:d0:4f:
                    03:c9:1f:11:3a:a4:42:b6:3a:8f:0f:91:2d:1c:c7:
                    62:31:1f:8c:eb:b5:5d:f7:a3:ca:0a:2d:fe:9d:94:
                    da:da:42:fa:2f:db:82:3a:b3:cf:22:cd:23:8f:47:
                    b1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:74:47:7A:30:A3:4F:A4:E9:C7:DB:2F:92:14:FA:8F:27:15:BF:C7
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/1a9c3299826d2ef30ed8604928416b8c808d54aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.232.0/24
                  190.5.249.0/24
                  190.122.165.0/24
                  200.46.142.0/24
                  200.46.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:78:af:f7:38:7c:d0:f9:42:cc:86:60:36:92:5a:d9:fd:8e:
         ef:db:8c:bc:35:5c:12:7a:dd:e1:f8:d7:fe:2a:bc:09:95:b3:
         f6:69:86:00:22:0a:60:6f:f6:bd:5a:eb:22:a0:7e:23:c1:e2:
         8d:58:39:ab:c1:c5:62:5f:80:28:55:09:62:55:00:6b:e7:64:
         82:d3:02:c2:10:71:9f:35:84:3b:fb:24:79:97:4f:b8:9d:be:
         bf:d5:27:5f:d4:bd:fd:dc:bd:27:a9:7a:fc:a8:38:ea:ed:49:
         a7:55:77:e9:e6:71:f6:5d:28:48:48:8d:19:2f:ac:52:d0:fa:
         c5:b2:a2:b4:06:04:a8:5b:6d:c8:70:be:ab:46:9a:86:07:e4:
         ff:0a:94:66:15:e0:7a:82:6d:e5:41:ac:e5:57:bf:8b:76:90:
         6b:81:b0:a9:d7:d5:bb:ba:55:fe:ba:a6:35:f0:d6:1f:08:4d:
         41:cb:ad:8f:18:29:11:2c:c8:cc:45:31:9d:68:77:b9:4f:21:
         ef:a9:4d:ee:14:7c:0d:d1:b9:dc:9b:ec:0c:05:da:9f:60:6e:
         3e:7d:1a:ac:b7:e2:3d:6b:df:db:6e:12:89:4f:49:dc:6d:a0:
         fb:8f:21:31:99:d6:33:2e:19:61:77:fc:e0:99:b0:91:4d:44:
         4c:14:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org