Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/9ef9f2cdc531c7c1791699516136f2e1c3296018.roa
File:                     9ef9f2cdc531c7c1791699516136f2e1c3296018.roa (raw, json)
Hash identifier:          B8oypqcMzoDnfV5aVcI//d1cvCrx7v5M5HCOIBD3MaM=
Subject key identifier:   88:CF:AB:40:71:7A:E5:19:64:57:73:74:63:C0:58:3B:6D:A7:84:9B
Certificate issuer:       /CN=71ccf671605b5e725ec595356fba462b15442130
Certificate serial:       07B098
Authority key identifier: 2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/9ef9f2cdc531c7c1791699516136f2e1c3296018.roa
Signing time:             Mon 04 Oct 2021 20:04:33 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     271813
IP address blocks:        190.123.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503960 (0x7b098)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ccf671605b5e725ec595356fba462b15442130
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=9ef9f2cdc531c7c1791699516136f2e1c3296018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:91:bb:8c:72:2c:3e:ea:67:f7:86:d9:47:
                    3b:f1:d4:3b:43:25:38:e4:2c:43:7f:8c:3f:62:4e:
                    0d:56:03:99:e9:8a:01:12:1a:0c:7d:38:00:40:21:
                    ab:e3:d6:ca:7b:bd:82:a9:c4:16:07:da:9e:5e:14:
                    b1:48:f5:a5:d1:81:10:5f:84:d2:c4:b4:27:42:6d:
                    85:05:fe:60:18:a2:9e:b3:8e:8b:e4:95:42:24:98:
                    aa:a4:12:1e:31:fc:23:fd:e7:3c:b9:d0:48:c7:4f:
                    32:8d:34:a1:51:a8:a6:0c:70:93:e4:e8:04:e6:27:
                    0f:58:7b:95:9d:c2:4b:35:f3:63:b0:61:8c:f1:98:
                    c4:cc:49:e6:73:cd:c2:89:26:56:7f:46:57:1b:fb:
                    9a:90:de:9d:64:14:18:7a:27:66:9a:c1:60:c1:88:
                    f0:f1:32:05:0a:06:d8:eb:8a:d4:a7:57:19:99:d2:
                    be:8d:40:e0:9a:38:5e:d1:a8:04:d1:0d:4a:e0:49:
                    03:6d:ce:84:b1:db:0a:eb:c1:59:f9:53:ad:13:f8:
                    d9:96:d6:ef:5d:f7:32:0e:82:e3:fe:0f:bd:3c:ef:
                    51:38:9d:5f:b2:0f:67:51:38:b3:b4:17:90:67:10:
                    7a:b3:25:47:2b:b7:56:26:70:17:8c:75:9c:47:f6:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CF:AB:40:71:7A:E5:19:64:57:73:74:63:C0:58:3B:6D:A7:84:9B
            X509v3 Authority Key Identifier:
                keyid:2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/9ef9f2cdc531c7c1791699516136f2e1c3296018.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/71ccf671605b5e725ec595356fba462b15442130.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:d0:73:c3:89:f5:de:1e:12:bc:d3:47:9e:5d:bd:ce:f0:31:
         55:15:d7:d4:43:df:4e:43:4a:13:df:f7:53:1e:53:f9:b6:41:
         e0:aa:85:a4:02:aa:2b:44:21:ea:04:03:a3:6f:0a:49:a9:7c:
         71:66:b5:3a:2f:9c:1f:bc:05:c9:a0:d8:4d:94:39:6f:b4:ad:
         3c:63:b2:d3:ac:08:bf:23:c3:63:d8:4c:1a:03:09:ad:ad:ba:
         d3:15:b9:6b:02:10:49:3c:1d:15:0f:80:05:10:20:32:74:e6:
         68:85:34:b2:00:d3:7e:40:24:23:7d:bf:1c:d1:fb:1f:c5:30:
         5c:6d:eb:e0:ca:e2:53:34:80:51:1b:5b:fe:3d:e1:52:4f:6a:
         d2:35:59:67:34:f4:be:88:02:c3:1a:f7:e0:78:6d:82:3a:69:
         dc:cd:00:bf:de:4a:39:3f:92:d7:14:6c:96:44:bb:51:99:d4:
         1f:25:23:56:00:51:15:ac:d7:76:86:e1:03:9c:2b:6a:0f:b8:
         e5:9b:9d:d8:82:47:28:22:e3:d0:b2:61:26:a7:34:f6:9f:da:
         f0:6d:0a:14:44:96:0d:e7:dc:d3:ec:15:ad:35:ef:56:ba:2c:
         75:63:39:d5:9b:a2:38:08:d2:c0:58:28:64:b2:36:1f:71:c1:
         c9:23:cc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org