Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/61a22c8be47b4c5ac20773b1a5f589a604deb2b9.roa
File:                     61a22c8be47b4c5ac20773b1a5f589a604deb2b9.roa (raw, json)
Hash identifier:          003xml6V22qzo2weIUQrqCqJTQfP/W5j6IIyylFQLnk=
Subject key identifier:   79:59:80:B9:56:15:52:66:72:DD:24:AA:A2:7C:96:90:37:17:EA:44
Certificate issuer:       /CN=4595a58b3a4feac2e2f273ac67d4559442b976dc
Certificate serial:       0D68A6
Authority key identifier: 84:6F:82:BE:FB:A7:6F:BD:51:57:A6:B7:22:EF:57:F5:31:BD:33:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4595a58b3a4feac2e2f273ac67d4559442b976dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/61a22c8be47b4c5ac20773b1a5f589a604deb2b9.roa
Signing time:             Wed 24 Mar 2021 14:37:22 +0000
ROA not before:           Wed 24 Mar 2021 14:37:22 +0000
ROA not after:            Tue 24 Mar 2026 14:37:22 +0000
asID:                     27876
IP address blocks:        186.5.160.0/20 maxlen: 24
                          190.7.192.0/20 maxlen: 24
                          190.7.208.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878758 (0xd68a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4595a58b3a4feac2e2f273ac67d4559442b976dc
        Validity
            Not Before: Mar 24 14:37:22 2021 GMT
            Not After : Mar 24 14:37:22 2026 GMT
        Subject: CN=61a22c8be47b4c5ac20773b1a5f589a604deb2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5f:70:aa:88:30:62:35:b4:e5:84:23:87:0e:
                    84:20:ec:33:07:51:88:0d:41:d1:ed:75:1f:07:12:
                    1e:c2:97:3d:df:36:3c:5d:e9:77:8c:2c:2b:4d:dd:
                    6c:03:a9:21:28:b7:fa:86:f4:d5:5d:29:48:f5:07:
                    cb:ad:1a:03:7e:90:97:ac:b3:0a:91:75:1a:aa:3f:
                    ab:65:24:85:6e:20:f1:be:5d:eb:ed:ca:ce:7f:a8:
                    fc:2a:2d:fd:10:c7:88:1c:f2:01:4d:76:29:1e:e4:
                    a2:ee:24:4b:9f:ac:4b:a5:c3:8b:54:9b:15:37:d1:
                    8f:0f:31:5a:2c:96:14:9a:6b:25:f6:c1:4c:3b:c4:
                    22:1b:26:bd:b0:5d:2f:fd:17:d5:40:0c:51:82:0c:
                    16:46:64:4b:bf:55:47:45:36:84:70:0d:05:03:b5:
                    12:fa:03:4c:21:d4:ba:66:98:b6:5d:ab:01:b0:2f:
                    56:4d:82:f6:35:35:54:c8:e2:82:a3:89:4c:6b:b5:
                    8e:49:f9:4b:e0:22:91:e7:34:97:22:1f:1f:bf:c5:
                    89:90:d3:d1:82:df:4c:cc:54:ec:5c:9a:92:49:e6:
                    b7:10:c3:e4:32:c2:ee:a1:ab:97:f2:e0:22:4d:9b:
                    08:7f:76:44:9b:7b:bd:6d:2e:40:93:06:b2:b6:12:
                    cc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:59:80:B9:56:15:52:66:72:DD:24:AA:A2:7C:96:90:37:17:EA:44
            X509v3 Authority Key Identifier:
                keyid:84:6F:82:BE:FB:A7:6F:BD:51:57:A6:B7:22:EF:57:F5:31:BD:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4595a58b3a4feac2e2f273ac67d4559442b976dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/61a22c8be47b4c5ac20773b1a5f589a604deb2b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5764cf91-1f19-4746-a8cd-91ed752698f4/4595a58b3a4feac2e2f273ac67d4559442b976dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.160.0/20
                  190.7.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:52:e8:b4:dd:ca:b1:fe:53:c1:5c:81:f6:ee:17:dd:f9:6c:
         e4:91:5c:96:cb:a8:65:0d:bd:bf:22:73:22:03:8e:27:cf:04:
         f7:b1:1f:6d:66:2b:5d:bb:e4:25:1b:5c:5a:1a:9d:91:80:f3:
         ef:e2:2c:c1:ac:c0:94:8f:05:be:53:1d:f5:7f:27:7a:17:00:
         51:da:dd:20:97:2a:c2:d6:a8:6b:81:ca:53:e5:75:fc:ed:0c:
         58:b9:43:3c:bb:de:e1:b8:a2:45:97:c6:c1:bd:a6:f6:1b:fa:
         0b:49:8f:2f:88:22:02:f4:ed:f0:38:df:1d:c4:79:36:a4:7d:
         e7:15:87:98:36:87:3a:d2:4c:94:44:56:b4:79:5a:0f:3d:b5:
         0b:01:a8:3f:ab:0b:6d:33:c3:49:aa:bd:b5:7d:f1:25:8b:4e:
         e5:41:cc:e3:a6:7a:34:1e:07:cb:65:02:49:b1:a7:44:b2:3f:
         41:68:86:8d:77:78:51:b4:79:56:84:33:5e:f4:ed:73:0c:ab:
         c1:98:7a:33:fc:a0:b0:67:65:cd:df:c1:d2:b3:b5:39:f9:89:
         75:ac:e0:0d:5e:4a:58:b3:e1:01:7e:ab:41:c3:92:e6:9d:7f:
         0b:eb:6d:86:74:a4:55:31:04:f2:d9:7b:40:5d:f3:19:32:24:
         d2:3b:46:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org