Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/66061f5f3a7a3c31473e604f87ac0d0bf5f50f7f.roa
File:                     66061f5f3a7a3c31473e604f87ac0d0bf5f50f7f.roa (raw, json)
Hash identifier:          nbIMw2TrfwEzWKV1gSrCZcWxsz+UWRbAY62GBqtrCfE=
Subject key identifier:   2F:69:D0:AB:17:DD:F5:41:E8:A6:6D:81:5F:3B:FE:FA:D7:43:69:61
Certificate issuer:       /CN=f2cbbb792ff42fa718619507a50663798055643b
Certificate serial:       0FD852
Authority key identifier: AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/66061f5f3a7a3c31473e604f87ac0d0bf5f50f7f.roa
Signing time:             Tue 06 Jul 2021 17:50:53 +0000
ROA not before:           Tue 06 Jul 2021 03:00:00 +0000
ROA not after:            Thu 06 Jul 2023 03:00:00 +0000
asID:                     52308
IP address blocks:        190.108.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038418 (0xfd852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2cbbb792ff42fa718619507a50663798055643b
        Validity
            Not Before: Jul  6 03:00:00 2021 GMT
            Not After : Jul  6 03:00:00 2023 GMT
        Subject: CN=66061f5f3a7a3c31473e604f87ac0d0bf5f50f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:24:a1:03:d2:c0:4e:ac:32:52:b9:06:f5:59:
                    7c:cb:44:76:6f:46:48:c5:c7:2f:37:c6:01:b6:90:
                    f6:a5:83:1b:af:83:b1:d0:57:ae:03:ec:d8:aa:4e:
                    2b:66:5b:b3:da:36:3a:59:6c:c5:56:37:cd:58:a3:
                    a6:b3:31:6b:f6:fe:3c:0d:07:25:52:bd:da:22:a3:
                    ad:4d:4a:67:25:79:5e:95:80:28:da:b3:69:eb:6e:
                    7b:e7:7c:4a:5f:3e:c7:df:a4:c8:44:b6:ee:9e:de:
                    02:df:a2:3d:0a:24:47:d7:97:79:d9:39:43:17:cc:
                    ac:ab:d9:50:1b:af:56:44:ce:e9:e1:99:19:c9:f7:
                    f4:c4:09:be:dd:42:88:27:0c:2d:b5:9e:9a:fa:c2:
                    39:46:33:3d:63:2e:86:ae:d0:1a:b6:0f:53:20:a6:
                    78:dd:ac:2e:48:76:7d:30:ef:61:ed:b6:54:bc:d2:
                    e1:b0:0d:c6:7c:5a:ff:99:8f:25:d9:d4:5a:9e:89:
                    35:fa:8e:be:67:19:05:29:ad:ac:a6:8d:f8:8b:47:
                    58:12:10:92:1f:93:27:5b:21:57:97:13:67:09:3b:
                    a7:1c:5e:7e:a8:6c:63:1a:00:8c:c6:69:e6:95:9c:
                    27:58:93:ed:a0:a2:4a:96:59:d8:25:4b:f9:9d:5c:
                    98:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:69:D0:AB:17:DD:F5:41:E8:A6:6D:81:5F:3B:FE:FA:D7:43:69:61
            X509v3 Authority Key Identifier:
                keyid:AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/66061f5f3a7a3c31473e604f87ac0d0bf5f50f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f2cbbb792ff42fa718619507a50663798055643b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:09:84:45:69:67:46:49:41:35:b0:a9:f8:88:48:1f:e0:dd:
         51:6a:47:f3:7d:69:93:49:cd:ae:7a:52:5c:3b:e0:32:93:f7:
         81:a9:0b:7b:e9:99:9a:f1:a3:e3:8b:8d:b3:f3:d2:b6:a2:3d:
         f9:ad:85:f8:46:19:72:04:f3:9a:c6:a3:91:53:61:a3:16:60:
         1c:90:63:63:86:3b:1f:7c:14:58:ad:4f:10:50:d6:c6:f2:f9:
         60:2b:63:e9:5f:14:bc:25:53:7c:ba:04:c0:ec:3a:cf:25:ca:
         83:86:02:88:d4:d0:27:88:96:be:5c:ea:ae:bd:ab:b0:a1:58:
         b6:3f:08:cc:44:f7:38:fa:a0:0e:25:7d:90:7f:37:5f:5e:42:
         c2:79:5d:73:a4:6b:c9:82:81:85:29:a1:70:a4:de:39:db:55:
         bf:9f:bb:87:3c:24:de:af:82:7f:c6:e4:8b:f9:9a:01:9e:f2:
         7b:d7:55:67:18:13:b3:30:29:c2:8f:53:40:cc:e7:01:95:79:
         a6:7c:f1:d4:f4:f8:74:9d:fa:4e:60:47:5c:2b:ab:c2:ae:7a:
         7a:d5:ab:86:53:0b:cd:ca:1a:9b:9d:7e:b2:94:3c:30:94:5d:
         c5:d4:f3:00:ff:5d:c5:25:1a:ac:e5:46:09:af:ca:01:3b:33:
         8e:52:f6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org