Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/ab9ec4583b91a5818993c06acda25aba94c7df11.roa
File:                     ab9ec4583b91a5818993c06acda25aba94c7df11.roa (raw, json)
Hash identifier:          8VUpkUg8PAQ3iKF5Uq4m0Waxwg+VpuLknU0isFU/DlU=
Subject key identifier:   45:46:B1:D3:46:EE:03:61:92:3C:18:CF:CC:80:4B:7E:B4:44:F9:AD
Certificate issuer:       /CN=1c19bb58bf30a6b5633338f01c9003f7c46c52e6
Certificate serial:       086861
Authority key identifier: D8:D1:38:88:F9:CA:FE:3A:32:13:BE:AD:07:4E:F1:CB:36:16:9A:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/ab9ec4583b91a5818993c06acda25aba94c7df11.roa
Signing time:             Wed 24 Mar 2021 14:34:03 +0000
ROA not before:           Wed 24 Mar 2021 14:34:03 +0000
ROA not after:            Tue 24 Mar 2026 14:34:03 +0000
asID:                     269949
IP address blocks:        190.83.124.0/22 maxlen: 22
                          2803:eae0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551009 (0x86861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c19bb58bf30a6b5633338f01c9003f7c46c52e6
        Validity
            Not Before: Mar 24 14:34:03 2021 GMT
            Not After : Mar 24 14:34:03 2026 GMT
        Subject: CN=ab9ec4583b91a5818993c06acda25aba94c7df11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:c9:19:62:8c:89:f6:46:80:6d:79:49:16:
                    51:dc:2d:22:84:1c:7d:65:0d:a7:fa:44:1c:71:34:
                    75:56:fd:2b:ef:ad:78:3f:f9:2f:72:be:f3:12:de:
                    02:35:ad:a1:66:ab:77:f7:b6:a6:4b:2f:05:c4:d3:
                    b2:4f:29:e5:f9:87:ac:6e:81:b3:98:5a:6a:4d:47:
                    2b:98:62:e3:a2:94:88:85:48:95:85:9d:f5:cf:bc:
                    42:06:67:9f:7f:e4:fc:18:05:96:db:f7:fe:48:a9:
                    5c:de:ca:26:45:ee:34:dd:4f:26:21:f0:ea:be:0b:
                    da:d1:ee:af:b5:ef:10:f0:cf:62:51:40:c7:cc:cd:
                    9c:9b:c9:24:c3:55:a7:cb:7e:a8:45:e2:4a:89:bc:
                    e2:2c:b1:1b:72:5d:53:7b:76:5d:eb:e4:9f:bc:d7:
                    bf:c9:bf:fa:34:fe:39:98:65:31:93:ba:b6:12:90:
                    be:94:a2:ed:c4:47:4a:eb:6d:82:91:bb:85:3e:a8:
                    a9:82:03:a2:b2:31:88:c9:33:5a:a0:2e:94:cf:d4:
                    0c:ee:c8:b8:c4:b2:a0:ba:26:9f:ea:b6:77:80:9d:
                    a1:a8:50:79:80:ec:01:4c:33:b5:0a:2e:1c:a7:5e:
                    f9:e5:ed:56:b6:4f:f9:e6:84:0f:aa:5c:fe:1e:b6:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:46:B1:D3:46:EE:03:61:92:3C:18:CF:CC:80:4B:7E:B4:44:F9:AD
            X509v3 Authority Key Identifier:
                keyid:D8:D1:38:88:F9:CA:FE:3A:32:13:BE:AD:07:4E:F1:CB:36:16:9A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/ab9ec4583b91a5818993c06acda25aba94c7df11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.124.0/22
                IPv6:
                  2803:eae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:97:a2:1b:f0:f2:37:3a:37:90:32:48:fb:7a:91:8f:78:e0:
         1e:8e:ca:13:18:e9:4d:55:e0:35:89:6c:d5:a5:8d:92:57:1f:
         17:9f:f8:32:db:0f:95:aa:49:15:a9:69:bc:2e:47:31:4f:35:
         71:cf:ba:cd:b6:c7:d7:86:c7:24:d9:81:ec:4b:df:f4:5f:49:
         7c:ae:2c:15:eb:08:20:a8:14:90:cf:cd:7c:95:cb:62:f6:b5:
         ef:ff:f5:41:9a:89:ed:79:16:dc:35:97:26:d3:5a:7b:2f:4a:
         7a:b5:b6:5b:07:d6:29:44:84:ec:39:7e:31:87:f3:11:b0:68:
         eb:d0:52:a2:6a:6a:7d:00:f1:02:49:86:ab:23:0f:db:ec:27:
         f2:48:20:e2:c0:28:bd:f1:8f:e9:6b:65:b0:e7:e1:fb:3e:a0:
         32:df:c9:0d:a0:75:93:93:56:b1:60:34:2f:75:29:2d:eb:98:
         a0:10:dd:04:96:78:29:44:6c:34:e3:49:53:17:aa:f3:27:4e:
         3e:d3:49:56:12:df:07:3d:8b:4b:9f:5e:92:01:66:09:d9:37:
         fe:5f:0d:f6:18:24:3f:0a:71:34:cc:e1:e2:03:8f:c5:ea:a3:
         33:f0:bf:34:d6:54:ce:a7:70:29:fa:31:9e:36:bf:9d:64:93:
         21:35:11:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:30 2024 by rpki-client on console-fra.rpki-client.org