Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/987abb62de3eaf45ebcec94ff4858444b2083a49.roa
File:                     987abb62de3eaf45ebcec94ff4858444b2083a49.roa (raw, json)
Hash identifier:          EO9hvB3Ey2O5NXatFiOIMlVMqo8rX3xVti2opPmfnmk=
Subject key identifier:   53:C2:1C:E5:67:FB:C1:D0:9A:F9:38:09:9E:02:66:1F:84:66:24:08
Certificate issuer:       /CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Certificate serial:       1495
Authority key identifier: B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/987abb62de3eaf45ebcec94ff4858444b2083a49.roa
Signing time:             Mon 08 Nov 2021 18:11:14 +0000
ROA not before:           Mon 08 Nov 2021 02:00:00 +0000
ROA not after:            Wed 08 Nov 2023 02:00:00 +0000
asID:                     265504
IP address blocks:        168.0.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5269 (0x1495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
        Validity
            Not Before: Nov  8 02:00:00 2021 GMT
            Not After : Nov  8 02:00:00 2023 GMT
        Subject: CN=987abb62de3eaf45ebcec94ff4858444b2083a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:84:c6:27:06:e5:1d:3a:e2:4f:f5:a7:94:
                    a2:1a:00:91:34:9e:c5:7b:10:bf:ea:6c:40:23:15:
                    2e:63:e8:b7:ca:97:d0:c3:22:95:e5:be:b0:39:bd:
                    98:d2:94:f9:7b:12:ae:68:b3:19:e9:1a:3e:ac:57:
                    3b:dd:a9:51:9f:20:e8:ff:bf:ab:b1:64:fd:9c:14:
                    af:c2:ce:4c:98:9f:51:9f:14:35:1b:d4:43:04:88:
                    a2:5b:32:f3:33:83:e5:a9:d3:c4:00:d8:e2:fa:a2:
                    e2:b6:c4:d2:f9:f5:fb:81:b0:c9:ae:e3:15:3f:bb:
                    b9:54:dd:a7:92:fd:73:5f:94:93:0f:ab:e1:b3:14:
                    ff:e1:fb:cc:15:c1:46:33:36:6e:56:ed:de:b2:a2:
                    8d:20:9a:cd:40:32:bb:ba:56:00:47:7e:0b:a1:33:
                    4d:c5:ce:9d:f2:5e:42:ea:0a:cd:bf:74:14:a7:9c:
                    34:66:d7:73:ff:56:ea:07:76:77:af:f2:5b:c7:90:
                    2f:9c:c3:13:c1:dc:2c:b1:8d:df:91:63:d3:0c:f6:
                    b0:25:85:13:2e:20:d2:72:23:42:05:c2:ab:49:f3:
                    25:4d:d1:fc:c3:f1:86:bd:56:18:0b:eb:ee:dd:a5:
                    f5:13:86:9a:a9:7c:dc:eb:49:21:ab:55:51:79:2a:
                    4a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C2:1C:E5:67:FB:C1:D0:9A:F9:38:09:9E:02:66:1F:84:66:24:08
            X509v3 Authority Key Identifier:
                keyid:B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/987abb62de3eaf45ebcec94ff4858444b2083a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:57:09:19:f2:dd:41:7b:9a:60:1e:d4:34:ef:37:5a:dd:75:
         11:86:de:39:ac:03:e7:dd:49:81:22:50:76:a7:c3:0e:60:b8:
         e9:ab:95:62:24:f7:cb:2c:c1:36:76:6e:ad:c7:31:3b:e7:8e:
         e4:6a:69:3c:96:94:bb:5b:32:e8:5e:be:0c:9b:7c:03:d8:bf:
         6e:92:c6:f1:a3:1d:ce:ba:51:8d:a6:00:13:7d:31:19:5e:93:
         1d:af:01:72:4f:23:30:f0:a9:84:2f:04:80:70:ce:c0:92:24:
         11:a1:5d:d2:ea:83:74:4b:e4:a9:83:80:5f:ee:8a:c3:d1:86:
         d4:c0:89:36:86:23:78:e0:5a:f1:44:ad:f4:3e:74:9a:96:03:
         de:05:68:c4:30:8a:5b:5c:b9:d0:9b:e0:4c:78:27:55:0c:fc:
         be:37:70:ca:bd:f4:f6:73:7b:fc:55:51:b2:b1:9e:bb:51:b4:
         60:01:bc:05:9d:27:b4:d6:a0:75:11:8c:66:89:91:4c:6b:75:
         67:5a:8b:97:a2:d8:ff:00:e7:7f:a0:18:20:ac:6b:2b:ff:d7:
         4b:8c:35:01:fa:cc:3a:02:5f:d5:91:61:c0:db:3c:b8:4c:8f:
         3c:fb:1e:02:1c:ff:1b:17:e7:41:8a:27:32:c5:e7:ba:1d:ad:
         8a:e1:07:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org