Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/3e120f9ea1efc59eefbd6b5375ed28786bc68c12.roa
File:                     3e120f9ea1efc59eefbd6b5375ed28786bc68c12.roa (raw, json)
Hash identifier:          sWB9AES1NJRmeESVUW6iz6YK/tgPP7S4/Yesfj1bMws=
Subject key identifier:   E0:C6:30:07:36:B3:E6:EF:DB:E7:68:D3:11:EF:54:99:AF:32:E8:ED
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       0DFA41
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/3e120f9ea1efc59eefbd6b5375ed28786bc68c12.roa
Signing time:             Wed 24 Mar 2021 14:47:14 +0000
ROA not before:           Wed 24 Mar 2021 14:47:14 +0000
ROA not after:            Tue 24 Mar 2026 14:47:14 +0000
asID:                     28000
IP address blocks:        179.0.156.0/22 maxlen: 24
                          200.7.84.0/23 maxlen: 24
                          200.7.87.0/24 maxlen: 24
                          2001:13c7:7001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916033 (0xdfa41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 14:47:14 2021 GMT
            Not After : Mar 24 14:47:14 2026 GMT
        Subject: CN=3e120f9ea1efc59eefbd6b5375ed28786bc68c12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:01:06:e4:86:85:d7:40:e7:6b:98:4b:31:45:
                    b3:06:77:82:45:1a:02:3d:53:cc:26:fb:fe:90:ab:
                    09:15:f0:42:57:db:33:55:cc:66:68:89:f2:88:4a:
                    02:0e:d0:94:35:7e:14:aa:56:ac:74:b8:3c:b0:e3:
                    1b:b0:b3:1f:dd:5a:93:40:01:aa:ea:25:1d:1d:85:
                    7b:10:13:c4:15:7c:53:0d:63:16:fa:f8:c7:a1:ab:
                    d8:3a:65:2c:f3:9f:fe:57:84:3b:40:f0:9d:ec:f7:
                    52:df:9c:34:3c:83:dc:bf:9b:a3:b8:bf:ca:5f:af:
                    cc:1d:f1:44:c2:04:0c:1e:23:6a:29:78:69:54:41:
                    22:43:32:d8:0c:f7:66:d0:3e:32:bb:76:c6:31:d4:
                    ba:d4:5d:bc:ab:26:15:27:6a:28:41:5b:a8:73:c2:
                    71:6a:84:b7:11:41:45:42:ef:12:9c:ae:a0:9b:9a:
                    a3:92:bf:2f:83:b6:35:5a:70:9c:e6:a2:86:d6:c2:
                    ea:6d:2f:b4:a6:1e:02:e6:3a:e4:90:20:75:6c:e1:
                    51:43:3c:92:0f:0e:c5:5d:ef:fb:24:34:97:f8:66:
                    2a:58:fb:e5:05:0a:47:bc:2d:24:38:f6:f5:d1:8e:
                    e7:c1:e3:5f:90:0d:e3:97:4e:0a:2a:f0:63:22:73:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C6:30:07:36:B3:E6:EF:DB:E7:68:D3:11:EF:54:99:AF:32:E8:ED
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/3e120f9ea1efc59eefbd6b5375ed28786bc68c12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.156.0/22
                  200.7.84.0/23
                  200.7.87.0/24
                IPv6:
                  2001:13c7:7001::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:14:3f:7e:2c:1f:0b:c3:c0:c3:a1:71:17:e6:3d:12:42:51:
         34:17:40:ce:4e:28:32:13:ac:06:fa:bb:0e:91:b2:99:dc:86:
         0b:58:48:78:a9:db:16:1b:06:f3:e5:3e:a3:11:49:e3:34:01:
         c7:e2:0c:9c:1a:cc:5a:10:2d:93:73:56:c7:f7:68:3a:5f:64:
         f4:6a:bf:5d:8e:46:02:18:13:71:31:6c:36:c0:65:f7:1c:ac:
         33:c7:5c:45:05:9d:b8:95:2e:cf:0c:30:3f:c8:ef:ce:eb:bc:
         e2:8a:64:97:30:82:d5:ec:54:67:48:32:24:d1:c2:90:c3:e6:
         f7:43:7a:f1:66:8f:91:b9:83:5e:65:8d:38:86:5e:4d:bc:a4:
         8c:54:ab:65:a9:e4:bb:58:6f:d0:ea:fa:0a:b5:e0:e9:16:b2:
         1c:65:12:c8:aa:34:29:2b:f5:13:d8:eb:5a:8d:23:55:44:ff:
         9f:4c:9a:c9:90:3e:3f:6d:0c:90:66:85:38:54:db:04:28:5c:
         1b:4a:f1:b8:89:d7:1f:f7:8c:6d:9a:3f:30:35:04:bf:ab:6b:
         4d:bb:11:c4:b1:40:16:e3:3e:4f:f7:df:31:d7:25:8d:57:6c:
         83:cd:ac:f8:95:87:21:17:26:e4:9e:49:96:ec:05:f6:25:14:
         68:31:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org