Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/e7edebc7236a5bc1bb1749ba1e9ff08399c7eb8c.roa
File:                     e7edebc7236a5bc1bb1749ba1e9ff08399c7eb8c.roa (raw, json)
Hash identifier:          U2tHIsT0BYIglOxsuWk08uwOoeqDtsYfZPK1oJ+x/ko=
Subject key identifier:   8E:FC:3F:8D:E9:B1:DD:0B:A0:1F:81:9D:8B:69:D2:88:40:63:41:03
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       0E25E2
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/e7edebc7236a5bc1bb1749ba1e9ff08399c7eb8c.roa
Signing time:             Wed 24 Mar 2021 14:31:36 +0000
ROA not before:           Wed 24 Mar 2021 14:31:34 +0000
ROA not after:            Tue 24 Mar 2026 14:31:34 +0000
asID:                     61452
IP address blocks:        190.210.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927202 (0xe25e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Mar 24 14:31:34 2021 GMT
            Not After : Mar 24 14:31:34 2026 GMT
        Subject: CN=e7edebc7236a5bc1bb1749ba1e9ff08399c7eb8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:e6:ab:ab:14:40:2e:95:9d:0b:a0:88:06:
                    64:40:72:70:74:9b:42:0c:e7:45:0c:79:68:cf:c4:
                    cd:be:1e:bf:5f:27:6f:52:21:b8:a6:d9:81:25:9d:
                    b2:0c:00:3c:5f:f3:d1:97:d3:bb:a8:50:d2:6a:3c:
                    42:c0:f2:bf:f7:c3:e4:1e:f9:d0:68:be:31:7f:f3:
                    28:05:07:eb:fe:48:a6:ff:26:81:48:3e:5d:cf:9c:
                    8d:18:38:7a:51:a8:e0:3c:63:12:ea:7f:d7:6f:3d:
                    9b:03:03:b2:a2:5c:48:3a:3b:e4:a4:54:be:91:54:
                    ff:f3:b0:d6:67:1a:37:f1:8b:0a:4f:22:da:16:62:
                    22:83:81:c4:6b:00:87:ea:87:0e:9d:e3:ab:82:0d:
                    c3:30:fa:79:03:55:62:51:e9:13:df:44:65:36:04:
                    61:ca:04:f2:fb:c1:cf:78:4e:da:4d:ca:2d:63:80:
                    a9:43:32:b0:bf:1f:c2:de:6c:1c:73:58:a6:7f:58:
                    9f:13:d7:df:04:46:d1:f6:44:6b:a1:6c:6f:7a:e0:
                    b9:02:cb:b4:d0:b9:c1:f1:67:9a:92:6a:21:56:14:
                    bf:b5:f3:ac:89:a4:69:bf:c3:bf:2c:d6:5c:1f:36:
                    95:df:c7:7e:80:1d:18:39:18:e0:34:24:1f:fe:6d:
                    26:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FC:3F:8D:E9:B1:DD:0B:A0:1F:81:9D:8B:69:D2:88:40:63:41:03
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/e7edebc7236a5bc1bb1749ba1e9ff08399c7eb8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f8:91:cc:6b:ce:32:5f:97:4a:62:4b:6f:36:b5:48:74:25:
         25:a6:e9:11:5f:f8:a5:de:9d:ad:24:6a:42:b3:32:08:31:30:
         79:ef:70:c5:bc:dd:81:69:13:06:99:8d:96:a7:fe:8e:1d:87:
         0e:5c:57:d9:87:b9:7c:a2:d3:08:8b:f6:06:57:de:c9:78:bb:
         48:21:09:94:f9:9e:38:70:00:79:dd:ec:eb:35:d6:4b:1b:4b:
         ce:d4:98:d5:2e:30:ea:4c:60:22:0d:f2:9f:fe:c9:2a:56:11:
         55:89:74:f0:15:14:5a:af:fd:47:80:f5:0b:58:af:7a:35:6e:
         ff:b5:0d:da:15:28:35:89:43:21:1a:78:a3:8f:4c:1e:90:52:
         3a:0e:6d:24:c8:08:59:d8:25:5d:79:09:3a:d4:e6:d7:07:e2:
         58:58:e7:bf:6c:c7:a7:dc:b5:a3:6d:10:3d:6e:27:72:05:6d:
         98:7b:a5:52:f1:2a:89:5a:d0:c3:97:5f:9b:8e:da:3b:77:f4:
         fe:1c:ea:39:67:00:4b:5a:f7:e8:22:6c:45:f3:64:00:4b:7f:
         ca:41:5f:d4:5f:ff:5c:ac:9f:a6:56:b8:ff:20:b3:6b:58:6d:
         5c:59:4a:10:0f:57:69:a1:11:bf:da:8a:ff:25:6b:df:d8:26:
         43:fe:c6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org