Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/d6247650c2ae017a289a21c5e085dbb5dbb2d66f.roa
File:                     d6247650c2ae017a289a21c5e085dbb5dbb2d66f.roa (raw, json)
Hash identifier:          4niYcGoMbndb2V4UNCFG0VWOClCxqDwOOf+mgitXUGc=
Subject key identifier:   3A:50:06:24:1B:AA:F2:D9:06:04:CD:EA:A8:DA:DC:BF:60:F5:83:70
Certificate issuer:       /CN=36e192b55cb56ddb327e18a090fa757000686249
Certificate serial:       0D0787
Authority key identifier: 75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/d6247650c2ae017a289a21c5e085dbb5dbb2d66f.roa
Signing time:             Wed 24 Mar 2021 14:35:05 +0000
ROA not before:           Wed 24 Mar 2021 14:35:05 +0000
ROA not after:            Tue 24 Mar 2026 14:35:05 +0000
asID:                     262928
IP address blocks:        191.102.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853895 (0xd0787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e192b55cb56ddb327e18a090fa757000686249
        Validity
            Not Before: Mar 24 14:35:05 2021 GMT
            Not After : Mar 24 14:35:05 2026 GMT
        Subject: CN=d6247650c2ae017a289a21c5e085dbb5dbb2d66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:fa:7d:fa:3d:7b:a7:fa:fa:e7:55:be:22:
                    ca:0d:31:20:75:c3:ed:18:58:66:61:90:76:35:0f:
                    e6:7f:57:56:58:cf:20:ac:b2:f9:45:4f:89:81:a5:
                    c1:fb:05:c3:aa:14:38:7d:75:e6:02:fc:04:05:a1:
                    59:4e:96:3b:47:81:b7:d4:61:2d:cc:b1:30:7e:54:
                    15:26:c4:fe:3a:b8:1f:6f:58:e4:09:d6:2f:c7:12:
                    1e:a0:0b:78:8e:6a:aa:b8:ea:d7:df:ac:a6:43:fa:
                    2a:c6:a8:4d:3c:e2:29:09:a1:48:cf:99:55:32:08:
                    e7:15:19:73:49:e3:7d:9f:ec:47:a3:8f:6e:51:09:
                    f7:56:15:d4:dc:3a:0b:35:52:35:fe:d4:fb:ad:58:
                    da:9f:e7:15:8e:12:5d:d1:4e:e3:ca:3c:7d:07:90:
                    15:ed:17:2b:cc:06:95:0c:c2:dd:b3:29:5f:65:d8:
                    53:1c:a4:0a:83:e8:bc:17:03:1d:6d:77:23:15:df:
                    a2:30:14:9e:81:3a:e2:6e:55:5b:2d:b7:9a:5b:c5:
                    1a:f0:b8:2d:f2:35:41:e5:53:81:95:b7:74:b6:9f:
                    e8:4b:79:45:f1:be:50:3c:53:4b:89:3b:78:0d:b2:
                    1c:55:0e:23:2a:56:cc:3f:eb:c6:c0:9f:7d:e6:89:
                    b1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:50:06:24:1B:AA:F2:D9:06:04:CD:EA:A8:DA:DC:BF:60:F5:83:70
            X509v3 Authority Key Identifier:
                keyid:75:D0:7D:9E:91:AC:51:2C:49:38:1A:C8:8E:68:5A:9E:77:AB:C3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36e192b55cb56ddb327e18a090fa757000686249.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/d6247650c2ae017a289a21c5e085dbb5dbb2d66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/228c410d-9e5e-4f1e-a355-a4073435ca14/36e192b55cb56ddb327e18a090fa757000686249.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:bd:e9:88:dd:52:1b:c0:af:d6:87:99:b4:bf:00:37:1a:37:
         64:77:f4:5b:fc:e3:2b:0f:83:7c:d2:25:1f:bb:56:3f:21:4e:
         70:87:d7:a1:d7:68:5d:94:e5:e3:ee:9c:c9:c7:24:c2:7d:e5:
         e2:f1:d8:ed:c3:6f:43:19:a3:0b:46:19:ed:e1:fe:3d:c8:f7:
         26:b7:7f:20:33:7a:9d:93:bd:c4:3f:cd:e8:94:75:6d:ad:98:
         98:a5:54:a9:5e:90:26:40:ab:38:de:80:5a:e1:bf:ad:b7:26:
         3a:e2:09:c7:01:5a:ba:7d:77:16:3e:1c:eb:8b:5c:6c:e8:e7:
         05:8f:38:44:ae:b0:95:10:ee:bc:a3:2e:f3:44:33:48:34:b5:
         51:f0:3c:92:d2:02:29:d2:56:f7:5f:c0:13:1e:c1:af:24:3a:
         19:3d:23:4a:78:d3:89:31:22:86:03:fe:9e:14:4d:8a:8f:92:
         5c:b8:f9:c6:bb:92:14:75:9a:af:49:33:54:65:38:4b:f7:d7:
         97:9f:b6:ed:20:78:72:4a:f5:a1:94:68:08:8f:ee:12:8b:d5:
         b0:4b:0d:c3:80:1b:59:24:e3:9a:3a:61:59:bc:45:8f:18:12:
         3d:64:86:ee:89:27:e5:5c:b2:cd:37:db:0c:ca:65:31:ff:57:
         ef:21:2f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org