Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/c502204650b0a72c2cc64eb2d05785fd3824afc4.roa
File:                     c502204650b0a72c2cc64eb2d05785fd3824afc4.roa (raw, json)
Hash identifier:          veeo47Llp4bSXnB6Sa8X9ODMqi5kXsm07YiR+UXMHho=
Subject key identifier:   69:FB:CD:1D:1A:17:F4:69:20:0E:AA:16:58:FB:E6:B6:31:76:3F:6B
Certificate issuer:       /CN=444e0076eea4611dce8c3e39bffef12743fb4711
Certificate serial:       122443
Authority key identifier: EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/c502204650b0a72c2cc64eb2d05785fd3824afc4.roa
Signing time:             Fri 12 Aug 2022 17:52:30 +0000
ROA not before:           Mon 28 Jun 2021 03:00:00 +0000
ROA not after:            Wed 28 Jun 2023 03:00:00 +0000
asID:                     27988
IP address blocks:        189.90.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1188931 (0x122443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444e0076eea4611dce8c3e39bffef12743fb4711
        Validity
            Not Before: Jun 28 03:00:00 2021 GMT
            Not After : Jun 28 03:00:00 2023 GMT
        Subject: CN=c502204650b0a72c2cc64eb2d05785fd3824afc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:70:d6:35:95:3b:3a:e2:5a:b6:e9:41:82:cc:
                    cc:86:0e:97:9e:3a:34:dc:af:4b:93:78:1e:77:be:
                    ad:1b:78:6a:d1:b7:22:19:93:5a:03:cf:f8:f2:9d:
                    6f:b3:1b:ed:0d:52:9f:fb:c1:ef:aa:99:e6:39:a3:
                    5b:b6:79:44:0e:6d:5d:89:e2:af:0b:2e:2a:2d:bd:
                    94:56:f9:62:73:0b:34:1f:21:54:49:e8:80:b0:44:
                    21:85:1f:d0:36:75:e0:e9:e3:61:8d:d8:9b:07:b0:
                    f3:84:94:19:9a:b8:df:65:9a:e7:21:c6:f7:1d:be:
                    69:e9:1b:e5:96:00:cf:63:59:e5:e5:50:9c:57:5e:
                    b1:91:66:ec:d3:6e:0e:12:51:dc:c7:28:c0:26:42:
                    34:c9:16:e6:ef:4c:6c:34:8b:a8:20:61:6f:21:82:
                    7b:87:af:b3:f8:1e:e4:ad:e8:6a:73:75:72:d1:ad:
                    83:d3:50:bc:89:77:8c:4e:cf:c0:ee:9e:0c:11:20:
                    f1:ee:89:ac:ac:95:c9:66:c3:5c:74:d0:98:80:3c:
                    6f:d2:44:68:b0:bc:fd:44:99:42:ce:f6:e5:b4:d8:
                    b0:d8:10:ac:86:cd:f0:56:4c:bc:3e:39:e6:a3:0e:
                    bc:a2:4a:4b:e8:01:99:60:63:68:8c:9e:3b:80:82:
                    69:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FB:CD:1D:1A:17:F4:69:20:0E:AA:16:58:FB:E6:B6:31:76:3F:6B
            X509v3 Authority Key Identifier:
                keyid:EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/c502204650b0a72c2cc64eb2d05785fd3824afc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/444e0076eea4611dce8c3e39bffef12743fb4711.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:10:62:2c:9a:92:b0:ce:e8:bd:16:6c:55:5b:50:c6:e0:94:
         e1:eb:59:16:78:4f:bf:7f:45:b3:ad:7a:26:4f:b1:ab:e9:aa:
         a3:0d:12:09:40:06:97:8b:18:29:1f:20:45:ec:a6:97:e0:17:
         24:a5:5e:d1:9e:5b:b6:8d:aa:18:96:63:fc:89:02:4d:fb:1b:
         97:dd:70:08:bd:eb:a4:40:75:3e:33:d2:18:bd:90:f7:a8:fd:
         2a:a7:4a:8a:b8:4c:c7:7b:a7:69:91:68:14:e7:e7:aa:90:9e:
         80:23:0a:84:d1:bf:75:00:cf:67:a1:99:69:37:77:10:77:f5:
         2c:16:d9:80:18:a7:65:e9:eb:42:e7:7e:d5:8d:38:61:9b:9a:
         09:a3:b0:64:df:d7:20:e4:8d:4a:ee:73:9a:09:30:8d:8b:ab:
         32:40:d0:37:c3:c4:31:d8:62:b1:5b:52:79:40:fa:7b:99:f5:
         6b:23:4c:6d:82:4a:be:da:26:ba:b6:bb:ce:ee:0c:ab:9e:ab:
         bb:ca:1f:46:be:75:7c:aa:30:ab:12:f7:71:9c:36:1b:0a:30:
         99:60:56:57:92:dc:3b:39:2d:17:cc:58:e7:c6:fa:0e:1c:ef:
         c6:a4:88:c0:f8:de:18:10:93:fc:6a:4d:74:16:1b:8a:60:d6:
         25:3f:66:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:11 2024 by rpki-client on console-ams.rpki-client.org