Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b84a00e-e83f-4581-912e-af911f88c3d7/a4226353c99fe2be2f4f00c722246349ad46b166.roa
File:                     a4226353c99fe2be2f4f00c722246349ad46b166.roa (raw, json)
Hash identifier:          88P08q6uehPjYpg7MsKWXigzZBIWEYLdMl9oEM+3DcA=
Subject key identifier:   DD:09:2F:0B:C5:38:CA:7B:B7:0E:69:BF:43:A7:E7:60:D8:2C:0D:A5
Certificate issuer:       /CN=b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69
Certificate serial:       0BB5F8
Authority key identifier: 34:57:68:27:66:E2:5C:F7:DB:5E:F9:D4:E9:C7:2D:0E:0D:2C:FA:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b84a00e-e83f-4581-912e-af911f88c3d7/a4226353c99fe2be2f4f00c722246349ad46b166.roa
Signing time:             Wed 24 Mar 2021 14:46:30 +0000
ROA not before:           Wed 24 Mar 2021 14:46:30 +0000
ROA not after:            Tue 24 Mar 2026 14:46:30 +0000
asID:                     52455
IP address blocks:        131.72.24.0/22 maxlen: 24
                          170.233.216.0/22 maxlen: 24
                          190.113.92.0/22 maxlen: 24
                          2803:b300::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767480 (0xbb5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69
        Validity
            Not Before: Mar 24 14:46:30 2021 GMT
            Not After : Mar 24 14:46:30 2026 GMT
        Subject: CN=a4226353c99fe2be2f4f00c722246349ad46b166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:98:de:64:05:72:ef:71:20:8b:80:f3:c8:
                    74:77:5b:a4:ed:36:52:55:8f:9e:9c:c8:4c:71:54:
                    5f:b7:93:c0:1b:cf:c6:5a:37:ad:9a:4e:60:7f:8a:
                    52:04:ca:9f:e5:e6:f2:8a:2e:e2:5e:cc:43:08:1b:
                    d7:05:a2:bb:c2:34:cd:fe:32:21:aa:96:60:3a:14:
                    4e:00:be:17:fc:65:77:a5:eb:0d:73:05:07:50:ec:
                    3d:6c:64:6a:9e:3e:ce:64:8a:9a:d6:a3:e2:f9:59:
                    2d:28:22:aa:29:98:16:ee:24:36:a4:a8:7b:db:aa:
                    f5:31:96:51:a9:ad:4f:5b:31:55:c1:9b:50:c7:27:
                    ce:cf:ec:d1:fb:58:a1:35:6b:fd:97:00:c9:a7:2f:
                    74:ad:5f:66:48:76:aa:17:7a:00:78:00:64:b3:92:
                    d8:44:6e:8d:c6:f0:3f:52:51:b2:9b:6b:d1:64:0b:
                    f7:e8:9f:59:9a:c8:b2:16:9c:f6:08:18:8c:74:a0:
                    8d:11:b6:8f:ab:e3:8b:a3:9e:ee:0a:0e:b4:7d:a9:
                    c7:84:75:fd:68:67:ae:12:f9:de:58:d1:c7:28:75:
                    a3:2c:ac:15:86:55:eb:6f:aa:d4:39:f8:2d:64:57:
                    fd:74:42:9d:04:04:95:5a:8f:ac:f5:8f:2b:bb:21:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:09:2F:0B:C5:38:CA:7B:B7:0E:69:BF:43:A7:E7:60:D8:2C:0D:A5
            X509v3 Authority Key Identifier:
                keyid:34:57:68:27:66:E2:5C:F7:DB:5E:F9:D4:E9:C7:2D:0E:0D:2C:FA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b84a00e-e83f-4581-912e-af911f88c3d7/a4226353c99fe2be2f4f00c722246349ad46b166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b84a00e-e83f-4581-912e-af911f88c3d7/b6ef89785fcb10b3f53c35fd9275cd85e7d3bb69.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.24.0/22
                  170.233.216.0/22
                  190.113.92.0/22
                IPv6:
                  2803:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:28:d5:66:61:c6:b7:fd:43:a4:e8:98:09:bb:18:82:ee:ea:
         c3:cb:c7:4e:97:bc:13:e4:ab:39:e5:63:06:bf:dd:01:7d:ab:
         23:ac:9f:6f:92:7e:4e:01:98:39:20:d1:30:32:e0:2b:3b:32:
         bd:4a:64:18:6a:d3:fb:e8:8f:7f:27:dc:de:38:32:04:ab:e1:
         49:c1:06:b2:e9:81:03:55:3c:71:3b:58:c9:df:67:a4:7f:4e:
         88:3f:92:03:7e:fe:06:7f:eb:d8:76:d6:97:34:b0:e7:90:82:
         db:33:fb:2e:f6:59:4f:fe:30:ea:9d:4c:12:5c:45:ea:f1:3f:
         06:dc:e3:93:46:1b:53:3b:22:8a:69:7d:59:1b:11:0b:a6:30:
         af:ef:1e:20:70:33:39:58:9b:95:9e:25:6a:6a:47:f1:98:8c:
         10:b6:e0:be:88:c1:66:3b:67:0d:96:56:1a:67:07:d9:2e:a8:
         45:bb:8d:72:b6:75:a3:5f:73:5b:85:da:18:18:d3:54:aa:0e:
         a1:f7:3f:61:60:50:93:35:86:72:f0:c0:00:3f:b5:85:e1:75:
         e6:a8:9b:d4:86:8b:71:9a:b6:ff:1b:81:37:0a:a7:b2:73:2d:
         5c:72:2a:7f:df:12:59:51:fc:5a:c8:c8:e1:fa:5b:dc:98:a4:
         24:3b:42:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:41 2024 by rpki-client on console-fra.rpki-client.org