Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/d207bbfebd7c5d60f4f7f01fbfdb4924f4e6b4d2.roa
File:                     d207bbfebd7c5d60f4f7f01fbfdb4924f4e6b4d2.roa (raw, json)
Hash identifier:          PRbBqD0ugloR4rPb8IRQttjSPR224OhSiw2lq9KQVHk=
Subject key identifier:   DD:20:D5:15:EE:EA:A0:44:41:B6:3D:C4:AB:16:41:8C:BA:E6:60:6F
Certificate issuer:       /CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
Certificate serial:       0DAC08
Authority key identifier: D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/d207bbfebd7c5d60f4f7f01fbfdb4924f4e6b4d2.roa
Signing time:             Wed 24 Mar 2021 14:37:08 +0000
ROA not before:           Wed 24 Mar 2021 14:37:05 +0000
ROA not after:            Tue 24 Mar 2026 14:37:05 +0000
asID:                     52423
IP address blocks:        190.112.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896008 (0xdac08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Validity
            Not Before: Mar 24 14:37:05 2021 GMT
            Not After : Mar 24 14:37:05 2026 GMT
        Subject: CN=d207bbfebd7c5d60f4f7f01fbfdb4924f4e6b4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:19:d7:0e:57:34:52:66:39:b2:6d:e1:49:
                    21:8e:73:54:ab:5e:03:e2:32:c7:f1:88:ff:c9:6f:
                    fc:2e:14:8b:06:a0:ee:fe:ee:49:65:fd:31:d8:98:
                    c0:28:1e:90:a9:71:70:b1:5d:8f:4e:aa:bd:53:36:
                    83:11:32:d6:24:7e:cc:63:9a:4f:41:a6:76:a3:ac:
                    c0:bd:b7:89:c1:bf:0c:12:c8:42:95:99:05:c8:9a:
                    9a:e1:86:45:f5:a6:73:16:09:71:fb:ca:fd:86:b5:
                    01:db:e8:c6:de:d3:26:79:bb:56:b7:fa:91:92:f4:
                    13:b1:20:cf:79:7e:9b:77:1d:7e:72:ad:d3:20:97:
                    ec:b9:71:e4:6d:68:bb:a3:70:10:dc:6d:0a:cd:c5:
                    1d:54:c6:7e:3b:80:bb:cd:4b:dd:b6:2d:3c:21:8e:
                    76:36:b2:ab:7c:45:da:6a:33:73:e7:68:05:b0:62:
                    c9:6e:f5:17:59:3f:12:0f:ed:fb:dc:ec:ce:00:0a:
                    d6:3e:67:87:da:c8:02:09:5d:8d:ae:02:38:78:d3:
                    95:2f:44:e2:c3:e2:02:b9:62:48:c4:d6:f7:53:da:
                    5f:05:bf:c7:43:60:4f:cc:d3:27:65:e1:6e:8d:fa:
                    78:b9:e2:60:43:e2:c6:ee:af:d4:a8:b6:38:37:30:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:20:D5:15:EE:EA:A0:44:41:B6:3D:C4:AB:16:41:8C:BA:E6:60:6F
            X509v3 Authority Key Identifier:
                keyid:D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/d207bbfebd7c5d60f4f7f01fbfdb4924f4e6b4d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:60:f0:3b:20:8a:25:5b:f4:8a:4c:5c:02:60:39:d4:1c:a4:
         fe:b2:7c:ae:2e:f4:cd:b2:b8:22:9b:da:08:de:d6:c6:53:df:
         07:b5:4a:23:10:fa:5e:41:54:23:8d:99:5a:e8:78:78:da:7b:
         8c:eb:ff:c3:d0:69:d4:6c:00:92:57:26:4a:00:67:ee:c8:48:
         da:1b:dd:03:62:61:9f:59:12:10:34:1e:4e:cc:92:8c:23:cd:
         58:99:c3:81:58:b7:dd:50:3c:72:eb:68:5a:fe:84:52:97:b1:
         83:62:d3:30:1f:c7:ce:f6:57:c5:fd:46:26:f6:7b:4b:2f:0f:
         ec:0a:c1:94:1b:5f:58:fa:5a:e0:c5:58:5a:db:2b:b2:09:1f:
         8a:e4:01:39:96:4f:b0:c7:b0:6e:40:a0:9d:74:38:78:e7:c5:
         dd:6d:52:e8:9c:78:9a:fa:3d:7f:b8:db:89:d0:67:6b:08:72:
         3a:51:4c:6b:58:f8:dc:2a:0e:41:3e:5e:6b:92:4c:88:e8:c8:
         ac:22:1f:53:90:c4:11:1f:5b:c6:1a:18:49:03:e3:e4:b3:f6:
         8c:0c:53:7a:80:64:b1:7b:f2:0c:30:6f:f9:bd:71:f3:a3:5f:
         84:3b:39:68:f3:3d:f0:d0:47:9a:8a:34:17:86:39:51:8e:8c:
         02:96:b2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org