Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/6a3e179ad27013ae027f05afaa6c245720f18700.roa
File:                     6a3e179ad27013ae027f05afaa6c245720f18700.roa (raw, json)
Hash identifier:          D5PqD5csmKBP0XLVL1z2cqHFbXQmexyRF3wmt9/t0Nw=
Subject key identifier:   A8:A9:83:2B:F3:DB:31:AF:04:98:6E:C9:EA:53:59:DA:9D:8F:79:4F
Certificate issuer:       /CN=d46b4ca0a9fad10842355c22e4bfcc2f877fdc28
Certificate serial:       0D0F1B
Authority key identifier: 15:44:36:65:79:46:ED:7A:C6:C8:7D:0D:CA:A1:07:76:9C:69:28:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46b4ca0a9fad10842355c22e4bfcc2f877fdc28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/6a3e179ad27013ae027f05afaa6c245720f18700.roa
Signing time:             Wed 24 Mar 2021 22:50:32 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     263728
IP address blocks:        131.72.232.0/24 maxlen: 24
                          131.72.233.0/24 maxlen: 24
                          131.72.234.0/24 maxlen: 24
                          131.72.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855835 (0xd0f1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46b4ca0a9fad10842355c22e4bfcc2f877fdc28
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=6a3e179ad27013ae027f05afaa6c245720f18700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:87:70:8d:00:ad:1d:0e:e2:83:bc:94:2d:da:
                    e2:d6:a4:c2:ae:04:a9:be:4e:c9:f6:37:4b:04:68:
                    c9:8c:b3:a7:b7:79:2d:eb:3a:09:4b:4a:cc:fe:a7:
                    a9:e0:cc:9e:88:17:17:d6:90:37:ad:75:67:a4:4e:
                    f6:35:2f:81:cd:c3:cf:27:db:d0:38:1d:db:e4:9a:
                    a1:f0:eb:c8:62:ee:f5:78:4f:d9:c4:ea:8b:42:e4:
                    7a:43:19:33:14:a5:be:ca:b9:01:6c:41:27:a2:4b:
                    b4:4d:36:c3:2c:2d:39:f6:4c:84:f9:e7:c0:f4:d5:
                    ff:51:46:3f:fd:a0:78:43:36:08:c0:07:7d:1e:d9:
                    eb:40:84:c6:12:06:99:b4:d2:78:bc:c2:e6:51:b7:
                    1c:ac:9c:25:13:4e:35:44:e6:81:13:88:01:99:b6:
                    77:5d:8d:61:0d:fd:10:fd:f0:a8:8a:00:dc:2f:9e:
                    60:1b:fe:42:60:21:ee:c3:e8:76:d5:9f:7f:db:66:
                    29:2f:a3:84:78:b6:f8:99:12:86:e1:59:c0:3d:19:
                    c2:d6:49:d0:96:09:35:81:3d:97:7d:32:7f:71:8a:
                    5d:7c:e3:4b:e3:4c:9a:57:eb:9f:ae:7c:43:c7:bb:
                    91:ce:22:14:39:54:7b:98:c1:2d:80:71:4e:86:f4:
                    95:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A9:83:2B:F3:DB:31:AF:04:98:6E:C9:EA:53:59:DA:9D:8F:79:4F
            X509v3 Authority Key Identifier:
                keyid:15:44:36:65:79:46:ED:7A:C6:C8:7D:0D:CA:A1:07:76:9C:69:28:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46b4ca0a9fad10842355c22e4bfcc2f877fdc28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/6a3e179ad27013ae027f05afaa6c245720f18700.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3cd76adc-676f-4a60-ad0d-231468e546b2/d46b4ca0a9fad10842355c22e4bfcc2f877fdc28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:a2:4a:6b:80:cf:4d:c5:c6:64:94:52:0f:b0:04:45:63:e0:
         ec:12:de:15:5c:c6:a1:c6:0f:b6:45:75:84:c7:43:4f:6e:9f:
         5d:0e:ec:92:6b:a9:7e:5c:b3:b9:3a:1b:fd:33:fa:8f:aa:c5:
         86:52:6a:c9:04:81:b0:db:57:63:7b:1a:08:92:4a:88:61:cc:
         2f:3b:3a:bc:3a:77:56:08:49:7a:fc:80:65:25:4f:16:cc:81:
         68:08:e2:9b:f7:14:e1:89:fc:13:a7:1d:98:bc:17:b4:65:4c:
         6f:f7:b0:b8:b8:12:11:b9:21:fd:95:94:55:49:5c:2b:70:55:
         ae:bd:7b:5b:76:45:fc:8d:07:2b:c8:3f:24:71:f0:d7:d8:e0:
         79:f5:6e:59:ac:f0:a9:fa:e0:8e:a6:ce:9d:51:83:68:5a:fd:
         ad:cf:92:3c:0b:a6:d2:80:ac:f2:3f:34:db:a7:dc:7a:e8:57:
         a4:1e:75:9c:10:af:5f:b4:9a:02:59:a0:5b:42:67:0f:2f:65:
         3a:20:33:8d:d6:89:d6:22:ac:e4:db:e3:87:38:34:a7:a9:38:
         e3:ff:05:3f:aa:45:33:b1:6c:63:21:d3:66:64:7a:46:76:aa:
         77:cb:13:e2:48:84:cf:62:07:f6:34:5b:dc:bf:e8:65:15:ce:
         0c:3a:9f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:19 2024 by rpki-client on console-ams.rpki-client.org