Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ebff22e35be9c68568db1565ba5291a2689c006b.roa
File:                     ebff22e35be9c68568db1565ba5291a2689c006b.roa (raw, json)
Hash identifier:          98J9p7HcCtRghKLHFsYln0bzTgFQWx2wdofh45dC2rE=
Subject key identifier:   2B:F3:EA:16:90:0C:DC:A3:75:C5:4A:DD:4E:9F:B6:CB:55:3A:1A:4B
Certificate issuer:       /CN=ad27b898d1ea7f94cd5932a665835c7ef4650f61
Certificate serial:       0C9957
Authority key identifier: 05:C2:4B:CB:76:A2:E8:65:8F:51:41:AC:3D:3F:B7:C0:A5:B2:A9:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad27b898d1ea7f94cd5932a665835c7ef4650f61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ebff22e35be9c68568db1565ba5291a2689c006b.roa
Signing time:             Wed 24 Mar 2021 14:34:15 +0000
ROA not before:           Wed 24 Mar 2021 14:34:15 +0000
ROA not after:            Tue 24 Mar 2026 14:34:15 +0000
asID:                     40676
IP address blocks:        190.110.120.0/21 maxlen: 24
                          201.159.168.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 825687 (0xc9957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad27b898d1ea7f94cd5932a665835c7ef4650f61
        Validity
            Not Before: Mar 24 14:34:15 2021 GMT
            Not After : Mar 24 14:34:15 2026 GMT
        Subject: CN=ebff22e35be9c68568db1565ba5291a2689c006b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:81:4d:49:8d:36:90:59:7c:96:72:d1:4d:f2:
                    82:07:c3:b7:0e:77:67:63:93:ba:cb:41:5d:bc:a7:
                    a3:54:3c:a8:02:9a:fe:22:b4:9d:44:92:8a:68:45:
                    78:8f:58:b8:e1:fc:b6:21:96:93:e9:0b:16:f9:c3:
                    b7:89:7c:9e:41:c3:a7:97:c1:46:ef:fb:0a:6f:b5:
                    0e:30:58:41:df:0b:97:27:5c:6d:5b:68:d9:7a:57:
                    9e:57:ea:cb:c3:92:66:4e:4f:81:d9:af:d8:f8:56:
                    45:5b:17:b3:5c:91:4d:c7:3f:07:cb:b7:3c:9c:8f:
                    b0:df:41:9a:47:30:4c:c5:3f:81:45:2e:b1:d1:4d:
                    2a:17:bf:94:a0:32:24:76:28:f1:47:cb:fe:8e:79:
                    eb:4f:38:6c:11:f0:10:21:7b:b7:4f:23:eb:34:d9:
                    c6:b8:56:95:13:28:db:c9:06:b0:69:5c:c0:6e:18:
                    b0:70:1a:dc:5b:7f:6f:3a:55:c3:3d:74:54:ec:c5:
                    1e:42:5d:6f:1e:0c:b7:cc:7d:39:3d:c9:d6:9d:cd:
                    4d:6f:a1:d1:1a:05:d3:94:61:43:db:35:ac:b6:12:
                    7d:ba:97:ea:3c:3f:c3:12:42:47:57:2e:d1:1e:95:
                    18:ee:5c:3a:7d:25:8d:29:11:82:2d:44:d8:c3:b1:
                    31:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F3:EA:16:90:0C:DC:A3:75:C5:4A:DD:4E:9F:B6:CB:55:3A:1A:4B
            X509v3 Authority Key Identifier:
                keyid:05:C2:4B:CB:76:A2:E8:65:8F:51:41:AC:3D:3F:B7:C0:A5:B2:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad27b898d1ea7f94cd5932a665835c7ef4650f61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ebff22e35be9c68568db1565ba5291a2689c006b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a01036f6-d4a0-4083-a72c-3fc894e5b47b/ad27b898d1ea7f94cd5932a665835c7ef4650f61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.120.0/21
                  201.159.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:0f:5b:00:9a:b8:e1:6f:d8:c0:27:c8:29:0e:a1:ec:70:08:
         14:58:ab:73:aa:6b:dc:e0:8c:b5:ee:14:80:13:c4:16:1f:a4:
         4d:87:08:bb:ce:68:1b:03:69:82:e7:b1:1f:22:91:9c:12:08:
         2a:5a:1e:51:22:36:19:06:6f:a4:63:7c:67:b0:cd:6d:76:5d:
         76:07:7b:e3:fa:e9:ed:f1:07:92:54:56:65:3e:d0:8c:27:47:
         26:f3:ae:eb:da:76:65:53:3a:74:bf:db:34:5e:bf:2a:2a:bb:
         84:a9:71:59:02:63:d4:aa:9a:67:38:19:ff:0f:eb:04:a2:1a:
         67:d3:de:9e:21:7a:bc:22:0a:7f:16:69:6c:b2:a0:d4:b0:1a:
         c1:00:75:f4:f3:d0:72:35:a7:b5:72:be:39:a9:59:bf:3d:b8:
         ca:fe:8a:67:88:f4:1f:77:34:9e:4f:55:ed:78:b7:30:38:6a:
         07:58:6b:f2:e0:09:16:69:66:1d:ca:09:24:78:1a:1f:82:28:
         5a:88:bd:12:20:35:b5:77:80:82:c3:5d:23:67:1e:75:d1:53:
         a9:78:86:de:2d:8b:ea:19:c7:7d:f0:ff:1d:df:34:15:30:e6:
         0d:2f:67:5f:ad:8e:4d:98:a8:4c:92:d1:23:fa:c2:be:87:42:
         fc:54:f0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org