Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3afd04d6-65fb-4696-9dfd-8c9d454eca33/56a047f03353bd25d1f40a8d0615b856dcd7e5b6.roa
File:                     56a047f03353bd25d1f40a8d0615b856dcd7e5b6.roa (raw, json)
Hash identifier:          f2qsdVIfiSezLAqP4NN5ogQcHKbotgqg2RKGV46JMJA=
Subject key identifier:   F2:45:61:A4:6B:E7:71:C1:DB:3F:05:39:BB:A1:95:0F:E7:E2:4E:E4
Certificate issuer:       /CN=ab38d3b0b54739da9c9e02fc4e54da5435862419
Certificate serial:       0D495B
Authority key identifier: E6:76:58:6B:86:97:F4:DB:8E:12:FB:17:EC:F5:9F:72:C6:9A:39:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab38d3b0b54739da9c9e02fc4e54da5435862419.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3afd04d6-65fb-4696-9dfd-8c9d454eca33/56a047f03353bd25d1f40a8d0615b856dcd7e5b6.roa
Signing time:             Wed 24 Mar 2021 14:46:23 +0000
ROA not before:           Wed 24 Mar 2021 14:46:23 +0000
ROA not after:            Tue 24 Mar 2026 14:46:23 +0000
asID:                     262183
IP address blocks:        190.93.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870747 (0xd495b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab38d3b0b54739da9c9e02fc4e54da5435862419
        Validity
            Not Before: Mar 24 14:46:23 2021 GMT
            Not After : Mar 24 14:46:23 2026 GMT
        Subject: CN=56a047f03353bd25d1f40a8d0615b856dcd7e5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a3:1e:d2:6a:d8:65:1f:26:29:54:6e:41:57:
                    50:b1:dd:21:ff:29:b3:2b:fd:37:36:c3:d7:4a:bc:
                    ac:77:0c:cf:3b:f3:cb:a4:af:bb:f8:6a:b7:cb:4a:
                    d2:b8:16:51:18:75:2e:56:13:d4:3f:08:c6:b4:8f:
                    72:2b:70:dd:c5:fc:1b:6c:94:a8:77:92:d5:4e:14:
                    89:0d:c2:84:01:5f:f8:29:b2:ee:c7:37:9f:99:81:
                    47:6e:7a:27:94:84:f8:dc:35:3b:28:df:cf:ea:f8:
                    d6:9c:94:83:63:fa:55:42:4a:58:7c:87:f4:8a:93:
                    5b:f1:65:db:87:55:d1:06:91:b4:b3:e0:3a:e5:18:
                    5d:b4:41:9d:a1:1a:41:71:91:7e:f1:a4:7e:8a:62:
                    b5:98:67:87:23:20:46:88:52:ce:f8:21:d8:03:2b:
                    16:93:92:dc:2c:1f:77:90:87:0d:8a:68:d5:9b:eb:
                    6b:08:04:4c:bb:a3:71:94:74:03:ce:68:ee:0d:d8:
                    1f:e0:55:5d:da:60:60:e4:c4:5f:ba:3a:61:28:0d:
                    50:c5:0f:27:2e:2f:7d:d9:d6:db:d4:9b:ee:7a:b8:
                    7c:85:66:50:54:c5:f3:67:15:97:65:2c:ff:ea:85:
                    d7:a0:3c:35:89:b5:f6:0f:39:45:67:07:08:68:ad:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:45:61:A4:6B:E7:71:C1:DB:3F:05:39:BB:A1:95:0F:E7:E2:4E:E4
            X509v3 Authority Key Identifier:
                keyid:E6:76:58:6B:86:97:F4:DB:8E:12:FB:17:EC:F5:9F:72:C6:9A:39:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab38d3b0b54739da9c9e02fc4e54da5435862419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3afd04d6-65fb-4696-9dfd-8c9d454eca33/56a047f03353bd25d1f40a8d0615b856dcd7e5b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3afd04d6-65fb-4696-9dfd-8c9d454eca33/ab38d3b0b54739da9c9e02fc4e54da5435862419.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:a2:7d:3f:73:f9:c8:7f:d3:b5:5c:a4:f7:65:a9:62:d3:9f:
         6d:5d:13:78:f5:33:ae:80:ea:de:59:7f:5e:2b:81:14:e2:02:
         23:38:fe:c1:e8:23:30:7e:24:9b:dc:63:86:15:d0:fa:90:11:
         f8:98:c1:e4:17:45:4f:51:e1:dc:f0:71:76:b7:49:31:ed:26:
         ea:bd:25:58:26:68:09:d5:d2:1f:d7:f4:c2:e1:ae:17:5e:11:
         e3:dc:3d:31:3c:fb:65:64:f6:52:f7:b6:83:fe:c4:5b:02:ea:
         e8:ac:f4:1b:c4:c9:d5:78:24:40:2e:d6:6f:ae:68:35:d0:7e:
         67:0f:85:c5:b2:20:4f:c0:e5:cb:e4:8a:ae:10:cf:e4:45:1c:
         80:b4:89:d5:01:c4:da:64:0a:cb:86:ad:b9:c7:91:81:3e:a1:
         21:c9:34:b0:3e:9d:e1:50:73:31:26:a4:54:0a:78:c2:42:9a:
         fc:da:65:9e:2f:2e:3a:42:09:67:68:e7:33:8e:4f:bb:0a:af:
         cb:32:4c:5a:87:ab:25:bd:3b:55:8b:bb:c8:28:fb:f1:02:2a:
         cb:19:21:00:12:0b:cc:cc:8e:32:d4:b3:16:de:ca:74:77:3e:
         65:06:6d:db:bd:6b:69:7a:29:7f:ed:99:68:49:70:3c:ec:b3:
         40:b1:87:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org