Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/9c839fb319bce6ad50098ade215f63b98a1a0411.roa
File:                     9c839fb319bce6ad50098ade215f63b98a1a0411.roa (raw, json)
Hash identifier:          KljT27DjSreCdtCYJVGIbNkWLOzA2C4KmOTFrxji1mI=
Subject key identifier:   16:69:77:25:A2:A9:93:9E:D2:4C:1D:C3:FD:F5:81:DE:40:2E:75:30
Certificate issuer:       /CN=a0ece5cb3349a401474499eb301920b68090f2ce
Certificate serial:       0D905C
Authority key identifier: 94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/9c839fb319bce6ad50098ade215f63b98a1a0411.roa
Signing time:             Wed 24 Mar 2021 14:38:27 +0000
ROA not before:           Wed 24 Mar 2021 14:38:27 +0000
ROA not after:            Tue 24 Mar 2026 14:38:27 +0000
asID:                     264836
IP address blocks:        192.141.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888924 (0xd905c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ece5cb3349a401474499eb301920b68090f2ce
        Validity
            Not Before: Mar 24 14:38:27 2021 GMT
            Not After : Mar 24 14:38:27 2026 GMT
        Subject: CN=9c839fb319bce6ad50098ade215f63b98a1a0411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e5:cd:10:0e:d0:80:08:62:d0:25:89:7e:cc:
                    3c:96:16:08:45:6b:a8:36:79:7e:dc:b2:c9:4f:31:
                    e7:07:cb:fd:9e:23:ee:53:0c:1c:3b:5c:bd:fb:b4:
                    2b:5c:90:85:09:5f:a9:48:2b:1c:58:7a:69:a6:c8:
                    68:b2:ed:e0:62:96:d9:00:02:a9:57:5b:f5:0c:4d:
                    63:49:be:b3:43:e9:9c:a0:14:94:d6:d9:e8:e8:1f:
                    bc:f3:5b:a7:37:d5:67:7d:91:63:c6:fc:56:96:94:
                    48:15:d0:1b:a1:b8:09:14:7e:dc:c2:b4:53:92:32:
                    8f:0e:0d:9b:bf:87:a6:1e:10:92:61:c3:d8:4f:a8:
                    e8:e1:93:44:ce:f3:61:a0:54:26:fc:b2:88:e3:e6:
                    15:42:e2:d6:f4:92:a9:35:34:c7:78:c5:d4:4d:fc:
                    f7:4a:5d:d5:8a:ff:7d:6d:45:44:75:04:7c:50:3a:
                    c0:d8:c8:07:10:52:6c:17:bf:bc:e7:da:e5:34:e6:
                    66:50:3e:3e:73:a4:50:12:53:45:0e:36:13:2c:e5:
                    20:66:0b:e9:db:e0:10:85:f9:c6:60:4b:a4:37:70:
                    b0:59:d6:24:b0:49:f9:d7:73:47:c5:93:6a:b1:05:
                    6f:fe:4a:27:ae:be:12:6d:0f:0e:73:0c:d1:4c:50:
                    63:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:69:77:25:A2:A9:93:9E:D2:4C:1D:C3:FD:F5:81:DE:40:2E:75:30
            X509v3 Authority Key Identifier:
                keyid:94:52:6C:1C:EE:97:CC:0E:93:E7:50:7E:90:7F:EB:BE:B5:E2:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ece5cb3349a401474499eb301920b68090f2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/9c839fb319bce6ad50098ade215f63b98a1a0411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d937f66-ace6-42a2-baae-e150b66d0e5e/a0ece5cb3349a401474499eb301920b68090f2ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:9e:7c:60:a2:9b:d8:53:57:fa:c4:e6:95:46:0b:8c:ef:db:
         42:69:47:31:a8:8f:b8:35:52:a3:cf:64:fb:c4:c3:dd:7e:12:
         42:d1:65:4c:fc:f8:cc:ff:dd:ad:60:aa:e5:86:c6:cf:88:8a:
         6d:22:0c:0c:48:9e:c0:fb:83:bb:2b:20:a7:e0:08:e3:d0:03:
         7b:af:8f:5f:fe:38:69:13:34:ae:4c:31:6a:9e:e1:27:c7:c1:
         70:cc:ee:6d:dc:8c:66:95:2b:72:a7:b6:8f:2e:6d:3b:ac:cf:
         64:a0:aa:4a:71:22:ad:eb:a2:b0:4d:a6:d4:ab:e2:4f:1f:b8:
         63:41:0f:76:5f:7a:62:fe:3b:a5:8a:4c:ea:10:69:e0:91:eb:
         ca:e5:76:66:96:d2:c0:43:9b:91:00:dd:61:cb:a8:eb:de:91:
         1f:36:bc:44:06:2c:e1:ef:14:94:5b:17:64:b4:2b:81:df:a3:
         11:22:15:3f:44:c3:38:73:e2:6c:88:c5:4d:e6:d8:e8:31:fe:
         62:c0:d5:57:76:61:f3:0a:2b:16:3a:f9:95:6c:d8:b5:06:61:
         09:ab:94:23:38:fd:95:e1:f8:86:b8:48:15:7f:33:a7:fe:82:
         e2:dd:c4:7d:10:77:29:32:e1:e2:e0:53:7b:39:c3:49:4e:1d:
         56:a8:98:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org