Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/dff332ba7d9371897613cb4fb2bfd00ba88be9b6.roa
File:                     dff332ba7d9371897613cb4fb2bfd00ba88be9b6.roa (raw, json)
Hash identifier:          ZcJmeFmR0bgBFKqh0RptZ3qn3PX9HenZ0IEObXYG3ps=
Subject key identifier:   FC:71:E7:17:BE:1D:14:11:46:E6:98:75:31:4F:5D:81:2A:68:69:D5
Certificate issuer:       /CN=444e0076eea4611dce8c3e39bffef12743fb4711
Certificate serial:       0D60A8
Authority key identifier: EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/dff332ba7d9371897613cb4fb2bfd00ba88be9b6.roa
Signing time:             Mon 31 Jan 2022 16:59:34 +0000
ROA not before:           Mon 31 Jan 2022 03:00:00 +0000
ROA not after:            Wed 31 Jan 2024 03:00:00 +0000
asID:                     272030
IP address blocks:        189.90.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876712 (0xd60a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444e0076eea4611dce8c3e39bffef12743fb4711
        Validity
            Not Before: Jan 31 03:00:00 2022 GMT
            Not After : Jan 31 03:00:00 2024 GMT
        Subject: CN=dff332ba7d9371897613cb4fb2bfd00ba88be9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:e7:ce:e4:ad:db:ec:90:0e:f1:a1:75:3d:
                    5d:e1:e8:44:85:df:8d:31:8d:3a:a5:ce:10:08:93:
                    bb:76:0d:52:d3:eb:d9:59:ef:a9:dc:19:ec:00:da:
                    54:df:b4:60:0b:be:42:24:e0:6a:80:0c:c2:f8:1c:
                    00:29:3e:5d:16:02:4f:26:30:66:ab:e4:6e:d2:1a:
                    1a:27:65:bd:36:1f:39:00:fc:1d:a2:9e:eb:76:9b:
                    5f:94:ca:d3:43:0e:82:a5:f4:0c:a8:3d:06:8b:07:
                    ec:4e:c1:61:91:3a:f6:89:0e:a2:0b:09:36:51:1c:
                    aa:96:4d:8a:95:3d:5d:e2:3c:3e:9b:cb:47:97:a4:
                    c9:97:a6:36:2f:85:6f:9e:1c:9f:76:16:5d:02:28:
                    86:dd:ae:7a:19:62:76:0c:1c:f0:5f:6f:65:8b:9d:
                    48:65:07:0b:8d:f7:e0:57:71:f4:d8:cd:12:ac:ce:
                    75:09:13:c2:de:72:86:c1:03:53:5c:70:35:a2:56:
                    37:f5:27:3c:5b:68:25:dd:54:e2:64:63:bb:92:83:
                    e8:0f:31:4b:34:b6:32:f7:eb:9d:34:fb:7f:9e:f3:
                    84:3a:81:39:8c:03:ed:db:a0:e9:ba:e2:17:06:79:
                    f9:d0:e4:82:a2:46:42:65:d3:d0:f5:ad:7c:d1:d5:
                    c8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:71:E7:17:BE:1D:14:11:46:E6:98:75:31:4F:5D:81:2A:68:69:D5
            X509v3 Authority Key Identifier:
                keyid:EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/dff332ba7d9371897613cb4fb2bfd00ba88be9b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/444e0076eea4611dce8c3e39bffef12743fb4711.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:74:7f:fa:8c:3d:38:50:e8:c0:cc:c9:61:63:52:63:02:9a:
         6c:68:56:af:8d:b3:e9:34:ad:aa:9a:a7:2d:9c:aa:ef:66:0d:
         55:3f:6e:de:9d:e0:c8:ea:30:03:f3:8f:57:e9:72:2a:51:cf:
         f8:42:99:b7:65:3b:ac:8c:d3:17:cc:68:7f:87:9c:0b:0a:83:
         50:a7:21:a8:78:47:f1:00:2c:96:6a:c2:68:bc:78:e7:be:b0:
         0e:dc:2f:80:a4:69:bc:30:9b:0c:3f:4a:26:51:67:af:32:99:
         8f:66:9d:e4:f7:a3:7d:58:9a:12:f3:4e:97:6f:a1:a3:b4:2a:
         47:f6:0d:a3:da:df:c0:31:85:e6:fa:c4:82:a5:09:52:f2:d0:
         52:7e:f3:5e:72:5f:f4:43:1b:de:cf:f1:3c:72:7b:37:89:9e:
         9f:8f:6b:07:4f:89:87:6c:af:9e:db:6b:99:48:b9:95:53:bb:
         ab:2c:df:08:b6:4b:e2:43:d6:96:21:d2:50:6d:31:61:19:a8:
         5d:12:95:ed:8c:cb:03:e4:21:05:1c:fe:7d:b0:f3:d2:89:24:
         63:d0:89:fb:78:6f:0d:6c:ae:a3:99:92:93:8f:38:e1:3b:af:
         06:c8:bb:e1:9e:45:c5:9a:db:54:85:fa:45:ad:bf:d0:90:2e:
         7d:9c:dd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org