Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/7f603077c9f78b41ddc7ad63b54149bb60b76fa5.roa
File:                     7f603077c9f78b41ddc7ad63b54149bb60b76fa5.roa (raw, json)
Hash identifier:          fjsNxu81lKyV15GfjFD3MaHAZP4S7zxr8hLccsCkwq4=
Subject key identifier:   5A:F8:7D:DA:EC:BD:2C:81:C6:AE:A7:3C:46:7E:52:72:1B:F9:84:EB
Certificate issuer:       /CN=a0ece5cb3349a401474499eb301920b68090f2ce
Certificate serial:       0D8EBA
Authority key identifier: 94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/7f603077c9f78b41ddc7ad63b54149bb60b76fa5.roa
Signing time:             Wed 24 Mar 2021 14:38:27 +0000
ROA not before:           Wed 24 Mar 2021 14:38:27 +0000
ROA not after:            Tue 24 Mar 2026 14:38:27 +0000
asID:                     264836
IP address blocks:        192.141.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888506 (0xd8eba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ece5cb3349a401474499eb301920b68090f2ce
        Validity
            Not Before: Mar 24 14:38:27 2021 GMT
            Not After : Mar 24 14:38:27 2026 GMT
        Subject: CN=7f603077c9f78b41ddc7ad63b54149bb60b76fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fc:ad:a5:46:50:39:f3:b9:72:62:d3:fd:fd:
                    9b:6d:85:a0:9a:76:03:dc:34:59:bb:2b:50:08:41:
                    44:8b:83:36:d6:b7:32:62:73:6c:9a:1d:9e:fc:91:
                    9b:01:25:08:09:fc:47:aa:1e:68:52:3e:a8:a6:08:
                    5c:f3:81:85:b8:ce:19:ff:1e:3f:7b:01:6b:fd:2a:
                    40:04:22:03:32:28:e3:ac:09:3f:79:0a:3d:03:ee:
                    e5:e1:c6:0e:0b:70:a1:60:e6:29:5b:f6:42:04:87:
                    49:ae:46:58:55:b5:78:8d:96:96:18:4d:9a:6b:9b:
                    46:da:bf:34:0a:63:3f:d2:27:21:27:62:07:41:e4:
                    31:1c:de:87:46:54:e8:f5:fb:6b:00:fd:fa:49:89:
                    e5:7f:e9:2c:e9:62:67:aa:0f:17:a3:ab:8e:d9:b5:
                    1f:0a:08:15:72:62:6e:8e:74:8a:0b:81:92:d1:81:
                    10:8d:a2:9d:0b:5b:93:d7:92:48:83:32:ad:a3:6c:
                    c2:17:4c:f0:9b:cf:c0:9e:09:18:b8:2d:9c:82:3b:
                    45:9e:e3:fe:e4:f4:bd:b8:f9:39:04:65:9e:74:a6:
                    51:24:7b:8e:fd:66:bf:f5:1b:88:e2:52:03:4f:c2:
                    86:ae:8d:e5:63:07:ed:6c:5e:6c:86:06:e0:fb:5a:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F8:7D:DA:EC:BD:2C:81:C6:AE:A7:3C:46:7E:52:72:1B:F9:84:EB
            X509v3 Authority Key Identifier:
                keyid:94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/7f603077c9f78b41ddc7ad63b54149bb60b76fa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/a0ece5cb3349a401474499eb301920b68090f2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:05:0f:26:57:14:89:61:12:42:15:d9:f4:23:7e:44:a8:a4:
         8b:a0:00:0f:20:b8:7e:fc:7b:ec:91:f2:a8:b1:0c:83:7f:e8:
         21:3b:05:5c:1a:79:e4:3d:94:08:81:f0:d6:51:b5:11:c7:ab:
         ce:e9:09:b3:2a:ad:db:2e:9c:44:12:40:72:a7:ce:a4:dd:4c:
         c0:8b:3c:3e:09:22:a7:37:ac:d9:ab:b6:64:b6:00:fc:24:ed:
         37:cb:c1:a4:41:82:98:79:29:1b:7a:a1:36:6b:03:ab:e7:5b:
         5b:4c:af:19:57:49:e2:d3:27:0e:99:aa:6b:b1:64:89:0f:57:
         8d:b8:0a:00:8e:c9:38:13:3b:f5:8b:a1:b1:13:a0:d1:c7:58:
         5a:7a:ac:70:6b:94:87:48:04:eb:e8:60:91:a3:43:65:6f:09:
         16:fc:9e:5a:f8:f8:5e:f8:af:08:3e:df:67:e2:56:04:04:e1:
         31:3f:19:b3:9b:db:30:e5:00:98:c4:22:5d:e5:9b:95:dc:d8:
         a9:8b:1d:36:bb:f9:d1:8c:8e:f8:3b:7e:d1:7d:19:eb:fd:1b:
         c8:3d:0f:a5:09:93:6f:72:94:5e:4f:61:08:fa:2b:e8:59:b5:
         e0:6b:eb:f3:27:56:24:b5:00:20:33:ee:d1:b7:74:c6:63:48:
         f6:47:ae:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:06 2024 by rpki-client on console-ams.rpki-client.org