Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/d889d3d75d18f3b986cc173ced50ba880fc2462d.roa
File:                     d889d3d75d18f3b986cc173ced50ba880fc2462d.roa (raw, json)
Hash identifier:          vduijYmOk+4QeEYcudOnMYTcLg/KVgzQVQeuewX6HYU=
Subject key identifier:   0A:5E:9A:B0:A6:7E:DE:0E:F6:54:A3:C8:B3:8B:2D:B8:FE:49:DB:F0
Certificate issuer:       /CN=5d3796838d771f93080603caee0f79e836838277
Certificate serial:       079230
Authority key identifier: AF:18:79:CB:2B:35:D8:8E:88:91:A1:CD:54:4C:67:9D:BD:1E:63:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3796838d771f93080603caee0f79e836838277.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/d889d3d75d18f3b986cc173ced50ba880fc2462d.roa
Signing time:             Wed 24 Mar 2021 14:46:30 +0000
ROA not before:           Wed 24 Mar 2021 14:46:30 +0000
ROA not after:            Tue 24 Mar 2026 14:46:30 +0000
asID:                     269976
IP address blocks:        24.152.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496176 (0x79230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d3796838d771f93080603caee0f79e836838277
        Validity
            Not Before: Mar 24 14:46:30 2021 GMT
            Not After : Mar 24 14:46:30 2026 GMT
        Subject: CN=d889d3d75d18f3b986cc173ced50ba880fc2462d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:e3:f6:ce:8b:0d:a8:88:3c:74:70:5d:51:
                    c6:5e:d9:22:56:38:c9:5d:53:44:68:df:08:eb:e0:
                    f8:db:26:91:9d:dd:65:15:93:89:40:1a:3d:5e:d8:
                    a7:27:ce:d3:9a:82:aa:99:8c:89:59:8c:d3:4d:ea:
                    45:2c:d3:20:16:d8:66:84:2d:cb:c2:65:b5:0a:6c:
                    fb:8f:2e:51:5a:f8:23:d2:8e:c9:74:e1:2d:01:c4:
                    d0:4f:df:cb:fd:5c:0c:ed:87:a0:c2:81:9d:c9:58:
                    88:81:c2:1e:b0:7e:85:4b:db:4c:e9:50:40:56:7a:
                    19:c5:67:7d:6e:75:f5:44:d2:92:d2:f5:c9:69:4a:
                    4b:8a:2d:f4:ff:13:5c:d1:b7:ca:5b:b6:fe:92:04:
                    16:ff:35:f3:f3:f8:c6:9f:72:08:e3:cd:7e:cc:83:
                    85:3d:81:c5:2d:26:83:9d:37:ba:0f:ac:b8:09:0f:
                    ed:2f:07:e8:60:a6:02:f1:dd:3b:31:d8:0f:ba:2c:
                    ba:fd:23:e1:7b:96:f9:70:8f:43:5d:0f:3d:ad:0f:
                    3a:ea:de:9a:81:97:78:6c:77:c0:98:da:b5:5a:d4:
                    64:aa:f6:62:b5:9c:cc:16:5b:3a:fc:d1:b4:8c:e6:
                    a8:f9:80:ac:e1:f2:9e:8c:60:57:ae:02:4c:51:c2:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5E:9A:B0:A6:7E:DE:0E:F6:54:A3:C8:B3:8B:2D:B8:FE:49:DB:F0
            X509v3 Authority Key Identifier:
                keyid:AF:18:79:CB:2B:35:D8:8E:88:91:A1:CD:54:4C:67:9D:BD:1E:63:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3796838d771f93080603caee0f79e836838277.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/d889d3d75d18f3b986cc173ced50ba880fc2462d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6122b092-807e-4f26-a2d8-8487f78f8331/5d3796838d771f93080603caee0f79e836838277.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:b3:6b:d6:2f:da:98:1a:84:20:a4:d8:e8:9a:8b:78:48:b9:
         37:ca:46:0d:e0:9c:ea:4e:be:80:cd:17:4a:a0:a8:1b:c6:70:
         05:2b:ac:fa:70:06:b0:a6:9c:4d:0f:ec:57:f3:da:9b:4a:e9:
         4d:c7:42:30:38:bb:75:b0:6c:0b:e2:56:66:14:be:4f:95:93:
         ee:57:73:86:6b:56:ed:7f:fa:80:2e:b9:ae:c0:98:b5:f9:e7:
         fb:f6:97:66:f4:51:d2:3b:fb:06:a5:f5:fe:f0:e8:ff:2e:16:
         75:bb:38:6c:e5:ce:76:c4:6c:4b:38:d3:c5:45:ec:f0:89:a7:
         13:f9:1e:82:ab:8e:91:74:b4:59:11:c3:de:05:a6:4e:4d:a2:
         f3:e1:7a:ec:2b:9a:d6:0d:9f:0e:00:24:50:74:5b:c0:9d:c3:
         17:4f:cd:45:c3:54:6d:d3:5a:c7:f7:31:5d:dd:04:07:69:b5:
         87:b3:c4:3b:a6:84:9f:8b:52:cc:65:35:ff:7c:7b:36:4c:26:
         a7:00:04:30:64:3d:ef:b0:eb:a4:50:05:b8:c2:ca:2b:19:11:
         b3:aa:69:98:00:1d:29:1e:c7:77:fd:70:38:10:13:72:bc:19:
         a6:52:91:f0:ef:85:c2:70:53:64:3e:37:8b:30:51:88:57:fb:
         cd:a4:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org