Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/1bb06d0c63c5024aaf1c5b78d913f5be0d42db9f.roa
File:                     1bb06d0c63c5024aaf1c5b78d913f5be0d42db9f.roa (raw, json)
Hash identifier:          KMCdszyOzHDCDET0VhVC+wCxrX/ZBs7W9sFoXPXAbss=
Subject key identifier:   77:D2:C9:B8:EE:BA:C6:2F:89:28:C6:1D:E9:0F:53:22:D5:CE:3D:A9
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E0E54
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/1bb06d0c63c5024aaf1c5b78d913f5be0d42db9f.roa
Signing time:             Wed 24 Mar 2021 14:31:36 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     1000
IP address blocks:        190.210.210.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921172 (0xe0e54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=1bb06d0c63c5024aaf1c5b78d913f5be0d42db9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:ed:88:4e:a1:ad:a4:39:2b:be:bb:b5:5d:
                    88:ad:27:a5:14:92:19:e6:fe:00:21:f0:11:4e:bf:
                    00:f4:e5:49:9b:55:4a:9c:ac:41:a0:00:6e:56:3e:
                    5e:a6:5b:f1:f3:3f:c7:cc:c4:4b:2a:be:3b:09:d4:
                    56:e6:74:d6:da:e2:9e:9a:6f:06:8d:11:e6:03:fe:
                    53:03:05:d4:6c:77:2c:3a:c8:26:65:f3:bd:b7:fa:
                    ce:b5:88:8f:27:98:9c:cf:88:aa:df:cd:4e:b1:6a:
                    5d:67:f0:06:95:e4:d4:d8:87:5c:6c:86:f5:f4:c1:
                    b5:c6:88:15:06:0f:7b:44:a0:56:60:15:22:84:61:
                    0f:e7:45:7b:89:5d:f1:f9:e5:41:83:64:04:56:d5:
                    22:6b:12:45:eb:8b:5b:10:a4:5b:b1:cd:79:01:cf:
                    c4:29:d5:ce:1a:67:a6:11:9f:d9:04:f8:8d:1c:95:
                    10:98:2d:e1:cf:d8:6c:b0:3f:e1:6c:91:62:9b:78:
                    95:7e:b6:40:56:1f:40:bd:82:29:ca:fc:a6:f2:28:
                    e7:64:7e:5f:b9:59:85:8e:59:7b:17:71:6c:3d:11:
                    65:88:fe:cb:45:7d:dc:51:aa:f4:85:94:e2:e5:f2:
                    e3:2c:7e:3f:6b:d4:3b:49:b3:d8:55:58:22:77:a4:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D2:C9:B8:EE:BA:C6:2F:89:28:C6:1D:E9:0F:53:22:D5:CE:3D:A9
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/1bb06d0c63c5024aaf1c5b78d913f5be0d42db9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:07:8a:8c:1b:7d:8a:52:6c:dc:ba:86:3d:c0:be:b0:46:c3:
         dc:bf:94:bc:35:83:24:df:63:bf:57:5c:ed:ca:c5:87:b7:67:
         b0:33:75:25:44:fb:f5:41:ec:3b:cb:1b:5b:dd:86:ca:0d:7b:
         d6:f1:d2:fa:b6:74:1e:80:c3:93:4b:11:51:17:d5:e6:73:fe:
         3d:84:03:ca:79:c8:fe:47:8e:be:8f:23:15:f8:28:e2:89:f1:
         8a:c3:a0:2c:8d:05:ed:a2:3d:6d:73:44:bf:74:b5:df:40:07:
         a6:ba:ad:09:c6:cf:30:8a:d3:d0:bb:b0:0f:04:30:2a:97:97:
         2b:fa:c7:34:c2:3c:59:63:8e:c5:96:15:8b:e3:85:e5:bc:fa:
         ff:54:ff:80:eb:46:66:30:8e:02:d9:db:4c:dc:26:cc:48:c6:
         5e:fb:80:14:79:e0:09:00:c6:07:e8:ff:4a:9d:b9:2d:e8:9c:
         b2:2f:6a:b8:64:6e:79:09:8a:25:64:64:86:46:c4:82:49:25:
         07:a9:05:c8:d1:a6:51:7d:31:50:36:2c:3b:b3:5c:b2:85:2c:
         d9:1f:5f:3c:ee:a6:96:3f:93:4c:f0:e8:9a:43:4e:bc:8b:3a:
         38:df:47:e0:22:1b:46:13:67:71:bc:38:7d:2d:1e:5c:4a:d9:
         b4:ed:82:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org