Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fac3675c-976c-4186-835d-0905caae6ef2/f3b081fc6c9574a2430b75e494a01821f2032968.roa
File:                     f3b081fc6c9574a2430b75e494a01821f2032968.roa (raw, json)
Hash identifier:          5dyzhdUXIW/SSd8bQ2yV1iLUqU2ReuIAwkn/CTUs568=
Subject key identifier:   8B:09:BE:98:96:87:B4:1D:E4:68:83:88:37:05:82:DC:1D:C9:84:55
Certificate issuer:       /CN=15ca8c673e3b3e909da083fd76e2e42cdae2b046
Certificate serial:       0423
Authority key identifier: 37:90:2C:F7:BB:EA:66:CC:E7:FB:B8:D4:3C:48:94:6E:8E:10:23:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ca8c673e3b3e909da083fd76e2e42cdae2b046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fac3675c-976c-4186-835d-0905caae6ef2/f3b081fc6c9574a2430b75e494a01821f2032968.roa
Signing time:             Mon 19 Apr 2021 17:03:08 +0000
ROA not before:           Mon 19 Apr 2021 03:00:00 +0000
ROA not after:            Sun 19 Apr 2026 03:00:00 +0000
asID:                     23243
IP address blocks:        143.208.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ca8c673e3b3e909da083fd76e2e42cdae2b046
        Validity
            Not Before: Apr 19 03:00:00 2021 GMT
            Not After : Apr 19 03:00:00 2026 GMT
        Subject: CN=f3b081fc6c9574a2430b75e494a01821f2032968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:a7:46:41:bb:95:76:f5:18:55:1e:1d:cb:
                    a4:a0:a7:b9:5a:aa:a7:73:85:cd:44:b2:7c:55:3f:
                    f4:ea:a8:fd:ab:8a:c3:0a:fe:cd:45:ad:80:7a:c6:
                    77:86:ae:28:51:e9:45:80:3f:67:92:de:79:2e:0c:
                    49:b0:7b:ef:cf:25:d4:70:32:29:2b:58:f3:7d:40:
                    33:eb:7f:70:f1:6d:da:fc:ad:6a:ae:6c:22:8e:16:
                    9f:e6:a1:e4:d3:29:3e:04:8d:20:ff:3e:d1:48:df:
                    7f:46:7c:58:68:56:ea:3a:9e:8d:27:53:31:e7:d9:
                    1d:bb:5c:5f:75:79:51:1c:be:15:d4:34:3a:83:42:
                    89:bb:7c:c2:96:1a:b0:8a:b5:aa:e1:52:36:1a:c5:
                    80:73:64:20:3b:c3:7e:85:5a:14:59:84:bc:39:18:
                    09:1a:24:14:95:1c:d7:e4:9e:9f:9f:36:6f:71:24:
                    37:15:5f:40:ce:fc:3d:5c:89:3c:78:dd:84:45:a4:
                    e4:2c:bc:0b:b5:d2:ef:f1:db:6f:f6:60:57:64:6f:
                    f4:cf:ac:83:ce:ed:97:79:f3:b4:90:9d:f0:e7:a6:
                    ac:18:6f:0b:d1:b3:6a:2b:54:10:33:b1:69:e0:58:
                    95:05:f7:3b:26:c4:04:71:93:5d:aa:b7:41:11:c0:
                    1d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:09:BE:98:96:87:B4:1D:E4:68:83:88:37:05:82:DC:1D:C9:84:55
            X509v3 Authority Key Identifier:
                keyid:37:90:2C:F7:BB:EA:66:CC:E7:FB:B8:D4:3C:48:94:6E:8E:10:23:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ca8c673e3b3e909da083fd76e2e42cdae2b046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fac3675c-976c-4186-835d-0905caae6ef2/f3b081fc6c9574a2430b75e494a01821f2032968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fac3675c-976c-4186-835d-0905caae6ef2/15ca8c673e3b3e909da083fd76e2e42cdae2b046.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:8f:1b:c2:6c:54:6c:7e:cd:65:aa:f5:fb:0f:d2:b1:09:e6:
         80:7a:90:38:23:cc:4b:10:40:58:b7:76:41:7c:5d:bf:91:d6:
         7d:49:7a:dd:e7:8a:25:7b:cc:b5:97:3e:6f:18:50:68:1f:26:
         94:04:d6:18:74:de:f1:30:cb:0d:5d:1f:87:1b:11:46:b2:c3:
         37:92:bd:0a:7b:ce:d8:bd:7c:58:c8:50:78:61:29:80:a5:bb:
         be:4d:1d:1b:f4:13:f4:3b:f5:4c:e6:20:4b:25:10:0b:40:92:
         7f:e7:ec:3d:a8:39:a4:0c:30:f6:56:2a:c3:0d:1d:04:79:0b:
         1e:89:08:d8:60:01:28:8b:54:63:89:26:a4:76:9f:60:b5:0e:
         8e:36:1c:63:39:c3:93:ec:8e:3d:26:e7:e9:1a:e7:8b:e9:20:
         61:14:b0:f1:c1:60:ed:f8:3e:82:0a:09:c6:ec:3b:8d:e4:fb:
         7b:1e:fe:19:1d:dd:30:4f:12:70:aa:b6:3a:0b:9a:4c:8c:a6:
         d7:c3:e6:83:8b:cf:f3:b7:4a:6e:db:91:f8:71:01:4f:26:3a:
         f8:46:be:27:79:dc:07:c3:b3:34:41:f7:3d:af:58:fa:98:3c:
         b5:06:0f:65:12:24:13:1b:e6:00:b7:ec:b7:98:59:09:a7:65:
         f5:35:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org