Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f920400-b9b9-49d7-a934-2628e4f4556e/cc18bbb74d20f3a5bd9ae1d3b669c604d9e02606.roa
File:                     cc18bbb74d20f3a5bd9ae1d3b669c604d9e02606.roa (raw, json)
Hash identifier:          9Jzm/CEZcpv2tDM7heQzp/eabyn33LWrmYY0JanV7jY=
Subject key identifier:   51:BD:EC:AD:97:3B:DE:B1:12:31:1B:71:9A:54:7A:E3:B4:DE:41:0F
Certificate issuer:       /CN=7c98253884bf2c1af8a85cb73c9533144fc33af6
Certificate serial:       08394F
Authority key identifier: A1:F4:53:76:11:05:C9:A4:F7:71:1A:BB:80:19:37:85:C6:56:79:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c98253884bf2c1af8a85cb73c9533144fc33af6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f920400-b9b9-49d7-a934-2628e4f4556e/cc18bbb74d20f3a5bd9ae1d3b669c604d9e02606.roa
Signing time:             Wed 24 Mar 2021 14:30:15 +0000
ROA not before:           Wed 24 Mar 2021 14:30:15 +0000
ROA not after:            Tue 24 Mar 2026 14:30:15 +0000
asID:                     265795
IP address blocks:        192.141.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538959 (0x8394f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c98253884bf2c1af8a85cb73c9533144fc33af6
        Validity
            Not Before: Mar 24 14:30:15 2021 GMT
            Not After : Mar 24 14:30:15 2026 GMT
        Subject: CN=cc18bbb74d20f3a5bd9ae1d3b669c604d9e02606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b9:46:c6:8e:21:77:bf:ef:15:0d:81:25:18:
                    22:a6:a0:8a:c9:18:f6:13:16:a4:a9:92:b0:1f:26:
                    59:83:c8:55:d9:34:21:73:f9:b2:66:d0:ee:79:79:
                    f7:f5:9d:88:06:82:00:fd:ff:8d:34:03:f2:6c:35:
                    8c:cb:14:f6:a8:f3:14:5b:f2:b8:1b:5a:41:02:b6:
                    ca:3b:04:15:9a:0c:89:06:10:fa:a5:05:c1:a7:18:
                    28:ec:08:43:c8:76:2b:39:81:ad:d6:66:23:0d:bc:
                    aa:57:7f:9f:80:01:56:22:be:c9:51:83:bd:e0:d2:
                    30:a1:92:b5:a5:0d:eb:ca:0d:8b:b2:74:4d:fd:cc:
                    90:7f:1e:8b:27:71:46:68:46:3a:07:fd:89:26:df:
                    e0:10:a3:2b:2f:a9:97:2d:ec:aa:e1:f1:3a:72:dd:
                    2f:ca:66:71:d5:ee:42:3b:c7:28:5e:17:f6:3d:eb:
                    1a:a9:12:7e:7a:af:58:ce:4c:d8:9c:07:d6:7a:13:
                    4c:76:6c:8c:6a:9b:32:8a:78:92:31:5f:79:81:15:
                    af:13:05:cc:ae:52:7a:82:c8:56:5a:d3:66:8f:c0:
                    f0:91:81:42:0e:1c:11:cd:c5:f5:f8:1d:f8:ae:97:
                    e2:f9:42:ff:cf:db:4c:bc:fd:ed:4d:9c:fc:34:73:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BD:EC:AD:97:3B:DE:B1:12:31:1B:71:9A:54:7A:E3:B4:DE:41:0F
            X509v3 Authority Key Identifier:
                keyid:A1:F4:53:76:11:05:C9:A4:F7:71:1A:BB:80:19:37:85:C6:56:79:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c98253884bf2c1af8a85cb73c9533144fc33af6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f920400-b9b9-49d7-a934-2628e4f4556e/cc18bbb74d20f3a5bd9ae1d3b669c604d9e02606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f920400-b9b9-49d7-a934-2628e4f4556e/7c98253884bf2c1af8a85cb73c9533144fc33af6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:73:61:12:31:25:8b:a1:1f:bc:82:70:60:a7:80:ca:2e:0d:
         6b:e0:0d:a3:44:f9:ee:64:fa:23:08:b5:94:88:ae:04:14:2c:
         e8:cb:3e:00:2e:7c:75:d9:56:1a:51:4d:da:48:cf:31:b5:da:
         6f:cc:0b:f6:27:6c:ab:f7:3d:21:93:74:2b:c0:00:60:19:c1:
         cb:d3:03:99:df:ff:dc:64:d4:b4:54:8c:28:f3:90:e2:26:5c:
         11:e2:0a:ce:53:27:71:ca:4d:d5:d4:41:d3:5f:68:b7:5f:1e:
         61:a0:54:74:2e:8e:6a:24:41:ed:86:de:df:c8:8f:cd:62:73:
         04:4d:66:6d:ec:e3:3f:53:31:ff:43:45:42:6a:1f:03:05:d7:
         10:a1:35:51:2e:a1:b0:49:cf:8c:2d:5d:fe:7f:66:a1:72:cf:
         d9:fd:0b:7c:40:09:cf:31:d9:f8:a6:56:bb:22:10:12:27:7c:
         bf:43:a8:2a:67:41:2a:90:71:a3:29:90:ce:15:bc:21:ec:2a:
         3a:b5:ef:f3:fc:60:86:e1:10:6c:d1:67:f1:ea:fa:68:97:36:
         7f:0f:bf:d2:e4:43:85:f6:e1:9d:99:39:e5:31:5e:6d:d3:14:
         4b:af:3a:c0:4b:1b:96:d6:45:60:7a:a8:f2:3d:09:f7:94:7f:
         b7:f9:43:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org