Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/805bd421794e5850f86cb61cab5c3374c20e6417.roa
File:                     805bd421794e5850f86cb61cab5c3374c20e6417.roa (raw, json)
Hash identifier:          oZ40TA+uTNpMyHHPi03NjEgr6FWqw3TdYhbfmrjuPiI=
Subject key identifier:   90:90:14:51:B6:98:2B:8B:7C:DE:C5:49:C0:8A:85:3A:B4:60:7F:CE
Certificate issuer:       /CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
Certificate serial:       0FBCBE
Authority key identifier: 4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/805bd421794e5850f86cb61cab5c3374c20e6417.roa
Signing time:             Mon 28 Jun 2021 21:25:52 +0000
ROA not before:           Mon 28 Jun 2021 03:00:00 +0000
ROA not after:            Wed 28 Jun 2023 03:00:00 +0000
asID:                     271923
IP address blocks:        164.163.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031358 (0xfbcbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=904a59874ab57a97e46cd1d939a2312a85fe9c71
        Validity
            Not Before: Jun 28 03:00:00 2021 GMT
            Not After : Jun 28 03:00:00 2023 GMT
        Subject: CN=805bd421794e5850f86cb61cab5c3374c20e6417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:80:f7:6f:88:3a:8e:ae:cc:a7:75:94:e5:
                    9f:98:7b:67:b6:16:3f:77:d1:14:0f:d1:84:e8:b5:
                    0e:64:d2:54:49:fe:c1:a5:bd:53:c4:4d:bc:61:ee:
                    f3:03:88:6c:22:96:08:84:cd:ab:04:6f:6e:2b:1f:
                    2e:0c:57:1f:f9:20:2f:eb:af:17:0f:48:a3:c3:bd:
                    4c:f7:df:86:b1:1e:20:c3:6f:f5:d2:cb:4c:36:a7:
                    f5:4b:a3:80:bf:3c:b9:d1:fb:11:b5:b6:07:17:09:
                    59:66:a5:28:af:fd:c6:2f:ec:9b:08:43:bf:33:68:
                    24:27:67:cf:0e:e6:36:d5:28:48:ce:65:71:a0:89:
                    4c:c0:37:3f:5b:5f:48:6a:30:5a:71:4b:d8:9d:3b:
                    9f:80:0b:49:65:6e:f1:fb:af:6b:b8:70:a9:55:fa:
                    cb:2b:d3:86:7e:1a:19:ad:e0:a1:56:cd:33:f5:f4:
                    d5:6d:40:cf:c9:1b:ba:ca:dc:b8:0b:e3:dd:db:74:
                    93:fe:02:71:1f:39:b8:cb:ac:0d:ec:11:38:e0:cb:
                    74:1f:6f:9c:c1:1c:de:e6:2c:17:0c:d2:0d:d1:d6:
                    32:14:36:a4:07:b0:7e:53:7b:43:a3:3f:55:11:1f:
                    59:eb:b7:7b:19:6e:c1:ac:aa:16:91:9c:03:82:d8:
                    bc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:90:14:51:B6:98:2B:8B:7C:DE:C5:49:C0:8A:85:3A:B4:60:7F:CE
            X509v3 Authority Key Identifier:
                keyid:4E:23:5A:F0:59:C4:DE:77:9B:DA:BA:DA:4D:17:2F:37:34:F3:E2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/904a59874ab57a97e46cd1d939a2312a85fe9c71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/805bd421794e5850f86cb61cab5c3374c20e6417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ba95eb8-0fdb-47e5-8722-1670732ca03f/904a59874ab57a97e46cd1d939a2312a85fe9c71.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:b1:b6:b7:84:90:42:f5:54:76:08:42:ea:32:5c:c1:0e:90:
         33:19:1c:4d:af:a3:70:cb:2e:c7:90:03:1d:04:7a:11:03:37:
         fe:fe:66:e7:c0:62:ad:9f:70:74:b2:dc:af:d9:a9:77:88:ca:
         3b:12:25:a9:11:81:80:f6:7f:6c:32:56:e9:ff:d4:2f:56:6f:
         dc:d3:f2:06:ae:50:2b:b2:72:55:d0:2c:bf:25:1c:6f:0c:5f:
         a4:37:3b:d8:e8:0b:48:24:38:4a:75:a5:46:5d:c2:7e:ec:51:
         40:e7:00:ae:0c:40:29:51:7b:6e:7b:2e:77:53:96:a5:08:02:
         9e:44:8c:06:69:2d:b6:83:c0:36:f0:0a:dd:b4:af:94:46:80:
         61:b9:04:b2:3d:99:fa:89:d1:4e:91:8b:11:94:f9:52:50:97:
         7f:a7:8c:fe:89:9f:9b:1a:6c:3d:35:d6:9b:fe:3e:6c:52:ac:
         13:c4:27:92:0b:b1:b6:f2:4c:f1:74:fe:25:15:58:fc:dd:76:
         96:51:24:ba:ad:74:8d:2e:09:15:e8:23:c7:a4:3f:81:9f:02:
         57:07:45:07:76:d6:e8:86:35:03:18:51:5d:f6:c6:2c:0d:45:
         75:00:18:53:81:4c:9c:e4:d5:f1:9a:25:0a:af:c5:3d:9f:f2:
         e2:34:55:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org