Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/3f75676db83790ed1be205898d49bc11755d21aa.roa
File:                     3f75676db83790ed1be205898d49bc11755d21aa.roa (raw, json)
Hash identifier:          d7y6WWIbUdxMajligiXjunKn94JRSRTlC1Zes5Zrruc=
Subject key identifier:   A3:F3:32:2F:6D:42:DE:17:B9:11:53:C8:6C:34:01:59:44:74:30:6D
Certificate issuer:       /CN=429f210b98677033fc9a53a0399f1ebe43c09997
Certificate serial:       0CAAE1
Authority key identifier: 46:E3:01:7B:00:E8:72:F1:93:B3:E8:09:E9:FF:C3:4E:C4:0F:31:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429f210b98677033fc9a53a0399f1ebe43c09997.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/3f75676db83790ed1be205898d49bc11755d21aa.roa
Signing time:             Wed 24 Mar 2021 14:45:15 +0000
ROA not before:           Wed 24 Mar 2021 14:45:15 +0000
ROA not after:            Tue 24 Mar 2026 14:45:15 +0000
asID:                     28316
IP address blocks:        190.34.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 830177 (0xcaae1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429f210b98677033fc9a53a0399f1ebe43c09997
        Validity
            Not Before: Mar 24 14:45:15 2021 GMT
            Not After : Mar 24 14:45:15 2026 GMT
        Subject: CN=3f75676db83790ed1be205898d49bc11755d21aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:18:87:d1:4b:1d:b6:cc:c5:b1:54:2e:19:
                    e6:14:ab:91:b9:38:a4:bd:d4:30:e8:6f:96:f9:8b:
                    e8:cc:11:08:d2:de:61:cd:84:e7:d9:ab:39:26:45:
                    d0:7b:9c:27:f2:fe:75:27:5e:b0:49:2b:8b:77:fa:
                    84:75:8b:f3:be:0c:fe:e5:ae:da:d9:3e:df:ca:f4:
                    f3:97:3f:77:91:85:7b:7f:76:e8:ea:06:b3:50:f6:
                    4d:c5:90:39:d3:c7:7f:e0:4d:95:38:f2:26:4c:3d:
                    15:50:2f:94:e6:d8:4f:f1:1f:79:ca:56:e7:35:17:
                    dd:4a:39:4d:b9:52:6c:0f:a0:17:7a:f1:d7:6c:d8:
                    5c:a8:d5:3e:26:f3:79:d1:fb:f1:ec:5e:f0:a4:65:
                    41:6c:e6:8a:05:b0:62:24:95:62:d7:25:2a:bb:66:
                    0d:09:b5:65:01:55:ac:06:46:e3:1f:82:53:20:8e:
                    0b:f7:1e:89:dd:df:8a:2e:60:fa:07:a2:f0:ad:df:
                    66:22:82:39:ef:a3:e8:56:7e:6c:cb:4b:9d:c2:5f:
                    c2:4f:0e:f7:a6:d6:41:9e:8b:3f:1a:1a:a2:59:8b:
                    4c:c8:4f:c7:65:17:39:ae:b5:d5:a8:c0:bc:ee:c6:
                    37:57:da:e7:9a:72:47:86:da:8a:da:ea:eb:13:96:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F3:32:2F:6D:42:DE:17:B9:11:53:C8:6C:34:01:59:44:74:30:6D
            X509v3 Authority Key Identifier:
                keyid:46:E3:01:7B:00:E8:72:F1:93:B3:E8:09:E9:FF:C3:4E:C4:0F:31:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429f210b98677033fc9a53a0399f1ebe43c09997.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/3f75676db83790ed1be205898d49bc11755d21aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/429f210b98677033fc9a53a0399f1ebe43c09997.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.34.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:e0:4e:ac:d4:76:3d:20:9a:d4:24:d1:6e:a7:91:f4:3e:2a:
         20:d3:2a:fa:05:ba:2e:a8:84:38:5c:62:45:87:79:1f:26:15:
         72:b4:0a:bc:53:70:46:5c:c8:94:33:b0:59:c9:1b:54:e5:fd:
         a3:c7:fb:b8:6e:bb:a9:a9:97:5b:53:81:43:66:fe:34:b1:3a:
         11:ea:98:c8:48:08:0e:04:f2:e8:60:78:48:56:ed:bd:f6:01:
         65:f7:38:6a:2b:7e:31:a0:3b:53:2e:77:e6:85:b1:cd:bf:7b:
         b6:3e:79:99:03:29:1c:ad:e8:97:e3:d6:a1:66:f8:bd:98:77:
         d9:d0:1d:57:79:f6:fe:a8:11:7f:91:26:fc:9b:e7:21:ce:3f:
         b7:50:7f:e5:96:4d:a7:4f:f9:c9:2a:04:09:45:0d:f5:99:ad:
         24:b3:a7:cc:9f:16:7d:12:d7:8f:66:cd:a8:d7:9e:94:86:c2:
         40:be:f3:52:2a:de:2c:59:2b:b3:58:c6:8b:f2:4e:bf:e5:c0:
         2f:58:9b:7c:94:40:13:44:bc:46:6d:0e:60:2d:12:58:79:12:
         15:a8:ce:af:6c:92:d2:b9:4f:c2:e7:e1:9f:9d:2f:19:2d:b9:
         d0:4d:22:65:b9:37:00:bd:e5:a1:af:2b:e2:10:cb:5d:c4:94:
         0a:7f:0f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org