Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8c08f90be01f3481c7440c7a53d2036aba2c7330.roa
File:                     8c08f90be01f3481c7440c7a53d2036aba2c7330.roa (raw, json)
Hash identifier:          X3iPmSyzhONY9KuqkesLFxGeXngXfhPYCreSY16ozDg=
Subject key identifier:   DF:96:CA:61:BA:AD:18:93:94:FA:40:62:96:A4:DE:48:56:38:3A:D5
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EB66E
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8c08f90be01f3481c7440c7a53d2036aba2c7330.roa
Signing time:             Wed 24 Mar 2021 14:37:53 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964206 (0xeb66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=8c08f90be01f3481c7440c7a53d2036aba2c7330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:7f:3c:a6:a4:97:fc:24:8c:64:7a:a4:bf:
                    6c:1f:d7:3b:71:0b:ee:e3:3a:c2:b1:16:a5:42:e8:
                    2e:e6:5e:f3:61:7d:5f:2b:d6:9a:35:fd:ac:33:31:
                    b6:b9:22:d7:8c:38:a1:59:3a:4f:61:e6:d1:0a:cf:
                    67:21:48:13:6d:46:7e:6a:18:dc:b1:f6:29:8d:31:
                    f5:8e:25:a5:60:fc:b5:9e:d2:d9:2e:37:22:a3:2d:
                    5e:9e:e1:17:cb:62:ea:83:5d:04:1d:79:be:e8:e0:
                    34:ee:13:c0:dc:36:a9:4a:c4:3e:bd:47:29:39:4d:
                    a9:b1:ac:90:3c:20:b0:41:a3:3d:e0:4c:02:58:20:
                    fd:82:c8:52:97:bd:d9:da:de:57:72:7e:7e:b9:50:
                    5a:44:7e:ce:a0:64:3f:4a:e3:5a:bf:42:e5:57:a9:
                    37:56:d5:0f:34:67:a9:dd:7e:6f:c1:6b:4c:b9:80:
                    c8:ad:08:b9:46:db:cf:7e:2f:1e:50:67:14:7d:5b:
                    8b:23:de:c6:1a:34:52:00:5c:6c:ec:50:89:32:80:
                    8b:af:bf:ce:b0:9a:e1:a4:e9:f1:d3:e0:87:74:9b:
                    58:9a:f1:be:a2:7b:47:49:a4:85:b0:d7:68:00:1e:
                    43:1d:6f:07:e1:1a:d9:c1:25:b9:78:77:bc:c5:f0:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:96:CA:61:BA:AD:18:93:94:FA:40:62:96:A4:DE:48:56:38:3A:D5
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8c08f90be01f3481c7440c7a53d2036aba2c7330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c4:6d:81:d1:eb:f7:a1:11:d3:33:bf:26:1d:04:05:20:b2:
         d1:d9:a2:3a:5b:8d:6e:9c:15:52:4a:90:cb:45:df:e5:e0:9b:
         94:ea:76:59:ee:c1:39:fb:43:30:80:35:d2:44:d6:00:e7:eb:
         12:f4:2e:78:36:9f:f5:d3:0d:94:00:35:39:30:da:7d:ae:e1:
         a9:07:44:16:68:c8:6e:d8:54:e9:4f:c6:19:12:16:b7:4f:44:
         0a:21:bc:c9:0e:10:55:3e:22:cc:11:57:7b:17:76:52:06:65:
         7e:e9:cd:08:04:ad:d7:66:d0:9c:0c:5c:ef:3c:f1:d7:48:81:
         06:e2:04:6b:14:06:f7:65:78:b4:2b:b4:08:1f:6e:69:64:7d:
         6a:cc:5a:5f:b7:92:37:48:96:6f:e5:16:7a:97:a5:9b:80:d8:
         a4:a3:d8:ab:90:a7:45:b3:e2:34:0b:fe:af:47:8c:94:f9:28:
         dd:4f:13:51:ba:77:48:68:f5:db:d2:80:05:67:c8:c4:85:ce:
         3c:d6:7a:2d:3a:5a:28:9b:d8:0d:ca:78:96:42:24:24:ce:8f:
         05:96:8c:1b:42:a5:1f:aa:d4:32:fa:ff:de:a8:c2:f5:c6:fa:
         45:9b:23:16:3a:b1:1e:ee:fb:87:5f:3e:81:c8:6c:2a:90:80:
         66:b5:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org