Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/dcc54d22b046ac7a26d3e124ed0f5547ad1b6ed8.roa
File:                     dcc54d22b046ac7a26d3e124ed0f5547ad1b6ed8.roa (raw, json)
Hash identifier:          EzfCNd0uhdb/gG8WPviyJTr9MVE530SHIuQBQapYrBY=
Subject key identifier:   55:3C:52:C6:D7:CC:C0:05:3F:AD:A4:61:C5:12:1B:61:E4:A6:49:64
Certificate issuer:       /CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Certificate serial:       1469A7
Authority key identifier: 2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/dcc54d22b046ac7a26d3e124ed0f5547ad1b6ed8.roa
Signing time:             Fri 28 Jan 2022 16:32:31 +0000
ROA not before:           Wed 24 Nov 2021 03:00:00 +0000
ROA not after:            Mon 24 Nov 2025 03:00:00 +0000
asID:                     8065
IP address blocks:        190.71.0.0/16 maxlen: 19
                          200.116.192.0/18 maxlen: 18
                          181.143.0.0/16 maxlen: 16
                          181.129.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1337767 (0x1469a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
        Validity
            Not Before: Nov 24 03:00:00 2021 GMT
            Not After : Nov 24 03:00:00 2025 GMT
        Subject: CN=dcc54d22b046ac7a26d3e124ed0f5547ad1b6ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:af:26:8e:2d:c7:e1:bc:94:72:71:19:35:6c:
                    b3:b2:75:ad:00:9a:9f:5e:83:13:ec:82:f0:ac:01:
                    0d:d4:8c:90:70:8c:c5:15:71:6a:ba:fb:67:90:bf:
                    60:60:06:9a:51:7b:1c:d7:2d:fe:3c:65:fb:eb:aa:
                    9a:21:f2:f6:db:12:a1:6d:11:bc:3d:34:5c:8d:c6:
                    91:95:81:57:10:e1:37:85:ee:8c:ba:4b:6f:1f:2d:
                    51:79:51:9e:3d:6f:47:a0:82:71:70:ab:44:48:78:
                    b6:30:5d:cf:65:c1:5d:0d:e2:bd:db:94:3b:04:e3:
                    34:90:bb:67:c2:70:13:79:16:49:da:a9:0e:2d:4c:
                    f7:a2:d0:e9:a6:01:2d:67:6c:ad:5d:03:c5:34:05:
                    c8:a5:fd:ff:ca:90:29:f1:11:ae:1f:fc:cb:19:ca:
                    e1:b4:c7:84:1e:92:b7:97:ca:bf:5f:22:bf:81:3b:
                    a7:dc:d7:f1:eb:c3:e0:92:c6:3d:e3:7a:5e:61:bd:
                    a0:c1:57:00:26:0e:f0:86:b2:52:cb:e4:ce:00:85:
                    20:87:fd:ee:47:1c:f4:28:b4:f8:09:eb:65:8b:5f:
                    dd:f4:ae:92:1c:22:d9:8b:05:39:e2:1f:be:4e:19:
                    c8:23:5f:d3:10:96:66:8d:76:13:d2:27:10:87:d7:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3C:52:C6:D7:CC:C0:05:3F:AD:A4:61:C5:12:1B:61:E4:A6:49:64
            X509v3 Authority Key Identifier:
                keyid:2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/dcc54d22b046ac7a26d3e124ed0f5547ad1b6ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/1159fdc4276fa3bfc64df717e4ca0a75249cf188.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.129.0.0/16
                  181.143.0.0/16
                  190.71.0.0/16
                  200.116.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         06:5c:40:b0:a1:b1:ba:7c:d3:d0:e1:c3:e1:58:d3:42:99:5e:
         3b:c2:c7:6b:28:a6:42:b3:d2:3a:d6:db:41:6a:cb:cb:37:e9:
         c0:18:df:4d:ca:86:f0:98:16:aa:4e:e8:6a:02:0b:ff:1a:1f:
         67:a1:de:d7:e3:12:90:bc:2f:1f:1d:2e:ce:e1:48:e4:7f:bb:
         db:54:18:e2:19:99:cb:31:d5:af:3b:34:8f:fc:0c:a5:d3:68:
         a3:67:79:60:2c:f5:86:e4:d8:9b:79:8f:5d:1f:51:d6:36:65:
         24:95:0b:ed:6c:b4:8f:96:5c:2f:c3:c9:77:82:30:f7:48:3d:
         08:3c:e2:51:8a:e3:9e:67:5d:83:e7:be:bb:f3:38:1e:c3:ff:
         b5:4f:86:7d:0c:4e:07:28:c4:3d:e7:b3:05:6a:71:8b:c8:66:
         f7:5d:c9:7a:85:22:b1:dc:b6:98:c8:17:ca:15:a8:17:d1:ab:
         fb:6d:01:24:11:35:c9:9f:8e:75:71:c6:9b:f2:6b:da:43:95:
         6d:ce:64:63:03:7d:83:bf:e5:a9:bc:24:d5:03:0c:36:76:54:
         54:f4:88:29:24:b6:a3:09:db:31:76:4a:19:b4:d7:2f:5d:86:
         62:8f:c0:e1:1e:c3:40:54:91:5e:83:89:a6:33:f1:28:0d:46:
         e5:d0:ba:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org