Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/e20cc1c9fb876584bcb67d0d139be2f16149b51d.roa
File:                     e20cc1c9fb876584bcb67d0d139be2f16149b51d.roa (raw, json)
Hash identifier:          /uBm/b6BZfjevXtmCwg4BwhOJK4hBqQ9hy2jTesA/nI=
Subject key identifier:   10:94:74:F8:82:E4:2E:09:B9:88:50:C9:E3:5E:F5:F5:19:89:3A:58
Certificate issuer:       /CN=42479c80014a47a7803e1ff86f78d4c83197ce2d
Certificate serial:       0D4FEF
Authority key identifier: CF:86:4D:14:6B:B2:39:D0:E7:27:E6:F8:BF:91:3B:3F:7B:28:86:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42479c80014a47a7803e1ff86f78d4c83197ce2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/e20cc1c9fb876584bcb67d0d139be2f16149b51d.roa
Signing time:             Wed 24 Mar 2021 14:46:16 +0000
ROA not before:           Wed 24 Mar 2021 14:46:16 +0000
ROA not after:            Tue 24 Mar 2026 14:46:16 +0000
asID:                     265728
IP address blocks:        160.238.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872431 (0xd4fef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42479c80014a47a7803e1ff86f78d4c83197ce2d
        Validity
            Not Before: Mar 24 14:46:16 2021 GMT
            Not After : Mar 24 14:46:16 2026 GMT
        Subject: CN=e20cc1c9fb876584bcb67d0d139be2f16149b51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:04:e1:03:18:d0:dc:e2:ee:62:81:03:64:
                    e1:ea:98:9c:9c:c8:ee:1e:a3:dc:18:4f:1f:9b:e1:
                    a7:64:51:df:d5:42:f3:bf:40:57:0b:4b:00:e1:3d:
                    60:96:de:1b:53:bb:b9:fa:50:8d:66:b4:d6:1e:5d:
                    87:69:e6:b1:5c:14:4d:53:76:08:b3:8b:69:f4:10:
                    fe:0e:09:11:ec:45:a9:21:cd:f4:ba:63:6d:c7:70:
                    7b:d4:53:4a:ab:91:63:7b:5f:bf:ae:59:93:bf:72:
                    34:b7:76:8a:fb:72:81:32:e7:35:e0:61:a5:56:b8:
                    15:82:d0:2c:cc:ac:a0:3b:2d:07:6d:c0:7b:ec:4e:
                    03:5f:c4:6b:0d:c6:9d:03:59:f5:d5:eb:e1:89:03:
                    5f:59:0d:3f:ae:ac:b5:00:6a:59:f9:a8:0d:6b:64:
                    fc:30:4a:f2:bc:9f:28:93:2f:33:5e:dc:a1:01:d8:
                    6d:4a:67:d9:63:6c:29:e1:08:54:97:e5:09:25:ef:
                    02:3e:0f:b7:77:b8:2f:8a:45:9b:08:3f:ee:af:12:
                    34:db:98:60:12:a0:f5:c8:e8:fa:46:b9:dd:98:dc:
                    d5:ce:ed:e4:68:b1:4c:07:04:eb:66:9d:00:cc:cf:
                    3d:57:1e:e2:4d:1b:61:7d:bb:16:e2:72:f7:00:23:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:94:74:F8:82:E4:2E:09:B9:88:50:C9:E3:5E:F5:F5:19:89:3A:58
            X509v3 Authority Key Identifier:
                keyid:CF:86:4D:14:6B:B2:39:D0:E7:27:E6:F8:BF:91:3B:3F:7B:28:86:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42479c80014a47a7803e1ff86f78d4c83197ce2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/e20cc1c9fb876584bcb67d0d139be2f16149b51d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5fa491ec-8b15-4928-8b54-6a84234edddc/42479c80014a47a7803e1ff86f78d4c83197ce2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:f4:ef:37:8e:11:c2:6c:36:ec:49:e6:b0:4e:45:6e:5f:cb:
         33:cb:87:4d:28:24:66:54:b9:35:32:58:f4:7f:79:e1:2c:6f:
         6e:2c:17:4e:12:fe:02:ad:35:8c:07:c8:ee:15:1e:fd:8f:14:
         3b:70:59:97:fe:08:eb:21:ab:aa:a9:52:bf:2b:b9:eb:96:d6:
         de:60:3f:c4:6b:73:46:76:bb:31:93:64:5b:5f:25:d3:6d:4b:
         89:8b:ad:d2:44:40:5f:b9:f8:d9:a2:20:fe:ec:58:c7:9e:67:
         93:ee:1f:03:d7:5f:98:da:1d:b5:3e:86:e4:c1:c6:3e:94:05:
         a4:3c:42:c1:6c:d5:fb:fa:35:ba:7f:3d:85:00:f6:4c:49:c0:
         e8:e1:ee:1b:eb:54:33:73:4e:39:2c:df:71:af:d1:25:be:fd:
         48:b3:c0:99:5b:ef:5b:08:d5:ab:14:8d:d0:01:6e:35:87:3e:
         36:f2:4a:12:bf:ea:43:26:01:e8:08:df:31:60:e5:08:8f:ed:
         60:03:92:61:3d:d7:d5:c0:c4:86:a0:7d:c6:78:99:a3:c3:90:
         67:d0:18:70:0f:69:1f:22:22:c5:cf:9e:3c:91:6f:11:c0:eb:
         dc:3f:f7:eb:ea:b7:e7:2e:3c:f9:9e:6b:15:d1:e1:dc:1e:05:
         c9:aa:28:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org