Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/115a4b99-1a29-4ba0-864c-49316619091c/e9e42f7cc8c121121d42e90524530b31ac56dcdd.roa
File:                     e9e42f7cc8c121121d42e90524530b31ac56dcdd.roa (raw, json)
Hash identifier:          8Cdv2Vw4BYqViFLHI7bptCuo6iuUz/1wxU9emrTHTRw=
Subject key identifier:   EF:74:42:89:64:7E:49:F7:D3:96:49:27:CB:19:80:A9:AE:11:6E:0F
Certificate issuer:       /CN=3669a8ff8de7e51d3da733ab0ae5b7698465e44a
Certificate serial:       0DD4FB
Authority key identifier: F1:C8:B9:9D:21:8E:FB:82:CC:C5:CA:D8:E0:84:90:CC:D2:46:41:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3669a8ff8de7e51d3da733ab0ae5b7698465e44a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/115a4b99-1a29-4ba0-864c-49316619091c/e9e42f7cc8c121121d42e90524530b31ac56dcdd.roa
Signing time:             Wed 24 Mar 2021 14:40:28 +0000
ROA not before:           Wed 24 Mar 2021 14:40:28 +0000
ROA not after:            Tue 24 Mar 2026 14:40:28 +0000
asID:                     61468
IP address blocks:        192.188.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906491 (0xdd4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3669a8ff8de7e51d3da733ab0ae5b7698465e44a
        Validity
            Not Before: Mar 24 14:40:28 2021 GMT
            Not After : Mar 24 14:40:28 2026 GMT
        Subject: CN=e9e42f7cc8c121121d42e90524530b31ac56dcdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:8c:e0:11:35:96:4f:b2:f2:e5:ff:b8:c6:
                    e6:34:68:cd:d1:fa:90:68:83:a3:7a:c5:89:0e:91:
                    fb:ee:40:04:df:21:dd:50:e9:fb:96:9b:16:a9:ea:
                    d4:c9:25:f5:06:af:a2:e3:8a:ef:f5:b5:b8:c7:91:
                    17:a7:52:f3:0d:04:d9:40:94:61:2a:76:6b:e8:26:
                    71:40:41:7f:24:81:dc:36:17:98:b0:92:ec:cc:d1:
                    87:17:67:97:5a:37:cc:41:a6:cf:fa:ac:38:05:2d:
                    e2:0c:82:57:70:05:6d:23:68:66:d1:bc:d5:54:6a:
                    15:10:d8:13:31:a7:ef:7b:a8:15:ca:de:0b:6d:05:
                    db:5e:16:76:44:9a:c3:0b:4c:b1:79:76:58:60:30:
                    41:8f:2f:b7:ec:9b:c2:e5:2a:dd:fa:0b:eb:f3:6c:
                    a5:a4:f7:99:a8:f2:74:49:9d:18:a7:0b:7d:a1:37:
                    58:4b:f0:84:73:85:42:04:39:e6:38:06:c1:26:b3:
                    ae:47:2a:0c:16:6f:a7:a3:be:41:12:42:1d:a5:f2:
                    8d:f3:9b:e2:62:30:cc:de:f0:c5:5c:10:fd:04:4d:
                    cc:5c:2a:72:57:5a:c3:85:9a:c2:28:f8:8b:f9:47:
                    a9:da:91:a0:12:14:84:bd:c6:06:fd:85:22:bc:0d:
                    5b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:74:42:89:64:7E:49:F7:D3:96:49:27:CB:19:80:A9:AE:11:6E:0F
            X509v3 Authority Key Identifier:
                keyid:F1:C8:B9:9D:21:8E:FB:82:CC:C5:CA:D8:E0:84:90:CC:D2:46:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3669a8ff8de7e51d3da733ab0ae5b7698465e44a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/115a4b99-1a29-4ba0-864c-49316619091c/e9e42f7cc8c121121d42e90524530b31ac56dcdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/115a4b99-1a29-4ba0-864c-49316619091c/3669a8ff8de7e51d3da733ab0ae5b7698465e44a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:2e:8f:fa:c9:48:c2:a2:37:de:40:bf:46:8d:f1:99:ab:de:
         9e:2d:3d:3e:95:12:9b:a4:79:a3:5b:0b:b6:57:cc:b3:f8:f2:
         a5:33:ff:6c:43:cc:aa:09:36:ca:54:fb:5c:b8:57:66:f9:06:
         de:93:4d:79:de:5f:bb:15:d5:cd:55:a4:06:19:8a:04:d3:19:
         84:fa:4f:cc:6e:0d:a8:9c:50:99:01:20:95:90:54:9b:89:6c:
         65:cb:16:9d:99:74:0c:14:fc:77:1a:88:6f:08:96:9d:ab:71:
         d8:29:70:b5:d4:dc:d2:59:1a:47:ca:43:03:06:c7:f5:67:6b:
         18:99:74:93:f6:f5:68:51:c5:c6:4d:5e:aa:6c:c9:db:a7:2a:
         63:b1:e6:1d:de:d7:7e:5c:80:e1:a7:51:a9:30:75:a1:78:b1:
         aa:d2:dd:5f:6d:79:f8:1b:9b:5c:34:07:5f:13:83:30:27:f2:
         36:e5:08:5d:be:5f:19:53:77:36:28:b1:e8:44:d6:de:82:ec:
         34:2e:2f:18:f0:89:ee:dd:f1:e3:f6:f9:c0:6f:8b:9b:39:a3:
         bb:68:88:07:5e:05:24:a2:91:de:d1:d4:3c:92:04:52:e8:bd:
         34:2c:e4:e3:d0:d4:19:0a:39:2f:6c:82:ff:14:bb:64:af:27:
         7f:a5:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org