Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/6a3a6dc24a7943627a4af79d50648625d4f027d9.roa
File:                     6a3a6dc24a7943627a4af79d50648625d4f027d9.roa (raw, json)
Hash identifier:          3QfQXVjpFAi84+8IFRzX6zXLaMvOe9+aWwYjFO/t4pk=
Subject key identifier:   C4:69:8B:EF:73:CF:E7:EE:87:BB:71:B6:FA:51:1B:91:D0:5E:BC:02
Certificate issuer:       /CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
Certificate serial:       0DC2BC
Authority key identifier: 96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/6a3a6dc24a7943627a4af79d50648625d4f027d9.roa
Signing time:             Wed 24 Mar 2021 14:37:03 +0000
ROA not before:           Wed 24 Mar 2021 14:37:01 +0000
ROA not after:            Tue 24 Mar 2026 14:37:01 +0000
asID:                     20299
IP address blocks:        131.108.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901820 (0xdc2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
        Validity
            Not Before: Mar 24 14:37:01 2021 GMT
            Not After : Mar 24 14:37:01 2026 GMT
        Subject: CN=6a3a6dc24a7943627a4af79d50648625d4f027d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f4:04:35:b5:c3:18:bd:d7:ea:ce:b9:1c:42:
                    86:f9:ea:b4:50:2a:fa:85:2d:71:66:c3:f3:08:8c:
                    a5:b0:26:63:b4:e1:e1:24:be:63:89:f4:df:af:da:
                    4c:7c:72:c6:6c:49:6b:cf:19:e7:b8:21:e7:7a:ae:
                    71:85:fd:12:89:64:a4:2a:1e:ad:44:ac:df:85:b5:
                    d5:4c:dd:4b:ae:64:d6:2e:af:a7:80:be:ea:c8:ea:
                    f0:58:64:81:42:96:64:d5:5c:76:4a:5f:66:58:f1:
                    3b:bb:95:e1:1c:30:60:49:56:ec:08:d0:53:90:34:
                    a9:1b:87:36:40:02:d6:3d:5d:04:06:1f:bb:c9:53:
                    02:fb:f7:d4:84:ad:55:05:24:ea:f1:e1:a8:6c:4f:
                    0c:e8:a9:7c:7f:34:62:b5:fe:0d:ab:13:cf:86:b6:
                    9f:ad:66:f2:3d:dc:49:82:de:9b:ad:c2:4e:77:99:
                    08:e0:be:de:3f:9f:32:2b:03:f2:ef:ac:ec:c1:84:
                    0b:49:f1:0a:bc:1e:db:3e:18:fa:87:85:94:b5:81:
                    32:ca:a0:f2:a9:fb:fc:64:5b:85:4e:bd:f7:1f:3b:
                    cb:fd:38:d1:9f:82:9c:8b:37:85:4b:94:ab:2b:46:
                    f1:4f:93:71:a6:ba:0a:a9:08:19:40:9a:af:04:db:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:69:8B:EF:73:CF:E7:EE:87:BB:71:B6:FA:51:1B:91:D0:5E:BC:02
            X509v3 Authority Key Identifier:
                keyid:96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/6a3a6dc24a7943627a4af79d50648625d4f027d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:a6:a6:28:70:dc:0c:a8:2e:ea:d0:fd:ef:7b:4d:08:8d:5f:
         33:86:30:7b:a0:bd:ab:7e:6e:d8:29:a3:a4:e2:bf:04:87:39:
         30:4f:e5:23:74:da:6f:39:d8:be:2d:f4:5a:12:9f:cc:71:df:
         5a:09:a3:96:4b:b2:11:5b:a6:6a:49:8a:a5:12:83:80:68:6b:
         c2:cc:3c:5f:f0:13:10:4b:e3:d5:57:f7:56:f5:28:f6:67:74:
         a9:ba:99:91:ea:9a:b6:f6:9a:5c:d9:59:2a:fc:e6:b7:87:b7:
         ac:2c:04:04:be:e5:ef:60:b5:e3:a0:0f:6e:70:e5:a7:88:92:
         af:56:0b:15:f3:c9:c2:3b:15:6b:36:d0:40:f0:82:52:37:05:
         eb:09:5e:dd:68:25:1f:3d:0a:d1:26:e4:47:52:8a:44:cd:dd:
         3d:5a:59:c6:e8:33:b0:6c:6f:2f:a1:72:cc:20:bb:ae:79:de:
         51:09:1e:98:51:d3:f5:a3:bd:85:18:92:d1:4c:8e:4a:22:d5:
         4a:98:c9:04:6a:ce:3e:24:0c:3f:3f:b3:ab:45:9b:62:4d:9c:
         73:ad:55:ab:18:49:0a:c6:6d:3a:44:02:26:a7:11:47:a8:5d:
         d3:03:80:29:5f:44:67:30:ef:c1:67:f4:8c:93:75:0d:27:2f:
         e1:2c:36:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org