Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c0a3b9d7-b0e0-4bc6-8397-cbae449b31a8/2d5be1228f67c2a90cc1095c8e14ef88749a8a8d.roa
File:                     2d5be1228f67c2a90cc1095c8e14ef88749a8a8d.roa (raw, json)
Hash identifier:          ledW4xIVrJl7aXL8mWggWXom7Ieu+OJiEXq0v706/dY=
Subject key identifier:   A3:AB:7E:84:73:84:AB:14:89:CB:91:62:62:E2:10:DB:95:70:27:60
Certificate issuer:       /CN=7f5bcd32c19e6d6d2c83078867c8ae713897e6c3
Certificate serial:       077E1E
Authority key identifier: C6:12:BA:0E:32:6B:E4:6B:86:EB:7B:A2:C0:B3:7A:AF:A2:A7:E6:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f5bcd32c19e6d6d2c83078867c8ae713897e6c3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c0a3b9d7-b0e0-4bc6-8397-cbae449b31a8/2d5be1228f67c2a90cc1095c8e14ef88749a8a8d.roa
Signing time:             Wed 24 Mar 2021 14:42:14 +0000
ROA not before:           Wed 24 Mar 2021 14:42:14 +0000
ROA not after:            Tue 24 Mar 2026 14:42:14 +0000
asID:                     19863
IP address blocks:        190.93.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491038 (0x77e1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f5bcd32c19e6d6d2c83078867c8ae713897e6c3
        Validity
            Not Before: Mar 24 14:42:14 2021 GMT
            Not After : Mar 24 14:42:14 2026 GMT
        Subject: CN=2d5be1228f67c2a90cc1095c8e14ef88749a8a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:47:cb:c7:ce:a1:41:e9:ca:86:92:4d:dd:
                    56:09:ad:64:ff:6e:87:fb:dc:40:72:b6:28:2a:98:
                    3a:b5:0f:9a:a7:58:fb:c9:26:62:b5:a1:cd:9d:d9:
                    a3:46:92:d6:a8:70:64:f4:13:ed:61:60:9d:36:63:
                    2c:f0:99:0d:5e:d7:40:61:fa:11:29:4f:b4:7c:a2:
                    fe:89:02:1e:80:ac:06:7a:b2:cf:1c:78:5b:c0:31:
                    fe:bb:64:ea:8c:4b:83:8e:7f:39:4f:74:98:b8:3f:
                    fb:66:ac:d8:09:65:63:c3:fd:34:51:d0:e5:d8:40:
                    0c:f3:23:50:01:28:77:22:fa:d4:8b:2c:36:6c:66:
                    1d:eb:49:b2:cb:15:f6:db:17:9f:fb:a5:c1:b0:fb:
                    98:55:f8:50:80:fd:96:a7:18:a0:37:75:2c:cc:53:
                    8b:57:d0:ec:64:18:81:d6:f5:ef:3f:43:a6:c1:e1:
                    ea:9a:59:07:8e:3d:94:0d:16:d3:a9:c6:fb:91:32:
                    74:8f:d7:23:71:0a:42:d3:b9:89:38:e2:f3:ab:d6:
                    1c:ae:a7:5c:57:65:c8:ad:8e:9d:28:39:cb:03:e2:
                    ef:a1:88:6c:d5:b4:e0:96:9b:72:c3:38:c2:dd:cc:
                    b5:a4:2b:09:08:00:dd:bb:c9:95:9c:5f:4b:44:b5:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AB:7E:84:73:84:AB:14:89:CB:91:62:62:E2:10:DB:95:70:27:60
            X509v3 Authority Key Identifier:
                keyid:C6:12:BA:0E:32:6B:E4:6B:86:EB:7B:A2:C0:B3:7A:AF:A2:A7:E6:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7f5bcd32c19e6d6d2c83078867c8ae713897e6c3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c0a3b9d7-b0e0-4bc6-8397-cbae449b31a8/2d5be1228f67c2a90cc1095c8e14ef88749a8a8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c0a3b9d7-b0e0-4bc6-8397-cbae449b31a8/7f5bcd32c19e6d6d2c83078867c8ae713897e6c3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:20:c4:43:e4:5e:30:c0:f3:40:f7:96:72:6b:55:93:7f:db:
         b7:62:97:77:fe:3f:dc:9e:f8:f4:5d:c8:06:60:7b:51:ca:c2:
         89:ee:d4:28:25:e4:6f:bf:7e:5f:69:30:07:33:47:b8:d7:0f:
         2d:89:ff:4e:3c:96:4c:d3:5e:8b:0a:36:f3:4d:37:c9:db:8a:
         a9:3e:b8:4d:46:8d:ab:3b:cd:62:86:23:8e:ea:22:5c:b8:39:
         2f:46:f2:4c:6c:96:cf:88:dd:e2:03:6d:53:29:78:38:42:af:
         7c:7d:b1:b1:df:8f:87:2f:27:02:5a:96:d9:25:32:f2:42:7a:
         ae:23:43:e2:db:ba:4b:27:df:84:22:e5:4c:bc:a5:b0:f6:60:
         d8:e9:96:3f:60:5f:d3:98:f5:19:31:a4:8a:36:f5:4c:5a:4c:
         a4:0f:82:b8:e5:68:c2:c1:59:13:2d:86:af:e2:11:c6:65:49:
         53:41:64:89:fd:fc:4a:5a:f4:5a:ee:a9:48:f6:75:26:70:da:
         24:04:f8:4a:40:52:52:b5:40:40:d9:03:1a:fe:f5:e6:4e:74:
         c2:59:e9:da:9d:1b:26:31:94:d8:56:73:b1:03:70:3e:1e:87:
         9c:03:d6:f6:ad:e6:ed:db:6d:cf:8a:5f:8e:be:a5:2f:8a:80:
         0a:20:aa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org