Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/fcd481c62a5302ece7d95edeaedb5e8e48d6f0e8.roa
File:                     fcd481c62a5302ece7d95edeaedb5e8e48d6f0e8.roa (raw, json)
Hash identifier:          xrgri129d/dWCd1xyvLrWcmIJI4/EZJqEPWEhe9cd0U=
Subject key identifier:   9C:BE:96:43:7C:20:EC:26:57:BB:11:D9:37:7D:B7:31:F0:21:05:D6
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       182859
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/fcd481c62a5302ece7d95edeaedb5e8e48d6f0e8.roa
Signing time:             Tue 26 Apr 2022 08:46:32 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     27742
IP address blocks:        190.98.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583193 (0x182859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=fcd481c62a5302ece7d95edeaedb5e8e48d6f0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:84:b4:55:2b:7d:87:f3:92:4b:4e:f3:37:41:
                    46:ac:f6:b0:84:59:db:76:b4:6c:af:75:dd:e5:27:
                    ab:56:5c:52:82:cd:2d:5c:8b:ed:03:0a:5e:79:f1:
                    81:7f:fd:7c:6a:94:24:e7:b5:9e:6d:11:6e:78:0d:
                    69:bf:84:39:bb:59:aa:11:f1:34:65:a8:e6:da:5a:
                    1a:1a:1b:d0:9e:9f:7c:ae:61:2d:98:42:64:fb:36:
                    78:37:d0:17:c7:56:38:e4:a2:1d:f8:89:01:3a:ec:
                    bb:65:42:aa:29:4b:8c:58:25:8d:9b:d4:25:90:5c:
                    17:f9:f5:18:b7:8d:05:0c:41:b2:57:43:dc:5a:83:
                    e0:c6:ef:ec:47:df:46:ab:ad:58:b0:fb:03:94:7e:
                    a6:a7:21:f9:4c:96:fd:50:40:8b:b6:5c:4f:e9:34:
                    24:a0:d9:01:81:6e:4b:5b:8d:5b:68:b8:0c:5d:0e:
                    19:b2:1d:63:4d:1a:8d:00:e5:c4:82:ef:e5:27:37:
                    68:dc:f3:9b:02:50:44:41:3d:94:20:42:71:11:06:
                    9d:be:0e:a1:05:bf:11:bb:16:f7:1f:5d:9d:5e:e8:
                    34:2b:c4:5a:65:35:da:d6:48:86:cf:3d:a8:99:0c:
                    09:9e:6c:42:1a:e7:7e:e1:46:a1:0e:a9:04:ce:0b:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BE:96:43:7C:20:EC:26:57:BB:11:D9:37:7D:B7:31:F0:21:05:D6
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/fcd481c62a5302ece7d95edeaedb5e8e48d6f0e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:f2:61:6a:12:a6:50:5d:a6:1b:df:f6:13:15:0f:14:18:ad:
         41:b4:73:f1:e9:63:2b:64:35:1f:c3:be:74:ff:96:27:72:20:
         9f:a8:4c:0d:64:9b:29:8f:2a:3a:7c:ca:54:18:c7:5e:73:2a:
         b0:38:9d:89:b3:21:54:81:65:76:81:cb:fd:62:ae:41:17:97:
         7d:3a:a8:bb:88:e5:f1:74:77:62:40:23:cd:45:ed:c8:d7:52:
         63:15:f2:34:64:07:eb:3d:a7:ba:fd:8a:e3:74:db:cb:1a:9a:
         fd:6c:2e:f8:56:30:0b:74:91:bf:65:57:ed:7a:a1:73:3c:6c:
         0b:9b:31:ee:f4:ad:25:76:8c:06:8a:16:dd:8d:51:fd:20:fa:
         63:c1:69:6b:cc:d2:45:47:bb:92:2e:47:06:62:66:9c:a9:59:
         df:08:45:2d:51:81:46:e7:4a:24:6d:b1:1f:ca:d0:5c:b5:34:
         b4:4c:f5:b7:cb:a8:e2:0c:42:f1:ba:68:ad:bc:62:6b:c7:0d:
         b1:a0:df:23:d5:35:73:5b:ea:37:a1:f9:02:8d:7f:46:1d:6d:
         e8:2d:a2:ca:40:3b:70:ff:67:30:0b:d1:8a:ed:68:f0:58:fd:
         32:02:38:b0:44:c6:5e:eb:22:ad:54:04:0e:30:85:d9:17:f0:
         26:a3:ca:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:36 2024 by rpki-client on console-ams.rpki-client.org