Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/f4c0f70120a56036b7e9c4fca6e1c6109a6b46a8.roa
File:                     f4c0f70120a56036b7e9c4fca6e1c6109a6b46a8.roa (raw, json)
Hash identifier:          K0ZIEJEm9mHgvJZqcruB75f1s18Uyqh7R8grGQvA9dk=
Subject key identifier:   4F:62:2F:0C:0D:3E:C3:93:DC:9D:5B:C3:48:7D:6B:CE:31:F6:12:AD
Certificate issuer:       /CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Certificate serial:       11A26D
Authority key identifier: 09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/f4c0f70120a56036b7e9c4fca6e1c6109a6b46a8.roa
Signing time:             Mon 02 Aug 2021 22:30:44 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     61449
IP address blocks:        201.139.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155693 (0x11a26d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=f4c0f70120a56036b7e9c4fca6e1c6109a6b46a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:47:fb:8d:30:01:83:aa:6b:b3:76:91:83:
                    02:88:42:97:0f:0c:e3:4f:cf:c2:2d:2b:a7:50:a1:
                    49:d4:1f:59:fc:05:24:ef:90:ef:5f:24:0d:b8:84:
                    0f:44:66:f5:a6:69:2f:74:3a:7b:21:48:bc:51:71:
                    6d:1c:a4:13:4f:e4:64:44:9d:d5:3c:00:39:b0:3b:
                    ad:b3:4f:f0:b6:b7:ab:59:5f:a6:d3:7c:ca:0f:2d:
                    81:c9:4e:e5:54:e9:9a:3d:db:dc:02:6d:ff:80:b7:
                    7e:8e:05:d9:0a:51:88:5b:6f:8f:d4:10:d9:ca:e2:
                    23:c3:92:bc:a3:c5:6a:68:b7:f6:83:7b:3e:ff:27:
                    b0:74:6e:e3:86:39:33:22:e4:de:a1:8f:6e:25:24:
                    d6:94:ef:ce:65:0c:3d:7f:b6:5b:37:ea:fe:8f:74:
                    bd:94:a2:86:03:c1:ad:76:02:93:8f:cc:87:12:29:
                    70:4c:cc:68:fb:be:ee:ab:e5:bd:e3:f5:f3:fd:2e:
                    2e:e8:15:4d:5e:d3:fc:f1:9f:97:12:8b:85:07:0b:
                    47:f8:2a:15:f9:f0:35:8e:1d:f5:04:cc:a6:f0:a2:
                    03:32:cb:62:2c:e1:5f:d1:75:95:93:bc:66:21:8d:
                    fc:e9:35:4d:fe:7b:f6:c7:2f:42:f8:a5:aa:1e:ef:
                    f1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:62:2F:0C:0D:3E:C3:93:DC:9D:5B:C3:48:7D:6B:CE:31:F6:12:AD
            X509v3 Authority Key Identifier:
                keyid:09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/f4c0f70120a56036b7e9c4fca6e1c6109a6b46a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:98:d2:5c:a4:77:25:ae:1e:e4:fa:c5:21:75:2a:2e:05:6c:
         d9:f3:94:73:33:c2:97:f7:08:57:87:90:02:20:2b:1b:81:36:
         08:37:2a:3c:2a:4d:1a:e8:59:28:e2:9b:14:14:79:fc:05:7a:
         30:ae:35:a0:6a:34:dc:04:91:c0:ec:1e:c3:11:16:9b:99:67:
         ad:92:76:f3:48:b9:26:c9:49:40:15:0c:32:da:b5:78:1d:99:
         1a:31:3b:e4:45:79:dc:c6:96:29:84:02:d8:e5:e6:00:48:58:
         d9:d7:d5:01:7f:60:b4:96:62:25:cb:9d:74:ca:02:0d:8f:54:
         c5:a9:cc:7c:ab:c5:6c:76:a3:fb:17:34:ba:0f:24:66:d5:03:
         3d:85:49:c0:6f:be:b3:a1:63:5a:53:a5:5f:48:5b:f3:16:a2:
         e1:19:d4:8b:51:9d:07:f4:69:01:3c:57:ea:b4:c2:1d:cb:20:
         1f:73:4b:be:64:32:30:1c:0d:92:78:94:49:84:c3:4b:d2:b0:
         df:8d:0b:2e:af:24:6b:48:d9:72:f7:86:45:38:9a:fd:02:0d:
         9c:39:51:e2:7d:44:7b:a2:96:a9:25:76:74:72:79:04:04:59:
         29:f5:d2:b3:4d:91:43:2b:ff:d1:e5:1f:fb:a7:6b:d0:82:b2:
         a7:8a:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org