Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/e32b7e53681ca4fc8090b91f7d9e2372fe383d3e.roa
File:                     e32b7e53681ca4fc8090b91f7d9e2372fe383d3e.roa (raw, json)
Hash identifier:          dews7lzhgxlPo8n/380m2OTIueb1M76AnGiu2P66PkQ=
Subject key identifier:   BB:D0:5B:43:BC:A0:CA:EB:18:30:BC:44:CA:5D:4E:5B:A9:A1:3F:6B
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EBB05
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/e32b7e53681ca4fc8090b91f7d9e2372fe383d3e.roa
Signing time:             Wed 24 Mar 2021 14:37:56 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.160.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 965381 (0xebb05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=e32b7e53681ca4fc8090b91f7d9e2372fe383d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ae:eb:7f:43:3b:21:a3:01:7a:f2:4f:65:3c:
                    17:cd:0a:60:b9:e7:9b:40:c0:48:57:c3:dd:6d:7a:
                    c6:83:be:8e:a8:ed:4c:ed:d4:a7:fa:72:26:74:2f:
                    29:6b:0e:73:83:4d:52:e4:c8:86:16:8d:21:f4:86:
                    77:1d:fe:18:28:e9:42:ba:a0:fe:7b:33:ab:c3:3e:
                    66:1c:5d:2a:f0:75:d9:0d:4d:ec:80:85:a0:32:90:
                    9b:09:7a:f7:3d:0f:a8:97:6e:dc:1b:30:dc:81:43:
                    43:4a:71:5e:a5:d9:a7:5d:95:ea:16:74:44:83:32:
                    47:aa:97:d3:80:2c:ba:13:db:61:57:15:09:3b:c1:
                    6c:26:bf:97:a3:ac:9a:40:8e:d9:e3:04:23:40:ce:
                    71:58:19:c7:b3:1d:12:58:cc:b4:54:e5:b6:a2:e0:
                    83:f1:40:4f:46:ca:ae:95:f0:16:f1:97:16:30:10:
                    08:ad:4b:b2:31:f5:ee:b9:88:89:2a:81:b6:31:f7:
                    9b:97:6b:4f:28:1e:65:8a:ec:02:9d:98:39:9f:79:
                    0d:7c:15:24:86:78:15:49:94:95:83:c5:21:1c:4f:
                    06:ec:1d:00:ac:65:fb:b9:2e:08:5e:2e:8a:c1:61:
                    b9:90:6d:63:b2:82:57:1c:2f:50:97:4f:6b:15:96:
                    50:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D0:5B:43:BC:A0:CA:EB:18:30:BC:44:CA:5D:4E:5B:A9:A1:3F:6B
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/e32b7e53681ca4fc8090b91f7d9e2372fe383d3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:79:4f:20:30:18:97:37:72:b4:85:9e:c6:cc:cd:15:d9:91:
         9a:8e:92:41:37:52:e2:32:f7:e9:db:14:22:a8:af:ca:61:f3:
         bb:0b:6f:49:9b:1a:5e:75:35:14:9e:d3:13:a9:8c:93:e5:56:
         b2:41:88:c7:fd:bd:55:b9:9d:6f:a4:3b:ca:7a:8e:51:e7:30:
         61:3d:a4:92:7d:a4:29:73:98:d3:b3:e2:53:2c:6a:23:bd:f3:
         9e:af:b9:c2:28:3e:5f:35:5a:31:0a:06:6b:81:03:bd:0f:a7:
         c1:5b:c3:b6:92:ed:7e:85:46:88:d5:15:8d:cd:9a:25:4c:f6:
         bb:f6:5b:d0:d4:cc:a9:8e:55:df:a5:49:68:f0:28:89:67:6d:
         bf:4a:57:d3:fe:f7:51:7f:6f:59:b6:6f:42:c1:f6:eb:e6:7f:
         a2:83:0f:05:80:3e:2c:bf:d0:30:c3:b3:87:2b:8c:b3:24:19:
         d6:55:89:b0:7b:77:bf:2e:47:a7:7c:e9:b9:82:7e:15:d8:75:
         72:ca:d7:5c:11:21:06:92:c9:ab:20:88:4d:0e:37:f7:ad:75:
         3a:ef:98:07:5d:63:a7:42:44:db:9c:7e:5d:f4:ba:58:ef:3e:
         0a:e6:c6:2f:0b:ae:ed:20:d3:32:36:bc:4b:c3:bd:b9:00:80:
         08:3b:84:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org