Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22cf3f0d-3b3b-4acc-857b-1b48f291371d/f8831247ec64b92871787289f86d6490bd158f65.roa
File:                     f8831247ec64b92871787289f86d6490bd158f65.roa (raw, json)
Hash identifier:          oc2bx7b0ee4tJp4XAjNq/45AxVu0Pk8AQQ8L1oojrDI=
Subject key identifier:   92:91:58:C9:67:77:84:2B:ED:34:4C:E4:23:05:0A:BC:3A:80:FF:FF
Certificate issuer:       /CN=0a0e8f2b61f015e7398be757bbbe082aa88a9ab4
Certificate serial:       0D6451
Authority key identifier: D1:DB:F7:B2:0D:D2:56:AA:07:8B:33:0A:33:95:99:31:7B:D3:29:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a0e8f2b61f015e7398be757bbbe082aa88a9ab4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22cf3f0d-3b3b-4acc-857b-1b48f291371d/f8831247ec64b92871787289f86d6490bd158f65.roa
Signing time:             Wed 24 Mar 2021 14:28:52 +0000
ROA not before:           Wed 24 Mar 2021 14:28:52 +0000
ROA not after:            Tue 24 Mar 2026 14:28:52 +0000
asID:                     20207
IP address blocks:        179.60.184.0/21 maxlen: 21
                          190.105.144.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877649 (0xd6451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a0e8f2b61f015e7398be757bbbe082aa88a9ab4
        Validity
            Not Before: Mar 24 14:28:52 2021 GMT
            Not After : Mar 24 14:28:52 2026 GMT
        Subject: CN=f8831247ec64b92871787289f86d6490bd158f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e2:19:4f:a1:ef:7f:4e:85:0a:b1:7a:70:e0:
                    00:67:ae:c8:cb:16:bb:88:f9:22:0e:f2:77:b8:7e:
                    bc:da:36:c3:3c:bf:b7:50:fd:ec:98:06:20:4a:6e:
                    7a:f0:91:1b:9b:f2:96:74:43:3a:f2:24:0c:81:34:
                    92:63:c8:d4:23:73:dc:25:dd:9c:47:53:d1:ad:41:
                    cc:9e:04:11:f4:dc:fd:07:c4:c1:71:99:b6:ed:a7:
                    4c:f4:f2:fa:6c:1f:1b:22:30:80:bc:70:bb:3c:40:
                    c3:fe:ab:04:fc:01:80:2b:5e:ba:c3:2c:b7:75:6d:
                    6c:0a:f7:0d:03:a0:ba:d8:d2:76:0f:d5:9f:34:29:
                    41:7b:fb:ec:f8:3f:40:9e:2b:f1:ff:b0:b7:3b:83:
                    bc:cd:43:f2:51:0f:c3:1a:7f:f8:42:43:73:ad:06:
                    d1:f0:90:f0:ef:20:1b:82:33:d9:bb:50:2e:74:92:
                    7b:ae:00:95:4d:8d:54:76:b6:87:8b:50:bd:9b:ec:
                    30:a0:9d:5c:cb:92:bb:0d:a0:44:41:c9:44:4b:e2:
                    6c:eb:2f:34:5c:8d:69:05:91:15:04:d4:4e:fd:11:
                    b1:f7:00:82:d9:7f:70:7d:02:61:29:c1:21:2a:ea:
                    89:77:be:f1:2e:6b:d6:61:b1:63:ca:89:28:4c:b2:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:91:58:C9:67:77:84:2B:ED:34:4C:E4:23:05:0A:BC:3A:80:FF:FF
            X509v3 Authority Key Identifier:
                keyid:D1:DB:F7:B2:0D:D2:56:AA:07:8B:33:0A:33:95:99:31:7B:D3:29:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a0e8f2b61f015e7398be757bbbe082aa88a9ab4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22cf3f0d-3b3b-4acc-857b-1b48f291371d/f8831247ec64b92871787289f86d6490bd158f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22cf3f0d-3b3b-4acc-857b-1b48f291371d/0a0e8f2b61f015e7398be757bbbe082aa88a9ab4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.184.0/21
                  190.105.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:12:70:80:2e:2b:ac:24:f8:90:46:33:43:19:97:e3:2b:dd:
         e0:c4:6d:6e:f9:15:52:68:ab:9f:fb:e0:a9:ec:68:34:3f:01:
         f1:8d:32:9a:8f:a6:3d:24:5f:7c:c8:38:4b:a8:40:ae:2a:f8:
         a9:de:18:8d:c7:b8:82:a0:37:37:74:da:a7:81:c4:9b:f1:1a:
         ff:97:27:e9:b4:f8:fa:5c:79:74:1c:9a:e5:8c:43:11:1b:a4:
         74:91:7a:cc:6f:8c:e4:dd:34:b7:8b:4c:ae:6f:80:64:df:64:
         a0:4e:a6:52:ca:09:bb:3b:09:b5:ab:a2:54:10:31:f9:c2:60:
         db:d3:5f:78:16:16:16:16:01:6f:cd:2e:d2:c4:3b:d0:7a:69:
         dd:61:66:82:44:7c:a5:c3:6c:79:f8:f2:5e:7f:76:69:ae:09:
         45:4d:67:47:f4:08:ee:df:41:ce:ba:72:aa:1a:36:18:4e:31:
         e4:45:5f:f2:99:9a:2b:77:5e:ac:88:9f:04:5d:73:25:5a:0c:
         61:88:d8:a9:06:10:94:ac:06:b2:cd:da:40:2e:eb:a7:00:56:
         69:7a:fd:f2:86:a6:c1:c1:33:8e:0f:4e:7e:25:5c:c4:49:89:
         21:17:c1:dd:18:40:a1:1b:57:3f:75:5e:54:67:25:f5:d8:97:
         ca:60:06:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 19:04:35 2024 by rpki-client on console-fra.rpki-client.org