Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08f08d4b-d918-4c45-9df4-a13d7789153c/e22ca6d3319fb0b424b13e559d037df108d694d2.roa
File:                     e22ca6d3319fb0b424b13e559d037df108d694d2.roa (raw, json)
Hash identifier:          i1D8AuklIdhbOCVaPD8ogYrBsJqXHJfTNxhX+lCnmAM=
Subject key identifier:   4B:6F:D2:16:3F:AC:6E:B5:D1:08:1D:37:BE:F0:8F:01:31:DD:4A:D2
Certificate issuer:       /CN=6c71ac3d2906f78e7983d8c070095dde94b2ccd7
Certificate serial:       0E1D95
Authority key identifier: 3B:48:64:E8:69:4B:A1:DB:F8:A7:F2:44:76:B4:B8:AF:4F:AB:40:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c71ac3d2906f78e7983d8c070095dde94b2ccd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08f08d4b-d918-4c45-9df4-a13d7789153c/e22ca6d3319fb0b424b13e559d037df108d694d2.roa
Signing time:             Sun 28 Aug 2022 04:01:49 +0000
ROA not before:           Sun 28 Aug 2022 04:01:49 +0000
ROA not after:            Sat 28 Aug 2027 04:01:49 +0000
asID:                     272818
IP address blocks:        190.121.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925077 (0xe1d95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c71ac3d2906f78e7983d8c070095dde94b2ccd7
        Validity
            Not Before: Aug 28 04:01:49 2022 GMT
            Not After : Aug 28 04:01:49 2027 GMT
        Subject: CN=e22ca6d3319fb0b424b13e559d037df108d694d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:a3:0a:99:ad:21:a7:e6:f0:ca:40:aa:bd:
                    ec:a2:ef:b6:88:19:ef:43:23:56:a2:67:30:3f:77:
                    8d:29:93:d9:80:48:43:7f:b5:5f:56:1e:b0:db:dc:
                    d6:f9:50:6a:c2:99:60:df:bd:4f:ff:c1:2c:b3:98:
                    7c:d3:cd:43:dc:58:f8:6c:3c:de:1d:56:4a:59:20:
                    0f:d6:4a:48:af:8b:7e:8e:38:2b:16:58:a7:dd:3a:
                    81:48:24:a5:fd:ea:7b:35:e0:30:12:ca:41:9c:68:
                    e7:9c:20:74:2f:77:73:eb:2c:f2:e5:95:9e:e1:b8:
                    db:79:8e:56:eb:94:cd:3f:4d:6c:99:28:d3:64:6a:
                    e6:73:eb:eb:6a:f0:e0:3e:f5:b6:67:ef:8a:6c:5e:
                    21:35:48:c5:32:75:38:cd:d4:2e:71:6b:fd:9e:bc:
                    8d:5b:d5:5f:83:bd:84:59:f1:42:45:a4:53:be:50:
                    df:17:7d:be:43:af:3f:48:fd:d5:a5:b3:29:b0:c0:
                    95:1c:b3:fd:2b:36:f1:44:71:40:f8:59:c3:e7:27:
                    12:53:21:e2:55:6f:29:18:f7:dd:b5:4c:0d:61:94:
                    27:1f:75:48:cd:38:1b:a0:e5:f7:91:78:bb:99:9c:
                    1d:67:b5:2d:d2:f8:dd:3b:90:85:1e:8a:bf:39:74:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6F:D2:16:3F:AC:6E:B5:D1:08:1D:37:BE:F0:8F:01:31:DD:4A:D2
            X509v3 Authority Key Identifier:
                keyid:3B:48:64:E8:69:4B:A1:DB:F8:A7:F2:44:76:B4:B8:AF:4F:AB:40:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c71ac3d2906f78e7983d8c070095dde94b2ccd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08f08d4b-d918-4c45-9df4-a13d7789153c/e22ca6d3319fb0b424b13e559d037df108d694d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08f08d4b-d918-4c45-9df4-a13d7789153c/6c71ac3d2906f78e7983d8c070095dde94b2ccd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:63:64:ee:af:66:11:08:27:1d:12:cd:ab:f0:22:c3:4e:80:
         d1:d6:16:ad:88:45:23:10:82:92:0c:eb:69:9f:da:4b:1d:4f:
         ff:76:bc:31:51:11:8c:94:67:87:ca:e5:29:ba:8a:e6:b2:d7:
         5c:42:c9:8a:5b:c0:8b:66:0a:33:d1:dc:0d:cc:66:5e:4d:76:
         6d:72:44:2b:4c:4e:5b:b6:81:1c:eb:aa:c8:be:fa:d9:5b:a2:
         10:9e:5e:3c:34:d8:f7:e2:24:68:02:ff:2d:a8:d0:4f:fc:89:
         7e:f8:d7:18:07:ea:6b:52:ca:81:51:ec:a0:c8:59:88:32:a4:
         a6:c3:f7:80:7a:c3:53:2a:e2:5e:03:2a:a1:29:25:f4:a2:b0:
         9a:2d:09:64:e2:bb:d7:a1:18:66:09:14:29:74:53:88:f2:00:
         39:6c:64:b3:67:70:4b:02:9b:b1:dc:40:43:c8:bb:bf:87:4d:
         8e:be:ca:c9:e6:14:56:0e:7b:3d:4a:01:aa:2f:15:d1:89:8a:
         c1:9e:a8:8e:01:23:16:b8:f4:a9:a8:a8:dc:3d:80:9e:7c:40:
         b7:86:93:91:10:cb:bd:ad:06:0f:15:69:20:54:0f:f8:36:78:
         01:9a:0e:eb:db:b9:db:a5:58:eb:50:8f:82:85:18:cf:a8:2d:
         1c:b5:28:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org