Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/611fb8c796d6e0e93c3d1e3de6fca2ae78d909fe.roa
File:                     611fb8c796d6e0e93c3d1e3de6fca2ae78d909fe.roa (raw, json)
Hash identifier:          ur/d0nsoGpFbQN53H5WzB2Od97STKvq+atfp2kneNwQ=
Subject key identifier:   6A:77:06:41:79:5E:D9:17:89:DB:E5:52:60:82:B8:33:0C:04:63:06
Certificate issuer:       /CN=ecc9a7cf8cd28da7666e8648a4847d34d878fdcd
Certificate serial:       0D8570
Authority key identifier: 58:69:D0:57:05:08:32:46:08:EE:2C:6F:83:08:52:C3:1B:4A:08:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/611fb8c796d6e0e93c3d1e3de6fca2ae78d909fe.roa
Signing time:             Wed 24 Mar 2021 14:29:41 +0000
ROA not before:           Wed 24 Mar 2021 14:29:41 +0000
ROA not after:            Tue 24 Mar 2026 14:29:41 +0000
asID:                     27851
IP address blocks:        200.110.184.0/21 maxlen: 24
                          200.81.152.0/21 maxlen: 24
                          170.231.36.0/22 maxlen: 24
                          2803:3680::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886128 (0xd8570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc9a7cf8cd28da7666e8648a4847d34d878fdcd
        Validity
            Not Before: Mar 24 14:29:41 2021 GMT
            Not After : Mar 24 14:29:41 2026 GMT
        Subject: CN=611fb8c796d6e0e93c3d1e3de6fca2ae78d909fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:4e:8c:8a:ae:3e:85:40:98:a9:bd:07:93:
                    88:6d:56:e6:d8:d7:ff:84:e1:fe:ab:00:1d:04:77:
                    a7:1c:e5:92:15:37:02:a1:1b:e3:84:77:b0:e6:30:
                    c5:f6:f0:5a:9b:ad:03:9c:54:03:28:a5:49:c8:49:
                    d9:40:3d:f9:b4:ca:3f:6c:4e:a9:95:db:de:08:47:
                    7f:6d:ef:dc:da:bb:a2:3a:35:59:03:ca:74:05:8a:
                    4a:d1:6e:0a:52:19:0c:f7:18:34:be:92:03:19:61:
                    63:6d:38:c7:ab:78:93:5b:74:59:8b:fa:33:52:22:
                    3e:88:3d:55:33:bf:e6:3c:dc:3f:d9:ab:6d:05:94:
                    91:e5:62:bf:46:2a:0e:db:02:fe:6b:ac:21:2e:48:
                    dc:54:c0:58:33:97:88:68:2b:fe:ed:44:f5:93:60:
                    a7:88:04:52:14:0f:04:c4:52:f3:7b:42:fe:ed:9c:
                    2a:a8:a7:88:ef:7b:9c:4e:6a:2c:5a:2f:e4:0b:c6:
                    a1:c4:5d:7c:53:12:75:18:77:3a:68:5e:11:74:9e:
                    4b:b6:e8:a6:aa:c9:7f:17:0a:f6:a1:0a:80:08:ab:
                    8e:4f:67:6e:1a:1c:f7:16:f3:94:dc:62:ce:03:b2:
                    d0:e2:44:e9:ed:a4:16:56:6d:3d:ba:ff:4a:9a:72:
                    d4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:77:06:41:79:5E:D9:17:89:DB:E5:52:60:82:B8:33:0C:04:63:06
            X509v3 Authority Key Identifier:
                keyid:58:69:D0:57:05:08:32:46:08:EE:2C:6F:83:08:52:C3:1B:4A:08:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/611fb8c796d6e0e93c3d1e3de6fca2ae78d909fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9f0db517-5b08-424e-b352-5292bc6636db/ecc9a7cf8cd28da7666e8648a4847d34d878fdcd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.36.0/22
                  200.81.152.0/21
                  200.110.184.0/21
                IPv6:
                  2803:3680::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:26:de:67:dc:6a:06:4c:db:43:6f:6a:8a:5f:92:ea:ad:57:
         1f:da:5e:cc:b3:25:1e:e1:81:70:0e:99:ea:0b:d3:8d:a9:10:
         c9:c7:29:11:70:75:29:86:27:e9:a1:3c:99:9d:5c:3d:dc:03:
         eb:db:a5:d6:f7:93:b1:b6:b7:fd:27:06:54:e8:79:85:54:92:
         7a:dd:66:2a:db:9b:ec:35:f4:61:38:5b:94:b4:d4:a8:69:f7:
         80:d7:bb:60:7f:e4:36:1a:40:d9:a2:ab:a3:a1:56:05:fd:6e:
         1f:a0:31:3b:0e:4a:cc:14:de:c4:97:24:88:72:48:ba:36:73:
         9c:cb:ce:e8:82:8c:a7:ce:05:4a:02:4c:ba:b8:12:f9:14:1f:
         3b:ea:a4:fe:2e:4f:e9:7b:8c:4a:28:53:73:10:76:02:55:ae:
         53:c9:0e:00:57:91:ff:3a:21:9c:3c:3e:05:1f:89:75:70:18:
         4e:69:d8:95:d9:6f:63:27:d9:20:f2:ca:9a:0c:f1:94:a9:00:
         9b:f7:d4:5b:a2:16:4b:cf:5a:83:42:5d:f8:d7:2a:77:8f:6f:
         d8:2a:f9:ff:de:f3:17:c0:68:28:31:50:53:58:f4:d7:87:36:
         60:9c:13:9e:37:18:07:49:92:fd:e4:17:26:e2:92:86:50:f1:
         65:cb:b0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org