Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26664231-e1d4-4661-8929-960141976395/e8a95c8b0d0508e6beb3726900359b49c5d668de.roa
File:                     e8a95c8b0d0508e6beb3726900359b49c5d668de.roa (raw, json)
Hash identifier:          8chHwCCmldDvi8nK/twjzB2nc5azpCt6sJKfY5QCSgs=
Subject key identifier:   EA:64:8E:7E:2C:06:DB:D0:82:AA:C3:6E:E1:81:14:68:78:B3:E9:46
Certificate issuer:       /CN=9e80312a4e397bf8e492d8f250b4fd13f79161cc
Certificate serial:       0D484A
Authority key identifier: 63:B8:26:B4:00:81:35:2C:5C:3A:AE:19:94:70:FF:95:11:5F:C6:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e80312a4e397bf8e492d8f250b4fd13f79161cc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26664231-e1d4-4661-8929-960141976395/e8a95c8b0d0508e6beb3726900359b49c5d668de.roa
Signing time:             Wed 24 Mar 2021 14:32:43 +0000
ROA not before:           Wed 24 Mar 2021 14:32:43 +0000
ROA not after:            Tue 24 Mar 2026 14:32:43 +0000
asID:                     262208
IP address blocks:        190.13.216.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870474 (0xd484a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e80312a4e397bf8e492d8f250b4fd13f79161cc
        Validity
            Not Before: Mar 24 14:32:43 2021 GMT
            Not After : Mar 24 14:32:43 2026 GMT
        Subject: CN=e8a95c8b0d0508e6beb3726900359b49c5d668de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ec:f6:1c:66:e1:5a:92:d6:62:42:13:ac:0e:
                    10:e4:a7:12:6a:79:fa:fa:b2:91:dc:a4:57:a4:3f:
                    15:16:80:39:f8:a5:7d:1c:71:34:9e:0f:ab:50:f3:
                    05:2c:91:24:aa:aa:4e:69:ce:ea:80:d4:8f:2c:23:
                    11:f8:22:74:cf:ca:45:9c:98:2f:4b:da:47:bf:d3:
                    88:52:a6:e8:41:54:da:29:87:3d:41:53:91:3f:28:
                    d8:5f:33:05:19:fb:fa:8d:c1:e9:aa:65:b4:f0:02:
                    d4:b8:0e:7e:48:c6:b1:07:a2:46:e1:cd:3d:55:2b:
                    3c:ed:76:78:58:5b:9b:34:11:5a:48:95:b7:1f:59:
                    b6:7d:83:72:68:94:ad:2a:bf:7b:c3:f7:79:36:d9:
                    e5:2c:38:98:bf:6f:32:2f:2e:28:c8:87:32:c3:e8:
                    7b:ed:1c:64:4f:be:5d:58:af:3b:a7:76:7a:a2:f6:
                    4a:1d:96:08:90:89:0d:bc:94:63:3d:0f:5d:04:0e:
                    ac:56:72:ba:ae:28:bb:87:65:15:21:9e:2d:62:64:
                    f0:31:79:c0:47:53:23:e3:c5:f2:31:74:e8:28:dc:
                    3a:3c:c7:af:e4:7c:bf:18:72:54:84:97:40:19:fe:
                    00:d4:f2:09:b9:c3:d4:03:f1:19:a3:4d:c9:9b:25:
                    59:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:64:8E:7E:2C:06:DB:D0:82:AA:C3:6E:E1:81:14:68:78:B3:E9:46
            X509v3 Authority Key Identifier:
                keyid:63:B8:26:B4:00:81:35:2C:5C:3A:AE:19:94:70:FF:95:11:5F:C6:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e80312a4e397bf8e492d8f250b4fd13f79161cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26664231-e1d4-4661-8929-960141976395/e8a95c8b0d0508e6beb3726900359b49c5d668de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26664231-e1d4-4661-8929-960141976395/9e80312a4e397bf8e492d8f250b4fd13f79161cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:85:9d:bb:b2:ef:b5:26:a1:49:aa:c3:d0:94:08:16:79:63:
         70:d2:cb:a6:3a:e4:0c:e7:92:5f:76:37:62:13:d6:6e:30:16:
         9f:5d:78:1d:64:0b:1b:78:e1:7f:25:32:02:ce:4b:3a:cb:ed:
         0f:0c:c7:c7:93:55:5f:97:33:6d:d9:c5:81:89:5a:d6:c8:6d:
         23:a6:ad:bf:95:eb:9e:bd:ad:42:72:73:70:e0:a6:99:21:39:
         0c:57:50:d4:79:e9:6f:34:05:72:00:67:01:77:33:2a:50:c7:
         e3:fa:99:55:64:ff:8c:d7:00:1e:7b:08:1a:0c:f2:5b:e9:6e:
         2f:5a:6a:1c:19:9c:80:be:26:c2:02:29:ef:6c:ab:f0:a9:4e:
         44:c2:04:5d:4d:71:68:94:76:ed:f8:6d:ce:79:d9:87:14:77:
         03:e0:5c:aa:0c:f2:ef:1d:47:e3:29:5d:38:47:2c:cc:d1:a9:
         2a:9c:f7:86:be:20:15:02:0d:29:6e:33:67:19:df:d3:e0:72:
         a3:51:cc:51:24:58:b3:37:f7:aa:f3:a2:f4:b2:9f:d7:7f:32:
         df:d4:e4:83:4e:bd:37:55:b8:67:62:23:33:50:61:06:6c:98:
         cb:4a:d7:8c:c5:2e:c7:bd:2e:72:38:43:42:5b:ce:fb:70:71:
         a7:22:69:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org