Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/dbc9badc27b4df8b240b26012ed1a4b9a20ec038.roa
File:                     dbc9badc27b4df8b240b26012ed1a4b9a20ec038.roa (raw, json)
Hash identifier:          bPEElzwUcbdRYQJ3jYY1B6E4REwJH29IOzC79dZkzDA=
Subject key identifier:   8E:04:D1:3B:EE:92:DE:AC:7F:7A:FA:24:F0:BB:EE:5D:41:D1:4C:A7
Certificate issuer:       /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial:       19E65C
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/dbc9badc27b4df8b240b26012ed1a4b9a20ec038.roa
Signing time:             Wed 03 Aug 2022 14:13:19 +0000
ROA not before:           Wed 03 Aug 2022 03:00:00 +0000
ROA not after:            Sat 03 Aug 2024 03:00:00 +0000
asID:                     3257
IP address blocks:        190.151.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1697372 (0x19e65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
        Validity
            Not Before: Aug  3 03:00:00 2022 GMT
            Not After : Aug  3 03:00:00 2024 GMT
        Subject: CN=dbc9badc27b4df8b240b26012ed1a4b9a20ec038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c6:84:f1:c9:c4:88:24:ab:ff:d9:de:bc:34:
                    12:ff:07:5d:78:c5:4b:be:d2:74:d3:26:1d:f0:e4:
                    ef:e6:b4:1d:03:f2:35:5f:c1:0e:c0:73:f5:0d:4a:
                    5b:22:ad:0b:df:9d:cc:f9:1a:a4:f2:33:b9:f4:c6:
                    45:9b:b2:5a:47:17:d1:d1:0d:c8:36:eb:07:9a:67:
                    a8:6a:2b:f1:ab:22:e6:01:0e:f7:85:b8:bf:a9:1b:
                    95:22:b9:0e:ad:13:d0:d7:60:05:d1:e0:fb:0f:16:
                    9c:49:5f:ab:53:dd:6f:93:4e:32:cc:b9:70:64:9c:
                    90:1f:26:24:55:61:a5:4b:f4:45:a6:2f:26:75:1a:
                    e4:00:7e:7f:46:31:49:f2:7c:e1:6f:16:85:1d:88:
                    2f:6a:47:9b:70:56:c7:59:03:76:b7:c5:76:19:35:
                    70:e9:64:5f:a4:b3:14:11:93:f7:d5:0e:fd:e7:cd:
                    39:c3:90:db:27:d7:bb:72:21:5c:1e:23:25:19:b7:
                    20:0c:91:8e:d7:56:8a:c1:be:aa:03:f4:81:9e:86:
                    8f:42:f8:5f:bc:46:49:cd:dd:b8:01:87:17:72:80:
                    3e:e0:67:c5:c6:2a:2d:eb:e4:a9:69:e1:97:23:3f:
                    ed:57:71:4e:5a:31:45:2e:f4:db:75:a3:a1:3b:63:
                    be:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:04:D1:3B:EE:92:DE:AC:7F:7A:FA:24:F0:BB:EE:5D:41:D1:4C:A7
            X509v3 Authority Key Identifier:
                keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/dbc9badc27b4df8b240b26012ed1a4b9a20ec038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:db:d0:86:4f:9a:f6:36:e9:be:83:5b:57:e9:61:f5:4a:44:
         8c:38:35:b9:3e:c9:9d:e7:10:4d:a0:4d:43:e5:86:3c:2c:33:
         ee:16:6c:68:e9:27:7a:1e:d9:b4:6c:5e:dc:c4:40:54:62:b7:
         3c:4c:78:d0:04:bb:4b:a9:9c:6b:47:8f:90:d4:b7:9f:f3:96:
         8d:e5:b9:be:0d:16:89:9c:5c:2c:bd:22:6d:b4:98:2e:17:4b:
         e7:93:5e:9f:7d:fe:bc:cf:0a:04:ff:3c:00:c3:e0:4c:6b:46:
         80:95:f7:1d:85:fa:95:06:51:70:35:4c:af:fb:6a:24:cc:bd:
         c8:24:e3:d1:d8:96:be:08:e3:f1:a1:57:c9:dc:d1:49:60:58:
         2f:fc:84:dc:ce:1c:8a:2b:07:27:b9:28:b4:d8:2d:62:5e:90:
         45:8c:8b:17:a5:60:4c:65:1a:3a:b9:55:18:2f:8d:07:0a:7c:
         59:99:a1:6f:52:21:c8:74:cc:5b:e8:0b:ac:1c:b7:0b:b0:78:
         e5:6e:f8:fa:a0:21:47:c2:ab:ff:15:dc:5a:fd:70:3d:04:e9:
         60:de:70:6f:22:4c:ad:ca:e6:dc:e0:b1:01:16:09:13:b2:7c:
         65:7b:a0:df:42:27:90:f3:8a:01:98:78:31:f5:9c:81:3c:d0:
         8a:22:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org