Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c89445877a72eef2c75636e1bffbd22955f84f27.roa
File:                     c89445877a72eef2c75636e1bffbd22955f84f27.roa (raw, json)
Hash identifier:          Yy1hO1gNIiqLstyOSs0hAPk0YqfcXvPL9CYqzIYVHL4=
Subject key identifier:   D9:9B:EF:59:A8:2C:B5:8F:1C:9A:2F:A0:4A:F4:11:81:69:6F:D0:CC
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       17EB9F
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c89445877a72eef2c75636e1bffbd22955f84f27.roa
Signing time:             Tue 19 Apr 2022 12:26:10 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Wed 31 Dec 2025 03:00:00 +0000
asID:                     12956
IP address blocks:        181.199.208.0/20 maxlen: 24
                          190.98.128.0/19 maxlen: 24
                          190.98.160.0/19 maxlen: 24
                          168.195.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1567647 (0x17eb9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Dec 31 03:00:00 2025 GMT
        Subject: CN=c89445877a72eef2c75636e1bffbd22955f84f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:80:ce:d7:7b:87:1e:5a:65:a1:df:08:2a:
                    97:05:87:34:63:91:8d:8b:e2:f0:61:2c:00:a1:a4:
                    df:6b:d3:8f:6d:d7:17:0f:26:0d:1d:1a:fd:32:c1:
                    13:f1:b3:d2:d8:ad:a9:d0:a3:1e:f8:19:31:25:8a:
                    ea:43:a5:89:e7:3d:3c:c3:ba:40:d9:a4:9c:48:22:
                    67:a4:d8:b9:43:a7:f4:b4:c6:c2:2f:ab:ca:d5:ae:
                    ef:ae:4e:d5:2f:69:f1:47:69:1e:52:1f:9b:ad:58:
                    1d:50:12:c9:73:bb:d2:c9:06:16:7d:73:65:17:cb:
                    de:d8:85:af:a3:69:8f:b9:53:58:9c:22:d8:5b:f2:
                    0f:a5:8e:b4:d9:27:ec:db:62:21:d5:26:41:14:cb:
                    3b:d4:c0:9b:b7:a3:f7:20:7f:ec:59:6d:d9:d5:61:
                    fb:5e:2d:1e:3c:06:c9:1d:63:82:e8:d4:ff:fe:64:
                    c3:37:1f:c0:b8:71:a1:a6:08:dc:9e:5c:6e:5a:fa:
                    7e:83:59:56:96:f3:15:e1:25:3a:95:8f:d0:5d:c8:
                    43:71:55:a2:ef:90:d3:52:7c:7a:1b:78:67:9b:0f:
                    14:4e:1e:37:de:cc:c2:76:71:c5:ac:16:a1:b9:21:
                    ae:49:ed:eb:7b:85:48:11:74:a3:29:19:32:53:4e:
                    2a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9B:EF:59:A8:2C:B5:8F:1C:9A:2F:A0:4A:F4:11:81:69:6F:D0:CC
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c89445877a72eef2c75636e1bffbd22955f84f27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.56.0/22
                  181.199.208.0/20
                  190.98.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:db:7d:62:89:59:b9:6c:e3:56:ee:e7:f6:a6:49:f0:cd:5a:
         57:f9:f4:f6:b6:26:cf:97:1d:8d:3d:3c:74:88:b8:62:90:4f:
         0f:58:f3:51:e7:8b:52:7b:60:80:36:0e:71:36:e7:ae:61:d5:
         0f:ee:0d:15:1d:d8:9d:8c:57:98:65:4a:b4:31:3f:53:10:5e:
         ea:8b:df:a4:84:34:f1:83:8a:4b:2b:ee:96:1d:9f:f3:65:b8:
         1a:e9:a7:d7:7c:b9:1f:77:3d:08:79:70:d5:61:23:40:20:b1:
         b6:fe:6f:e8:72:d4:0a:fc:86:97:4a:63:5f:ea:89:a7:11:cd:
         fd:53:fa:28:e5:d2:b4:78:5c:6f:6f:48:9a:75:ee:df:9e:24:
         10:65:c6:5f:04:b5:97:e7:8d:b6:bd:82:c4:16:92:a1:96:7d:
         3c:aa:83:13:b8:94:e0:4d:ef:70:2e:73:c1:b6:35:4a:6f:79:
         f5:81:20:ac:54:c1:93:54:85:95:cd:ff:4d:50:ea:19:e1:ee:
         a6:5e:42:76:25:f0:72:4d:16:a7:27:fe:31:40:af:ae:40:e3:
         45:39:bd:43:57:1c:dc:2a:ff:d7:78:e1:ae:ee:64:07:fb:56:
         24:eb:c2:77:eb:74:99:70:1f:be:16:c3:76:83:21:1e:6a:47:
         29:7b:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org