Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/eb9f42eba2def437bfed6cfb7fbf4ba5646d3593.roa
File:                     eb9f42eba2def437bfed6cfb7fbf4ba5646d3593.roa (raw, json)
Hash identifier:          skHh1UMBGAojOAS8a3rCCX/t1KMcX2tlvYuf8ZwATxU=
Subject key identifier:   03:41:A0:7C:8E:53:D4:73:31:73:8A:4D:C4:C3:E4:75:39:FD:41:97
Certificate issuer:       /CN=6a87731fd0e709e012a794d3f86ae26c7c73db79
Certificate serial:       0C5BDE
Authority key identifier: D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a87731fd0e709e012a794d3f86ae26c7c73db79.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/eb9f42eba2def437bfed6cfb7fbf4ba5646d3593.roa
Signing time:             Wed 05 Jan 2022 16:58:29 +0000
ROA not before:           Wed 05 Jan 2022 03:00:00 +0000
ROA not after:            Thu 05 Jan 2034 03:00:00 +0000
asID:                     52505
IP address blocks:        152.231.16.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809950 (0xc5bde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a87731fd0e709e012a794d3f86ae26c7c73db79
        Validity
            Not Before: Jan  5 03:00:00 2022 GMT
            Not After : Jan  5 03:00:00 2034 GMT
        Subject: CN=eb9f42eba2def437bfed6cfb7fbf4ba5646d3593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a0:74:75:3d:e4:39:8f:36:96:e0:1a:c8:30:
                    39:b4:f9:26:56:90:a1:9a:b6:76:48:ad:e5:13:2a:
                    fd:32:06:2c:83:b1:d0:31:a9:7e:d3:2e:b9:af:42:
                    a1:e2:52:5e:99:0a:2b:a3:b5:23:ca:3c:0e:a7:44:
                    b1:cd:6a:2d:4f:36:da:4c:e1:d1:5e:17:41:7e:5a:
                    8c:72:a0:18:7d:1a:09:c1:40:b7:8f:8d:34:b1:ad:
                    a2:4c:e6:3f:8f:9d:19:d3:88:87:a0:00:ab:e6:3c:
                    6c:1b:0b:a1:ea:bd:6b:d0:95:1f:4b:43:c5:e3:28:
                    15:8f:d7:d1:1c:b3:c5:06:07:18:c0:7f:a4:92:07:
                    3f:cb:a5:ff:33:ca:d6:86:02:c6:22:65:05:de:05:
                    61:ad:21:04:ee:d9:7f:87:e1:12:2a:2d:5d:d8:f0:
                    7c:52:a4:fb:0d:6e:30:1f:6f:a8:56:6b:54:4f:25:
                    53:bc:f7:bc:89:6a:81:0a:cc:c0:e4:30:33:51:be:
                    13:b1:16:a9:07:f1:d7:ed:bf:c8:29:6f:00:77:90:
                    63:50:56:a0:04:80:ef:ce:e5:9c:47:5c:b3:a2:bb:
                    ac:35:37:f9:ca:42:f5:c6:51:35:69:e8:95:37:e8:
                    8d:7e:88:ac:33:f6:d8:3f:e5:d5:df:86:35:13:79:
                    8a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:41:A0:7C:8E:53:D4:73:31:73:8A:4D:C4:C3:E4:75:39:FD:41:97
            X509v3 Authority Key Identifier:
                keyid:D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a87731fd0e709e012a794d3f86ae26c7c73db79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/eb9f42eba2def437bfed6cfb7fbf4ba5646d3593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/6a87731fd0e709e012a794d3f86ae26c7c73db79.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:4f:ee:d5:f6:1c:1b:4f:3c:42:15:ab:6a:f5:cc:b6:b1:1c:
         b0:1b:69:6b:b7:24:5a:c3:89:2a:10:96:61:92:f4:bd:2e:0b:
         17:be:57:1b:a0:50:27:1c:c8:f2:89:d4:8e:c5:5e:d6:37:a4:
         07:70:1a:69:56:39:66:1c:88:af:33:fb:6f:d3:22:da:66:7c:
         a2:8f:0d:b4:1d:ec:ca:ca:1d:78:41:4a:d3:c4:7d:05:3c:bd:
         f6:08:cb:a8:cc:78:c5:10:a2:d6:39:f8:2b:c9:ae:79:e3:b4:
         df:87:24:f2:5b:75:43:86:01:06:11:14:43:2e:5e:09:22:c4:
         ca:cd:a1:4a:ea:9a:10:3c:f7:2e:f0:c0:22:ff:60:52:0d:86:
         7c:9a:a2:c3:70:19:f6:bf:3b:7c:b5:75:67:66:a1:d2:cd:41:
         c6:86:14:f5:f1:7c:30:c3:84:41:a4:c9:85:08:41:d8:e4:9e:
         8a:6d:81:3c:c8:0f:35:ea:04:f7:48:09:a0:0b:4f:86:61:dd:
         86:f7:9a:13:50:af:4e:9a:fb:99:7e:98:a8:aa:3b:84:b9:ff:
         3f:1f:40:43:27:93:b0:cc:7b:cc:0a:62:d9:18:2e:f1:5c:a4:
         cf:2b:80:3e:e5:d3:1e:64:58:f5:82:fc:f7:9b:88:09:2c:52:
         4f:65:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org