Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/ea981d2c27e9a6289bc3cebee2ddff4364fbeb94.roa
File:                     ea981d2c27e9a6289bc3cebee2ddff4364fbeb94.roa (raw, json)
Hash identifier:          yYSeRplwn8ZJ+NLTIPNwiH5UnkWhBrzDNobXYr3klaw=
Subject key identifier:   00:FB:A6:BE:8F:F8:AA:60:68:9E:B5:A6:B8:E7:47:39:A3:E4:22:35
Certificate issuer:       /CN=e8e60ce967bb3600b1ab69a25627f26d48b06694
Certificate serial:       0DA378
Authority key identifier: 02:F3:E8:5B:88:E9:BB:34:88:F5:9A:4E:52:5C:EC:64:B5:66:AE:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8e60ce967bb3600b1ab69a25627f26d48b06694.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/ea981d2c27e9a6289bc3cebee2ddff4364fbeb94.roa
Signing time:             Wed 24 Mar 2021 14:31:04 +0000
ROA not before:           Wed 24 Mar 2021 14:31:04 +0000
ROA not after:            Tue 24 Mar 2026 14:31:04 +0000
asID:                     28048
IP address blocks:        190.112.64.0/18 maxlen: 23
                          191.103.0.0/18 maxlen: 19
                          200.91.32.0/21 maxlen: 24
                          2803:ea80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893816 (0xda378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8e60ce967bb3600b1ab69a25627f26d48b06694
        Validity
            Not Before: Mar 24 14:31:04 2021 GMT
            Not After : Mar 24 14:31:04 2026 GMT
        Subject: CN=ea981d2c27e9a6289bc3cebee2ddff4364fbeb94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:5c:ef:73:86:26:41:3e:3a:a5:d9:b9:bc:
                    c3:71:61:15:d0:7b:cd:03:3e:e8:0a:3d:d4:b6:17:
                    a7:70:8f:b1:7a:e1:74:ae:39:d9:d8:78:78:5e:01:
                    c5:90:6e:19:e8:ea:bc:18:83:6f:5b:56:47:e3:0f:
                    97:1f:2e:98:b1:11:14:1b:6f:17:8e:6f:e0:54:aa:
                    c7:9d:48:57:84:3f:a5:aa:02:79:79:9f:ed:21:db:
                    e3:58:df:58:ee:d8:b2:1b:12:02:b1:c2:9d:d6:e6:
                    c3:4a:08:ca:75:a3:14:70:e5:8c:fa:f3:fc:ef:d1:
                    4e:2e:ac:d3:50:2d:7f:4c:08:05:58:15:72:09:e9:
                    6f:f8:21:70:af:6f:a1:29:7a:7e:45:1c:82:97:89:
                    8a:ac:25:57:7b:b7:a0:21:87:13:af:82:72:9c:4e:
                    aa:18:f6:2c:dc:e3:e4:98:1e:33:e5:0d:da:36:67:
                    15:84:6c:8a:d7:57:6a:3c:94:86:0a:81:63:85:bd:
                    f7:16:e3:a1:32:9c:64:6f:b0:f2:40:eb:a5:b0:a2:
                    e8:c1:c3:fe:f6:d7:92:17:04:6d:73:c3:84:db:d0:
                    29:d9:51:c2:1e:58:80:cc:b3:ae:c6:8d:08:46:b3:
                    f4:75:91:13:0d:e7:7e:e1:96:63:39:ca:72:09:ae:
                    38:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FB:A6:BE:8F:F8:AA:60:68:9E:B5:A6:B8:E7:47:39:A3:E4:22:35
            X509v3 Authority Key Identifier:
                keyid:02:F3:E8:5B:88:E9:BB:34:88:F5:9A:4E:52:5C:EC:64:B5:66:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8e60ce967bb3600b1ab69a25627f26d48b06694.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/ea981d2c27e9a6289bc3cebee2ddff4364fbeb94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/e8e60ce967bb3600b1ab69a25627f26d48b06694.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.64.0/18
                  191.103.0.0/18
                  200.91.32.0/21
                IPv6:
                  2803:ea80::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:1a:be:2b:83:5c:8d:46:7d:b8:db:c7:a9:da:38:89:be:ff:
         37:73:68:37:3f:10:0d:bf:2f:81:45:9b:d2:33:30:bb:7c:71:
         20:cf:9b:f4:51:e4:04:38:ad:71:f6:d8:6d:a4:a8:66:14:dd:
         87:b2:50:1a:44:44:40:d4:ea:eb:49:06:ed:04:c5:d6:1b:71:
         b9:4b:26:d1:19:92:9d:eb:33:95:88:83:18:8f:fa:7d:38:ec:
         d0:30:22:7e:6d:57:2e:4b:b4:d4:05:b6:75:a4:30:23:ed:2e:
         ee:a9:d4:e7:08:42:d6:2e:9c:43:c0:be:7a:97:13:f5:d7:ed:
         04:df:5b:96:42:16:18:7d:de:e0:22:ed:f4:e8:f4:95:d4:a6:
         80:19:07:cf:10:c3:8d:41:33:55:3f:7f:f5:e0:26:71:13:ec:
         42:b5:cc:a7:eb:85:ef:3e:8e:5d:b2:93:b6:44:50:d9:e2:10:
         91:81:56:31:b9:90:79:dc:3f:21:2d:67:c9:e8:0f:c8:d0:5d:
         fc:ea:ce:75:5b:c4:4b:2a:c7:27:c5:53:e3:7f:17:c9:f2:df:
         61:0b:4c:fa:93:96:d2:a6:1f:65:81:ff:30:a5:91:c6:e2:e3:
         03:9c:cf:3c:38:47:cc:f6:90:f8:58:08:21:94:92:a7:33:6b:
         9a:a5:82:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org