Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dd16448-686e-4fb2-a712-8a5a3dabd23d/4fcaf71d5982f896697a1a735097172a9b41956f.roa
File:                     4fcaf71d5982f896697a1a735097172a9b41956f.roa (raw, json)
Hash identifier:          Ik14BxElCpRDNAHKZKlE2zoQuZZ89fxHKe2mcnqfHos=
Subject key identifier:   6A:E0:79:6E:33:43:42:9D:B9:64:EC:8F:4F:1A:B8:AD:84:89:F1:0F
Certificate issuer:       /CN=41c0b236bf594a4469b46e92f5bcd4a142acfa39
Certificate serial:       0D9A20
Authority key identifier: 8D:7A:D5:85:6D:69:95:BE:2C:18:AB:EE:BC:B2:EC:29:A2:5E:64:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41c0b236bf594a4469b46e92f5bcd4a142acfa39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dd16448-686e-4fb2-a712-8a5a3dabd23d/4fcaf71d5982f896697a1a735097172a9b41956f.roa
Signing time:             Wed 24 Mar 2021 14:32:53 +0000
ROA not before:           Wed 24 Mar 2021 14:32:53 +0000
ROA not after:            Tue 24 Mar 2026 14:32:53 +0000
asID:                     6568
IP address blocks:        190.99.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891424 (0xd9a20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41c0b236bf594a4469b46e92f5bcd4a142acfa39
        Validity
            Not Before: Mar 24 14:32:53 2021 GMT
            Not After : Mar 24 14:32:53 2026 GMT
        Subject: CN=4fcaf71d5982f896697a1a735097172a9b41956f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:af:69:9b:53:d3:8e:13:34:cc:53:59:e2:
                    ca:95:9a:18:5a:f8:6e:64:fb:06:63:81:5a:c0:b2:
                    a7:2e:5f:28:cd:5c:56:67:d3:0d:74:1b:26:73:f9:
                    89:8c:67:2a:9f:91:db:b2:7f:87:e6:66:56:40:86:
                    f6:af:b2:bd:41:99:71:72:2e:dc:48:9e:49:e9:ce:
                    a6:52:96:c6:bc:ad:f0:71:4a:bc:69:67:5a:1c:53:
                    69:b6:62:ff:b3:51:0d:59:75:d2:3b:37:89:ec:57:
                    b4:9d:21:54:2f:88:a1:78:9d:7e:ae:fd:25:bd:d3:
                    35:30:03:a6:bf:5e:ef:df:f8:47:8f:54:dc:65:01:
                    c4:fc:ee:86:65:60:ab:e7:81:f8:1d:02:bd:81:2d:
                    b0:22:2e:5e:41:47:3c:a8:bb:b0:20:6e:54:cc:78:
                    9d:45:65:6f:67:a6:7e:e6:be:29:70:38:51:e2:d2:
                    d6:d5:0e:b0:fe:fd:09:cf:e4:2f:ac:e8:d0:09:d4:
                    e9:c8:44:93:45:1a:1d:f1:ef:b3:70:a1:60:26:cb:
                    ae:c8:c7:ef:74:d1:c4:2b:e8:00:96:b9:e4:e4:b6:
                    9a:d9:cd:7a:3c:4b:90:a0:f3:23:ec:5b:5d:26:d0:
                    be:93:05:b6:7a:a7:4e:84:25:1d:26:34:aa:94:55:
                    e3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E0:79:6E:33:43:42:9D:B9:64:EC:8F:4F:1A:B8:AD:84:89:F1:0F
            X509v3 Authority Key Identifier:
                keyid:8D:7A:D5:85:6D:69:95:BE:2C:18:AB:EE:BC:B2:EC:29:A2:5E:64:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41c0b236bf594a4469b46e92f5bcd4a142acfa39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dd16448-686e-4fb2-a712-8a5a3dabd23d/4fcaf71d5982f896697a1a735097172a9b41956f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dd16448-686e-4fb2-a712-8a5a3dabd23d/41c0b236bf594a4469b46e92f5bcd4a142acfa39.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:fc:88:4d:7e:22:22:ab:33:b8:b8:a5:cd:eb:33:c8:ac:ab:
         9a:5e:a4:f6:a5:0e:8c:e6:08:8f:a8:6f:30:0c:d8:27:40:bb:
         e2:fb:46:06:af:2e:ec:bd:73:43:d4:2f:06:80:97:8f:d8:c4:
         cb:97:45:53:e3:57:bc:89:24:7f:1e:c1:de:e3:2b:64:5d:55:
         11:c0:75:bd:dc:ab:fc:b4:d9:38:c3:74:e6:b1:0a:28:b6:cf:
         e5:51:47:78:ec:d2:a9:09:21:0c:b5:ef:b4:01:8d:9c:03:1b:
         66:12:a8:84:32:bd:a2:35:b9:91:70:1a:9c:c8:bb:4b:24:5b:
         49:89:b4:1b:f6:f5:da:81:46:4c:db:1a:98:d7:55:09:7a:84:
         37:57:e7:23:5e:10:40:2c:a4:b4:7b:38:42:df:4e:0e:3b:ed:
         53:46:70:68:31:b1:e6:1b:84:e2:85:82:0b:fe:27:61:16:b6:
         ef:e1:bc:91:0b:81:f7:95:56:23:85:ad:5d:36:c2:12:31:56:
         f9:2d:0a:df:f1:f2:ba:5c:a5:f7:03:40:7d:72:20:a0:4d:b7:
         5e:74:1e:c4:81:ce:79:3c:f4:db:39:75:a8:ff:fb:66:bb:7e:
         1d:a3:c4:ba:d9:e0:a0:28:aa:4e:43:a1:7d:10:63:98:3b:79:
         08:8a:a2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org