Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/6089a5d53c9fcce3d42629130f0cbcf3bf6f294b.roa
File:                     6089a5d53c9fcce3d42629130f0cbcf3bf6f294b.roa (raw, json)
Hash identifier:          zLKxvKKPIQ3f1cc2ftHimhK+bKYjNmAUZSNTAVw2eUg=
Subject key identifier:   97:D0:49:F8:65:6B:60:EC:C6:05:FD:1D:CA:17:5F:34:19:64:68:6E
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E6824
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/6089a5d53c9fcce3d42629130f0cbcf3bf6f294b.roa
Signing time:             Wed 24 Mar 2021 23:17:46 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     21599
IP address blocks:        200.46.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944164 (0xe6824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=6089a5d53c9fcce3d42629130f0cbcf3bf6f294b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0a:74:a8:cd:2c:5c:db:dd:c3:6e:a4:76:ef:
                    67:3a:54:49:5b:6c:e5:59:0e:5d:f0:02:62:e3:12:
                    61:a9:95:a8:2f:64:45:e4:8a:71:db:05:1d:63:4d:
                    9c:9c:2e:f7:64:06:ec:32:d8:55:c9:af:ac:de:57:
                    7e:6b:b6:bd:08:57:69:7a:43:15:99:bc:72:8e:b4:
                    37:a6:9d:68:a7:16:90:bf:bd:92:bb:d5:4a:85:a4:
                    41:ad:23:6b:56:70:72:c0:7c:0f:39:61:72:1e:42:
                    50:90:cb:cc:5c:2d:fe:86:24:e0:52:27:cc:a0:67:
                    c6:1d:f8:0b:71:37:8f:81:32:0d:b1:a7:ab:84:19:
                    cd:56:38:16:2c:8f:f9:cc:a8:55:86:55:e9:e0:73:
                    91:4e:c0:da:2c:b5:88:e0:e5:96:be:c3:d0:79:42:
                    06:22:8d:60:22:54:6a:d9:71:1e:01:ff:d9:b3:4e:
                    5b:9f:b5:bd:7e:fd:06:6a:c1:cf:42:9a:b4:65:f1:
                    0b:8b:cc:20:72:b2:e4:ba:36:e0:2d:00:be:f0:36:
                    2b:23:5f:66:bb:66:59:99:d7:31:7f:fe:16:7e:28:
                    fa:e3:9a:94:77:20:fb:b3:d8:90:cf:4d:2e:dd:bd:
                    25:5d:45:bb:3e:a3:dc:df:39:3b:02:ef:5a:5a:35:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D0:49:F8:65:6B:60:EC:C6:05:FD:1D:CA:17:5F:34:19:64:68:6E
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/6089a5d53c9fcce3d42629130f0cbcf3bf6f294b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.46.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:45:54:f4:bb:21:0d:38:22:d7:24:13:7b:4d:b6:d6:de:
         e4:cb:91:ef:15:a3:dd:14:73:07:ac:9b:40:0a:28:5c:e6:df:
         f1:85:88:3b:5a:7d:38:f4:51:f4:64:e1:f5:53:b9:13:14:45:
         e7:6a:cc:3a:22:46:f6:6f:1e:b7:a1:6b:e5:55:a5:4b:27:1e:
         95:a6:14:63:cf:2a:de:d9:d5:dc:bd:23:03:d3:8a:d0:e1:52:
         89:c5:25:5e:2e:b4:b2:c2:72:6f:af:22:e7:42:ad:2a:51:0f:
         d1:fb:d8:cd:35:4a:6b:92:5b:d6:f0:25:c4:08:a8:96:09:b7:
         ec:69:2f:63:d0:43:8d:0e:d9:4e:de:16:6f:77:67:e7:87:e7:
         f4:b8:ac:72:59:9a:f0:c2:36:4a:75:e7:d2:4c:3d:d0:93:ce:
         de:b1:5e:55:8a:c5:ca:21:a3:ab:67:26:31:87:aa:08:ce:69:
         93:53:2e:b5:21:31:ed:25:3f:3e:32:ad:6a:6f:2d:7a:63:18:
         65:a6:65:09:04:dc:9c:41:5e:9f:e2:0d:07:85:02:22:42:2f:
         b8:24:4e:76:c2:6c:02:56:ce:6e:a7:07:05:41:5f:52:d9:8d:
         10:16:af:93:65:c5:82:64:ad:bc:59:80:6e:52:7d:31:b5:88:
         51:82:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org