Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4759e9ac-b2e4-43cb-a441-c537deb13c1d/1e6b3665017936cae64122c0a2c44198946fb77f.roa
File:                     1e6b3665017936cae64122c0a2c44198946fb77f.roa (raw, json)
Hash identifier:          EoFUV0DV28cX/JCr8ixeouZ4E8J0Fua0W5Pr82jKXy4=
Subject key identifier:   E0:AB:51:48:3E:93:5E:BC:AB:DA:08:4A:52:42:87:44:2F:38:6F:96
Certificate issuer:       /CN=a73c2640b87c02edde7ff9424425bd136edffe32
Certificate serial:       0CFD8A
Authority key identifier: 65:6D:DE:B4:82:27:25:10:6D:0E:D3:ED:EE:78:9C:AE:19:D3:CF:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a73c2640b87c02edde7ff9424425bd136edffe32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4759e9ac-b2e4-43cb-a441-c537deb13c1d/1e6b3665017936cae64122c0a2c44198946fb77f.roa
Signing time:             Wed 24 Mar 2021 14:37:20 +0000
ROA not before:           Wed 24 Mar 2021 14:37:20 +0000
ROA not after:            Tue 24 Mar 2026 14:37:20 +0000
asID:                     262241
IP address blocks:        168.195.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851338 (0xcfd8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73c2640b87c02edde7ff9424425bd136edffe32
        Validity
            Not Before: Mar 24 14:37:20 2021 GMT
            Not After : Mar 24 14:37:20 2026 GMT
        Subject: CN=1e6b3665017936cae64122c0a2c44198946fb77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8b:ce:21:9d:0d:8e:07:e2:64:4c:e2:26:93:
                    22:9b:d1:9c:27:16:51:b5:7c:ff:da:ae:2a:79:b7:
                    ca:84:48:ba:e8:15:3f:1b:32:9f:19:08:26:9b:fa:
                    43:23:14:ef:c5:71:cb:d9:ba:a2:25:6b:dd:cd:39:
                    7e:94:31:54:f1:f8:6d:39:61:2a:eb:c6:a4:41:58:
                    6e:c4:55:f2:10:9e:ae:fb:2c:a2:61:23:e5:aa:08:
                    93:82:ec:c2:7c:df:67:99:50:0a:87:73:fb:b3:05:
                    42:74:f5:16:24:c6:2c:18:96:cf:cc:26:85:7a:12:
                    7f:b7:1e:cc:d9:6f:ed:78:33:4a:e7:26:d7:3e:77:
                    28:47:bf:03:51:97:d8:af:e5:17:6e:c7:d6:5f:4e:
                    61:1c:9e:97:a0:bd:21:dd:52:65:fb:c7:f1:4e:b7:
                    0d:b7:18:26:39:59:f9:d0:d7:d4:74:51:22:ae:d4:
                    59:21:97:24:92:22:9a:de:bb:dd:8d:ae:e1:58:76:
                    e2:e6:be:1e:44:5d:b4:b7:19:6c:c1:ef:2d:36:b4:
                    ed:60:93:0e:a4:ed:ee:bf:f2:74:e4:28:cc:c6:3a:
                    24:a2:2e:9f:f2:4c:d5:9e:08:0a:f3:7f:8b:ab:b3:
                    89:6b:b6:cf:93:18:bb:a8:95:f9:1c:c8:cf:62:90:
                    f5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AB:51:48:3E:93:5E:BC:AB:DA:08:4A:52:42:87:44:2F:38:6F:96
            X509v3 Authority Key Identifier:
                keyid:65:6D:DE:B4:82:27:25:10:6D:0E:D3:ED:EE:78:9C:AE:19:D3:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a73c2640b87c02edde7ff9424425bd136edffe32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4759e9ac-b2e4-43cb-a441-c537deb13c1d/1e6b3665017936cae64122c0a2c44198946fb77f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4759e9ac-b2e4-43cb-a441-c537deb13c1d/a73c2640b87c02edde7ff9424425bd136edffe32.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:58:78:15:3a:6a:95:b8:0c:ad:e5:ab:a7:16:ec:83:6d:19:
         c2:3d:44:72:8b:56:38:ae:f4:06:66:28:0b:3d:a3:52:02:b0:
         dd:47:92:79:33:0a:bf:ec:e7:1a:7a:f1:d4:e9:43:be:f1:17:
         d3:46:cb:5a:b5:98:45:99:4e:40:94:f4:72:fd:1f:0b:e2:1a:
         4c:11:16:c4:37:4d:86:10:75:44:2f:81:59:b9:ab:f6:e2:d9:
         0d:ca:03:ab:3f:ad:0e:f3:56:5e:53:97:1b:71:af:4b:72:4c:
         90:05:cf:7d:58:f2:e3:7c:fe:eb:6f:e1:e7:ff:9d:9d:88:d1:
         d9:26:2e:d8:ce:3f:03:cb:69:6a:22:83:25:64:7e:e8:b5:c9:
         0b:dc:05:8c:15:d3:54:27:10:5d:d3:af:9a:9c:54:72:e5:f4:
         91:61:1f:66:07:47:bd:9b:07:37:f7:66:21:e3:90:3d:15:6d:
         83:7d:7a:1b:37:2a:43:c4:3d:0b:d9:63:12:0a:27:29:d3:dd:
         44:3f:dd:63:97:29:01:83:bf:d2:33:7b:e2:b8:ed:f5:3f:67:
         7a:ba:67:89:24:c9:3f:9c:85:80:16:ef:cc:c1:5c:d7:69:eb:
         26:66:f3:8a:a4:27:f0:bf:8e:90:85:8f:d2:f9:f9:1d:b7:03:
         46:2b:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org