Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/2114a873a78c35b535cf154468262ebf69a626fe.roa
File:                     2114a873a78c35b535cf154468262ebf69a626fe.roa (raw, json)
Hash identifier:          3Yj5zjorKZZiWVlsn73L2cEPobAV14krS/h7VH+6rB8=
Subject key identifier:   2C:5B:6C:88:0E:12:58:03:E7:C2:D4:64:86:80:A6:42:7B:4D:F9:60
Certificate issuer:       /CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Certificate serial:       0DC530
Authority key identifier: 96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/2114a873a78c35b535cf154468262ebf69a626fe.roa
Signing time:             Wed 24 Mar 2021 14:37:03 +0000
ROA not before:           Wed 24 Mar 2021 14:37:01 +0000
ROA not after:            Tue 24 Mar 2026 14:37:01 +0000
asID:                     262197
IP address blocks:        131.108.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902448 (0xdc530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
        Validity
            Not Before: Mar 24 14:37:01 2021 GMT
            Not After : Mar 24 14:37:01 2026 GMT
        Subject: CN=2114a873a78c35b535cf154468262ebf69a626fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:f7:7f:d5:db:da:a8:25:19:dd:23:b2:69:
                    dc:cb:67:fa:3b:cd:9d:98:55:6e:20:c7:45:f3:d1:
                    fd:50:45:5a:f7:ae:0e:78:09:63:b8:3a:1e:47:9c:
                    c4:67:55:6f:df:93:0c:c5:07:81:0a:9d:12:49:f2:
                    3c:8b:59:ef:5c:39:6e:87:64:1a:ab:a2:40:ba:a9:
                    4d:7c:98:2d:90:da:6f:88:70:38:eb:9e:b1:fa:f6:
                    c8:b0:ef:05:d5:17:b6:89:ec:1a:82:db:23:12:eb:
                    e7:1e:c0:93:58:73:68:b5:7c:c3:7d:91:26:7f:28:
                    be:db:df:f0:34:34:af:36:af:b7:da:3f:3d:eb:73:
                    4b:ce:c4:ac:ba:4d:eb:7c:3b:3d:e1:9b:89:53:b3:
                    f4:11:d6:8c:db:64:c6:8d:60:27:a5:1f:73:03:b7:
                    27:a7:fb:99:62:e6:7e:73:68:e0:ae:c7:17:08:5b:
                    62:5e:18:b2:ab:56:ef:ca:6e:d9:a5:6f:e2:46:ca:
                    57:00:af:06:f2:4f:5b:5d:c9:a6:17:7d:cf:b7:ec:
                    e7:16:36:87:91:1f:53:5a:b4:39:f2:e0:2b:55:e6:
                    e4:21:5e:ca:03:1c:ed:8b:3e:be:0a:84:d8:ff:16:
                    0b:81:0d:a0:52:dd:66:a2:f4:b7:9c:3f:ef:23:7f:
                    46:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5B:6C:88:0E:12:58:03:E7:C2:D4:64:86:80:A6:42:7B:4D:F9:60
            X509v3 Authority Key Identifier:
                keyid:96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/2114a873a78c35b535cf154468262ebf69a626fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:3f:2a:f1:75:9d:20:af:0c:65:63:f4:42:36:18:76:15:c4:
         d4:23:b0:76:07:e0:f0:e8:bc:a2:a8:c5:af:6e:76:85:78:43:
         fe:7d:5f:25:75:c7:ef:ad:ec:f2:e0:02:a3:37:28:03:e9:ad:
         a5:74:03:4b:86:bf:b6:6c:3a:a5:26:8b:ba:09:31:26:7e:fe:
         aa:fa:9b:a8:eb:37:b0:2d:34:74:66:94:61:e6:3f:70:56:d3:
         ec:21:5e:32:88:9f:1d:66:02:8f:31:5c:2e:5e:bb:a5:59:b4:
         5d:3a:45:c4:d5:0b:42:ac:e2:89:dd:29:f7:69:5c:a9:62:03:
         c8:03:7c:09:a9:16:21:e1:ba:68:5f:70:36:5f:ea:d0:60:b3:
         5d:00:aa:15:01:77:ac:88:45:3f:e2:f2:71:80:10:a1:93:41:
         10:70:c8:1d:e5:1e:e7:4a:19:a2:a7:03:2a:6d:f1:ee:0e:76:
         d3:49:52:76:79:7e:ca:27:1e:4a:3d:fd:49:18:1a:82:29:79:
         32:57:a3:dd:41:6a:e4:34:d3:b7:2b:9b:56:fc:f6:95:5a:e1:
         36:e5:65:c8:55:5c:4a:8c:45:ad:79:b5:53:6a:43:e0:fa:f5:
         b8:08:3a:bb:a7:78:ec:55:b6:8c:f1:95:63:d7:e6:22:e0:8d:
         d5:65:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org