Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5af40d53d59dc578355b0824cd96aefc8deead3a.roa
File:                     5af40d53d59dc578355b0824cd96aefc8deead3a.roa (raw, json)
Hash identifier:          yoCUJmgCO/xM80ykDO/i5D0bB2B+azZDIWxE0mKkH58=
Subject key identifier:   B1:C2:DD:1C:65:65:E0:FA:25:23:EB:36:6D:1D:46:80:B4:D4:FC:17
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       12BBBD
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5af40d53d59dc578355b0824cd96aefc8deead3a.roa
Signing time:             Fri 24 Sep 2021 22:55:34 +0000
ROA not before:           Fri 25 Jun 2021 03:00:00 +0000
ROA not after:            Fri 25 Jun 2060 03:00:00 +0000
asID:                     14080
IP address blocks:        181.49.92.0/22 maxlen: 22
                          186.86.140.0/22 maxlen: 22
                          186.86.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227709 (0x12bbbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Jun 25 03:00:00 2021 GMT
            Not After : Jun 25 03:00:00 2060 GMT
        Subject: CN=5af40d53d59dc578355b0824cd96aefc8deead3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:9f:40:d0:00:3d:bf:20:19:dc:e4:53:f7:
                    88:5d:cc:68:18:d0:21:7e:aa:de:df:db:b3:b7:bc:
                    4c:c9:39:4d:e2:b2:14:a5:fc:73:c5:02:7a:06:3a:
                    12:ea:b7:69:d2:69:73:b2:b6:68:b6:44:7b:2a:a9:
                    c0:26:2e:5d:d6:79:1c:bd:87:63:50:67:49:42:8f:
                    39:0c:59:79:39:3d:da:15:56:28:e2:48:12:b1:37:
                    dc:e0:8f:29:c3:fb:d8:b1:f5:09:2c:27:3e:59:40:
                    74:47:6a:e2:94:85:e0:09:78:82:9c:64:df:84:4c:
                    aa:e4:7b:b3:71:56:de:ae:2a:36:2b:97:75:d9:9b:
                    57:95:b6:55:14:6b:e1:a4:ee:34:18:55:41:ba:67:
                    76:94:4a:74:2f:27:59:17:be:5a:76:cf:5d:ab:0a:
                    77:85:5f:11:c7:39:c3:d9:44:9c:70:bc:da:ad:2b:
                    b9:e3:10:be:9c:e1:5e:3f:f3:ea:18:cb:01:6c:6e:
                    93:1f:96:a9:cd:d5:65:fb:8d:34:ec:e5:b1:78:e2:
                    bc:2d:eb:aa:3b:cd:c5:93:72:1a:9d:67:28:15:7e:
                    89:ae:ef:91:ba:70:ca:aa:4c:56:e6:c1:55:68:ac:
                    8b:f0:1d:30:da:ca:d6:0f:99:47:91:0b:ed:56:9f:
                    51:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C2:DD:1C:65:65:E0:FA:25:23:EB:36:6D:1D:46:80:B4:D4:FC:17
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/5af40d53d59dc578355b0824cd96aefc8deead3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.49.92.0/22
                  186.86.140.0/22
                  186.86.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:3c:93:a9:4e:9f:fd:fb:92:90:e4:b0:f0:38:58:67:70:36:
         46:93:f0:41:3b:70:34:24:69:17:a5:a1:a1:08:2c:10:46:50:
         5b:9b:09:fa:60:a7:07:6d:67:31:61:68:e1:66:03:aa:e9:b1:
         1e:c6:92:12:b0:7c:39:d7:72:3d:22:e4:33:6a:c5:a9:b8:51:
         61:c7:ba:53:5f:ce:b1:8a:d5:1c:62:af:cd:ef:d2:5b:ee:f9:
         35:1c:7c:91:12:e1:08:5f:c3:8a:67:f9:40:f1:ef:fe:05:9d:
         dc:d8:51:e8:88:ff:7f:a9:79:2a:74:26:35:2e:0d:dd:08:25:
         75:bd:71:61:17:a3:82:70:91:5a:0b:6c:3e:0e:d2:e2:b8:7a:
         d4:69:4f:c9:ae:8a:31:8a:10:58:ca:ef:6b:75:c1:20:6d:5d:
         da:b0:cf:20:5b:d2:b9:b2:15:10:09:8f:4c:25:f0:c9:6f:70:
         cc:ff:06:ef:a4:fb:11:b6:ea:a9:66:84:1c:34:7d:9a:bb:42:
         cd:18:fc:2d:9d:40:68:97:4b:b9:80:41:d7:8f:28:ff:6d:6e:
         9c:6e:1f:95:7b:f6:88:03:46:6f:06:90:c5:07:a7:21:60:bd:
         d7:4d:0c:b6:10:14:f1:0c:b9:d4:3a:28:ec:de:e4:74:e0:d8:
         be:29:c3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org