Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/f8e40277a75e8fad1821b972a24157d71c188378.roa
File:                     f8e40277a75e8fad1821b972a24157d71c188378.roa (raw, json)
Hash identifier:          JGfMGiGq9fidDrqGKMefESAtXFkMB4gp37eFjuOFWfc=
Subject key identifier:   57:B5:DA:BB:EF:0B:F7:0B:D3:E4:CD:A3:20:3A:26:35:D3:53:42:B9
Certificate issuer:       /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial:       0DB6DB
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/f8e40277a75e8fad1821b972a24157d71c188378.roa
Signing time:             Wed 24 Mar 2021 14:35:27 +0000
ROA not before:           Wed 24 Mar 2021 14:35:25 +0000
ROA not after:            Tue 24 Mar 2026 14:35:25 +0000
asID:                     18747
IP address blocks:        190.60.0.0/16 maxlen: 24
                          190.61.0.0/19 maxlen: 24
                          190.61.64.0/18 maxlen: 24
                          190.61.128.0/17 maxlen: 24
                          200.61.128.0/19 maxlen: 24
                          200.80.0.0/18 maxlen: 24
                          200.91.192.0/19 maxlen: 24
                          200.91.224.0/19 maxlen: 24
                          200.110.128.0/19 maxlen: 24
                          201.217.192.0/19 maxlen: 24
                          2802::/30 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898779 (0xdb6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
        Validity
            Not Before: Mar 24 14:35:25 2021 GMT
            Not After : Mar 24 14:35:25 2026 GMT
        Subject: CN=f8e40277a75e8fad1821b972a24157d71c188378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:0f:d6:8e:b7:32:ee:1c:5e:e2:03:fc:49:
                    e9:5e:39:22:03:5f:55:2e:28:08:d2:a8:60:d0:9d:
                    31:e4:70:3d:a2:93:d9:c2:ee:00:56:69:f6:9b:ad:
                    ef:3b:ca:14:0f:5a:15:ce:76:fc:d7:07:f1:05:1f:
                    ee:40:bc:d3:e3:92:ae:08:6c:a1:db:f9:b0:e0:ef:
                    f5:8a:b6:1f:7e:77:53:4e:ba:99:3e:b2:e7:b9:76:
                    94:19:e9:1a:95:64:80:22:83:6b:cc:aa:05:38:34:
                    14:8f:b4:29:ef:ae:a5:c5:46:c9:bd:60:28:58:e2:
                    7a:27:97:15:14:8e:b9:5b:7d:db:cb:5e:6c:c2:bf:
                    65:05:d4:cf:e0:1b:01:a4:ea:d2:a5:93:9e:7f:d7:
                    b0:c8:73:d3:63:51:b4:84:51:7f:45:a5:9f:44:71:
                    90:31:5b:1c:76:76:3a:d1:c8:a8:a8:36:a2:00:52:
                    d6:4d:b6:26:9f:e8:a4:40:63:36:8d:49:6b:74:cd:
                    56:22:89:1c:94:00:3e:e2:cc:cc:2f:cc:5e:1a:f3:
                    e0:3e:eb:e1:ee:2d:ec:61:fb:b4:b7:53:2a:f3:5c:
                    1e:21:91:ec:03:3a:d6:72:6c:2d:0b:f3:1d:03:3d:
                    ce:40:6c:cb:d6:60:47:60:b7:8b:60:69:bc:56:a6:
                    e9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B5:DA:BB:EF:0B:F7:0B:D3:E4:CD:A3:20:3A:26:35:D3:53:42:B9
            X509v3 Authority Key Identifier:
                keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/f8e40277a75e8fad1821b972a24157d71c188378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.0.0-190.61.31.255
                  190.61.64.0-190.61.255.255
                  200.61.128.0/19
                  200.80.0.0/18
                  200.91.192.0/18
                  200.110.128.0/19
                  201.217.192.0/19
                IPv6:
                  2802::/30

    Signature Algorithm: sha256WithRSAEncryption
         75:ec:f0:13:23:bb:ff:27:ba:2a:d1:45:6e:c4:9a:04:a9:3d:
         fb:1e:fe:57:71:45:50:af:ae:90:f5:d9:79:2a:a0:43:4d:0d:
         e2:c1:c4:2c:5c:48:51:72:08:6d:6c:da:34:5a:34:68:a8:68:
         ad:c3:6b:71:72:4c:c1:59:f9:0e:c8:ae:0b:9c:81:8f:31:26:
         18:6b:15:74:fd:00:ee:af:79:32:2e:7d:bd:49:34:aa:f4:7c:
         78:aa:e9:7a:ba:57:10:34:99:3d:c8:ca:73:9e:1e:a0:51:ee:
         49:a1:39:e9:3f:4c:c6:4d:82:57:37:ea:f6:6e:90:6d:1a:e6:
         4f:3e:ea:b8:85:b7:ce:01:b6:68:ef:6a:f4:72:e8:9d:1d:62:
         2d:e8:64:54:80:3b:59:7d:e1:9e:01:4c:e3:80:49:6d:15:0e:
         eb:7c:81:f6:fe:19:3e:b3:f4:19:dd:d9:1c:97:3d:41:c6:ba:
         80:0c:7b:3a:1d:fc:e4:8f:e7:4b:76:67:ed:41:7b:24:80:b4:
         17:fd:98:50:f7:58:8c:c3:96:7e:40:81:5a:f1:b7:e6:9e:18:
         be:ca:ef:da:6b:49:92:6d:73:39:47:ac:05:49:dd:13:0c:23:
         3e:30:c1:1c:e0:02:62:75:16:1a:d8:60:cb:8d:b0:c0:70:22:
         62:0f:6e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:02 2024 by rpki-client on console-fra.rpki-client.org