Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/557b382b-1e9f-4dc6-ad62-1581e6374281/5cac3a06ff7de3b946192e8f03ecf7b0078a58fb.roa
File:                     5cac3a06ff7de3b946192e8f03ecf7b0078a58fb.roa (raw, json)
Hash identifier:          MgOD5pu27DGfIR9YTvZ4GlcdRxbE9KxUmI8hdBY9vYI=
Subject key identifier:   AE:D6:8B:52:4D:21:EC:53:C4:50:F1:0F:08:AE:A9:91:46:5D:68:87
Certificate issuer:       /CN=0d1104008b4de994de20781bd030a908691de12d
Certificate serial:       0C20D8
Authority key identifier: 32:D6:AE:91:31:C1:2A:0E:6C:C8:03:B3:B3:B7:E8:9C:E0:C7:D8:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1104008b4de994de20781bd030a908691de12d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/557b382b-1e9f-4dc6-ad62-1581e6374281/5cac3a06ff7de3b946192e8f03ecf7b0078a58fb.roa
Signing time:             Wed 24 Mar 2021 14:33:15 +0000
ROA not before:           Wed 24 Mar 2021 14:33:15 +0000
ROA not after:            Tue 24 Mar 2026 14:33:15 +0000
asID:                     264859
IP address blocks:        200.95.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794840 (0xc20d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1104008b4de994de20781bd030a908691de12d
        Validity
            Not Before: Mar 24 14:33:15 2021 GMT
            Not After : Mar 24 14:33:15 2026 GMT
        Subject: CN=5cac3a06ff7de3b946192e8f03ecf7b0078a58fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:bd:bc:16:8c:67:cd:2c:dd:9a:4f:84:c6:
                    b9:8b:1c:9d:d8:ec:a0:43:c3:88:b1:66:80:7a:d2:
                    24:39:b5:e6:aa:b7:65:6d:4f:6b:21:02:9c:4d:f6:
                    68:8f:4a:d7:9c:52:e4:1b:0c:a1:6f:ed:69:af:7d:
                    18:5a:19:88:46:29:12:0f:66:5e:55:3d:99:d7:4a:
                    87:04:2e:cd:ef:d6:00:82:16:ff:25:e5:ff:c0:8c:
                    db:3e:c7:9e:76:ab:40:65:af:e8:d9:b8:58:13:61:
                    02:89:e6:0f:6f:72:71:4f:86:5d:12:53:50:f6:63:
                    a0:67:a2:1c:c5:4a:7c:01:52:b7:97:51:8c:f5:d8:
                    c7:1b:41:2d:54:7c:eb:3b:a1:4e:77:65:2f:92:8e:
                    ed:83:01:89:b0:0d:53:5c:25:96:17:cb:57:60:d8:
                    04:63:d7:66:1b:b4:5b:65:56:7e:22:a9:19:0b:49:
                    dd:27:1b:aa:03:9e:6b:fe:22:c0:21:77:f7:cd:54:
                    bd:d4:af:4c:dc:61:5b:31:d6:e8:b5:73:44:03:2e:
                    37:22:28:3e:71:b7:a8:41:69:23:b7:b6:00:98:12:
                    13:15:a7:b8:22:0a:5a:02:fb:65:2e:89:36:1f:bf:
                    31:37:e5:28:99:fe:4f:eb:8c:c2:57:d7:da:69:71:
                    db:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D6:8B:52:4D:21:EC:53:C4:50:F1:0F:08:AE:A9:91:46:5D:68:87
            X509v3 Authority Key Identifier:
                keyid:32:D6:AE:91:31:C1:2A:0E:6C:C8:03:B3:B3:B7:E8:9C:E0:C7:D8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1104008b4de994de20781bd030a908691de12d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/557b382b-1e9f-4dc6-ad62-1581e6374281/5cac3a06ff7de3b946192e8f03ecf7b0078a58fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/557b382b-1e9f-4dc6-ad62-1581e6374281/0d1104008b4de994de20781bd030a908691de12d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:4f:69:1d:f4:d0:70:1d:1b:97:3a:75:a0:fe:8b:8e:b1:12:
         d9:3c:69:74:a3:19:28:46:45:e7:11:d5:76:67:7d:10:37:d8:
         e0:a7:90:b6:7b:5f:a9:d8:56:1c:1e:e0:93:76:f9:82:15:02:
         44:a3:5f:2a:b3:54:01:a4:60:18:59:41:26:00:78:ba:c5:c9:
         d3:6b:4a:1f:c4:8c:58:a8:64:a1:a1:05:41:c5:5e:45:22:fd:
         9b:4c:f3:36:ef:12:98:7f:c4:50:59:72:a6:97:28:f5:9c:64:
         3b:08:3f:70:e7:df:3a:fa:72:fc:76:8c:c3:f1:ef:76:75:c7:
         24:62:f4:d6:e2:40:68:00:16:ef:00:d3:1e:ce:52:cb:80:79:
         e3:dc:cd:26:92:57:31:f1:b7:cc:e7:5a:c5:11:2d:b6:12:f6:
         0f:8b:7a:d5:89:6b:31:18:88:9e:2c:f9:8a:49:28:35:72:28:
         0c:da:0e:4a:61:ae:a1:4d:da:16:cf:3e:2a:98:96:29:19:1d:
         9e:ec:e4:0d:d2:41:f8:4b:ea:f0:b5:a9:e4:25:b1:12:2c:f4:
         10:07:dc:07:fe:e0:18:36:3d:95:1d:81:21:5a:5f:01:1a:5d:
         07:06:06:72:be:0e:12:9c:ac:1b:02:1a:21:70:09:c0:33:61:
         73:e9:81:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org