Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/0778e0428742abce545dc7b189e83ec8c3044e78.roa
File:                     0778e0428742abce545dc7b189e83ec8c3044e78.roa (raw, json)
Hash identifier:          HJ4mAoXOLx/HPBVviMPhBK2VxiL20foCVO50OP6jlew=
Subject key identifier:   E6:2A:F7:D6:35:3E:CC:72:83:66:38:53:2E:12:21:ED:31:20:54:EE
Certificate issuer:       /CN=4ba834aeb520331d21c768e13e7564e705630d2c
Certificate serial:       0DD558
Authority key identifier: 4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/0778e0428742abce545dc7b189e83ec8c3044e78.roa
Signing time:             Wed 24 Mar 2021 14:30:47 +0000
ROA not before:           Wed 24 Mar 2021 14:30:47 +0000
ROA not after:            Tue 24 Mar 2026 14:30:47 +0000
asID:                     52347
IP address blocks:        186.177.228.0/22 maxlen: 22
                          186.177.232.0/21 maxlen: 21
                          186.177.240.0/24 maxlen: 24
                          190.93.40.0/23 maxlen: 24
                          190.93.43.0/24 maxlen: 24
                          190.111.56.0/24 maxlen: 24
                          190.111.60.0/24 maxlen: 24
                          190.111.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906584 (0xdd558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba834aeb520331d21c768e13e7564e705630d2c
        Validity
            Not Before: Mar 24 14:30:47 2021 GMT
            Not After : Mar 24 14:30:47 2026 GMT
        Subject: CN=0778e0428742abce545dc7b189e83ec8c3044e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:c0:0c:e6:4b:47:79:0d:03:50:51:f3:d2:
                    54:e0:c2:b0:e2:c0:5d:e8:0c:55:cb:dd:73:4c:41:
                    8f:a8:bb:ab:ca:5d:6a:da:a2:5a:59:27:59:25:4d:
                    69:20:ca:02:df:03:82:67:81:93:35:7a:0e:56:40:
                    b9:06:d4:a0:ea:e7:99:d1:5d:55:b3:db:8f:d0:d3:
                    f3:02:ba:8c:aa:e7:ac:fd:48:f4:7e:33:3d:39:ff:
                    ca:cd:20:c0:b8:74:cb:b2:0d:31:58:82:11:da:31:
                    46:29:e8:e8:d7:58:67:5a:f1:a3:35:ad:f5:d7:dd:
                    51:d0:24:a2:2f:1d:38:e9:16:2a:3c:5d:bf:17:6f:
                    ba:b4:33:10:7d:5d:10:04:93:b2:7c:d7:7e:74:17:
                    35:b9:16:f8:1d:20:91:d3:38:79:90:01:73:bb:2a:
                    e5:00:2e:14:bb:57:94:9b:ed:a8:ce:8b:8e:b3:b2:
                    fd:4a:9c:63:ca:5f:83:f5:0c:90:3c:a8:d7:bd:13:
                    ef:83:78:e4:4b:ff:c2:79:92:e0:d1:6b:70:38:9c:
                    34:f7:12:8f:4c:67:64:8d:d5:ef:32:9c:bd:2e:63:
                    58:40:28:11:1c:96:17:b5:7d:74:f3:ae:1f:0f:3d:
                    35:f9:48:c7:b4:49:44:3f:1e:34:5e:1c:8b:56:63:
                    1f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2A:F7:D6:35:3E:CC:72:83:66:38:53:2E:12:21:ED:31:20:54:EE
            X509v3 Authority Key Identifier:
                keyid:4C:ED:9B:B7:64:90:46:BE:80:01:36:9C:9A:98:4E:BD:F7:E1:78:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba834aeb520331d21c768e13e7564e705630d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/0778e0428742abce545dc7b189e83ec8c3044e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4281a14e-b6a5-4c89-b4ba-0575008dac13/4ba834aeb520331d21c768e13e7564e705630d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.177.228.0-186.177.240.255
                  190.93.40.0/23
                  190.93.43.0/24
                  190.111.56.0/24
                  190.111.60.0/24
                  190.111.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:a5:b5:af:91:a9:9d:9c:6c:7f:33:4d:7e:4f:27:b0:f5:30:
         73:77:9c:6c:92:78:64:5e:da:54:39:76:9c:b1:a5:4c:f2:bb:
         3e:2f:dc:b6:8b:47:4a:5b:0b:08:ad:dd:26:7a:0a:77:88:00:
         4a:ef:2e:03:0c:49:44:02:c2:fd:61:60:69:4c:59:19:08:85:
         8b:30:0a:c0:48:0d:5b:7a:14:68:26:12:66:d6:c6:1b:d6:f2:
         0d:e0:8b:7e:5b:a3:ac:56:3d:48:38:b8:cc:86:94:58:87:f2:
         23:db:f6:17:a9:7b:60:08:5b:12:99:cb:45:62:86:73:0e:27:
         06:09:ee:79:ce:13:b6:7f:a7:fa:24:ec:94:e2:1d:bd:97:81:
         b8:45:bf:5e:a2:ce:7a:75:5f:ba:b5:37:0f:f2:f2:bf:91:4c:
         36:ed:f2:69:7d:77:b2:ad:79:23:a5:31:3a:f8:16:af:88:37:
         07:e0:8a:2e:e2:0b:7f:97:63:1b:a6:a1:2c:5d:87:b3:56:aa:
         9e:a8:5e:40:11:6c:46:b1:53:7c:2a:c3:21:33:5c:51:16:25:
         4b:25:56:a2:94:e7:c2:5e:a8:8c:1a:7a:0c:99:59:94:85:1e:
         26:3e:66:3e:1f:82:1b:ea:e0:13:e1:19:ef:39:2c:6c:07:99:
         2c:00:2a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org