Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/2b1992614ad8e4f4a330ee57e5fd3dfbdf3e58ef.roa
File:                     2b1992614ad8e4f4a330ee57e5fd3dfbdf3e58ef.roa (raw, json)
Hash identifier:          6YLKEBY6GQsAEcNB/hsqWARfw05oo9cgCVVPAqpNpZw=
Subject key identifier:   EF:BE:61:07:36:4D:39:AC:DA:DE:C1:92:D0:3E:9B:FD:9F:6A:20:67
Certificate issuer:       /CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Certificate serial:       0DBA7E
Authority key identifier: 96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/2b1992614ad8e4f4a330ee57e5fd3dfbdf3e58ef.roa
Signing time:             Wed 24 Mar 2021 14:37:02 +0000
ROA not before:           Wed 24 Mar 2021 14:37:01 +0000
ROA not after:            Tue 24 Mar 2026 14:37:01 +0000
asID:                     20299
IP address blocks:        131.108.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899710 (0xdba7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
        Validity
            Not Before: Mar 24 14:37:01 2021 GMT
            Not After : Mar 24 14:37:01 2026 GMT
        Subject: CN=2b1992614ad8e4f4a330ee57e5fd3dfbdf3e58ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:69:64:1b:9c:ce:1e:33:71:e6:5f:92:3d:1c:
                    fc:c4:7f:68:54:8b:c9:87:85:c5:99:b6:52:6b:95:
                    1b:a5:cc:85:43:dd:dd:23:27:2f:40:33:99:2a:4b:
                    00:3e:d6:f1:88:8b:83:b0:28:67:f9:ad:e9:37:83:
                    32:d9:e1:12:bc:ef:eb:74:a1:49:34:65:3d:00:98:
                    92:ba:c1:57:c3:0f:7b:d3:a6:77:7f:05:19:86:d2:
                    d3:45:d2:7f:9a:2f:62:5f:2e:da:e1:91:ae:52:a6:
                    44:5f:e4:92:64:c4:68:13:cb:1f:14:b3:31:14:16:
                    e5:a4:01:20:34:3c:c8:ec:5c:53:14:5d:af:a0:8f:
                    a9:2f:fb:5e:1d:61:0f:97:56:f3:b0:0d:5b:7f:04:
                    0b:8f:91:f0:d9:3e:8d:f4:31:84:24:34:cb:fb:11:
                    ef:fe:1f:ee:54:21:71:ad:22:4d:e3:05:93:b2:35:
                    f2:6b:57:ee:a7:83:d1:39:66:63:90:84:2c:2d:b1:
                    d2:26:85:97:c8:40:2c:cf:99:fa:b5:b8:44:ff:ad:
                    86:11:88:e5:a2:45:7a:56:a8:df:45:07:60:25:53:
                    84:1d:8c:fc:fe:5d:b3:34:f0:c8:a7:61:a1:24:7d:
                    fe:78:a4:30:26:3d:8f:91:ad:57:73:fa:62:36:fc:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BE:61:07:36:4D:39:AC:DA:DE:C1:92:D0:3E:9B:FD:9F:6A:20:67
            X509v3 Authority Key Identifier:
                keyid:96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/2b1992614ad8e4f4a330ee57e5fd3dfbdf3e58ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:95:32:53:00:0f:2f:90:21:a2:ee:13:2a:35:2f:58:de:c9:
         f6:a8:f9:1d:3b:2f:75:65:61:48:30:22:d6:d8:0b:0d:e3:cf:
         47:ee:c6:ea:ba:e5:ce:16:b7:3f:94:a0:78:d8:cd:c8:ac:81:
         ae:b6:5b:40:ae:fd:1f:6b:16:d1:1b:c9:4c:b7:89:69:9a:e9:
         34:95:02:ef:6b:d6:67:dd:9f:1d:a0:ee:10:dd:f2:97:71:a9:
         36:cd:ce:0f:91:8d:ca:f0:5c:6e:26:c3:5b:ec:3c:b5:d2:2a:
         57:cd:59:5b:71:c4:79:a2:68:dd:e0:81:7f:39:b9:2b:9c:28:
         44:9d:b1:8e:a7:c0:a8:7b:52:bb:22:5c:09:d6:53:f6:9d:72:
         ba:8f:e2:5c:4e:b3:6a:88:fc:90:25:0a:48:44:f1:a9:54:46:
         25:9a:3b:68:a6:73:25:74:3a:df:49:a3:b6:62:4e:14:b2:12:
         71:0e:72:f5:7f:53:ef:6a:71:05:be:d0:df:62:07:6f:a6:29:
         22:93:85:2c:01:56:ed:02:b7:23:d4:8b:4a:a9:41:99:ce:95:
         e7:db:db:69:d3:2b:e2:2e:55:2e:40:80:e2:58:4a:55:78:3d:
         86:d2:50:81:72:99:2c:4d:06:66:82:7e:6a:ad:1c:8e:07:e7:
         31:9d:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org