Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/5f0bc065f926fa0c6f42341f38edbc189e3d87b6.roa
File:                     5f0bc065f926fa0c6f42341f38edbc189e3d87b6.roa (raw, json)
Hash identifier:          TdCKtSmhZOkI5iR5nERcRSjFf5lOluwA7EGy0VLzBJ0=
Subject key identifier:   62:47:CC:23:B2:B3:71:8B:E9:80:10:CA:F8:07:9E:BA:57:E9:C5:F8
Certificate issuer:       /CN=425b31fb70180b4aa636c240ebd5276c722716f7
Certificate serial:       0DD438
Authority key identifier: D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/5f0bc065f926fa0c6f42341f38edbc189e3d87b6.roa
Signing time:             Wed 24 Mar 2021 14:32:28 +0000
ROA not before:           Wed 24 Mar 2021 14:32:28 +0000
ROA not after:            Tue 24 Mar 2026 14:32:28 +0000
asID:                     20940
IP address blocks:        190.94.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906296 (0xdd438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425b31fb70180b4aa636c240ebd5276c722716f7
        Validity
            Not Before: Mar 24 14:32:28 2021 GMT
            Not After : Mar 24 14:32:28 2026 GMT
        Subject: CN=5f0bc065f926fa0c6f42341f38edbc189e3d87b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:40:57:82:ae:a0:7a:fd:59:9a:01:c0:6b:
                    7e:36:10:2c:38:e0:56:ef:62:f7:9f:9e:9c:f5:a5:
                    7a:ef:30:14:ba:c2:5d:90:6e:a4:79:10:5f:81:f1:
                    b0:53:b3:28:fd:c4:fa:c4:97:9b:0d:87:67:ac:fe:
                    11:86:2c:05:9c:b3:6a:9e:16:6f:26:0a:76:0c:d3:
                    74:7a:45:a6:a6:d8:d7:43:06:7c:9e:34:80:8b:a7:
                    59:42:3c:a8:a0:b5:e3:9d:e0:07:ac:ea:76:2e:47:
                    19:50:b4:aa:e1:12:6d:1f:b0:6a:ce:c0:8f:0e:df:
                    d2:19:f0:43:5f:56:74:38:fa:69:49:60:92:11:b3:
                    cf:e8:28:75:b4:24:c5:e4:11:21:e7:49:0c:75:b5:
                    eb:bc:eb:e4:a9:77:9e:c5:c1:74:ff:53:f7:5f:82:
                    83:26:53:11:84:0c:f1:fa:21:87:2f:97:0f:bc:27:
                    bb:1a:06:84:98:fc:5c:f9:7c:c4:0a:0f:6a:61:28:
                    93:cb:61:fd:cd:99:13:cb:58:60:b0:6e:63:07:3c:
                    cf:9e:39:4b:85:ac:c0:c3:a0:3d:a5:f2:a4:43:75:
                    04:a0:47:84:91:67:2e:32:01:b6:b8:28:4f:9a:a6:
                    13:b8:cb:01:f4:07:df:47:79:9b:71:d5:9c:1f:ca:
                    51:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:47:CC:23:B2:B3:71:8B:E9:80:10:CA:F8:07:9E:BA:57:E9:C5:F8
            X509v3 Authority Key Identifier:
                keyid:D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/5f0bc065f926fa0c6f42341f38edbc189e3d87b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/425b31fb70180b4aa636c240ebd5276c722716f7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:e8:20:70:c9:db:41:a3:66:74:df:fb:59:e0:4d:ef:a7:2a:
         9e:be:2f:2d:8a:d2:cd:0e:0e:64:25:35:fe:a7:85:92:6c:8f:
         17:ee:cf:e3:bd:c1:b4:49:d1:2e:57:8b:02:b5:30:29:19:24:
         e4:2d:0e:ff:60:65:e1:1f:91:6a:79:fc:fd:53:ba:d4:b6:10:
         c7:15:b7:e0:97:b2:4c:09:8e:41:fb:38:a9:2d:5c:5d:27:a6:
         b2:d7:e0:b5:4c:63:fe:44:28:26:5d:f6:7b:71:7b:3b:e9:69:
         b5:13:ec:87:dd:39:3b:2d:6f:e0:5b:a9:31:6f:99:95:3f:1b:
         7b:bf:7f:d4:66:11:23:1c:32:2c:d9:b1:0c:d6:99:62:56:18:
         24:56:da:26:2a:e2:f0:49:bc:84:18:1e:2f:92:b8:18:90:d6:
         3f:1a:3b:05:a2:22:1f:9b:3a:f2:54:13:a8:38:08:a6:3d:fb:
         de:f2:84:d7:a5:b1:c5:59:32:8a:ed:2a:a2:b4:46:72:c9:1c:
         e3:9f:22:c8:3b:09:89:6f:ee:bd:d3:aa:50:ef:15:25:00:36:
         38:06:16:97:ad:09:b7:06:4e:9b:fa:01:fd:b2:86:15:1d:7a:
         5b:ae:bd:d3:e5:06:73:84:94:a7:8a:cf:c4:4c:0e:90:cf:32:
         70:e2:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org