Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/39afde0c-49dd-414e-8cf7-72e7c7e67dfe/93543e55cd406a16d2e01d6adce568535c094336.roa
File:                     93543e55cd406a16d2e01d6adce568535c094336.roa (raw, json)
Hash identifier:          a0W4zl6NBIWRxnE6XDRNa7+XhWNjHsecfuzp5yZehfY=
Subject key identifier:   3E:2C:19:72:04:A6:9C:74:4A:85:03:73:4D:D6:C0:0C:12:0D:8C:D3
Certificate issuer:       /CN=2c60b92d12a2585c94ee20632fda5daecd76aa9d
Certificate serial:       0D8432
Authority key identifier: AF:61:7B:19:BE:00:78:FB:2C:3C:FE:28:52:F7:6F:51:11:2C:8B:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c60b92d12a2585c94ee20632fda5daecd76aa9d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/39afde0c-49dd-414e-8cf7-72e7c7e67dfe/93543e55cd406a16d2e01d6adce568535c094336.roa
Signing time:             Wed 24 Mar 2021 14:36:33 +0000
ROA not before:           Wed 24 Mar 2021 14:36:33 +0000
ROA not after:            Tue 24 Mar 2026 14:36:33 +0000
asID:                     5722
IP address blocks:        168.176.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885810 (0xd8432)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c60b92d12a2585c94ee20632fda5daecd76aa9d
        Validity
            Not Before: Mar 24 14:36:33 2021 GMT
            Not After : Mar 24 14:36:33 2026 GMT
        Subject: CN=93543e55cd406a16d2e01d6adce568535c094336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:6c:58:55:76:30:7e:30:f1:b6:29:79:8c:
                    8b:d8:4f:16:34:60:6b:1a:18:8d:e0:d2:c7:f8:ed:
                    0e:c9:e4:02:82:fd:8a:94:63:9f:32:2c:03:7d:d0:
                    55:0c:b3:8f:e1:ba:64:0e:b3:46:03:55:d7:ad:44:
                    ef:bd:f9:46:68:2c:5a:85:2f:8b:7e:d8:80:ca:f7:
                    d2:79:c0:10:67:d0:89:3a:d1:6b:d6:39:8c:09:e3:
                    f3:7c:45:2b:c3:80:9a:5a:bc:40:4c:fb:1f:19:2e:
                    54:3a:63:11:15:18:5d:d2:58:ff:5f:cf:26:d1:1d:
                    1e:12:72:30:6b:52:1b:26:76:8e:29:53:b7:5c:97:
                    90:8a:7f:1f:0e:6f:39:7f:72:50:03:a7:49:1c:b2:
                    a1:2e:51:cc:ee:ab:61:03:a7:b9:18:bb:55:98:7b:
                    d2:46:4c:25:af:02:cd:3f:48:6c:9d:09:34:38:49:
                    56:4f:7d:aa:6c:75:c2:c3:f8:27:fe:80:c3:01:d6:
                    a2:84:ee:0f:f9:e1:00:c3:8b:95:db:db:0b:38:f7:
                    7f:1b:45:22:5c:18:1d:45:c2:f3:1e:58:1c:7b:32:
                    33:01:e6:7d:01:ba:bc:ad:c0:2f:fd:48:3f:76:58:
                    a3:70:ef:d0:91:3d:1f:0c:52:dc:bd:d7:ce:3b:b5:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2C:19:72:04:A6:9C:74:4A:85:03:73:4D:D6:C0:0C:12:0D:8C:D3
            X509v3 Authority Key Identifier:
                keyid:AF:61:7B:19:BE:00:78:FB:2C:3C:FE:28:52:F7:6F:51:11:2C:8B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c60b92d12a2585c94ee20632fda5daecd76aa9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/39afde0c-49dd-414e-8cf7-72e7c7e67dfe/93543e55cd406a16d2e01d6adce568535c094336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/39afde0c-49dd-414e-8cf7-72e7c7e67dfe/2c60b92d12a2585c94ee20632fda5daecd76aa9d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.176.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:c6:2f:04:d8:3e:2a:36:0c:9c:f2:1c:5d:ca:d9:cf:9f:
         d4:40:3d:d2:91:10:55:d8:c7:f9:a5:74:59:b1:7d:96:f5:27:
         c5:79:6a:a4:cf:a9:5f:1a:ad:d6:56:5b:05:2e:a2:0d:3f:e1:
         93:30:f1:db:0a:5e:cd:87:1b:d8:72:da:33:2f:1d:fb:90:0a:
         79:56:17:ae:a9:f1:0a:a0:b1:a0:fa:b4:7a:f4:30:75:1c:ee:
         58:96:b0:56:3e:82:ff:5e:0f:89:22:29:d5:38:46:0c:b4:32:
         77:9e:b8:18:77:da:17:4d:23:9c:ac:ff:a9:b3:ca:2c:c3:83:
         2a:69:a6:76:0b:b8:29:f8:e8:b1:22:ba:83:8b:1f:1b:c8:70:
         c8:18:f2:d7:dc:7e:6a:2e:f1:38:45:9d:46:59:da:6b:ec:b3:
         26:3c:46:3d:c0:bc:2b:1f:91:73:8b:0f:8e:7e:9e:1a:c4:53:
         0a:1a:15:68:59:0e:63:10:9d:d4:e2:fe:17:b4:2c:a5:1b:05:
         30:80:d5:e2:c7:e0:d4:0d:0c:dc:d5:e0:76:1d:2a:2d:3d:46:
         cf:97:62:13:7f:3e:c2:95:a4:61:1a:0f:6b:27:49:ca:57:e9:
         9a:50:ec:b6:36:0d:09:70:19:85:7e:43:34:bd:8d:98:f5:8c:
         52:ea:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org